last executing test programs: 4.290589413s ago: executing program 2 (id=3335): openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0, 0x61}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) 4.227944515s ago: executing program 2 (id=3336): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c42) readv(r0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2) 4.149506668s ago: executing program 2 (id=3338): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "43f79419"}]}}, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) getpeername$packet(r1, &(0x7f0000001980), 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000000140)={0x3, 0x100, 0x641}) 3.686481083s ago: executing program 1 (id=3341): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x0, 0xff, 0x0, 0xa, "aac7000000000840"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8004) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000340), 0x0, 0x0, 0x3) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xd, 0x3}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@ipv6_getrule={0x1c, 0x22, 0x2, 0x70bd28, 0x25dfdbfe, {0xa, 0x14, 0x20, 0x0, 0x68, 0x0, 0x0, 0x1, 0x4}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008d0}, 0xd801) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r4, &(0x7f0000000040)='\x00', 0x1, 0x1300) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) fchdir(0xffffffffffffffff) close(0xffffffffffffffff) r7 = syz_open_procfs(0x0, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000000)=0x97, 0x4) read$FUSE(r7, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 2.779599731s ago: executing program 1 (id=3346): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xf, 0x5c, 0x8, 0x0, 0x4, 0x9, 0x1, 0xf8, 0x7, 0x2, 0x8, 0x9d, 0x0, 0xffffff75, 0x1000, 0x9, 0x5, 0xb, 0xc9, '\x00', 0xe6, 0xff80040000000000}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x6, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x6, 0x3, 0x2], 0x10000, 0x202}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 2.52398988s ago: executing program 1 (id=3349): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000f00)=0x7) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000880)={0xc, 0x8, 0x144, {0x0}}, 0x10) r1 = syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x2100) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) r6 = syz_open_dev$video4linux(&(0x7f0000000480), 0x100000000, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205647, &(0x7f00000001c0)={0x9a0000, 0x0, 0x7a, 0xffffffffffffffff, 0x0, 0x0}) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x11a, 0x4, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000700)={&(0x7f0000006000)}, 0x1) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000001c0)={0x1000, 0x3}) 2.151095072s ago: executing program 3 (id=3352): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xf, 0x5c, 0x8, 0x0, 0x4, 0x9, 0x1, 0xf8, 0x7, 0x2, 0x8, 0x9d, 0x0, 0xffffff75, 0x1000, 0x9, 0x5, 0xb, 0xc9, '\x00', 0xe6, 0xff80040000000000}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x6, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x6, 0x3, 0x2], 0x10000, 0x202}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 2.014198496s ago: executing program 3 (id=3353): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0xfffd, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4080010) syz_emit_ethernet(0x46, &(0x7f00000009c0)=ANY=[@ANYBLOB="0180c20000000180c200000286dd6000000000103afffe800000000000000000000000080100ff020000000000000000000000000001"], 0x0) 1.760080154s ago: executing program 3 (id=3356): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101a01) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$cgroup_ro(r0, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) 1.560086351s ago: executing program 2 (id=3357): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xf, 0x5c, 0x8, 0x0, 0x4, 0x9, 0x1, 0xf8, 0x7, 0x2, 0x8, 0x9d, 0x0, 0xffffff75, 0x1000, 0x9, 0x5, 0xb, 0xc9, '\x00', 0xe6, 0xff80040000000000}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x6, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x6, 0x3, 0x2], 0x10000, 0x202}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 1.509393233s ago: executing program 3 (id=3358): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000104", @ANYBLOB='!'], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) 1.110886425s ago: executing program 2 (id=3359): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 870.914733ms ago: executing program 1 (id=3361): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xf, 0x5c, 0x8, 0x0, 0x4, 0x9, 0x1, 0xf8, 0x7, 0x2, 0x8, 0x9d, 0x0, 0xffffff75, 0x1000, 0x9, 0x5, 0xb, 0xc9, '\x00', 0xe6, 0xff80040000000000}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x6, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x6, 0x3, 0x2], 0x10000, 0x202}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 828.968684ms ago: executing program 3 (id=3362): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x884) 697.218308ms ago: executing program 2 (id=3363): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 562.388593ms ago: executing program 1 (id=3365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x6, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 548.759243ms ago: executing program 0 (id=3366): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101a01) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$cgroup_ro(r0, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) 476.316835ms ago: executing program 0 (id=3367): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x73622a85, 0x1100, 0x3}, @flat=@binder={0x66646185}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 413.811217ms ago: executing program 1 (id=3368): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x0, 0xff, 0x0, 0xa, "aac7000000000840"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8004) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000340), 0x0, 0x0, 0x3) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xd, 0x3}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@ipv6_getrule={0x1c, 0x22, 0x2, 0x70bd28, 0x25dfdbfe, {0xa, 0x14, 0x20, 0x0, 0x68, 0x0, 0x0, 0x1, 0x4}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008d0}, 0xd801) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r4, &(0x7f0000000040)='\x00', 0x1, 0x1300) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) fchdir(0xffffffffffffffff) close(0xffffffffffffffff) r7 = syz_open_procfs(0x0, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000000)=0x97, 0x4) read$FUSE(r7, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 371.087118ms ago: executing program 0 (id=3369): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0xa, 0x40010, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x7ff, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) 302.169101ms ago: executing program 0 (id=3370): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x1, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x696, 0x9, 0x1, 0xc}, 0xb, 0x40000003, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 137.506766ms ago: executing program 3 (id=3371): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 70.382778ms ago: executing program 0 (id=3372): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc", 0x29}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x5, 0x0, 0x3}, {}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0xfffffffffffffea7}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 0s ago: executing program 0 (id=3373): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xf, 0x5c, 0x8, 0x0, 0x4, 0x9, 0x1, 0xf8, 0x7, 0x2, 0x8, 0x9d, 0x0, 0xffffff75, 0x1000, 0x9, 0x5, 0xb, 0xc9, '\x00', 0xe6, 0xff80040000000000}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x6, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x6, 0x3, 0x2], 0x10000, 0x202}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) kernel console output (not intermixed with test programs): 505.396869][ T6431] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 505.408415][ T6431] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 505.422285][ T6431] usb 1-1: config 168 interface 0 has no altsetting 0 [ 505.431975][ T6431] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 505.439584][ T6431] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 505.458363][ T6431] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 505.470345][ T6431] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 505.482564][ T6431] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 505.507089][ T6431] usb 1-1: config 168 interface 0 has no altsetting 0 [ 505.518337][ T6431] usb 1-1: string descriptor 0 read error: -22 [ 505.529571][ T6431] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 505.538682][ T6431] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.576641][ T6431] adutux 1-1:168.0: interrupt endpoints not found [ 505.864519][ T6425] usb 1-1: USB disconnect, device number 65 [ 505.887504][ T12] team0 (unregistering): Port device team_slave_1 removed [ 505.942244][ T12] team0 (unregistering): Port device team_slave_0 removed [ 505.990419][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.040252][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.125433][T13538] xt_CT: You must specify a L4 protocol and not use inversions on it [ 506.405118][ T6434] usb 4-1: USB disconnect, device number 40 [ 506.525962][ T12] bond0 (unregistering): Released all slaves [ 506.683512][ T6183] lo speed is unknown, defaulting to 1000 [ 506.693700][T13529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2483'. [ 507.078493][T13549] syzkaller0: entered promiscuous mode [ 507.084106][T13549] syzkaller0: entered allmulticast mode [ 507.089867][ T5789] Bluetooth: hci2: command tx timeout [ 507.715960][ T6426] usb 3-1: USB disconnect, device number 37 [ 510.358887][T13585] lo speed is unknown, defaulting to 1000 [ 510.391852][T13585] lo speed is unknown, defaulting to 1000 [ 510.398167][T13585] lo speed is unknown, defaulting to 1000 [ 510.436687][T13585] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 510.647471][T13585] lo speed is unknown, defaulting to 1000 [ 510.664966][T13585] lo speed is unknown, defaulting to 1000 [ 510.687729][T13585] lo speed is unknown, defaulting to 1000 [ 510.711627][T13585] lo speed is unknown, defaulting to 