last executing test programs: 56.01287973s ago: executing program 3 (id=2916): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) 55.824589996s ago: executing program 3 (id=2918): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) socket(0x11, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r8 = socket(0x22, 0x2, 0x24) setsockopt$RXRPC_SECURITY_KEY(r8, 0x110, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffff01, 0xb7c56ad10922c48a, 0x3}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @loopback, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='e', 0x1}], 0x1}, 0x4048043) 52.037008605s ago: executing program 3 (id=2925): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$unix(0x1, 0x5, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x1300) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000140)={0x18, 0x0, r2, {0x9}}, 0x18) write$FUSE_LSEEK(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, r2, {0x9}}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) capget(&(0x7f0000000300)={0x20080522}, 0xfffffffffffffffd) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}], 0x1}) 49.228989513s ago: executing program 3 (id=2932): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 45.697210113s ago: executing program 3 (id=2938): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(0xffffffffffffffff, &(0x7f0000000440)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x40020000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 44.322533281s ago: executing program 3 (id=2940): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x810448e0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) r4 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x3f3, 0x101000) poll(&(0x7f0000000100)=[{r4}], 0x1, 0x2) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 31.933418927s ago: executing program 2 (id=2965): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x66000080) r2 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r3 = gettid() openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x20020800}, 0x0) 21.468612599s ago: executing program 2 (id=2975): openat$hwrng(0xffffff9c, 0x0, 0x80800, 0x0) unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"}) poll(&(0x7f0000000040), 0x0, 0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) dup(0xffffffffffffffff) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4], 0x38}}, 0x0) write$uinput_user_dev(r2, 0x0, 0x0) 10.569652194s ago: executing program 1 (id=2990): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) unlink(0x0) 10.352593179s ago: executing program 1 (id=2991): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001c00)=0x14) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="e7c8543bcf4c64bd5de303d6"], 0xfdef) 8.826773128s ago: executing program 0 (id=2995): exit(0xffff) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={0x0, 0x0, 0x4000}, 0x18) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000440)={0x28, 0x7, 0x0, 0x0, &(0x7f00000002c0)='L', 0x1, 0xfffffffffffffff9}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x1, 0x0, 0x0, 0x80, 0xfffffff7ffffffff}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x2, 0x0, 0x0, &(0x7f0000000040)='~', 0x1, 0x8}) socket$inet(0x2, 0x2, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 8.776993356s ago: executing program 2 (id=2996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x40020000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 8.317172366s ago: executing program 4 (id=2997): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x80000000000005a, 0x3) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$packet(0x11, 0x1, 0x300) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000700)}, 0x1005}], 0x1, 0x0, 0x0) 8.056746538s ago: executing program 2 (id=2998): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x802, 0x10000, 0x75d}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0) close(r5) execveat$binfmt(r0, r3, 0x0, 0x0, 0x1000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d00200700", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="f3"], 0x0) 7.712933859s ago: executing program 0 (id=2999): socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) listxattr(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r4, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240cc009}, 0x0) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000080)=0xa) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) 7.410198945s ago: executing program 1 (id=3000): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [0x5f, 0x30, 0x5f, 0x30, 0x0]}}, 0x0, 0x1a}, 0x28) 6.920901202s ago: executing program 1 (id=3001): syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0) ioctl$HIDIOCGUSAGE(r2, 0x501c4814, &(0x7f0000000000)={0x2, 0xffffffff, 0x0, 0x8, 0x0, 0xfffffffc}) 5.741842838s ago: executing program 2 (id=3002): socket$inet(0x2, 0x1, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(0x0, &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f", 0x15, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.624318881s ago: executing program 0 (id=3003): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r0}, 0x38) 5.277072113s ago: executing program 0 (id=3004): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6(0xa, 0x3, 0x3c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.69151484s ago: executing program 1 (id=3005): openat$hwrng(0xffffff9c, 0x0, 0x80800, 0x0) unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"}) poll(&(0x7f0000000040), 0x0, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) dup(0xffffffffffffffff) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4], 0x38}}, 0x0) write$uinput_user_dev(r2, 0x0, 0x0) 3.015272206s ago: executing program 4 (id=3006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.437300754s ago: executing program 4 (id=3007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x40020000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 2.07910934s ago: executing program 2 (id=3008): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) inotify_init() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) pwritev2(r2, 0x0, 0x0, 0x0, 0x0, 0x3) 2.058646366s ago: executing program 0 (id=3009): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd4}}, 0x20008844) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) 1.30520614s ago: executing program 4 (id=3010): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000fa0080b8785d96000100000000000000000000000000000000000000000000008534df7400", "2809e8dbe11e598948324ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000004000", "f4bd000000801900", [0x0, 0x2000000000005]}}) 1.223382572s ago: executing program 1 (id=3011): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x802, 0x10000, 0x75d}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0) close(r5) execveat$binfmt(r0, r3, 0x0, 0x0, 0x1000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d00200700", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="f3"], 0x0) 1.149030084s ago: executing program 0 (id=3012): socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) listxattr(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r4, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240cc009}, 0x0) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000080)=0xa) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) 1.056781269s ago: executing program 4 (id=3013): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000004c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0xffffffffffffff0f}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r4) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=3014): syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0) ioctl$HIDIOCGUSAGE(r2, 0x501c4814, &(0x7f0000000000)={0x2, 0xffffffff, 0x0, 0x8, 0x0, 0xfffffffc}) kernel console output (not intermixed with test programs): s: Mfr=1, Product=2, SerialNumber=3 [ 966.655693][ T5878] usb 2-1: Product: syz [ 966.655708][ T5878] usb 2-1: Manufacturer: syz [ 966.655725][ T5878] usb 2-1: SerialNumber: syz [ 966.710339][ T5878] usb 2-1: config 0 descriptor?? [ 966.716570][ T5878] hub 2-1:0.0: bad descriptor, ignoring hub [ 966.716605][ T5878] hub 2-1:0.0: probe with driver hub failed with error -5 [ 966.918335][T14043] tipc: Enabling of bearer rejected, already enabled [ 966.938545][ T5878] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 966.974747][ T5878] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 966.974801][ T5878] dib0700: firmware download failed at 7 with -22 [ 967.260063][ T1230] usb 2-1: USB disconnect, device number 51 [ 967.499074][T14050] syzkaller0: entered promiscuous mode [ 967.499100][T14050] syzkaller0: entered allmulticast mode [ 968.919218][T14073] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 968.919320][T14073] macsec1: entered promiscuous mode [ 968.919477][T14073] macsec1: entered allmulticast mode [ 968.937976][T14073] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 969.872113][T14081] random: crng reseeded on system resumption [ 970.199692][ T1230] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 970.354135][ T1230] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 970.354160][ T1230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.354174][ T1230] usb 2-1: Product: syz [ 970.354185][ T1230] usb 2-1: Manufacturer: syz [ 970.354195][ T1230] usb 2-1: SerialNumber: syz [ 970.601756][ T1230] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 970.601813][ T1230] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 970.607426][ T1230] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 970.680588][ T1230] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 970.781061][ T1230] usb 2-1: USB disconnect, device number 52 [ 971.153355][T14096] syzkaller0: entered promiscuous mode [ 971.153383][T14096] syzkaller0: entered allmulticast mode [ 971.189885][ T5878] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 971.348179][ T5878] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 971.348268][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.348292][ T5878] usb 3-1: Product: syz [ 971.348307][ T5878] usb 3-1: Manufacturer: syz [ 971.348323][ T5878] usb 3-1: SerialNumber: syz [ 971.398765][ T5878] usb 3-1: config 0 descriptor?? [ 971.402081][ T5878] hub 3-1:0.0: bad descriptor, ignoring hub [ 971.402121][ T5878] hub 3-1:0.0: probe with driver hub failed with error -5 [ 971.579604][ T5946] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 971.611112][ T5878] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 971.613827][ T5878] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 971.613872][ T5878] dib0700: firmware download failed at 7 with -22 [ 971.712260][T14112] tipc: Enabling of bearer rejected, already enabled [ 971.762830][ T5946] usb 5-1: device descriptor read/64, error -71 [ 971.999797][ T5946] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 972.159662][ T5946] usb 5-1: device descriptor read/64, error -71 [ 972.159881][ T8660] usb 3-1: USB disconnect, device number 51 [ 972.270085][ T5946] usb usb5-port1: attempt power cycle [ 972.429653][ T44] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 972.531618][T14118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2261'. [ 972.608286][ T44] usb 1-1: unable to get BOS descriptor or descriptor too short [ 972.634603][ T44] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 212, changing to 7 [ 972.634627][ T44] usb 1-1: config 1 interface 1 has no altsetting 0 [ 972.639618][ T5946] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 972.660569][ T5946] usb 5-1: device descriptor read/8, error -71 [ 972.720246][ T44] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 972.720268][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.720284][ T44] usb 1-1: Product: syz [ 972.720296][ T44] usb 1-1: Manufacturer: syz [ 972.720307][ T44] usb 1-1: SerialNumber: syz [ 972.899589][ T5946] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 972.920922][ T5946] usb 5-1: device descriptor read/8, error -71 [ 973.263035][ T5946] usb usb5-port1: unable to enumerate USB device [ 974.799672][ T31] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 974.989317][ T31] usb 5-1: device descriptor read/64, error -71 [ 975.269717][ T31] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 975.409663][ T31] usb 5-1: device descriptor read/64, error -71 [ 975.520163][ T31] usb usb5-port1: attempt power cycle [ 975.880275][ T31] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 975.900358][ T31] usb 5-1: device descriptor read/8, error -71 [ 976.139629][ T31] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 976.160444][ T31] usb 5-1: device descriptor read/8, error -71 [ 976.270155][ T31] usb usb5-port1: unable to enumerate USB device [ 976.439675][ T8660] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 976.628178][ T8660] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 976.628200][ T8660] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.628214][ T8660] usb 2-1: Product: syz [ 976.628224][ T8660] usb 2-1: Manufacturer: syz [ 976.628293][ T8660] usb 2-1: SerialNumber: syz [ 977.064359][ T8660] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 977.064987][ T8660] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 977.065005][ T8660] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 977.145893][ T8660] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 977.232105][ T44] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 977.240665][ T8660] usb 2-1: USB disconnect, device number 53 [ 977.523747][ T44] usb 1-1: USB disconnect, device number 40 [ 977.685012][T14154] syzkaller0: entered promiscuous mode [ 977.685039][T14154] syzkaller0: entered allmulticast mode [ 977.837077][T11728] udevd[11728]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 978.159751][ T993] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 978.279609][ T1230] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 978.326344][ T993] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 978.326379][ T993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.326401][ T993] usb 5-1: Product: syz [ 978.326418][ T993] usb 5-1: Manufacturer: syz [ 978.326435][ T993] usb 5-1: SerialNumber: syz [ 978.334699][ T993] usb 5-1: config 0 descriptor?? [ 978.337761][ T993] hub 5-1:0.0: bad descriptor, ignoring hub [ 978.337800][ T993] hub 5-1:0.0: probe with driver hub failed with error -5 [ 978.419592][ T1230] usb 2-1: device descriptor read/64, error -71 [ 978.547098][ T993] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 978.562375][ T993] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 978.562423][ T993] dib0700: firmware download failed at 7 with -22 [ 978.699646][ T1230] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 978.829652][ T1230] usb 2-1: device descriptor read/64, error -71 [ 978.870644][ T5946] usb 5-1: USB disconnect, device number 60 [ 978.940344][ T1230] usb usb2-port1: attempt power cycle [ 979.279700][ T1230] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 979.300362][ T1230] usb 2-1: device descriptor read/8, error -71 [ 979.539625][ T1230] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 979.607480][ T1230] usb 2-1: device descriptor read/8, error -71 [ 979.749184][ T5946] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 979.759071][ T1230] usb usb2-port1: unable to enumerate USB device [ 979.880872][ T5946] usb 5-1: device descriptor read/64, error -71 [ 980.119604][ T5946] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 980.249656][ T5946] usb 5-1: device descriptor read/64, error -71 [ 980.360103][ T5946] usb usb5-port1: attempt power cycle [ 980.709678][ T5946] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 980.731166][ T5946] usb 5-1: device descriptor read/8, error -71 [ 980.969638][ T5946] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 980.990443][ T5946] usb 5-1: device descriptor read/8, error -71 [ 981.059646][ T44] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 981.100116][ T5946] usb usb5-port1: unable to enumerate USB device [ 981.216796][ T44] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 981.216819][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.216832][ T44] usb 1-1: Product: syz [ 981.216842][ T44] usb 1-1: Manufacturer: syz [ 981.216851][ T44] usb 1-1: SerialNumber: syz [ 981.346281][T14210] tipc: Enabled bearer , priority 0 [ 981.396743][T14209] tipc: Resetting bearer [ 981.555563][ T44] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 981.555624][ T44] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 981.555646][ T44] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 981.604694][ T44] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 981.620139][ T44] usb 1-1: USB disconnect, device number 41 [ 981.642007][T14208] tipc: Disabling bearer [ 982.067506][T14216] syzkaller0: entered promiscuous mode [ 982.067524][T14216] syzkaller0: entered allmulticast mode [ 982.779675][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 982.936748][ T10] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 982.936782][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.936805][ T10] usb 1-1: Product: syz [ 982.936821][ T10] usb 1-1: Manufacturer: syz [ 982.936837][ T10] usb 1-1: SerialNumber: syz [ 982.977127][ T10] usb 1-1: config 0 descriptor?? [ 983.009789][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 983.009858][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2294'. [ 983.010428][T14230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2294'. [ 983.011000][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 983.112233][ T1230] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 983.232266][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 983.256288][ T1230] usb 2-1: device descriptor read/64, error -71 [ 983.276617][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 983.277422][ T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 983.277493][ T10] usb 1-1: media controller created [ 983.368283][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 983.499778][ T1230] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 983.624733][ T10] DVB: Unable to find symbol dib7000p_attach() [ 983.624749][ T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 983.664771][ T1230] usb 2-1: device descriptor read/64, error -71 [ 983.787167][ T1230] usb usb2-port1: attempt power cycle [ 984.189822][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 984.189845][ T10] Registered IR keymap rc-empty [ 984.190427][ T10] dvb-usb: could not initialize remote control. [ 984.190439][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 984.200462][ T1230] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 984.220666][ T1230] usb 2-1: device descriptor read/8, error -71 [ 984.279205][ T10] usb 1-1: USB disconnect, device number 42 [ 984.459597][ T1230] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 984.480664][ T1230] usb 2-1: device descriptor read/8, error -71 [ 984.487582][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 984.590039][ T1230] usb usb2-port1: unable to enumerate USB device [ 985.289638][ T8660] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 985.489765][ T8660] usb 1-1: device descriptor read/64, error -71 [ 985.749714][ T8660] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 985.889666][ T8660] usb 1-1: device descriptor read/64, error -71 [ 985.899970][T14277] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 986.010165][ T8660] usb usb1-port1: attempt power cycle [ 986.450174][ T8660] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 986.450292][T14287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2309'. [ 986.470478][ T8660] usb 1-1: device descriptor read/8, error -71 [ 986.634392][T14289] netdevsim netdevsim3: Direct firmware load for . [ 986.634392][T14289] failed with error -2 [ 986.634448][T14289] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 986.634448][T14289] [ 986.729678][ T8660] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 986.772325][ T8660] usb 1-1: device descriptor read/8, error -71 [ 986.880027][ T8660] usb usb1-port1: unable to enumerate USB device [ 987.855670][T14295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 988.449621][ T5885] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 988.624141][ T5885] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 988.624170][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.624190][ T5885] usb 5-1: Product: syz [ 988.624202][ T5885] usb 5-1: Manufacturer: syz [ 988.624215][ T5885] usb 5-1: SerialNumber: syz [ 988.993341][ T5885] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 988.993400][ T5885] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 988.993421][ T5885] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 989.035129][ T5885] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 989.068479][ T5885] usb 5-1: USB disconnect, device number 65 [ 989.139686][ T5878] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 989.289705][ T5878] usb 4-1: device descriptor read/64, error -71 [ 989.529657][ T5878] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 989.669609][ T5878] usb 4-1: device descriptor read/64, error -71 [ 989.780553][ T5878] usb usb4-port1: attempt power cycle [ 990.118827][T14329] syzkaller0: entered promiscuous mode [ 990.118854][T14329] syzkaller0: entered allmulticast mode [ 990.120890][ T5878] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 990.150426][ T5878] usb 4-1: device descriptor read/8, error -71 [ 990.224246][T14335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 990.276468][T14335] netlink: 'syz.1.2322': attribute type 10 has an invalid length. [ 990.289255][T14334] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 990.400082][ T5878] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 990.430378][ T5878] usb 4-1: device descriptor read/8, error -71 [ 990.551144][ T5878] usb usb4-port1: unable to enumerate USB device [ 990.651736][T14339] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 990.926098][T14326] delete_channel: no stack [ 991.580321][ T993] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 991.963233][ T993] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 991.963254][ T993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.963267][ T993] usb 3-1: Product: syz [ 991.963277][ T993] usb 3-1: Manufacturer: syz [ 991.963286][ T993] usb 3-1: SerialNumber: syz [ 992.241420][ T993] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 992.241462][ T993] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 992.241477][ T993] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 992.338063][ T993] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 992.425084][ T993] usb 3-1: USB disconnect, device number 52 [ 992.915855][T14369] input: syz1 as /devices/virtual/input/input44 [ 993.054450][T14372] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 993.518054][T14383] syzkaller0: entered promiscuous mode [ 993.518073][T14383] syzkaller0: entered allmulticast mode [ 996.253757][T14407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 996.262588][T14407] netlink: 'syz.3.2347': attribute type 10 has an invalid length. [ 996.944597][T14402] delete_channel: no stack [ 997.064812][T14413] input: syz1 as /devices/virtual/input/input45 [ 997.913854][T14426] syzkaller0: entered promiscuous mode [ 997.913891][T14426] syzkaller0: entered allmulticast mode [ 998.179771][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.179851][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.717021][T14439] syzkaller0: entered promiscuous mode [ 998.717047][T14439] syzkaller0: entered allmulticast mode [ 999.949781][T14445] tipc: Enabling of bearer rejected, already enabled [ 1000.369682][ T5878] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1000.512518][ T5878] usb 5-1: device descriptor read/64, error -71 [ 1000.762028][ T5878] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1000.889668][ T5878] usb 5-1: device descriptor read/64, error -71 [ 1001.000160][ T5878] usb usb5-port1: attempt power cycle [ 1001.289619][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1001.369678][ T1230] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1001.390182][ T5878] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1001.454768][ T5878] usb 5-1: device descriptor read/8, error -71 [ 1001.484567][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1001.499059][ T10] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1001.499080][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.499093][ T10] usb 4-1: Product: syz [ 1001.499103][ T10] usb 4-1: Manufacturer: syz [ 1001.499112][ T10] usb 4-1: SerialNumber: syz [ 1001.516207][ T10] usb 4-1: config 0 descriptor?? [ 1001.519644][ T31] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1001.547945][ T1230] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1001.548001][ T1230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.548021][ T1230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.548038][ T1230] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1001.548068][ T1230] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1001.548086][ T1230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.553798][ T1230] usb 1-1: config 0 descriptor?? [ 1001.729691][ T5878] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1001.751249][ T5878] usb 5-1: device descriptor read/8, error -71 [ 1001.808181][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1001.827437][ T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 212, changing to 7 [ 1001.827476][ T31] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1001.874905][ T5878] usb usb5-port1: unable to enumerate USB device [ 1001.877652][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1001.877767][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.877789][ T31] usb 2-1: Product: syz [ 1001.877804][ T31] usb 2-1: Manufacturer: syz [ 1001.877818][ T31] usb 2-1: SerialNumber: syz [ 1001.956934][ T10] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1002.006933][ T10] usb 4-1: USB disconnect, device number 41 [ 1002.026790][ T1230] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 1002.134619][ T1230] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1002.385048][T14470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.386868][T14470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.880686][T14479] netdevsim netdevsim3: Direct firmware load for . [ 1002.880686][T14479] failed with error -2 [ 1002.880716][T14479] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1002.880716][T14479] [ 1003.529661][ T10] usb 1-1: reset high-speed USB device number 47 using dummy_hcd [ 1006.979041][ T31] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1008.644202][ T9] usb 2-1: USB disconnect, device number 62 [ 1008.719622][ T10] usb 1-1: device descriptor read/64, error -110 [ 1009.593107][T14507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2375'. [ 1009.593500][T14507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2375'. [ 1009.606415][ T1230] usb 1-1: USB disconnect, device number 47 [ 1009.959728][ T31] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1010.273215][T14518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1010.339668][ T1230] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1010.372208][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.372237][ T31] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1010.374950][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1010.374977][ T31] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1010.374999][ T31] usb 2-1: Manufacturer: syz [ 1010.439844][ T31] usb 2-1: config 0 descriptor?? [ 1010.489641][ T1230] usb 3-1: Using ep0 maxpacket: 8 [ 1010.493482][ T1230] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1010.493512][ T1230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.493552][ T1230] usb 3-1: config 0 has no interfaces? [ 1010.497436][ T1230] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1010.497462][ T1230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.497480][ T1230] usb 3-1: Product: syz [ 1010.497490][ T1230] usb 3-1: Manufacturer: syz [ 1010.497500][ T1230] usb 3-1: SerialNumber: syz [ 1010.585905][ T1230] usb 3-1: config 0 descriptor?? [ 1010.837867][ T5878] usb 3-1: USB disconnect, device number 53 [ 1012.661684][ T5878] usb 2-1: USB disconnect, device number 63 [ 1015.786536][ T31] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1015.958362][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1015.975577][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 212, changing to 7 [ 1015.975612][ T31] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1015.981668][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1015.981698][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.981718][ T31] usb 3-1: Product: syz [ 1015.981731][ T31] usb 3-1: Manufacturer: syz [ 1015.981757][ T31] usb 3-1: SerialNumber: syz [ 1016.118072][ T1230] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1016.419574][ T1230] usb 5-1: Using ep0 maxpacket: 8 [ 1016.428108][ T1230] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1016.428144][ T1230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1016.468657][ T1230] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1016.468687][ T1230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.468708][ T1230] usb 5-1: Product: syz [ 1016.468723][ T1230] usb 5-1: Manufacturer: syz [ 1016.468738][ T1230] usb 5-1: SerialNumber: syz [ 1016.545135][ T1230] usb 5-1: config 0 descriptor?? [ 1016.605655][ T1230] streamzap 5-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1016.903548][ T5885] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1017.008892][ T1230] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1017.376311][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.376340][ T5885] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1017.384084][ T5885] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1017.384108][ T5885] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1017.384123][ T5885] usb 2-1: Manufacturer: syz [ 1017.409598][ T1230] usb 4-1: Using ep0 maxpacket: 16 [ 1017.416952][ T1230] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1017.416981][ T1230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.417003][ T1230] usb 4-1: Product: syz [ 1017.417022][ T1230] usb 4-1: Manufacturer: syz [ 1017.417033][ T1230] usb 4-1: SerialNumber: syz [ 1017.514692][ T1230] usb 4-1: config 0 descriptor?? [ 