1000 [ 510.742676][T13585] lo speed is unknown, defaulting to 1000 [ 511.032414][T13420] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 511.056902][T13420] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 511.075966][T13420] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 511.109012][T13420] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 511.219470][ T5782] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 511.386038][T13420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.435362][ T5782] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 511.455296][T13420] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.468608][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.488966][ T5782] usb 3-1: Product: syz [ 511.509466][ T5782] usb 3-1: Manufacturer: syz [ 511.523740][ T5782] usb 3-1: SerialNumber: syz [ 511.534130][T13492] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.541358][T13492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.566967][T13492] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.574292][T13492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.791522][ T5782] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 511.834628][ T5782] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 511.857591][T13620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2493'. [ 512.269767][ T5782] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 512.284205][T13420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.314773][ T5782] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 512.347099][ T5782] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 512.398688][ T5782] lan78xx: probe of 3-1:1.0 failed with error -32 [ 512.454344][T13420] veth0_vlan: entered promiscuous mode [ 512.505087][T13420] veth1_vlan: entered promiscuous mode [ 512.603417][T13420] veth0_macvtap: entered promiscuous mode [ 512.630766][T13420] veth1_macvtap: entered promiscuous mode [ 512.693016][T13420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.714105][T13420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.737989][T13420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.756155][T13420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.767933][T13420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.784719][T13420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.795647][T13420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.812070][T13420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.843190][T13420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.857697][T13420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.879500][T13420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.899489][T13420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.928022][T13420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.946761][T13420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.972082][T13420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.992463][T13420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.019435][T13420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.041712][T13420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.057444][T13642] syzkaller0: entered promiscuous mode [ 513.071184][T13642] syzkaller0: entered allmulticast mode [ 513.097436][T13420] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.112521][T13420] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.127973][T13420] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.138252][T13420] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.202845][T13649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2497'. [ 513.408899][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.441233][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.542741][T13655] siw: device registration error -23 [ 514.275000][T13492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.340595][T13492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.397160][ T6424] usb 3-1: USB disconnect, device number 38 [ 515.724293][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2505'. [ 515.899106][T13710] siw: device registration error -23 [ 516.265087][T13709] syzkaller0: entered promiscuous mode [ 516.355817][T13709] syzkaller0: entered allmulticast mode [ 516.979519][ T6426] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 517.019467][ T6425] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 517.183429][ T6426] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 517.195179][ T6426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.204094][ T6426] usb 4-1: Product: syz [ 517.208439][ T6426] usb 4-1: Manufacturer: syz [ 517.215494][ T6426] usb 4-1: SerialNumber: syz [ 517.239455][ T6425] usb 1-1: Using ep0 maxpacket: 16 [ 517.255527][ T6425] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.285261][ T6425] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 517.306067][ T6425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.327919][ T6425] usb 1-1: Product: syz [ 517.337995][ T6425] usb 1-1: Manufacturer: syz [ 517.358293][ T6425] usb 1-1: SerialNumber: syz [ 517.380091][ T6425] usb 1-1: config 0 descriptor?? [ 517.452002][ T6426] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 517.480927][ T6426] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 517.641766][T13735] syzkaller0: entered promiscuous mode [ 517.659446][T13735] syzkaller0: entered allmulticast mode [ 517.736575][T13735] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 517.932514][ T6426] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 517.979621][ T6426] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 517.999949][ T6426] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 518.011698][ T6426] lan78xx: probe of 4-1:1.0 failed with error -32 [ 518.094624][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2516'. [ 519.226848][T13756] syzkaller0: entered promiscuous mode [ 519.234087][T13756] syzkaller0: entered allmulticast mode [ 519.427030][T13764] netlink: 'syz.1.2521': attribute type 1 has an invalid length. [ 519.708645][ T6434] usb 4-1: USB disconnect, device number 41 [ 519.783324][ T6183] usb 1-1: USB disconnect, device number 66 [ 519.921813][T13774] syzkaller0: entered promiscuous mode [ 519.927334][T13774] syzkaller0: entered allmulticast mode [ 519.969518][T13774] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 520.090619][T13777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2525'. [ 520.355088][T13788] siw: device registration error -23 [ 521.287282][T13783] syzkaller0: entered promiscuous mode [ 521.309194][T13783] syzkaller0: entered allmulticast mode [ 521.439484][ T6183] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 521.655815][ T6183] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 521.674766][ T6183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.683072][ T6183] usb 2-1: Product: syz [ 521.687293][ T6183] usb 2-1: Manufacturer: syz [ 521.701508][ T6183] usb 2-1: SerialNumber: syz [ 521.935681][ T6183] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 521.957002][ T6183] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 522.586911][ T6183] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 522.613405][ T6183] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 522.635335][ T6183] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 522.654074][ T6183] lan78xx: probe of 2-1:1.0 failed with error -32 [ 523.742249][T13801] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2531'. [ 523.751533][T13808] netlink: 'syz.0.2534': attribute type 1 has an invalid length. [ 523.828396][T13809] bond1: (slave bridge1): making interface the new active one [ 523.841481][T13809] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 523.862951][T13810] macvlan2: entered promiscuous mode [ 523.873435][T13810] macvlan2: entered allmulticast mode [ 523.880120][T13810] bond1: entered promiscuous mode [ 523.885659][T13810] bridge1: entered promiscuous mode [ 523.898006][T13810] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 523.906919][T13810] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 523.930233][T13810] bond1: left promiscuous mode [ 523.938285][T13810] bridge1: left promiscuous mode [ 524.226633][ T6426] usb 2-1: USB disconnect, device number 45 [ 524.242659][T13824] syzkaller0: entered promiscuous mode [ 524.257253][T13824] syzkaller0: entered allmulticast mode [ 524.313402][T13824] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 524.454028][T13827] siw: device registration error -23 [ 525.421662][T13833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2540'. [ 525.533741][T13837] syzkaller0: entered promiscuous mode [ 525.539300][T13837] syzkaller0: entered allmulticast mode [ 525.622801][T13840] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2543'. [ 525.999520][ T5782] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 526.019842][ T6434] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 526.269527][ T6434] usb 1-1: Using ep0 maxpacket: 16 [ 526.328171][ T6434] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 526.421037][ T6434] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 526.485664][ T6434] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.540650][ T6434] usb 1-1: Product: syz [ 526.566211][ T6434] usb 1-1: Manufacturer: syz [ 526.600466][ T6434] usb 1-1: SerialNumber: syz [ 526.665454][ T6434] usb 1-1: config 0 descriptor?? [ 526.675863][ T6434] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 526.714877][ T6434] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 526.740161][T13852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2549'. [ 526.828131][T13856] netlink: 'syz.1.2551': attribute type 1 has an invalid length. [ 526.842660][ T5782] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 526.863563][ T5782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.872397][ T5782] usb 4-1: Product: syz [ 526.876622][ T5782] usb 4-1: Manufacturer: syz [ 526.881956][ T5782] usb 4-1: SerialNumber: syz [ 527.118226][ T5782] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 527.134381][ T5782] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 527.318957][ T6434] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 527.400259][ T6434] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 527.408388][ T6434] em28xx 1-1:0.0: board has no eeprom [ 527.479753][ T6434] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 527.487743][ T6434] em28xx 1-1:0.0: dvb set to bulk mode. [ 527.499676][ T6183] em28xx 1-1:0.0: Binding DVB extension [ 527.512406][ T6434] usb 1-1: USB disconnect, device number 67 [ 527.519573][ T6434] em28xx 1-1:0.0: Disconnecting em28xx [ 527.609786][ T6183] em28xx 1-1:0.0: Registering input extension [ 527.624776][ T6434] em28xx 1-1:0.0: Closing input extension [ 527.641292][ T6434] em28xx 1-1:0.0: Freeing device [ 527.751707][ T5782] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 527.768868][ T5782] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 527.781167][ T5782] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 527.799504][ T5782] lan78xx: probe of 4-1:1.0 failed with error -32 [ 527.867048][T13872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2557'. [ 528.022204][T13876] siw: device registration error -23 [ 528.855584][ T6434] usb 4-1: USB disconnect, device number 42 [ 528.955622][T13883] netlink: 'syz.2.2563': attribute type 1 has an invalid length. [ 529.026446][T13883] bond1: (slave bridge1): making interface the new active one [ 529.036068][T13883] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 529.056798][T13883] macvlan2: entered promiscuous mode [ 529.062390][T13883] macvlan2: entered allmulticast mode [ 529.068741][T13883] bond1: entered promiscuous mode [ 529.074001][T13883] bridge1: entered promiscuous mode [ 529.080858][T13883] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 529.089199][T13883] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 529.108352][T13883] bond1: left promiscuous mode [ 529.114761][T13883] bridge1: left promiscuous mode [ 531.139796][ T6183] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 531.338801][ T6183] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 531.358266][ T6183] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.371918][ T6183] usb 1-1: Product: syz [ 531.376153][ T6183] usb 1-1: Manufacturer: syz [ 531.390558][ T6183] usb 1-1: SerialNumber: syz [ 531.528635][T13938] siw: device registration error -23 [ 531.696547][ T6183] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 532.292941][ T6183] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 532.877024][ T6183] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 532.891684][ T6183] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 532.904497][ T6183] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 532.921384][ T6183] lan78xx: probe of 1-1:1.0 failed with error -32 [ 533.126156][T13954] fuse: Bad value for 'fd' [ 533.139579][ T6434] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 533.329970][ T6434] usb 2-1: Using ep0 maxpacket: 16 [ 533.337628][ T6434] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 533.352635][ T6434] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 533.369862][ T6434] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.388622][ T6434] usb 2-1: Product: syz [ 533.393759][ T6434] usb 2-1: Manufacturer: syz [ 533.401262][ T6434] usb 2-1: SerialNumber: syz [ 533.411493][ T6434] usb 2-1: config 0 descriptor?? [ 533.427166][ T6434] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 533.439431][ T6434] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 534.196875][ T6434] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 534.395018][ T6434] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 534.412796][ T6432] usb 1-1: USB disconnect, device number 68 [ 534.455246][ T6434] em28xx 2-1:0.0: board has no eeprom [ 534.587098][T13975] fuse: Bad value for 'fd' [ 534.592271][ T6434] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 534.602302][ T6434] em28xx 2-1:0.0: dvb set to bulk mode. [ 534.607972][ T6183] em28xx 2-1:0.0: Binding DVB extension [ 534.625312][ T6434] usb 2-1: USB disconnect, device number 46 [ 534.656114][ T6434] em28xx 2-1:0.0: Disconnecting em28xx [ 534.750261][ T6183] em28xx 2-1:0.0: Registering input extension [ 534.756629][ T6434] em28xx 2-1:0.0: Closing input extension [ 534.798075][ T6434] em28xx 2-1:0.0: Freeing device [ 535.269614][ T6434] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 535.530474][ T6434] usb 2-1: Using ep0 maxpacket: 16 [ 535.629687][ T6434] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 535.766281][ T6434] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 535.850668][ T6434] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.906818][ T6434] usb 2-1: Product: syz [ 535.916242][ T6434] usb 2-1: Manufacturer: syz [ 535.934379][ T6434] usb 2-1: SerialNumber: syz [ 535.967265][ T6434] usb 2-1: config 0 descriptor?? [ 536.272749][T13997] sctp: [Deprecated]: syz.0.2604 (pid 13997) Use of int in max_burst socket option. [ 536.272749][T13997] Use struct sctp_assoc_value instead [ 536.288712][ T5782] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 536.505499][ T5782] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 536.515095][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.531162][ T5782] usb 3-1: Product: syz [ 536.535591][ T5782] usb 3-1: Manufacturer: syz [ 536.545795][ T5782] usb 3-1: SerialNumber: syz [ 536.569482][ T6434] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 536.770869][ T6434] usb 4-1: Using ep0 maxpacket: 8 [ 536.781283][ T6434] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 536.788780][ T6434] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 536.807177][ T5782] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 536.824857][ T5782] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 536.829805][ T6434] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 536.869592][ T6434] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 536.889538][ T6434] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 536.916515][ T6434] usb 4-1: config 168 interface 0 has no altsetting 0 [ 536.931336][ T6434] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 536.938843][ T6434] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 536.964543][ T6434] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 536.976058][ T6434] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 536.989390][ T6434] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 537.009247][ T6434] usb 4-1: config 168 interface 0 has no altsetting 0 [ 537.019091][ T6434] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 537.032555][ T6434] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 537.047153][ T6434] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 537.067894][ T6434] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 537.079017][ T6434] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 537.104129][ T6434] usb 4-1: config 168 interface 0 has no altsetting 0 [ 537.119234][ T6434] usb 4-1: string descriptor 0 read error: -22 [ 537.129626][ T6434] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 537.144623][ T6434] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.173569][ T6434] adutux 4-1:168.0: interrupt endpoints not found [ 537.379218][T13999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2605'. [ 537.389759][ T6434] usb 4-1: USB disconnect, device number 43 [ 537.448707][ T5782] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 537.467212][ T5782] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 537.477594][ T5782] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 537.497090][ T5782] lan78xx: probe of 3-1:1.0 failed with error -32 [ 537.525757][T14009] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 537.737901][T14014] xt_CT: You must specify a L4 protocol and not use inversions on it [ 537.750365][T14015] siw: device registration error -23 [ 538.557263][ T6425] usb 2-1: USB disconnect, device number 47 [ 538.686309][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2611'. [ 539.052508][ T6424] usb 3-1: USB disconnect, device number 39 [ 539.909442][ T6431] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 539.981109][T14047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2620'. [ 540.099595][ T6431] usb 4-1: Using ep0 maxpacket: 16 [ 540.111567][ T6431] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 540.142345][ T6431] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 540.164730][ T6431] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.178856][ T6431] usb 4-1: Product: syz [ 540.183496][ T6431] usb 4-1: Manufacturer: syz [ 540.188230][ T6431] usb 4-1: SerialNumber: syz [ 540.204606][ T6431] usb 4-1: config 0 descriptor?? [ 540.509477][ T6425] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 540.699710][ T6424] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 540.715071][ T6425] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 540.724700][ T6425] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.734115][ T6425] usb 3-1: Product: syz [ 540.738652][ T6425] usb 3-1: Manufacturer: syz [ 540.744475][ T6425] usb 3-1: SerialNumber: syz [ 540.889523][ T6424] usb 1-1: Using ep0 maxpacket: 8 [ 540.897361][ T6424] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 540.905383][ T6424] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 540.917530][ T6424] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 540.929823][ T6424] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 540.943131][ T6424] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 540.966943][ T6425] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 540.978927][ T6424] usb 1-1: config 168 interface 0 has no altsetting 0 [ 540.987613][ T6425] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 541.006177][ T6424] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 541.014712][ T6424] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 541.026555][ T6424] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 541.038275][ T6424] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 541.049535][ T6424] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 541.063222][ T6424] usb 1-1: config 168 interface 0 has no altsetting 0 [ 541.072022][ T6424] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 541.083824][ T6424] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 541.097864][ T6424] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 541.111179][ T6424] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 541.122720][ T6424] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 541.136876][ T6424] usb 1-1: config 168 interface 0 has no altsetting 0 [ 541.150910][ T6424] usb 1-1: string descriptor 0 read error: -22 [ 541.157709][ T6424] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 541.167555][ T6424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.196692][ T6424] adutux 1-1:168.0: interrupt endpoints not found [ 541.403844][T14057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2624'. [ 541.416614][ T6431] usb 1-1: USB disconnect, device number 69 [ 541.609040][ T6425] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 541.620740][ T6425] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 541.630673][ T6425] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 541.641884][ T6425] lan78xx: probe of 3-1:1.0 failed with error -32 [ 541.705517][T14065] xt_CT: You must specify a L4 protocol and not use inversions on it [ 542.689643][ T6424] usb 4-1: USB disconnect, device number 44 [ 543.230643][ T6431] usb 3-1: USB disconnect, device number 40 [ 543.812389][ T6431] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 544.019204][ T6431] usb 3-1: Using ep0 maxpacket: 16 [ 544.053057][ T6431] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 544.090180][ T6431] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 544.119865][ T6431] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.127944][ T6431] usb 3-1: Product: syz [ 544.149384][ T6431] usb 3-1: Manufacturer: syz [ 544.166793][ T6431] usb 3-1: SerialNumber: syz [ 544.203673][ T6431] usb 3-1: config 0 descriptor?? [ 544.318866][T14130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2649'. [ 544.409829][ T5837] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 544.610572][ T5837] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 544.626009][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.634709][ T5837] usb 4-1: Product: syz [ 544.639994][ T5837] usb 4-1: Manufacturer: syz [ 544.649193][ T5837] usb 4-1: SerialNumber: syz [ 544.670550][ T6183] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 544.869738][ T6183] usb 1-1: Using ep0 maxpacket: 8 [ 544.871305][ T5837] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 544.896320][ T6183] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 544.899272][ T5837] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 544.906797][ T6183] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 544.927927][ T6183] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 544.944868][ T6183] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 544.962587][ T6183] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 544.986459][ T6183] usb 1-1: config 168 interface 0 has no altsetting 0 [ 545.000114][ T6183] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 545.008444][ T6183] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 545.026581][ T6183] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 545.046738][ T6183] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 545.057792][ T6183] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 545.079303][ T6183] usb 1-1: config 168 interface 0 has no altsetting 0 [ 545.100677][ T6183] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 545.108147][ T6183] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 545.119685][ T6183] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 545.144504][ T6183] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 545.155704][ T6183] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 545.170551][ T6183] usb 1-1: config 168 interface 0 has no altsetting 0 [ 545.183649][ T6183] usb 1-1: string descriptor 0 read error: -22 [ 545.192360][ T6183] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 545.201644][ T6183] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.221522][ T6183] adutux 1-1:168.0: interrupt endpoints not found [ 545.427358][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2650'. [ 545.437921][ T6183] usb 1-1: USB disconnect, device number 70 [ 545.547005][ T5837] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 545.558797][ T5837] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 545.569248][ T5837] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 545.580460][ T5837] lan78xx: probe of 4-1:1.0 failed with error -32 [ 545.712806][T14148] xt_CT: You must specify a L4 protocol and not use inversions on it [ 546.223122][ T6425] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 546.409761][ T6425] usb 2-1: Using ep0 maxpacket: 32 [ 546.425240][ T6425] usb 2-1: unable to get BOS descriptor or descriptor too short [ 546.434129][ T6425] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 546.442739][ T6425] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 546.451402][ T6425] usb 2-1: config 14 has no interface number 0 [ 546.457612][ T6425] usb 2-1: config 14 has no interface number 1 [ 546.463970][ T6425] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 546.475118][ T6425] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 546.486036][ T6425] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 546.497476][ T6425] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.512076][ T6425] usb 2-1: config 14 interface 57 has no altsetting 0 [ 546.518912][ T6425] usb 2-1: config 14 interface 228 has no altsetting 0 [ 546.541928][ T6425] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 546.559531][ T6425] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.567573][ T6425] usb 2-1: Product: syz [ 546.587118][ T5782] usb 3-1: USB disconnect, device number 41 [ 546.597916][ T6425] usb 2-1: Manufacturer: syz [ 546.612927][ T6425] usb 2-1: SerialNumber: syz [ 547.041755][ T6425] legousbtower 2-1:14.57: interrupt endpoints not found [ 547.139063][T14166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2658'. [ 547.156165][ T5782] usb 4-1: USB disconnect, device number 45 [ 547.223244][T14168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2659'. [ 547.260091][ T6425] legousbtower 2-1:14.228: interrupt endpoints not found [ 547.707531][ T59] tipc: Left network mode [ 547.714344][T14175] kvm: kvm [14174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x210000bffa [ 547.725676][T14175] kvm: kvm [14174]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 547.744880][T14175] kvm: kvm [14174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x210000489a [ 547.757320][T14175] kvm: kvm [14174]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 548.179638][ T6425] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 548.283913][ T5782] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 548.306822][ T59] bond3: (slave gretap1): Releasing active interface [ 548.365712][ T6425] usb 1-1: Using ep0 maxpacket: 16 [ 548.378859][ T6425] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 548.395017][ T6425] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 548.404720][ T6425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.414442][ T6425] usb 1-1: Product: syz [ 548.418747][ T6425] usb 1-1: Manufacturer: syz [ 548.423473][ T6425] usb 1-1: SerialNumber: syz [ 548.440954][ T6425] usb 1-1: config 0 descriptor?? [ 548.477308][ T6425] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 548.491391][ T5782] usb 3-1: Using ep0 maxpacket: 16 [ 548.496712][ T6425] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 548.507203][ T5782] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 548.521894][ T5782] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 548.539972][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.554065][ T5782] usb 3-1: Product: syz [ 548.560454][ T59] IPVS: stopping master sync thread 6045 ... [ 548.563323][ T5782] usb 3-1: Manufacturer: syz [ 548.580894][ T5782] usb 3-1: SerialNumber: syz [ 548.602003][ T5782] usb 3-1: config 0 descriptor?? [ 548.790319][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.801355][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.820028][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.838645][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.857141][ T59] bridge_slave_1: left allmulticast mode [ 548.867107][ T59] bridge_slave_1: left promiscuous mode [ 548.881140][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.897205][ T59] bridge_slave_0: left allmulticast mode [ 548.904612][ T59] bridge_slave_0: left promiscuous mode [ 548.914930][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.976546][ T59] veth1_macvtap: left promiscuous mode [ 548.988815][ T59] veth0_vlan: left promiscuous mode [ 549.057635][ T6425] em28xx 1-1:0.0: chip ID is em2874 [ 549.346311][ T6425] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 549.364823][ T59] pimreg (unregistering): left allmulticast mode [ 549.370421][ T6425] em28xx 1-1:0.0: board has no eeprom [ 549.413737][ T5782] usb 2-1: USB disconnect, device number 48 [ 549.494422][ T59] bond3 (unregistering): (slave bridge1): Releasing active interface [ 549.591036][ T59] bond3 (unregistering): Released all slaves [ 549.619474][ T6425] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 549.670742][ T6425] em28xx 1-1:0.0: dvb set to bulk mode. [ 549.690858][ T5782] em28xx 1-1:0.0: Binding DVB extension [ 549.706534][ T59] bond2 (unregistering): Released all slaves [ 549.763651][ T59] bond1 (unregistering): Released all slaves [ 549.791573][ T6425] usb 1-1: USB disconnect, device number 71 [ 549.882655][ T6425] em28xx 1-1:0.0: Disconnecting em28xx [ 550.023009][ T5782] em28xx 1-1:0.0: Registering input extension [ 550.270369][ T5782] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 550.323069][ T5782] Registered IR keymap rc-empty [ 550.406630][ T5782] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 550.452569][ T5782] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input42 [ 550.520639][ T5782] em28xx 1-1:0.0: Input extension successfully initialized [ 550.547788][ T6425] em28xx 1-1:0.0: Closing input extension [ 550.811293][ T6425] em28xx 1-1:0.0: Freeing device [ 551.112829][ T6434] usb 3-1: USB disconnect, device number 42 [ 551.191784][ T6425] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 551.284581][T14224] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2670'. [ 551.416188][ T6425] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 551.444983][ T6425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.464980][ T6425] usb 1-1: Product: syz [ 551.469793][ T6425] usb 1-1: Manufacturer: syz [ 551.474527][ T6425] usb 1-1: SerialNumber: syz [ 551.629637][ T6434] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 551.705553][ T6425] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 551.729500][ T6425] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 551.798509][T14229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2672'. [ 551.862542][ T6434] usb 3-1: Using ep0 maxpacket: 8 [ 551.882070][ T6434] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 551.903558][ T6434] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 551.940377][ T6434] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 551.964566][ T6434] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 551.979366][ T6434] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 551.994987][ T6434] usb 3-1: config 168 interface 0 has no altsetting 0 [ 552.003559][ T6434] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 552.013639][ T6434] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 552.025331][ T6434] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 552.042663][ T6434] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 552.055142][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.057839][ T6434] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 552.083531][ T6434] usb 3-1: config 168 interface 0 has no altsetting 0 [ 552.093318][ T6434] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 552.101170][ T6434] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 552.112760][ T6434] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 552.130669][ T6434] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 552.147638][ T6434] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 552.170415][ T6434] usb 3-1: config 168 interface 0 has no altsetting 0 [ 552.181862][ T6434] usb 3-1: string descriptor 0 read error: -22 [ 552.188225][ T6434] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 552.202977][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.211952][ T6434] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.237471][ T6434] adutux 3-1:168.0: interrupt endpoints not found [ 552.525884][ T6432] usb 3-1: USB disconnect, device number 43 [ 552.580013][ T6425] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 552.605232][ T6425] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 552.636278][ T6425] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 552.660286][ T6425] lan78xx: probe of 1-1:1.0 failed with error -32 [ 552.858374][ T59] bond0 (unregistering): Released all slaves [ 552.941948][T14242] xt_CT: You must specify a L4 protocol and not use inversions on it [ 553.018511][T14222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2669'. [ 553.321621][ T6426] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 553.512583][ T6426] usb 2-1: unable to get BOS descriptor or descriptor too short [ 553.521835][ T6426] usb 2-1: not running at top speed; connect to a high speed hub [ 553.531441][ T6426] usb 2-1: config 5 has an invalid interface number: 150 but max is 0 [ 553.540014][ T6426] usb 2-1: config 5 has no interface number 0 [ 553.546367][ T6426] usb 2-1: config 5 interface 150 has no altsetting 0 [ 553.557924][ T6426] usb 2-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice=7a.a6 [ 553.567851][ T6426] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.591873][ T6426] usb 2-1: Product: syz [ 553.596260][ T6426] usb 2-1: Manufacturer: syz [ 553.615815][ T6426] usb 2-1: SerialNumber: syz [ 553.651906][ T6424] usb 1-1: USB disconnect, device number 72 [ 554.123953][ T6425] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 554.154522][ T6426] usb 2-1: USB disconnect, device number 49 [ 554.339431][ T6425] usb 4-1: Using ep0 maxpacket: 16 [ 554.360373][ T6425] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 554.395207][ T6425] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 554.419732][ T6425] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.444338][ T6425] usb 4-1: Product: syz [ 554.455206][ T6425] usb 4-1: Manufacturer: syz [ 554.465162][ T6425] usb 4-1: SerialNumber: syz [ 554.494166][ T6425] usb 4-1: config 0 descriptor?? [ 554.553883][T14281] lo speed is unknown, defaulting to 1000 [ 554.953304][T14292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2682'. [ 555.399512][ T6425] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 555.605963][ T6425] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 555.627262][ T6425] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.646130][ T6425] usb 3-1: Product: syz [ 555.656625][ T6425] usb 3-1: Manufacturer: syz [ 555.671554][ T6425] usb 3-1: SerialNumber: syz [ 555.948232][ T6425] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 555.993333][ T6425] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 556.873824][ T6425] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 556.900463][ T6425] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 556.910847][ T6425] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 556.921830][ T6434] usb 4-1: USB disconnect, device number 46 [ 556.929699][ T6183] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 556.937765][ T6425] lan78xx: probe of 3-1:1.0 failed with error -32 [ 557.051477][T14345] syzkaller0: entered promiscuous mode [ 557.059102][T14345] syzkaller0: entered allmulticast mode [ 557.159591][ T6183] usb 1-1: Using ep0 maxpacket: 8 [ 557.173375][ T6183] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 557.186378][ T6183] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 557.207236][ T6183] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 557.234713][ T6183] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 557.255701][ T6183] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 557.288029][ T6183] usb 1-1: config 168 interface 0 has no altsetting 0 [ 557.308379][ T6183] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 557.326451][ T6183] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 557.354824][ T6183] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 557.376789][ T6183] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 557.393383][ T6183] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 557.414296][ T6183] usb 1-1: config 168 interface 0 has no altsetting 0 [ 557.425119][ T6183] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 557.435235][ T6183] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 557.447563][ T6183] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 557.462034][ T6183] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 557.474746][ T6183] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 557.492555][ T6183] usb 1-1: config 168 interface 0 has no altsetting 0 [ 557.507388][ T6183] usb 1-1: string descriptor 0 read error: -22 [ 557.516427][ T6183] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 557.526858][ T6183] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.554160][ T6183] adutux 1-1:168.0: interrupt endpoints not found [ 557.768954][T14337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2688'. [ 557.784419][ T6425] usb 1-1: USB disconnect, device number 73 [ 558.136842][T14375] xt_CT: You must specify a L4 protocol and not use inversions on it [ 558.234941][ T6425] usb 3-1: USB disconnect, device number 44 [ 558.316061][T14377] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2693'. [ 558.719759][ T6425] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 558.920180][ T6425] usb 3-1: Using ep0 maxpacket: 16 [ 558.937862][ T6425] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 558.966921][ T6425] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 558.981580][ T6425] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.992881][ T6425] usb 3-1: Product: syz [ 558.997242][ T6425] usb 3-1: Manufacturer: syz [ 559.004717][ T6425] usb 3-1: SerialNumber: syz [ 559.023815][ T6425] usb 3-1: config 0 descriptor?? [ 559.036605][ T6425] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 559.048537][ T6425] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 559.422535][ T6183] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 559.609501][ T6183] usb 2-1: Using ep0 maxpacket: 16 [ 559.620146][ T6183] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 559.635844][ T6183] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 559.645369][ T6425] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 559.646254][ T6183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.661196][ T6183] usb 2-1: Product: syz [ 559.665491][ T6183] usb 2-1: Manufacturer: syz [ 559.670641][ T6183] usb 2-1: SerialNumber: syz [ 559.679959][ T6183] usb 2-1: config 0 descriptor?? [ 559.812144][T14409] syzkaller0: entered promiscuous mode [ 559.818958][T14409] syzkaller0: entered allmulticast mode [ 559.913534][ T6425] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 559.922307][ T6425] em28xx 3-1:0.0: board has no eeprom [ 559.999482][ T6425] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 560.007472][ T6425] em28xx 3-1:0.0: dvb set to bulk mode. [ 560.013530][ T6424] em28xx 3-1:0.0: Binding DVB extension [ 560.031278][ T6425] usb 3-1: USB disconnect, device number 45 [ 560.078767][ T6425] em28xx 3-1:0.0: Disconnecting em28xx [ 560.090749][ T6424] em28xx 3-1:0.0: Registering input extension [ 560.102660][ T6425] em28xx 3-1:0.0: Closing input extension [ 560.119046][ T6425] em28xx 3-1:0.0: Freeing device [ 560.159790][ T6183] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 560.352382][ T6183] usb 4-1: Using ep0 maxpacket: 8 [ 560.359540][ T6183] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 560.368023][ T6183] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 560.378091][ T6183] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 560.393131][ T6183] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 560.406410][ T6183] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 560.426423][ T6183] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 560.435629][ T6183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.667987][ T6183] usb 4-1: usb_control_msg returned -32 [ 560.673877][ T6183] usbtmc 4-1:16.0: can't read capabilities [ 560.685435][ T6183] usb 4-1: USB disconnect, device number 47 [ 560.759615][ T6425] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 560.971307][ T6425] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 560.980746][ T6425] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.988789][ T6425] usb 