1017.550537][ T5885] usb 2-1: config 0 descriptor?? [ 1017.941563][ T1230] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1017.946360][ T1230] usb 4-1: USB disconnect, device number 42 [ 1019.666368][ T993] usb 2-1: USB disconnect, device number 64 [ 1019.949574][ T5885] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1020.109582][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 1020.112859][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1020.112891][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1020.116539][ T5885] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1020.116571][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.116594][ T5885] usb 4-1: Product: syz [ 1020.116610][ T5885] usb 4-1: Manufacturer: syz [ 1020.116627][ T5885] usb 4-1: SerialNumber: syz [ 1020.262064][ T5885] usb 4-1: config 0 descriptor?? [ 1020.284418][ T5885] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1020.284470][ T5885] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1020.900793][ T5885] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1020.902467][ T5885] em28xx 4-1:0.0: Config register raw data: 0x00 [ 1021.082451][ T31] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1021.850512][T14615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1022.521623][ T1230] usb 3-1: USB disconnect, device number 54 [ 1022.524520][ T993] usb 5-1: USB disconnect, device number 70 [ 1022.747274][ T10] usb 4-1: USB disconnect, device number 43 [ 1022.748870][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 1022.900141][ T10] em28xx 4-1:0.0: Freeing device [ 1024.023290][T14644] netlink: 'syz.2.2412': attribute type 1 has an invalid length. [ 1024.361999][T14644] bond1: entered promiscuous mode [ 1024.364112][T14644] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1024.399699][ T31] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1024.433101][T14645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1024.433452][T14645] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 1024.433468][T14645] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1024.436269][T14645] bond1: (slave gre1): making interface the new active one [ 1024.436283][T14645] gre1: entered promiscuous mode [ 1024.447834][T14645] bond1: (slave gre1): Enslaving as an active interface with an up link [ 1024.579501][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1024.579534][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.579556][ T31] usb 2-1: Product: syz [ 1024.579572][ T31] usb 2-1: Manufacturer: syz [ 1024.579595][ T31] usb 2-1: SerialNumber: syz [ 1024.952820][ T31] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1024.952875][ T31] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1024.952896][ T31] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1025.012482][ T31] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1025.062144][ T31] usb 2-1: USB disconnect, device number 65 [ 1026.499664][ T1230] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1026.560371][T14677] tipc: Enabling of bearer rejected, already enabled [ 1026.672574][ T1230] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1026.672596][ T1230] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.672610][ T1230] usb 2-1: config 0 has no interface number 0 [ 1026.672645][ T1230] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1026.672663][ T1230] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1026.676599][ T1230] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1026.676620][ T1230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.676636][ T1230] usb 2-1: Product: syz [ 1026.676719][ T1230] usb 2-1: Manufacturer: syz [ 1026.676736][ T1230] usb 2-1: SerialNumber: syz [ 1026.682939][ T1230] usb 2-1: config 0 descriptor?? [ 1026.685192][T14671] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1026.693411][ T1230] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1026.698582][ T1230] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1026.751424][ T1230] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1026.892357][ T1230] usb 2-1: USB disconnect, device number 66 [ 1027.105498][ T1230] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1027.108695][ T1230] cyberjack 2-1:0.69: device disconnected [ 1028.129636][ T5885] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1028.303804][ T5885] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1028.303825][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.303838][ T5885] usb 2-1: Product: syz [ 1028.303847][ T5885] usb 2-1: Manufacturer: syz [ 1028.303856][ T5885] usb 2-1: SerialNumber: syz [ 1028.609069][ T5885] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1028.609110][ T5885] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1028.609125][ T5885] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1028.702463][ T5885] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1028.787801][ T5885] usb 2-1: USB disconnect, device number 67 [ 1029.978421][T14701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'. [ 1030.987733][T14726] random: crng reseeded on system resumption [ 1032.031946][T14739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1032.040915][T14739] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1032.628638][T14750] input: syz1 as /devices/virtual/input/input47 [ 1032.718939][T14752] netlink: 'syz.1.2443': attribute type 1 has an invalid length. [ 1033.095221][T14752] bond1: entered promiscuous mode [ 1033.095713][T14752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1033.246002][T14755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1033.246373][T14755] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 1033.246388][T14755] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1033.254158][T14755] bond1: (slave gre1): making interface the new active one [ 1033.254180][T14755] gre1: entered promiscuous mode [ 1033.258108][T14755] bond1: (slave gre1): Enslaving as an active interface with an up link [ 1034.532850][T14769] syzkaller0: entered promiscuous mode [ 1034.532868][T14769] syzkaller0: entered allmulticast mode [ 1034.622980][ T5885] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1034.779692][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 1034.781890][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1034.781911][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1034.784391][ T5885] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1034.784410][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.784423][ T5885] usb 4-1: Product: syz [ 1034.784433][ T5885] usb 4-1: Manufacturer: syz [ 1034.784443][ T5885] usb 4-1: SerialNumber: syz [ 1034.788777][ T5885] usb 4-1: config 0 descriptor?? [ 1034.803806][ T5885] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1034.803829][ T5885] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1035.620424][ T5885] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1035.627442][ T5885] em28xx 4-1:0.0: Config register raw data: 0x00 [ 1036.399971][T14780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2451'. [ 1036.884634][ T8660] usb 4-1: USB disconnect, device number 44 [ 1036.886237][ T8660] em28xx 4-1:0.0: Disconnecting em28xx [ 1036.905172][ T8660] em28xx 4-1:0.0: Freeing device [ 1037.494145][T14799] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2458'. [ 1037.629616][ T8660] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1037.659677][ T5878] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1037.782146][ T8660] usb 1-1: Using ep0 maxpacket: 16 [ 1037.785020][ T8660] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1037.785055][ T8660] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1037.788363][ T8660] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1037.788395][ T8660] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.788416][ T8660] usb 1-1: Product: syz [ 1037.788432][ T8660] usb 1-1: Manufacturer: syz [ 1037.788449][ T8660] usb 1-1: SerialNumber: syz [ 1037.856518][ T5878] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 1037.856539][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.856553][ T5878] usb 4-1: config 0 has no interface number 0 [ 1037.856603][ T5878] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1037.856620][ T5878] usb 4-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1037.859177][ T5878] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1037.859198][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.859213][ T5878] usb 4-1: Product: syz [ 1037.859223][ T5878] usb 4-1: Manufacturer: syz [ 1037.859234][ T5878] usb 4-1: SerialNumber: syz [ 1037.903633][T14804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1037.932587][ T5878] usb 4-1: config 0 descriptor?? [ 1037.948142][ T8660] usb 1-1: config 0 descriptor?? [ 1037.991894][ T5878] cyberjack 4-1:0.69: required endpoints missing [ 1038.046648][ T8660] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1038.046692][ T8660] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1038.270378][ T1230] usb 4-1: USB disconnect, device number 45 [ 1038.705975][ T8660] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1038.706833][ T8660] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1039.309963][ T8660] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1039.310666][ T8660] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1039.713107][ T8660] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1039.713576][ T8660] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1039.713996][ T8660] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1039.714424][ T8660] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1039.790198][ T8660] usb 1-1: USB disconnect, device number 48 [ 1040.706985][T14820] netlink: 'syz.0.2464': attribute type 1 has an invalid length. [ 1040.851725][T14820] bond1: entered promiscuous mode [ 1040.852183][T14820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1041.011581][T14822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1041.011904][T14822] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 1041.011917][T14822] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1041.015224][T14822] bond1: (slave gre1): making interface the new active one [ 1041.015240][T14822] gre1: entered promiscuous mode [ 1041.018917][T14822] bond1: (slave gre1): Enslaving as an active interface with an up link [ 1041.955419][T14833] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2470'. [ 1042.044833][T14835] loop7: detected capacity change from 0 to 7 [ 1042.064213][T11728] Dev loop7: unable to read RDB block 7 [ 1042.064246][T11728] loop7: unable to read partition table [ 1042.064446][T11728] loop7: partition table beyond EOD, truncated [ 1042.093888][T14835] Dev loop7: unable to read RDB block 7 [ 1042.093926][T14835] loop7: unable to read partition table [ 1042.094099][T14835] loop7: partition table beyond EOD, truncated [ 1042.095011][T14835] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1042.683618][T14844] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2474'. [ 1042.878562][T14849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2475'. [ 1042.978841][T14850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1043.276974][T14850] netlink: 'syz.1.2476': attribute type 10 has an invalid length. [ 1043.329278][T14854] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1043.691621][T14845] delete_channel: no stack [ 1044.706038][T14872] input: syz1 as /devices/virtual/input/input48 [ 1045.080047][ T31] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1045.186025][T14884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2485'. [ 1045.186622][T14884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2485'. [ 1045.231996][ T31] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 1045.232018][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.232032][ T31] usb 3-1: config 0 has no interface number 0 [ 1045.232069][ T31] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 255 [ 1045.232087][ T31] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1045.237363][ T31] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1045.237385][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.237400][ T31] usb 3-1: Product: syz [ 1045.237410][ T31] usb 3-1: Manufacturer: syz [ 1045.237421][ T31] usb 3-1: SerialNumber: syz [ 1045.322504][ T31] usb 3-1: config 0 descriptor?? [ 1045.323570][T14875] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1045.351721][ T31] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1045.353726][ T31] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1045.387768][ T31] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1045.581516][ T993] usb 3-1: USB disconnect, device number 55 [ 1045.587262][ T993] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1045.588061][ T993] cyberjack 3-1:0.69: device disconnected [ 1046.184758][T14890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2489'. [ 1046.241945][T14889] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2487'. [ 1046.865092][T14918] input: syz1 as /devices/virtual/input/input49 [ 1047.934335][T14927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1048.318766][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2500'. [ 1048.319159][T14933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2500'. [ 1050.663821][T14946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1050.667814][T14946] netlink: 'syz.2.2503': attribute type 10 has an invalid length. [ 1050.773978][T14944] delete_channel: no stack [ 1051.121155][T14951] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2505'. [ 1052.358420][T14979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2515'. [ 1052.663930][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2516'. [ 1052.664330][T14987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2516'. [ 1053.425116][T14996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1054.272030][T14999] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2519'. [ 1055.066854][T15003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1056.180216][ T5878] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1056.230569][T15029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2529'. [ 1056.230951][T15029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2529'. [ 1056.329682][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 1056.332294][ T5878] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1056.332326][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1056.335074][ T5878] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1056.335104][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.335124][ T5878] usb 4-1: Product: syz [ 1056.335140][ T5878] usb 4-1: Manufacturer: syz [ 1056.335154][ T5878] usb 4-1: SerialNumber: syz [ 1056.460941][ T5878] usb 4-1: config 0 descriptor?? [ 1056.589117][ T5878] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1056.589150][ T5878] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1057.069150][ T5878] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1057.070921][ T5878] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1057.679416][ T5878] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1057.680343][ T5878] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1057.885230][T15042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1058.099671][ T5878] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1058.100088][ T5878] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1058.100426][ T5878] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1058.100767][ T5878] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1058.105393][ T5878] usb 4-1: USB disconnect, device number 46 [ 1059.436868][T15057] ptrace attach of "./syz-executor exec"[5806] was attempted by "./syz-executor exec"[15057] [ 1059.616296][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.616375][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.039676][ T8660] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1061.219615][ T8660] usb 3-1: Using ep0 maxpacket: 16 [ 1061.221736][ T8660] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1061.221756][ T8660] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1061.223812][ T8660] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1061.223831][ T8660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.223845][ T8660] usb 3-1: Product: syz [ 1061.223855][ T8660] usb 3-1: Manufacturer: syz [ 1061.223864][ T8660] usb 3-1: SerialNumber: syz [ 1061.228149][ T8660] usb 3-1: config 0 descriptor?? [ 1061.330612][ T8660] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1061.330658][ T8660] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1061.838988][ T8660] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1061.842441][ T8660] em28xx 3-1:0.0: Config register raw data: 0x00 [ 1062.039606][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1062.172164][ T8660] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1062.189527][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1062.192339][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1062.192370][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1062.197101][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1062.197131][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.197152][ T9] usb 4-1: Product: syz [ 1062.197168][ T9] usb 4-1: Manufacturer: syz [ 1062.197185][ T9] usb 4-1: SerialNumber: syz [ 1062.275270][ T9] usb 4-1: config 0 descriptor?? [ 1062.287891][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1062.287939][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1062.319546][ T8660] usb 5-1: Using ep0 maxpacket: 8 [ 1062.325291][ T8660] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1062.325323][ T8660] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1062.365434][ T8660] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1062.365468][ T8660] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.365483][ T8660] usb 5-1: Product: syz [ 1062.365494][ T8660] usb 5-1: Manufacturer: syz [ 1062.365505][ T8660] usb 5-1: SerialNumber: syz [ 1062.416652][ T8660] usb 5-1: config 0 descriptor?? [ 1062.435942][ T8660] streamzap 5-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1062.869765][ T5878] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1062.898656][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1062.899334][ T9] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1063.019912][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 1063.024216][T15090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1063.025348][ T5878] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 1063.025375][ T5878] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1063.025395][ T5878] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.025414][ T5878] usb 2-1: config 8 has no interface number 0 [ 1063.025461][ T5878] usb 2-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 1063.025488][ T5878] usb 2-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 1063.025527][ T5878] usb 2-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1063.025566][ T5878] usb 2-1: config 8 interface 223 has no altsetting 0 [ 1063.125573][ T5878] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1063.125595][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.125610][ T5878] usb 2-1: Product: syz [ 1063.125620][ T5878] usb 2-1: Manufacturer: syz [ 1063.125630][ T5878] usb 2-1: SerialNumber: syz [ 1063.215401][T15086] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1063.531002][ T9] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1063.531831][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1063.941000][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1063.941454][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1063.941985][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1063.942400][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1063.992259][ T9] usb 4-1: USB disconnect, device number 47 [ 1064.221394][ T8660] usb 3-1: USB disconnect, device number 56 [ 1064.227593][ T8660] em28xx 3-1:0.0: Disconnecting em28xx [ 1064.249980][ T8660] em28xx 3-1:0.0: Freeing device [ 1064.914185][T15102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2549'. [ 1065.666142][ T8660] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1065.819652][ T8660] usb 3-1: device descriptor read/64, error -71 [ 1066.069570][ T8660] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1066.319821][ T8660] usb 3-1: device descriptor read/64, error -71 [ 1066.447081][ T8660] usb usb3-port1: attempt power cycle [ 1066.829614][ T8660] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1066.850555][ T8660] usb 3-1: device descriptor read/8, error -71 [ 1066.963625][T15113] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1067.089546][ T8660] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1067.110280][ T8660] usb 3-1: device descriptor read/8, error -71 [ 1067.219960][ T8660] usb usb3-port1: unable to enumerate USB device [ 1067.550504][ T9] usb 5-1: USB disconnect, device number 71 [ 1068.370672][ T9] usb 2-1: USB disconnect, device number 68 [ 1068.699035][T15136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1069.059596][ T5885] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1069.329566][ T5885] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1069.339280][ T5885] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 212, changing to 7 [ 1069.339323][ T5885] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1069.344610][ T5885] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1069.344656][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.344682][ T5885] usb 3-1: Product: syz [ 1069.344700][ T5885] usb 3-1: Manufacturer: syz [ 1069.344719][ T5885] usb 3-1: SerialNumber: syz [ 1069.576499][T15128] delete_channel: no stack [ 1070.191313][T15148] tipc: Enabling of bearer rejected, already enabled [ 1073.402814][T15168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1074.500961][ T5885] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1074.663417][ T5885] usb 3-1: USB disconnect, device number 61 [ 1074.890885][T11728] udevd[11728]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1075.121346][ T8660] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1075.369637][ T8660] usb 1-1: Using ep0 maxpacket: 16 [ 1075.407524][ T8660] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 1075.407551][ T8660] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1075.407564][ T8660] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.407576][ T8660] usb 1-1: config 8 has no interface number 0 [ 1075.407609][ T8660] usb 1-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 1075.407626][ T8660] usb 1-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 1075.407644][ T8660] usb 1-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1075.407662][ T8660] usb 1-1: config 8 interface 223 has no altsetting 0 [ 1075.410841][ T8660] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1075.410860][ T8660] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.410874][ T8660] usb 1-1: Product: syz [ 1075.410884][ T8660] usb 1-1: Manufacturer: syz [ 1075.410894][ T8660] usb 1-1: SerialNumber: syz [ 1075.419259][T15178] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1076.278514][T15195] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2573'. [ 1076.278549][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2573'. [ 1078.032372][T15210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1078.120101][T15202] blktrace: Concurrent blktraces are not allowed on loop7 [ 1078.144869][T15210] netlink: 'syz.1.2576': attribute type 10 has an invalid length. [ 1078.437557][T15205] delete_channel: no stack [ 1081.122702][ T5885] usb 1-1: USB disconnect, device number 49 [ 1081.510025][ T8660] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1081.669884][ T44] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1081.686278][ T8660] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1081.686297][ T8660] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.686310][ T8660] usb 5-1: Product: syz [ 1081.686319][ T8660] usb 5-1: Manufacturer: syz [ 1081.686328][ T8660] usb 5-1: SerialNumber: syz [ 1081.701873][ T8660] usb 5-1: config 0 descriptor?? [ 1081.728370][ T8660] hub 5-1:0.0: bad descriptor, ignoring hub [ 1081.728398][ T8660] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1081.825385][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 1081.867447][ T44] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1081.867470][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1081.871003][ T44] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1081.871021][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.871034][ T44] usb 4-1: Product: syz [ 1081.871044][ T44] usb 4-1: Manufacturer: syz [ 1081.871053][ T44] usb 4-1: SerialNumber: syz [ 1081.878461][ T44] usb 4-1: config 0 descriptor?? [ 1081.885422][ T44] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1081.885456][ T44] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1081.909926][ T8660] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1082.005217][ T8660] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1082.006553][ T8660] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1082.006637][ T8660] usb 5-1: media controller created [ 1082.064525][ T8660] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1082.255556][T15247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2589'. [ 1082.489085][ T44] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1082.495719][ T44] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1082.527356][ T8660] DVB: Unable to find symbol dib7000p_attach() [ 1082.527367][ T8660] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1082.839595][ T8660] rc_core: IR keymap rc-dib0700-rc5 not found [ 1082.839618][ T8660] Registered IR keymap rc-empty [ 1082.839959][ T8660] dvb-usb: could not initialize remote control. [ 1082.839967][ T8660] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1083.056959][ T5885] usb 5-1: USB disconnect, device number 72 [ 1083.105433][ T44] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1083.106689][ T44] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1083.517405][ T5885] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1083.532294][ T44] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1083.532695][ T44] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1083.533107][ T44] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1083.533563][ T44] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1083.743529][ T44] usb 4-1: USB disconnect, device number 48 [ 1084.943850][T15267] netdevsim netdevsim2: Direct firmware load for . [ 1084.943850][T15267] failed with error -2 [ 1084.943871][T15267] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1084.943871][T15267] [ 1090.598312][T15334] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2615'. [ 1091.870516][T15356] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1092.109075][T15364] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2627'. [ 1092.236228][T15366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1092.256162][T15366] netlink: 'syz.0.2626': attribute type 10 has an invalid length. [ 1092.540834][T15375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2629'. [ 1092.805988][T15359] delete_channel: no stack [ 1097.274044][T15423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2642'. [ 1098.110813][T15427] tipc: Enabling of bearer rejected, failed to enable media [ 1098.111400][T15427] syzkaller0: entered promiscuous mode [ 1098.111416][T15427] syzkaller0: entered allmulticast mode [ 1098.529566][ T44] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1098.659666][ T44] usb 5-1: device descriptor read/64, error -71 [ 1098.856748][T15434] binder: BINDER_SET_CONTEXT_MGR already set [ 1098.856764][T15434] binder: 15433:15434 ioctl 4018620d 200000000040 returned -16 [ 1098.858766][T15434] binder: 15433:15434 ioctl c0306201 200000000240 returned -11 [ 1098.929586][ T44] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1099.059636][ T44] usb 5-1: device descriptor read/64, error -71 [ 1099.169842][ T44] usb usb5-port1: attempt power cycle [ 1099.492273][T15451] netlink: 'syz.0.2647': attribute type 10 has an invalid length. [ 1099.522438][ T44] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1099.526580][T15450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2653'. [ 1099.540409][ T44] usb 5-1: device descriptor read/8, error -71 [ 1099.790130][ T44] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1099.822817][ T44] usb 5-1: device descriptor read/8, error -71 [ 1099.930523][ T44] usb usb5-port1: unable to enumerate USB device [ 1100.136201][T15439] delete_channel: no stack [ 1101.049589][ T5885] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1101.419582][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 1101.421683][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1101.421706][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1101.424192][ T5885] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1101.424213][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.424227][ T5885] usb 3-1: Product: syz [ 1101.424238][ T5885] usb 3-1: Manufacturer: syz [ 1101.424248][ T5885] usb 3-1: SerialNumber: syz [ 1101.433402][ T5885] usb 3-1: config 0 descriptor?? [ 1101.704505][ T5885] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1101.704547][ T5885] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1102.111226][T15480] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2661'. [ 1102.295272][ T5885] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1102.296029][ T5885] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1102.902923][ T5885] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1103.305895][ T5885] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1103.306240][ T5885] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1103.306621][ T5885] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1103.307054][ T5885] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1103.307485][ T5885] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1103.327418][ T5885] usb 3-1: USB disconnect, device number 62 [ 1103.628049][T15491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2665'. [ 1105.159962][T15499] input: syz1 as /devices/virtual/input/input53 [ 1105.575106][ T8660] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1105.699617][ T8660] usb 1-1: device descriptor read/64, error -71 [ 1105.771472][T15514] netlink: 'syz.2.2672': attribute type 10 has an invalid length. [ 1105.884640][T15516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1105.961062][ T8660] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1106.415998][T15509] delete_channel: no stack [ 1106.567565][ T8660] usb 1-1: device descriptor read/64, error -71 [ 1106.680705][ T8660] usb usb1-port1: attempt power cycle [ 1107.049597][ T8660] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1107.080317][ T8660] usb 1-1: device descriptor read/8, error -71 [ 1107.330255][ T8660] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1107.366118][ T8660] usb 1-1: device descriptor read/8, error -71 [ 1107.469862][ T8660] usb usb1-port1: unable to enumerate USB device [ 1108.060932][T15528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2678'. [ 1108.395853][T15531] cgroup: fork rejected by pids controller in /syz4 [ 1110.036660][T16225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2683'. [ 1114.263612][T17169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2691'. [ 1114.763705][T17174] tipc: Enabling of bearer rejected, failed to enable media [ 1114.766342][T17171] syzkaller0: entered promiscuous mode [ 1114.766366][T17171] syzkaller0: entered allmulticast mode [ 1116.659816][T17193] binder: BINDER_SET_CONTEXT_MGR already set [ 1116.659833][T17193] binder: 17192:17193 ioctl 4018620d 200000000040 returned -16 [ 1116.661964][T17193] binder: 17192:17193 ioctl c0306201 200000000240 returned -11 [ 1117.428367][T17201] binfmt_misc: register: failed to install interpreter file ./file0 [ 1117.571063][T17204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2701'. [ 1117.571603][T17204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2701'. [ 1119.861806][T17239] netlink: 'syz.2.2709': attribute type 1 has an invalid length. [ 1120.101951][T17239] bond2: entered promiscuous mode [ 1120.104002][T17239] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1121.043820][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.043875][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.499555][ T44] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1121.659543][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 1121.661754][ T44] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1121.661777][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1121.664651][ T44] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1121.664670][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.664685][ T44] usb 5-1: Product: syz [ 1121.664695][ T44] usb 5-1: Manufacturer: syz [ 1121.664705][ T44] usb 5-1: SerialNumber: syz [ 1121.669570][ T44] usb 5-1: config 0 descriptor?? [ 1121.676617][ T44] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1121.676654][ T44] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1122.298437][T17252] netdevsim netdevsim1: Direct firmware load for . [ 1122.298437][T17252] failed with error -2 [ 1122.298471][T17252] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1122.298471][T17252] [ 1122.330596][ T44] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1122.354932][ T44] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1122.762111][ T44] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1122.762127][ T44] em28xx 5-1:0.0: No AC97 audio processor [ 1124.244639][ T9] usb 5-1: USB disconnect, device number 77 [ 1124.246504][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 1124.265268][ T9] em28xx 5-1:0.0: Freeing device [ 1124.875768][T17274] input: syz1 as /devices/virtual/input/input54 [ 1125.068974][T17278] loop7: detected capacity change from 0 to 7 [ 1125.083985][T17278] Dev loop7: unable to read RDB block 7 [ 1125.084030][T17278] loop7: unable to read partition table [ 1125.084259][T17278] loop7: partition table beyond EOD, truncated [ 1125.084290][T17278] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1126.037650][T17295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2727'. [ 1126.038213][T17295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2727'. [ 1126.569576][ T44] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1126.721024][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 1126.724193][ T44] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1126.724214][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1126.726915][ T44] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1126.726934][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.726949][ T44] usb 2-1: Product: syz [ 1126.726959][ T44] usb 2-1: Manufacturer: syz [ 1126.726980][ T44] usb 2-1: SerialNumber: syz [ 1126.736752][ T44] usb 2-1: config 0 descriptor?? [ 1126.763664][ T44] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1126.763720][ T44] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1127.358236][ T44] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1127.358798][ T44] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1127.359304][ T44] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1127.359316][ T44] em28xx 2-1:0.0: No AC97 audio processor [ 1129.267940][T17335] netlink: 'syz.4.2738': attribute type 10 has an invalid length. [ 1129.321573][ T9] usb 2-1: USB disconnect, device number 69 [ 1129.323425][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 1129.344758][ T9] em28xx 2-1:0.0: Freeing device [ 1129.652772][T17339] input: syz1 as /devices/virtual/input/input55 [ 1129.909662][T17329] delete_channel: no stack [ 1131.280399][T17361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2744'. [ 1131.281368][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2744'. [ 1134.719849][T17389] blktrace: Concurrent blktraces are not allowed on loop7 [ 1134.814881][T17389] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1135.321497][T17414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2760'. [ 1135.322507][T17414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2760'. [ 1136.128503][T17422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2762'. [ 1136.368472][T17424] loop7: detected capacity change from 0 to 7 [ 1136.369387][T17424] Dev loop7: unable to read RDB block 7 [ 1136.369831][T17424] loop7: unable to read partition table [ 1136.370020][T17424] loop7: partition table beyond EOD, truncated [ 1136.370033][T17424] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1138.289660][ T44] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1138.451543][ T5878] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1138.489566][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 1138.495251][ T44] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1138.495295][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.495318][ T44] usb 3-1: Product: syz [ 1138.495333][ T44] usb 3-1: Manufacturer: syz [ 1138.495349][ T44] usb 3-1: SerialNumber: syz [ 1138.536383][ T44] usb 3-1: config 0 descriptor?? [ 1138.633301][ T5878] usb 5-1: config 0 has no interfaces? [ 1138.649735][ T5878] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1138.649757][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.649772][ T5878] usb 5-1: Product: syz [ 1138.649783][ T5878] usb 5-1: Manufacturer: syz [ 1138.649835][ T5878] usb 5-1: SerialNumber: syz [ 1138.657484][ T5878] usb 5-1: config 0 descriptor?? [ 1138.940867][ T44] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1138.976181][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1139.001202][ T44] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1139.001260][ T44] usb 3-1: media controller created [ 1139.046494][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1139.734421][ T44] zl10353_read_register: readreg error (reg=127, ret==0) [ 1139.734496][ T44] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1139.734511][ T44] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1139.763233][ T44] usb 3-1: USB disconnect, device number 63 [ 1140.032690][ T44] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1141.327700][T17486] bridge0: entered allmulticast mode [ 1142.184765][ T8660] usb 5-1: USB disconnect, device number 78 [ 1142.819611][ T8660] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1143.019579][ T8660] usb 5-1: Using ep0 maxpacket: 16 [ 1143.022918][ T8660] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 1143.022935][ T8660] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1143.022948][ T8660] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.022961][ T8660] usb 5-1: config 8 has no interface number 0 [ 1143.022994][ T8660] usb 5-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 1143.023011][ T8660] usb 5-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 1143.023029][ T8660] usb 5-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1143.023047][ T8660] usb 5-1: config 8 interface 223 has no altsetting 0 [ 1143.025700][ T8660] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1143.025720][ T8660] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.025734][ T8660] usb 5-1: Product: syz [ 1143.025744][ T8660] usb 5-1: Manufacturer: syz [ 1143.025755][ T8660] usb 5-1: SerialNumber: syz [ 1143.033639][T17502] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1145.879574][ T1230] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1146.029792][ T1230] usb 3-1: Using ep0 maxpacket: 16 [ 1146.047364][ T1230] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1146.047393][ T1230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.047413][ T1230] usb 3-1: Product: syz [ 1146.047426][ T1230] usb 3-1: Manufacturer: syz [ 1146.047439][ T1230] usb 3-1: SerialNumber: syz [ 1146.093054][ T1230] usb 3-1: config 0 descriptor?? [ 1146.511703][ T1230] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1146.543506][ T1230] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1146.546920][ T1230] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1146.546987][ T1230] usb 3-1: media controller created [ 1146.597801][ T1230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1147.235155][ T1230] zl10353_read_register: readreg error (reg=127, ret==0) [ 1147.235228][ T1230] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1147.235269][ T1230] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1147.367274][ T1230] usb 3-1: USB disconnect, device number 64 [ 1147.526219][ T1230] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1147.910688][ T5885] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1148.061786][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 1148.121202][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1148.121241][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1148.139621][ T5885] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1148.139654][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.139676][ T5885] usb 4-1: Product: syz [ 1148.139692][ T5885] usb 4-1: Manufacturer: syz [ 1148.139708][ T5885] usb 4-1: SerialNumber: syz [ 1148.249353][ T5885] usb 4-1: config 0 descriptor?? [ 1148.263238][ T5885] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1148.263263][ T5885] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1148.484468][T17544] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1148.504490][T17544] netlink: 'syz.0.2799': attribute type 10 has an invalid length. [ 1148.920682][ T5885] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1148.921397][ T5885] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1149.201947][T17540] delete_channel: no stack [ 1149.640234][ T5885] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1149.640857][ T5885] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1150.048295][ T5885] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1150.048751][ T5885] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1150.049261][ T5885] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1150.049925][ T5885] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1150.099672][ T5885] usb 4-1: USB disconnect, device number 49 [ 1150.296567][T17558] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1150.304189][T17558] netlink: 'syz.1.2802': attribute type 10 has an invalid length. [ 1150.497435][ T5885] usb 5-1: USB disconnect, device number 79 [ 1150.828637][T17555] delete_channel: no stack [ 1151.273056][T17570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2805'. [ 1151.273710][T17570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2805'. [ 1152.062833][T17580] binder: 17579:17580 ioctl c0306201 200000000240 returned -11 [ 1152.369527][ T8660] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1152.439580][T15109] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1152.502096][T17587] loop7: detected capacity change from 0 to 7 [ 1152.503189][T17587] Dev loop7: unable to read RDB block 7 [ 1152.503219][T17587] loop7: unable to read partition table [ 1152.503367][T17587] loop7: partition table beyond EOD, truncated [ 1152.503379][T17587] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1152.519722][ T8660] usb 3-1: Using ep0 maxpacket: 16 [ 1152.535747][ T8660] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1152.535784][ T8660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.535807][ T8660] usb 3-1: Product: syz [ 1152.535825][ T8660] usb 3-1: Manufacturer: syz [ 1152.535852][ T8660] usb 3-1: SerialNumber: syz [ 1152.543362][ T8660] usb 3-1: config 0 descriptor?? [ 1152.676292][T15109] usb 5-1: Using ep0 maxpacket: 8 [ 1152.680466][T15109] usb 5-1: config 0 has no interfaces? [ 1152.684924][T15109] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1152.685080][T15109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.685124][T15109] usb 5-1: Product: syz [ 1152.685204][T15109] usb 5-1: Manufacturer: syz [ 1152.685234][T15109] usb 5-1: SerialNumber: syz [ 1152.703963][T15109] usb 5-1: config 0 descriptor?? [ 1152.948285][ T8660] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1152.973899][T15109] usb 5-1: USB disconnect, device number 80 [ 1152.980395][ T8660] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1152.985765][ T8660] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1152.985821][ T8660] usb 3-1: media controller created [ 1153.107533][ T8660] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1153.763339][ T8660] zl10353_read_register: readreg error (reg=127, ret==0) [ 1153.763386][ T8660] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1153.763396][ T8660] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1153.783828][ T8660] usb 3-1: USB disconnect, device number 65 [ 1154.152969][ T8660] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1155.140534][T17619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2818'. [ 1155.141102][T17619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2818'. [ 1156.292489][T17625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1157.130133][T17632] binder: 17631:17632 ioctl 4018620d 0 returned -22 [ 1157.185196][T17632] binder: 17631:17632 ioctl c0306201 200000000240 returned -11 [ 1159.316420][T17644] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1159.839612][T15109] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1159.930572][ T31] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1159.989555][T15109] usb 1-1: Using ep0 maxpacket: 8 [ 1159.992083][T15109] usb 1-1: config 0 has no interfaces? [ 1160.011298][T15109] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1160.011329][T15109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.011351][T15109] usb 1-1: Product: syz [ 1160.011367][T15109] usb 1-1: Manufacturer: syz [ 1160.011382][T15109] usb 1-1: SerialNumber: syz [ 1160.046154][T15109] usb 1-1: config 0 descriptor?? [ 1160.089600][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 1160.093686][ T31] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1160.093706][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.093720][ T31] usb 2-1: Product: syz [ 1160.093730][ T31] usb 2-1: Manufacturer: syz [ 1160.093740][ T31] usb 2-1: SerialNumber: syz [ 1160.097795][ T31] usb 2-1: config 0 descriptor?? [ 1160.375431][ T1230] usb 1-1: USB disconnect, device number 54 [ 1160.465910][T17659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2831'. [ 1160.470278][T17659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2831'. [ 1160.515549][ T31] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1160.528837][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1160.530011][ T31] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1160.530076][ T31] usb 2-1: media controller created [ 1160.705304][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1161.270009][ T31] zl10353_read_register: readreg error (reg=127, ret==0) [ 1161.270073][ T31] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1161.270088][ T31] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1161.279684][ T31] usb 2-1: USB disconnect, device number 70 [ 1161.395448][T17145] udevd[17145]: setting mode of /dev/dvb/adapter1/dvr0 to 020660 failed: No such file or directory [ 1161.395657][T17145] udevd[17145]: setting owner of /dev/dvb/adapter1/dvr0 to uid=0, gid=28 failed: No such file or directory [ 1161.491882][ T31] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1161.665936][T17668] binder: 17667:17668 ioctl 4018620d 0 returned -22 [ 1161.698523][T17668] binder: 17667:17668 ioctl c0306201 200000000240 returned -11 [ 1162.717490][T17687] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1162.752263][T17687] netlink: 'syz.4.2841': attribute type 10 has an invalid length. [ 1163.471231][T17683] delete_channel: no stack [ 1165.393616][T17703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2845'. [ 1165.394192][T17703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2845'. [ 1165.589951][ T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1165.660005][T17706] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2847'. [ 1165.762619][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.762690][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1165.762717][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.776274][ T9] usb 3-1: config 0 descriptor?? [ 1165.811101][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1166.247965][T17723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2850'. [ 1166.260062][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1166.261774][T17715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2850'. [ 1166.406021][T17718] netlink: 'syz.3.2848': attribute type 12 has an invalid length. [ 1166.406046][T17718] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2848'. [ 1166.462795][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1166.467447][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 1166.479429][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 1166.489837][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 1166.491234][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 1166.491817][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 1166.492743][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 1166.493210][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 1166.493962][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 1166.494737][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 1166.495601][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 1166.496169][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 1166.496924][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 1166.497353][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1166.950681][ T9] pwc: Registered as video103. [ 1166.964703][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input59 [ 1167.015550][ T9] usb 3-1: USB disconnect, device number 66 [ 1168.061699][T17731] blktrace: Concurrent blktraces are not allowed on loop7 [ 1168.205511][T17731] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1168.289596][ T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1168.439685][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1168.442270][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.445678][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1168.445705][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.445727][ T9] usb 2-1: Product: syz [ 1168.445741][ T9] usb 2-1: Manufacturer: syz [ 1168.445755][ T9] usb 2-1: SerialNumber: syz [ 1168.503094][ T9] usb 2-1: config 0 descriptor?? [ 1169.499770][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1169.651184][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1169.655370][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1169.655392][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1169.657425][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1169.657444][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.657458][ T9] usb 4-1: Product: syz [ 1169.657468][ T9] usb 4-1: Manufacturer: syz [ 1169.657477][ T9] usb 4-1: SerialNumber: syz [ 1169.669135][ T9] usb 4-1: config 0 descriptor?? [ 1169.758456][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1169.758480][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1169.828046][T17748] input: syz1 as /devices/virtual/input/input61 [ 1170.439069][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1170.448393][ T9] em28xx 4-1:0.0: Config register raw data: 0x00 [ 1171.187798][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1171.222623][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1171.226607][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1171.228193][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1171.238170][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1171.296073][ T10] usb 2-1: USB disconnect, device number 71 [ 1171.689555][ T10] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1171.844427][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1171.844452][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.844467][ T10] usb 2-1: Product: syz [ 1171.844477][ T10] usb 2-1: Manufacturer: syz [ 1171.844487][ T10] usb 2-1: SerialNumber: syz [ 1172.168053][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1172.168111][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1172.168130][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1172.211684][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1172.277762][ T58] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.324178][ T10] usb 2-1: USB disconnect, device number 72 [ 1172.376738][ T8660] usb 4-1: USB disconnect, device number 50 [ 1172.433273][ T8660] em28xx 4-1:0.0: Disconnecting em28xx [ 1172.456496][ T8660] em28xx 4-1:0.0: Freeing device [ 1172.822322][ T58] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.858841][T17786] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2869'. [ 1173.349942][ T5803] Bluetooth: hci2: command tx timeout [ 1173.427145][ T58] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.212249][ T58] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.429958][ T5803] Bluetooth: hci2: command tx timeout [ 1176.124435][T17810] netlink: 'syz.3.2874': attribute type 12 has an invalid length. [ 1176.124452][T17810] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2874'. [ 1176.591574][T17758] chnl_net:caif_netlink_parms(): no params data found [ 1176.729848][ T58] bridge_slave_1: left allmulticast mode [ 1176.730056][ T58] bridge_slave_1: left promiscuous mode [ 1176.733790][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.890737][ T58] bridge_slave_0: left allmulticast mode [ 1176.890760][ T58] bridge_slave_0: left promiscuous mode [ 1176.999526][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.282936][T17827] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2880'. [ 1177.369628][ T993] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1177.511148][ T5803] Bluetooth: hci2: command tx timeout [ 1177.544173][ T993] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1177.544217][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.544238][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.544254][ T993] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1177.544285][ T993] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1177.544303][ T993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.549144][ T993] usb 2-1: config 0 descriptor?? [ 1178.075581][ T993] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 1178.115022][ T993] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1178.339286][T17819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.362957][T17819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.418782][ T10] usb 2-1: USB disconnect, device number 73 [ 1179.179891][T17844] netlink: 'syz.3.2884': attribute type 1 has an invalid length. [ 1179.601634][ T5803] Bluetooth: hci2: command tx timeout [ 1180.080470][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.176482][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.237460][ T58] bond0 (unregistering): (slave team0): Releasing backup interface [ 1180.366934][ T58] bond0 (unregistering): Released all slaves [ 1180.944015][T17844] bond1: entered promiscuous mode [ 1180.944847][T17844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1181.024774][T17845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1181.028096][T17845] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 1181.028120][T17845] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1181.063613][T17845] bond1: (slave gre1): making interface the new active one [ 1181.063637][T17845] gre1: entered promiscuous mode [ 1181.066713][T17845] bond1: (slave gre1): Enslaving as an active interface with an up link [ 1181.121289][ T58] tipc: Disabling bearer [ 1181.124682][ T58] tipc: Left network mode [ 1182.474248][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.474316][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.686539][ T9] IPVS: starting estimator thread 0... [ 1182.811076][T17879] IPVS: using max 11 ests per chain, 26400 per kthread [ 1183.069800][T17758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.070103][T17758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.070359][T17758] bridge_slave_0: entered allmulticast mode [ 1183.095516][T17758] bridge_slave_0: entered promiscuous mode [ 1183.101014][T17758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.101173][T17758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.101384][T17758] bridge_slave_1: entered allmulticast mode [ 1183.105229][T17758] bridge_slave_1: entered promiscuous mode [ 1183.311762][ T8660] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1183.482067][ T8660] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1183.482130][ T8660] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.482163][ T8660] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.482185][ T8660] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1183.482224][ T8660] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1183.482264][ T8660] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.511185][ T8660] usb 3-1: config 0 descriptor?? [ 1183.974801][ T8660] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 1184.057559][ T8660] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1184.226119][T17881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.239785][T17881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.262309][ T8660] usb 3-1: USB disconnect, device number 67 [ 1184.393246][T17895] fido_id[17895]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1185.430730][T17758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1185.438883][T17758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1186.042472][T17912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1186.062486][T17912] netlink: 'syz.2.2896': attribute type 10 has an invalid length. [ 1186.573044][T17758] team0: Port device team_slave_0 added [ 1186.702217][T17907] delete_channel: no stack [ 1186.860859][ T58] hsr_slave_0: left promiscuous mode [ 1186.924483][ T58] hsr_slave_1: left promiscuous mode [ 1186.939818][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1186.940009][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1186.989451][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1186.989481][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1187.279930][ T58] veth1_macvtap: left promiscuous mode [ 1187.285430][ T58] veth0_macvtap: left promiscuous mode [ 1187.319972][ T58] veth1_vlan: left promiscuous mode [ 1187.340472][ T58] veth0_vlan: left promiscuous mode [ 1190.123679][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1190.371183][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1192.419888][T17758] team0: Port device team_slave_1 added [ 1193.138176][T17758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1193.138192][T17758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1193.138216][T17758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1193.194935][T17758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1193.194956][T17758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1193.194991][T17758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1193.199558][ T8660] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1193.354204][ T8660] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1193.354255][ T8660] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1193.354279][ T8660] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1193.354301][ T8660] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1193.354337][ T8660] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1193.354359][ T8660] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.434669][T17958] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1193.614069][T17958] netlink: 'syz.3.2908': attribute type 10 has an invalid length. [ 1193.615196][ T8660] usb 1-1: config 0 descriptor?? [ 1194.078084][ T8660] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd [ 1194.136788][T17956] delete_channel: no stack [ 1194.168190][ T8660] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1194.218117][T17758] hsr_slave_0: entered promiscuous mode [ 1194.240232][T17758] hsr_slave_1: entered promiscuous mode [ 1194.388559][T17950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.388966][T17950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.491622][ T10] usb 1-1: USB disconnect, device number 55 [ 1195.719698][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1195.870312][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1195.877363][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1195.893981][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1195.894013][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.894037][ T10] usb 1-1: Product: syz [ 1195.894141][ T10] usb 1-1: Manufacturer: syz [ 1195.894162][ T10] usb 1-1: SerialNumber: syz [ 1195.964589][ T10] usb 1-1: config 0 descriptor?? [ 1197.898278][T18014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1197.926839][T18014] netlink: 'syz.3.2918': attribute type 10 has an invalid length. [ 1198.485020][ T10] usb 1-1: USB disconnect, device number 56 [ 1198.529568][ T5885] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1198.563254][T18009] delete_channel: no stack [ 1198.691535][ T5885] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1198.691606][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1198.691634][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1198.691657][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1198.691698][ T5885] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1198.691721][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.724429][ T5885] usb 2-1: config 0 descriptor?? [ 1199.187651][ T5885] plantronics 0003:047F:FFFF.000D: reserved main item tag 0xd [ 1199.235784][ T5885] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1199.411337][T18023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.411711][T18023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.419756][ T5885] usb 2-1: USB disconnect, device number 74 [ 1199.951044][T18038] fido_id[18038]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1200.435911][T17758] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1200.709350][T17758] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1200.798081][T17758] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1200.865927][T17758] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1202.077410][T17758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1202.105636][T17758] 8021q: adding VLAN 0 to HW filter on device team0 [ 1202.114802][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.114908][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1202.179593][ T31] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1202.228661][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.228802][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1202.349769][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 1202.365741][ T31] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1202.365772][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.365792][ T31] usb 4-1: Product: syz [ 1202.365802][ T31] usb 4-1: Manufacturer: syz [ 1202.365812][ T31] usb 4-1: SerialNumber: syz [ 1202.384854][ T31] usb 4-1: config 0 descriptor?? [ 1202.854535][ T31] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1202.870906][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1202.880424][ T31] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1202.880489][ T31] usb 4-1: media controller created [ 1203.091494][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1203.700680][ T31] zl10353_read_register: readreg error (reg=127, ret==0) [ 1203.700744][ T31] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1203.700757][ T31] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1203.708124][ T31] usb 4-1: USB disconnect, device number 52 [ 1203.874769][T17758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1203.964969][ T31] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1204.710004][ T993] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1204.889819][ T993] usb 4-1: Using ep0 maxpacket: 16 [ 1204.895834][ T993] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1204.899838][ T993] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1204.899875][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.899900][ T993] usb 4-1: Product: syz [ 1204.899919][ T993] usb 4-1: Manufacturer: syz [ 1204.899937][ T993] usb 4-1: SerialNumber: syz [ 1204.906876][ T993] usb 4-1: config 0 descriptor?? [ 1205.149572][ T44] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1205.304376][ T44] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1205.304453][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1205.304482][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1205.304507][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1205.304573][ T44] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1205.304600][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.391322][ T44] usb 2-1: config 0 descriptor?? [ 1205.577507][T17758] veth0_vlan: entered promiscuous mode [ 1205.803450][ T44] plantronics 0003:047F:FFFF.000E: reserved main item tag 0xd [ 1205.837169][ T44] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1205.943144][T17758] veth1_vlan: entered promiscuous mode [ 1206.060902][T18110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.061247][T18110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.068138][ T993] usb 2-1: USB disconnect, device number 75 [ 1206.245279][T17758] veth0_macvtap: entered promiscuous mode [ 1206.251981][T18128] fido_id[18128]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1206.295020][T17758] veth1_macvtap: entered promiscuous mode [ 1206.329970][T17758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1206.351057][T17758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1206.381102][ T3534] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.381279][ T3534] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.381423][ T3534] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.381561][ T3534] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.991384][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.991401][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.230395][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.230419][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.759162][ T993] usb 4-1: USB disconnect, device number 53 [ 1208.146755][T18159] netlink: 'syz.4.2859': attribute type 10 has an invalid length. [ 1208.318332][T18159] 8021q: adding VLAN 0 to HW filter on device team0 [ 1208.325004][T18159] bond0: (slave team0): Enslaving as an active interface with an up link [ 1208.335566][T18157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1208.680694][T18153] delete_channel: no stack [ 1209.646520][ T993] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1209.809825][ T993] usb 3-1: Using ep0 maxpacket: 16 [ 1209.814540][ T993] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1209.814559][ T993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.814572][ T993] usb 3-1: Product: syz [ 1209.814582][ T993] usb 3-1: Manufacturer: syz [ 1209.814592][ T993] usb 3-1: SerialNumber: syz [ 1209.818901][ T993] usb 3-1: config 0 descriptor?? [ 1210.100104][T18180] input: syz1 as /devices/virtual/input/input67 [ 1210.328920][ T993] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1210.345117][ T993] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1210.348121][ T993] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1210.348163][ T993] usb 3-1: media controller created [ 1210.406280][ T993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1210.674847][ T993] zl10353_read_register: readreg error (reg=127, ret==0) [ 1210.674888][ T993] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1210.674897][ T993] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1210.726754][ T993] usb 3-1: USB disconnect, device number 68 [ 1211.499617][ T9] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1211.530778][ T993] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1211.664637][ T9] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 1211.664702][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.664729][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1211.664752][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1211.664926][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1211.664951][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.684327][ T9] usb 5-1: config 0 descriptor?? [ 1212.169534][ T9] plantronics 0003:047F:FFFF.000F: reserved main item tag 0xd [ 1212.329884][ T9] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1212.352362][T18185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.352821][T18185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.383497][ T9] usb 5-1: USB disconnect, device number 81 [ 1212.633338][T18201] fido_id[18201]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1213.109538][ T5885] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1213.279782][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 1213.306952][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1213.312605][ T5885] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1213.312637][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.312660][ T5885] usb 2-1: Product: syz [ 1213.312678][ T5885] usb 2-1: Manufacturer: syz [ 1213.312693][ T5885] usb 2-1: SerialNumber: syz [ 1213.330734][ T5885] usb 2-1: config 0 descriptor?? [ 1213.482926][ T5885] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1216.086578][ T9] usb 2-1: USB disconnect, device number 76 [ 1216.165742][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1216.179845][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1216.183461][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1216.184499][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1216.185167][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1216.849589][ T9] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1216.930590][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2957'. [ 1216.963387][T18236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2957'. [ 1217.031678][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1217.053127][ T9] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1217.053161][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.053185][ T9] usb 3-1: Product: syz [ 1217.053201][ T9] usb 3-1: Manufacturer: syz [ 1217.053217][ T9] usb 3-1: SerialNumber: syz [ 1217.068537][ T9] usb 3-1: config 0 descriptor?? [ 1217.493956][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1217.499313][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1217.502426][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1217.502486][ T9] usb 3-1: media controller created [ 1217.756904][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1218.250008][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 1218.250072][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1218.250088][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1218.257267][ T9] usb 3-1: USB disconnect, device number 69 [ 1218.389672][ T61] Bluetooth: hci5: command tx timeout [ 1218.484580][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1218.495466][ T3589] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.025401][ T3589] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.409591][ T1230] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1219.633114][ T1230] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1219.633157][ T1230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1219.633175][ T1230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1219.633190][ T1230] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1219.633218][ T1230] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1219.633253][ T1230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.687920][ T1230] usb 3-1: config 0 descriptor?? [ 1219.838941][ T3589] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.196435][ T1230] plantronics 0003:047F:FFFF.0010: reserved main item tag 0xd [ 1220.499605][ T61] Bluetooth: hci5: command tx timeout [ 1220.630172][T18255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.630813][T18255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1220.693755][ T1230] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1220.736392][ T1230] usb 3-1: USB disconnect, device number 70 [ 1221.042203][ T3589] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.109952][T18262] fido_id[18262]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1222.599565][ T1230] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1222.603764][ T8660] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1222.615510][ T61] Bluetooth: hci5: command tx timeout [ 1222.749521][ T1230] usb 1-1: device descriptor read/64, error -71 [ 1222.772482][ T8660] usb 3-1: config 0 has no interfaces? [ 1222.779693][ T8660] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1222.779725][ T8660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.779748][ T8660] usb 3-1: Product: syz [ 1222.779767][ T8660] usb 3-1: Manufacturer: syz [ 1222.779785][ T8660] usb 3-1: SerialNumber: syz [ 1222.852844][ T8660] usb 3-1: config 0 descriptor?? [ 1223.003698][ T1230] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1223.139685][ T1230] usb 1-1: device descriptor read/64, error -71 [ 1223.264349][ T1230] usb usb1-port1: attempt power cycle [ 1223.749783][ T1230] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1223.770564][ T1230] usb 1-1: device descriptor read/8, error -71 [ 1223.868017][T18222] chnl_net:caif_netlink_parms(): no params data found [ 1223.992883][ T3589] bridge_slave_1: left allmulticast mode [ 1223.992907][ T3589] bridge_slave_1: left promiscuous mode [ 1223.993137][ T3589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.009533][ T1230] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1224.030806][ T1230] usb 1-1: device descriptor read/8, error -71 [ 1224.096094][ T3589] bridge_slave_0: left allmulticast mode [ 1224.096125][ T3589] bridge_slave_0: left promiscuous mode [ 1224.096395][ T3589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.148149][ T1230] usb usb1-port1: unable to enumerate USB device [ 1224.566061][T18294] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1224.643912][ T61] Bluetooth: hci5: command tx timeout [ 1226.631339][T18315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2970'. [ 1226.631965][T18315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2970'. [ 1226.677564][T18310] loop5: detected capacity change from 0 to 7 [ 1226.853030][T18310] loop5: [POWERTEC] p1 p2 p3 [ 1226.853386][T18310] loop5: p1 size 4294967295 extends beyond EOD, truncated [ 1226.859227][T18310] loop5: p2 start 8192 is beyond EOD, truncated [ 1226.859251][T18310] loop5: p3 size 1986356271 extends beyond EOD, truncated [ 1227.431043][ T3589] bond1 (unregistering): (slave gre1): Releasing backup interface [ 1227.431065][ T3589] gre1 (unregistering): left promiscuous mode [ 1228.650047][ T3589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1228.720882][ T3589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1228.780212][ T3589] bond0 (unregistering): (slave team0): Releasing backup interface [ 1228.800542][ T3589] bond0 (unregistering): Released all slaves [ 1229.442113][ T3589] bond1 (unregistering): Released all slaves [ 1229.800471][ T3589] tipc: Disabling bearer [ 1229.803542][ T3589] tipc: Left network mode [ 1230.762438][T18222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.762559][T18222] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.762851][T18222] bridge_slave_0: entered allmulticast mode [ 1230.765498][T18222] bridge_slave_0: entered promiscuous mode [ 1231.071771][T18222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.071922][T18222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.072146][T18222] bridge_slave_1: entered allmulticast mode [ 1231.075903][T18222] bridge_slave_1: entered promiscuous mode [ 1231.737547][ T10] usb 3-1: USB disconnect, device number 71 [ 1231.767607][T18222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.877162][T18222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.969494][ T993] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1232.132145][ T993] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.132206][ T993] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1232.132232][ T993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.215340][ T993] usb 2-1: config 0 descriptor?? [ 1232.250202][ T993] pwc: Askey VC010 type 2 USB webcam detected. [ 1232.663335][ T993] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1232.782098][T18222] team0: Port device team_slave_0 added [ 1232.817822][T18222] team0: Port device team_slave_1 added [ 1232.891563][ T993] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1232.893159][ T993] pwc: recv_control_msg error -32 req 04 val 1000 [ 1232.901628][ T993] pwc: recv_control_msg error -32 req 04 val 1300 [ 1232.902967][ T993] pwc: recv_control_msg error -32 req 04 val 1400 [ 1232.909554][ T993] pwc: recv_control_msg error -32 req 02 val 2000 [ 1232.914787][ T993] pwc: recv_control_msg error -32 req 02 val 2100 [ 1233.120363][ T993] pwc: recv_control_msg error -71 req 02 val 2500 [ 1233.120870][ T993] pwc: recv_control_msg error -71 req 02 val 2400 [ 1233.121368][ T993] pwc: recv_control_msg error -71 req 02 val 2600 [ 1233.124732][ T993] pwc: recv_control_msg error -71 req 02 val 2900 [ 1233.125279][ T993] pwc: recv_control_msg error -71 req 02 val 2800 [ 1233.125929][ T993] pwc: recv_control_msg error -71 req 04 val 1100 [ 1233.126269][ T993] pwc: recv_control_msg error -71 req 04 val 1200 [ 1233.129785][ T993] pwc: Registered as video103. [ 1233.210835][ T993] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input70 [ 1233.252958][ T993] usb 2-1: USB disconnect, device number 77 [ 1233.880633][T18362] syzkaller0: entered promiscuous mode [ 1233.880654][T18362] syzkaller0: entered allmulticast mode [ 1233.884421][T18222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1233.884432][T18222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1233.884454][T18222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1234.969678][ T993] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1235.119536][ T993] usb 2-1: device descriptor read/64, error -71 [ 1235.189835][ T3589] hsr_slave_0: left promiscuous mode [ 1235.231301][ T3589] hsr_slave_1: left promiscuous mode [ 1235.232034][ T3589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1235.232052][ T3589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1235.344183][ T3589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1235.344206][ T3589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1235.377156][ T993] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1235.518990][ T3589] veth1_macvtap: left promiscuous mode [ 1235.519169][ T3589] veth0_macvtap: left promiscuous mode [ 1235.529597][ T993] usb 2-1: device descriptor read/64, error -71 [ 1235.556780][ T3589] veth1_vlan: left promiscuous mode [ 1235.567678][ T3589] veth0_vlan: left promiscuous mode [ 1235.672349][ T993] usb usb2-port1: attempt power cycle [ 1236.079507][ T993] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1236.110671][ T993] usb 2-1: device descriptor read/8, error -71 [ 1236.359532][ T993] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1236.396123][ T993] usb 2-1: device descriptor read/8, error -71 [ 1236.501417][ T993] usb usb2-port1: unable to enumerate USB device [ 1239.392266][ T3589] team0 (unregistering): Port device team_slave_1 removed [ 1239.739806][ T3589] team0 (unregistering): Port device team_slave_0 removed [ 1240.269675][ T44] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1240.435156][ T44] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1240.435186][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.435200][ T44] usb 1-1: Product: syz [ 1240.435209][ T44] usb 1-1: Manufacturer: syz [ 1240.435219][ T44] usb 1-1: SerialNumber: syz [ 1240.781577][ T44] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1240.781639][ T44] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1240.781661][ T44] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1240.812014][ T44] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1240.853532][ T44] usb 1-1: USB disconnect, device number 61 [ 1241.639613][ T5885] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1241.802364][ T5885] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1241.802424][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.802451][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.802474][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1241.802516][ T5885] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1241.802539][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.872109][ T5885] usb 1-1: config 0 descriptor?? [ 1242.235249][T18222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1242.235267][T18222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.235297][T18222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1242.332532][ T5885] plantronics 0003:047F:FFFF.0011: reserved main item tag 0xd [ 1242.363982][ T5885] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1242.631399][T18406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.631781][T18406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.667765][ T5885] usb 1-1: USB disconnect, device number 62 [ 1243.180271][T18222] hsr_slave_0: entered promiscuous mode [ 1243.181970][T18222] hsr_slave_1: entered promiscuous mode [ 1243.182777][T18222] debugfs: 'hsr0' already exists in 'hsr' [ 1243.182796][T18222] Cannot create hsr debugfs directory [ 1243.923039][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.923091][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1246.989528][ T8660] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1247.204300][ T8660] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1247.204344][ T8660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1247.204362][ T8660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1247.204377][ T8660] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1247.204412][ T8660] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1247.204427][ T8660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.208620][ T8660] usb 2-1: config 0 descriptor?? [ 1247.630744][ T8660] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd [ 1247.663930][ T8660] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1247.911594][T18470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1247.912461][T18470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1247.940797][ T8660] usb 2-1: USB disconnect, device number 82 [ 1248.104018][T18486] fido_id[18486]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1248.821318][T18222] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1248.893840][T18222] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1249.005439][T18222] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1249.358847][T18222] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1250.792881][T18222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1250.972878][T18222] 8021q: adding VLAN 0 to HW filter on device team0 [ 1250.989233][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.010257][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1251.030648][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.030798][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1251.796717][T18538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3009'. [ 1251.797226][T18538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3009'. [ 1252.869606][ T5885] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1252.945429][T18222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1253.000689][ T5885] usb 2-1: device descriptor read/64, error -71 [ 1253.239540][ T5885] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1253.274965][T18222] veth0_vlan: entered promiscuous mode [ 1253.340246][T18222] veth1_vlan: entered promiscuous mode [ 1253.379502][ T5885] usb 2-1: device descriptor read/64, error -71 [ 1253.490331][ T5885] usb usb2-port1: attempt power cycle [ 1253.532983][T18222] veth0_macvtap: entered promiscuous mode [ 1253.585066][T18222] veth1_macvtap: entered promiscuous mode [ 1253.653417][T18222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1253.692067][T18222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1253.862362][ T3534] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.862550][ T3534] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.862788][ T3534] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.863186][ T3534] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.869981][ T5885] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1253.890579][ T5885] usb 2-1: device descriptor read/8, error -71 [ 1254.079541][ T8660] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1254.150920][ T5885] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1254.181870][ T5885] usb 2-1: device descriptor read/8, error -71 [ 1254.261816][ T8660] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 1254.261872][ T8660] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.261898][ T8660] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1254.261921][ T8660] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1254.261964][ T8660] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1254.261988][ T8660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.305554][ T5885] usb usb2-port1: unable to enumerate USB device [ 1254.341921][ T8660] usb 5-1: config 0 descriptor?? [ 1254.363605][ T44] ------------[ cut here ]------------ [ 1254.363617][ T44] kernel BUG at net/ipv6/route.c:1473! [ 1254.363660][ T44] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1254.363690][ T44] CPU: 1 UID: 0 PID: 44 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1254.363711][ T44] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1254.363723][ T44] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 1254.363757][ T44] RIP: 0010:ip6_pol_route+0x117d/0x1180 [ 1254.363798][ T44] Code: ab f8 e9 f4 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 df e8 5e 13 ab f8 e9 f6 fa ff ff e8 e4 5a 49 f8 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 1254.363815][ T44] RSP: 0018:ffffc90000b570c0 EFLAGS: 00010293 [ 1254.363831][ T44] RAX: ffffffff8975653c RBX: ffff888126ef9000 RCX: ffff88801e6c8000 [ 1254.363845][ T44] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1254.363856][ T44] RBP: ffffc90000b571d0 R08: ffffe8ffff518897 R09: 1ffffd1fffea3112 [ 1254.363871][ T44] R10: dffffc0000000000 R11: fffff91fffea3113 R12: ffff888026ade8c0 [ 1254.363886][ T44] R13: ffffffff89755522 R14: dffffc0000000000 R15: 0000607ed861f890 [ 1254.363900][ T44] FS: 0000000000000000(0000) GS:ffff888126ef9000(0000) knlGS:0000000000000000 [ 1254.363915][ T44] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1254.363928][ T44] CR2: 0000200000180030 CR3: 000000003572e000 CR4: 00000000003526f0 [ 1254.363945][ T44] Call Trace: [ 1254.363952][ T44] [ 1254.363960][ T44] ? ip6_pol_route+0x162/0x1180 [ 1254.363991][ T44] ? __pfx_ip6_pol_route+0x10/0x10 [ 1254.364028][ T44] fib6_rule_lookup+0x1fc/0x6f0 [ 1254.364117][ T44] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1254.364135][ T44] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1254.364155][ T44] ? ip6_route_output_flags+0x2e/0x5d0 [ 1254.364179][ T44] ip6_route_output_flags+0x364/0x5d0 [ 1254.364196][ T44] ? ip6_route_output_flags+0x2e/0x5d0 [ 1254.364215][ T44] ip6_dst_lookup_tail+0x299/0x1510 [ 1254.364239][ T44] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 1254.364261][ T44] ? __ipv6_chk_addr_and_flags+0x187/0x7f0 [ 1254.364290][ T44] ? __ipv6_chk_addr_and_flags+0x68f/0x7f0 [ 1254.364316][ T44] ? __ipv6_chk_addr_and_flags+0x187/0x7f0 [ 1254.364346][ T44] ip6_dst_lookup_flow+0x47/0xe0 [ 1254.364384][ T44] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 1254.364404][ T44] send6+0x4ce/0x8d0 [ 1254.364426][ T44] ? rt_read_lock+0x203/0x490 [ 1254.364482][ T44] ? send6+0x220/0x8d0 [ 1254.364508][ T44] ? __pfx_send6+0x10/0x10 [ 1254.364529][ T44] ? rcu_is_watching+0x15/0xb0 [ 1254.364552][ T44] ? wg_socket_send_buffer_to_peer+0x13b/0x1c0 [ 1254.364579][ T44] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 1254.364604][ T44] wg_socket_send_skb_to_peer+0x128/0x200 [ 1254.364631][ T44] wg_packet_send_handshake_response+0x195/0x2d0 [ 1254.364657][ T44] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 1254.364681][ T44] ? wg_socket_set_peer_endpoint_from_skb+0xc8/0x120 [ 1254.364715][ T44] ? rt_spin_unlock+0x161/0x200 [ 1254.364740][ T44] wg_packet_handshake_receive_worker+0x6ac/0xf90 [ 1254.364768][ T44] ? wg_packet_handshake_receive_worker+0x152/0xf90 [ 1254.364805][ T44] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 1254.364842][ T44] ? register_lock_class+0x51/0x320 [ 1254.364871][ T44] ? __lock_acquire+0xab9/0xd20 [ 1254.364901][ T44] ? process_scheduled_works+0x9ef/0x17b0 [ 1254.364928][ T44] ? _raw_spin_unlock_irq+0x23/0x50 [ 1254.364954][ T44] ? process_scheduled_works+0x9ef/0x17b0 [ 1254.364975][ T44] ? process_scheduled_works+0x9ef/0x17b0 [ 1254.364999][ T44] process_scheduled_works+0xae1/0x17b0 [ 1254.365033][ T44] ? __pfx_process_scheduled_works+0x10/0x10 [ 1254.365063][ T44] worker_thread+0x8a0/0xda0 [ 1254.365098][ T44] kthread+0x711/0x8a0 [ 1254.365128][ T44] ? __pfx_worker_thread+0x10/0x10 [ 1254.365151][ T44] ? __pfx_kthread+0x10/0x10 [ 1254.365178][ T44] ? rt_spin_unlock+0x150/0x200 [ 1254.365201][ T44] ? rt_spin_unlock+0x161/0x200 [ 1254.365222][ T44] ? __pfx_kthread+0x10/0x10 [ 1254.365251][ T44] ret_from_fork+0x4bc/0x870 [ 1254.365275][ T44] ? __pfx_ret_from_fork+0x10/0x10 [ 1254.365301][ T44] ? __switch_to_asm+0x39/0x70 [ 1254.365320][ T44] ? __switch_to_asm+0x33/0x70 [ 1254.365339][ T44] ? __pfx_kthread+0x10/0x10 [ 1254.365368][ T44] ret_from_fork_asm+0x1a/0x30 [ 1254.365395][ T44] [ 1254.365407][ T44] Modules linked in: [ 1254.365425][ T44] ---[ end trace 0000000000000000 ]--- [ 1254.365435][ T44] RIP: 0010:ip6_pol_route+0x117d/0x1180 [ 1254.365467][ T44] Code: ab f8 e9 f4 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 df e8 5e 13 ab f8 e9 f6 fa ff ff e8 e4 5a 49 f8 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 1254.365485][ T44] RSP: 0018:ffffc90000b570c0 EFLAGS: 00010293 [ 1254.365501][ T44] RAX: ffffffff8975653c RBX: ffff888126ef9000 RCX: ffff88801e6c8000 [ 1254.365517][ T44] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1254.365528][ T44] RBP: ffffc90000b571d0 R08: ffffe8ffff518897 R09: 1ffffd1fffea3112 [ 1254.365544][ T44] R10: dffffc0000000000 R11: fffff91fffea3113 R12: ffff888026ade8c0 [ 1254.365558][ T44] R13: ffffffff89755522 R14: dffffc0000000000 R15: 0000607ed861f890 [ 1254.365573][ T44] FS: 0000000000000000(0000) GS:ffff888126ef9000(0000) knlGS:0000000000000000 [ 1254.365589][ T44] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1254.365603][ T44] CR2: 0000200000180030 CR3: 000000003572e000 CR4: 00000000003526f0 [ 1254.365626][ T44] Kernel panic - not syncing: Fatal exception in interrupt [ 1254.366007][ T44] Kernel Offset: disabled