3-1: Product: syz [ 560.994158][ T6425] usb 3-1: Manufacturer: syz [ 560.998794][ T6425] usb 3-1: SerialNumber: syz [ 561.005571][ T6425] usb 3-1: config 0 descriptor?? [ 561.209690][ T6183] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 561.224703][ T6425] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 561.411781][ T6183] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 561.423446][ T6183] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.436355][ T6183] usb 1-1: Product: syz [ 561.443180][ T6183] usb 1-1: Manufacturer: syz [ 561.447980][ T6183] usb 1-1: SerialNumber: syz [ 561.679448][ T6183] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 561.710399][ T6183] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 561.845391][ T6425] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 562.257547][ T6432] usb 2-1: USB disconnect, device number 50 [ 562.534286][ T6183] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 562.549475][ T6183] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 562.561010][ T6183] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 562.585006][ T6183] lan78xx: probe of 1-1:1.0 failed with error -32 [ 562.709420][ T6432] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 562.863684][T14440] syzkaller0: entered promiscuous mode [ 562.869271][T14440] syzkaller0: entered allmulticast mode [ 562.919670][ T6432] usb 2-1: Using ep0 maxpacket: 8 [ 562.929552][ T6432] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 562.937007][ T6432] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 562.948751][ T6432] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 562.960400][ T6432] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 562.971552][ T6432] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 562.986285][ T6432] usb 2-1: config 168 interface 0 has no altsetting 0 [ 562.995611][ T6432] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 563.003427][ T6432] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 563.018185][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.024629][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.034170][ T6432] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 563.045853][ T6432] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 563.056980][ T6432] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 563.070586][ T6432] usb 2-1: config 168 interface 0 has no altsetting 0 [ 563.079160][ T6432] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 563.086816][ T6432] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 563.105088][ T6432] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 563.118544][ T6432] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 563.129733][ T6432] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 563.143466][ T6432] usb 2-1: config 168 interface 0 has no altsetting 0 [ 563.155663][ T6432] usb 2-1: string descriptor 0 read error: -22 [ 563.162050][ T6432] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 563.181730][ T6432] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.208728][ T6432] adutux 2-1:168.0: interrupt endpoints not found [ 563.221462][T14444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 563.412965][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2706'. [ 563.426836][ T6432] usb 2-1: USB disconnect, device number 51 [ 563.501280][ T6425] usb 3-1: USB disconnect, device number 46 [ 563.520020][ T6426] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 563.624410][T14451] syzkaller0: entered promiscuous mode [ 563.630845][T14451] syzkaller0: entered allmulticast mode [ 563.659210][T14451] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 563.674615][T14451] tipc: Enabling of bearer rejected, failed to enable media [ 563.709690][ T6426] usb 4-1: Using ep0 maxpacket: 32 [ 563.734798][ T6426] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 563.752223][ T6426] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 563.761584][ T6426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.772615][ T6426] usb 4-1: Product: syz [ 563.776831][ T6426] usb 4-1: Manufacturer: syz [ 563.784226][ T6426] usb 4-1: SerialNumber: syz [ 563.796675][T14453] xt_CT: You must specify a L4 protocol and not use inversions on it [ 563.818222][ T6426] snd-ua101 4-1:1.1: sample format descriptor not found [ 563.837856][ T6426] snd-ua101 4-1:1.0: invalid num_altsetting [ 563.965396][ T6432] usb 1-1: USB disconnect, device number 74 [ 564.026506][ T6426] usb 4-1: USB disconnect, device number 48 [ 564.170333][T14462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2714'. [ 564.179854][T14462] netlink: set zone limit has 8 unknown bytes [ 564.815455][T14470] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.2717'. [ 565.114986][T14476] syzkaller0: entered promiscuous mode [ 565.120885][T14476] syzkaller0: entered allmulticast mode [ 565.151163][T14476] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 565.162726][T14476] tipc: Enabling of bearer rejected, failed to enable media [ 565.174647][ T6426] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 565.288400][T14479] xt_addrtype: ipv6 does not support BROADCAST matching [ 565.412504][ T6426] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 565.423160][ T6426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.462108][ T6426] usb 3-1: Product: syz [ 565.472116][ T6426] usb 3-1: Manufacturer: syz [ 565.476948][ T6426] usb 3-1: SerialNumber: syz [ 565.491772][ T6426] usb 3-1: config 0 descriptor?? [ 565.671619][ T6432] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 565.706505][ T6426] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 565.897581][ T6432] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 565.919842][ T6432] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.935901][ T6432] usb 1-1: Product: syz [ 565.943042][ T6432] usb 1-1: Manufacturer: syz [ 565.949571][ T6432] usb 1-1: SerialNumber: syz [ 566.019758][ T6183] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 566.175146][ T6432] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 566.198853][ T6432] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 566.249749][ T6183] usb 2-1: Using ep0 maxpacket: 8 [ 566.266188][ T6183] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 566.277937][ T6183] usb 2-1: config 0 has no interface number 0 [ 566.291308][ T6183] usb 2-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 566.305780][ T6183] usb 2-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 566.320350][ T6183] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 566.337444][ T6426] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 566.343241][ T6183] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 566.355456][ T6183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.366912][ T6183] usb 2-1: Product: syz [ 566.387333][ T6183] usb 2-1: Manufacturer: syz [ 566.397565][ T6183] usb 2-1: SerialNumber: syz [ 566.417009][ T6183] usb 2-1: config 0 descriptor?? [ 566.425836][T14485] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 566.439612][ T6183] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 567.025752][ T6432] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 567.037875][ T6432] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 567.048307][ T6432] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 567.058682][ T6432] lan78xx: probe of 1-1:1.0 failed with error -32 [ 567.069578][ T6426] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 567.289448][ T6426] usb 4-1: Using ep0 maxpacket: 16 [ 567.297237][ T6426] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 567.314325][ T6426] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 567.323537][ T6426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.332188][ T6426] usb 4-1: Product: syz [ 567.336373][ T6426] usb 4-1: Manufacturer: syz [ 567.341579][ T6426] usb 4-1: SerialNumber: syz [ 567.348811][ T6426] usb 4-1: config 0 descriptor?? [ 567.360745][ T6426] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 567.370071][ T6426] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 567.939146][ T6432] usb 3-1: USB disconnect, device number 47 [ 567.964956][ T6426] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 568.094788][T14498] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.2726'. [ 568.242939][ T6426] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 568.251361][ T6426] em28xx 4-1:0.0: board has no eeprom [ 568.332540][ T6426] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 568.346156][ T6426] em28xx 4-1:0.0: dvb set to bulk mode. [ 568.354676][ T6425] em28xx 4-1:0.0: Binding DVB extension [ 568.385058][ T6426] usb 4-1: USB disconnect, device number 49 [ 568.403818][ T6426] em28xx 4-1:0.0: Disconnecting em28xx [ 568.513190][ T6425] em28xx 4-1:0.0: Registering input extension [ 568.532392][ T6425] usb 1-1: USB disconnect, device number 75 [ 568.539089][ T6426] em28xx 4-1:0.0: Closing input extension [ 568.593270][ T6426] em28xx 4-1:0.0: Freeing device [ 568.647048][T14508] syzkaller0: entered promiscuous mode [ 568.653036][T14508] syzkaller0: entered allmulticast mode [ 568.677817][T14508] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 568.688789][T14508] tipc: Enabling of bearer rejected, failed to enable media [ 568.784349][ T6431] usb 2-1: USB disconnect, device number 52 [ 568.879624][ T6183] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 568.910106][T14512] fuse: Bad value for 'group_id' [ 568.947785][T14516] netlink: 'syz.0.2734': attribute type 1 has an invalid length. [ 568.999988][T14516] bond2: (slave bridge2): making interface the new active one [ 569.008796][T14516] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 569.032440][T14516] macvlan2: entered promiscuous mode [ 569.037811][T14516] macvlan2: entered allmulticast mode [ 569.044682][T14516] bond2: entered promiscuous mode [ 569.051115][T14516] bridge2: entered promiscuous mode [ 569.057154][T14516] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 569.065237][T14516] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 569.081386][ T6183] usb 3-1: Using ep0 maxpacket: 8 [ 569.087751][T14516] bond2: left promiscuous mode [ 569.092977][T14516] bridge2: left promiscuous mode [ 569.098341][ T6183] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 569.106210][ T6183] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 569.126765][ T6183] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 569.138379][ T6183] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 569.149470][ T6183] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 569.164286][ T6183] usb 3-1: config 168 interface 0 has no altsetting 0 [ 569.174453][ T6183] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 569.182534][ T6183] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 569.194513][ T6183] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 569.200124][ T6426] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 569.207284][ T6183] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 569.225061][ T6183] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 569.244275][ T6183] usb 3-1: config 168 interface 0 has no altsetting 0 [ 569.253815][T14519] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.2735'. [ 569.263298][ T6183] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 569.275791][ T6183] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 569.287519][ T6183] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 569.317030][ T6183] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 569.328437][ T6183] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 569.348509][ T6183] usb 3-1: config 168 interface 0 has no altsetting 0 [ 569.365992][ T6183] usb 3-1: string descriptor 0 read error: -22 [ 569.377189][ T6183] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 569.386746][ T6183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.404204][ T6426] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 569.415392][ T6426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.418160][ T6183] adutux 3-1:168.0: interrupt endpoints not found [ 569.434728][ T6426] usb 4-1: Product: syz [ 569.444280][ T6426] usb 4-1: Manufacturer: syz [ 569.452760][ T6426] usb 4-1: SerialNumber: syz [ 569.472696][ T6426] usb 4-1: config 0 descriptor?? [ 569.638162][T14507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2730'. [ 569.660959][ T5782] usb 3-1: USB disconnect, device number 48 [ 569.705079][ T6426] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 569.989490][ T6424] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 570.185654][ T6424] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 570.195282][ T6424] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.211671][ T6424] usb 2-1: Product: syz [ 570.216148][ T6424] usb 2-1: Manufacturer: syz [ 570.221799][ T28] audit: type=1326 audit(1780565883.024:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.0.2740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e339ce59 code=0x7ffc0000 [ 570.226818][ T6424] usb 2-1: SerialNumber: syz [ 570.256507][ T28] audit: type=1326 audit(1780565883.054:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.0.2740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e339ce59 code=0x7ffc0000 [ 570.294010][ T28] audit: type=1326 audit(1780565883.054:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.0.2740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e339ce59 code=0x7ffc0000 [ 570.323940][ T28] audit: type=1326 audit(1780565883.054:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.0.2740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e339ce59 code=0x7ffc0000 [ 570.349574][ T28] audit: type=1326 audit(1780565883.054:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.0.2740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb4e339ce59 code=0x7ffc0000 [ 570.374393][ T6426] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 570.388216][ T28] audit: type=1326 audit(1780565883.054:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.0.2740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e339ce59 code=0x7ffc0000 [ 570.438583][ T28] audit: type=1326 audit(1780565883.054:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.0.2740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e339ce59 code=0x7ffc0000 [ 570.479534][ T6424] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 570.497382][ T28] audit: type=1326 audit(1780565883.054:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.0.2740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb4e339ce59 code=0x7ffc0000 [ 570.512910][ T6424] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 570.534749][ T28] audit: type=1326 audit(1780565883.184:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.0.2740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb4e339ce59 code=0x7ffc0000 [ 570.658167][T14538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2742'. [ 570.766597][T14542] fuse: Bad value for 'group_id' [ 570.853078][T14545] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.2744'. [ 571.387052][ T6424] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 571.398817][ T6424] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 571.410750][ T6424] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 571.421625][ T6424] lan78xx: probe of 2-1:1.0 failed with error -32 [ 571.449700][ T5782] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 571.657952][ T5782] usb 1-1: unable to get BOS descriptor or descriptor too short [ 571.666718][ T5782] usb 1-1: not running at top speed; connect to a high speed hub [ 571.690920][ T5782] usb 1-1: config 5 has an invalid interface number: 150 but max is 0 [ 571.699157][ T5782] usb 1-1: config 5 has no interface number 0 [ 571.721578][ T5782] usb 1-1: config 5 interface 150 has no altsetting 0 [ 571.736539][ T5782] usb 1-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice=7a.a6 [ 571.750135][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.758194][ T5782] usb 1-1: Product: syz [ 571.764961][ T5782] usb 1-1: Manufacturer: syz [ 571.769923][ T5782] usb 1-1: SerialNumber: syz [ 571.804961][T14556] fuse: Unknown parameter 'grou00000000000000000000' [ 571.953322][ T6426] usb 4-1: USB disconnect, device number 50 [ 571.982204][ T28] audit: type=1326 audit(1780565884.784:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14558 comm="syz.2.2749" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5372b9ce59 code=0x7ffc0000 [ 572.067430][T14563] syzkaller0: entered promiscuous mode [ 572.076199][T14563] syzkaller0: entered allmulticast mode [ 572.088509][ T5782] usb 1-1: USB disconnect, device number 76 [ 572.266191][T14569] fuse: Bad value for 'group_id' [ 572.332396][T14571] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2753'. [ 572.680556][T14580] fuse: Unknown parameter 'grou00000000000000000000' [ 572.691138][ T6431] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 572.768850][ T5782] usb 2-1: USB disconnect, device number 53 [ 572.919625][ T6431] usb 3-1: Using ep0 maxpacket: 8 [ 572.932875][ T6431] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 572.951976][ T6431] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 572.970920][ T6431] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 572.982578][ T6431] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 572.994012][ T6431] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 573.007835][ T6431] usb 3-1: config 168 interface 0 has no altsetting 0 [ 573.016431][ T6431] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 573.024062][ T6432] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 573.031910][ T6431] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 573.046398][ T6431] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 573.058824][ T6431] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 573.088126][ T6431] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 573.101973][ T6431] usb 3-1: config 168 interface 0 has no altsetting 0 [ 573.110777][ T6431] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 573.118474][ T6431] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 573.130370][ T6431] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 573.142068][ T6431] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 573.160788][ T6431] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 573.176760][ T6431] usb 3-1: config 168 interface 0 has no altsetting 0 [ 573.190672][ T6431] usb 3-1: string descriptor 0 read error: -22 [ 573.197503][ T6431] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 573.217878][ T6431] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.240315][ T6431] adutux 3-1:168.0: interrupt endpoints not found [ 573.258979][ T6432] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 573.279177][ T6432] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.291410][ T6432] usb 1-1: Product: syz [ 573.295628][ T6432] usb 1-1: Manufacturer: syz [ 573.309512][ T6432] usb 1-1: SerialNumber: syz [ 573.322971][ T6432] usb 1-1: config 0 descriptor?? [ 573.413381][T14594] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2762'. [ 573.480826][T14575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2755'. [ 573.501960][ T6431] usb 3-1: USB disconnect, device number 49 [ 573.563894][ T6432] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 573.866304][T14602] xt_CT: You must specify a L4 protocol and not use inversions on it [ 573.905539][T14604] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 574.049756][T14607] fuse: Unknown parameter 'grou00000000000000000000' [ 574.183469][ T6432] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 574.373568][ T6426] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 574.489490][T14617] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2771'. [ 574.569700][ T6426] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 574.581043][ T6426] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.589092][ T6426] usb 2-1: Product: syz [ 574.597956][ T6426] usb 2-1: Manufacturer: syz [ 574.602841][ T6426] usb 2-1: SerialNumber: syz [ 574.844203][ T6426] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 574.861263][ T6426] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 575.690384][ T6426] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 575.710358][ T6426] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 575.722059][ T6426] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 575.734448][ T6426] lan78xx: probe of 2-1:1.0 failed with error -32 [ 575.786271][ T6426] usb 1-1: USB disconnect, device number 77 [ 575.881365][T14637] fuse: Unknown parameter 'group_i00000000000000000000' [ 576.025851][T14643] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2780'. [ 576.409467][ T6432] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 576.599427][ T6432] usb 4-1: Using ep0 maxpacket: 8 [ 576.608607][ T6432] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 576.628960][ T6432] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 576.651791][ T6432] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 576.672100][ T6432] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 576.688482][ T6432] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 576.704803][ T6432] usb 4-1: config 168 interface 0 has no altsetting 0 [ 576.752800][ T6432] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 576.760714][ T6432] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 576.787945][ T6432] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 576.801339][ T6432] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 576.843197][ T6432] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 576.883941][ T6432] usb 4-1: config 168 interface 0 has no altsetting 0 [ 576.903700][ T6432] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 576.921541][ T6432] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 576.951431][ T6432] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 576.979136][ T6432] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 576.994913][ T6432] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 577.010325][ T6432] usb 4-1: config 168 interface 0 has no altsetting 0 [ 577.024312][ T6432] usb 4-1: string descriptor 0 read error: -22 [ 577.031040][ T6432] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 577.042586][ T6432] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.068433][ T6432] adutux 4-1:168.0: interrupt endpoints not found [ 577.141453][ T6432] usb 2-1: USB disconnect, device number 54 [ 577.224700][T14662] netlink: 'syz.1.2787': attribute type 1 has an invalid length. [ 577.277961][T14648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2782'. [ 577.290210][ T6431] usb 4-1: USB disconnect, device number 51 [ 577.343157][T14662] bond1: (slave bridge1): making interface the new active one [ 577.362657][T14662] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 577.394215][T14664] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 577.562080][T14666] fuse: Unknown parameter 'group_i00000000000000000000' [ 577.639483][T14668] xt_CT: You must specify a L4 protocol and not use inversions on it [ 577.773440][T14674] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.2790'. [ 578.299441][ T6432] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 578.513996][ T6432] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 578.529362][ T6432] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.537402][ T6432] usb 3-1: Product: syz [ 578.559368][ T6432] usb 3-1: Manufacturer: syz [ 578.564030][ T6432] usb 3-1: SerialNumber: syz [ 578.798388][ T6432] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 578.830743][ T6432] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 578.958259][T14689] fuse: Unknown parameter 'group_i00000000000000000000' [ 579.278577][T14697] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2800'. [ 579.525792][T14702] netlink: 'syz.3.2802': attribute type 1 has an invalid length. [ 579.586805][T14702] bond1: (slave bridge1): making interface the new active one [ 579.596878][T14702] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 579.634287][T14702] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 579.707890][T14705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2803'. [ 579.875856][ T6432] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 579.889119][ T6432] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 579.899722][ T6432] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 579.915489][ T6432] lan78xx: probe of 3-1:1.0 failed with error -32 [ 580.852538][ T6426] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 581.043607][ T6426] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 581.062263][ T6432] usb 3-1: USB disconnect, device number 50 [ 581.070814][ T6426] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.110870][ T6426] usb 1-1: config 0 descriptor?? [ 581.132862][ T6426] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 581.196767][T14727] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.2809'. [ 581.638641][T14740] netlink: 'syz.2.2814': attribute type 1 has an invalid length. [ 581.707209][T14740] bond2: (slave bridge2): making interface the new active one [ 581.716309][T14740] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 581.742522][ T6426] usb 1-1: USB disconnect, device number 78 [ 581.787771][T14740] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 582.211145][T14743] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2815'. [ 582.452233][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 582.452246][ T28] audit: type=1326 audit(1780565895.254:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14748 comm="syz.0.2817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e339ce59 code=0x7ffc0000 [ 582.509732][ T28] audit: type=1326 audit(1780565895.284:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14748 comm="syz.0.2817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e339ce59 code=0x7ffc0000 [ 582.543289][ T28] audit: type=1326 audit(1780565895.284:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14748 comm="syz.0.2817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e339ce59 code=0x7ffc0000 [ 582.587789][T14758] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 582.600846][T14758] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 582.627431][ T28] audit: type=1326 audit(1780565895.284:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14748 comm="syz.0.2817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e339ce59 code=0x7ffc0000 [ 582.674210][ T28] audit: type=1326 audit(1780565895.284:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14748 comm="syz.0.2817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb4e339ce59 code=0x7ffc0000 [ 582.736857][ T28] audit: type=1326 audit(1780565895.334:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14748 comm="syz.0.2817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4e335d68e code=0x7ffc0000 [ 582.761128][ T28] audit: type=1326 audit(1780565895.334:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14748 comm="syz.0.2817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4e335d68e code=0x7ffc0000 [ 582.786643][ T28] audit: type=1326 audit(1780565895.334:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14748 comm="syz.0.2817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4e335d68e code=0x7ffc0000 [ 582.811384][ T28] audit: type=1326 audit(1780565895.344:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14748 comm="syz.0.2817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4e335d68e code=0x7ffc0000 [ 582.836016][ T28] audit: type=1326 audit(1780565895.344:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14748 comm="syz.0.2817" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4e335d68e code=0x7ffc0000 [ 582.894969][T14761] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 583.212141][T14765] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2820'. [ 584.037695][T14779] fuse: Unknown parameter 'grou00000000000000000000' [ 584.211030][T14781] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 584.343266][T14785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2828'. [ 584.555283][T14794] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2830'. [ 584.648381][T14798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2832'. [ 584.734116][T14801] fuse: Unknown parameter 'grou00000000000000000000' [ 585.308304][T14817] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.2840'. [ 585.580534][ T5789] Bluetooth: hci4: command 0x0406 tx timeout [ 585.692682][T14830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2847'. [ 587.389873][ T6426] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 587.575439][ T6426] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 587.585301][ T6426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.596474][ T6426] usb 4-1: config 0 descriptor?? [ 587.613193][ T6426] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 588.235931][ T6426] usb 4-1: USB disconnect, device number 52 [ 588.763080][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 588.763097][ T28] audit: type=1326 audit(1780565901.564:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.1.2868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fccd9ce59 code=0x7ffc0000 [ 588.799235][ T28] audit: type=1326 audit(1780565901.564:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.1.2868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fccd9ce59 code=0x7ffc0000 [ 588.825940][ T28] audit: type=1326 audit(1780565901.564:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.1.2868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fccd9ce59 code=0x7ffc0000 [ 588.852170][ T28] audit: type=1326 audit(1780565901.564:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.1.2868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fccd9ce59 code=0x7ffc0000 [ 588.876994][ T28] audit: type=1326 audit(1780565901.564:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.1.2868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8fccd9ce59 code=0x7ffc0000 [ 588.907956][ T28] audit: type=1326 audit(1780565901.594:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.1.2868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8fccd5d68e code=0x7ffc0000 [ 588.940666][ T28] audit: type=1326 audit(1780565901.594:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.1.2868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8fccd5d68e code=0x7ffc0000 [ 588.972475][ T28] audit: type=1326 audit(1780565901.594:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.1.2868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8fccd5d68e code=0x7ffc0000 [ 589.003193][ T28] audit: type=1326 audit(1780565901.624:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.1.2868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8fccd5d68e code=0x7ffc0000 [ 589.037968][ T28] audit: type=1326 audit(1780565901.624:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.1.2868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8fccd5d68e code=0x7ffc0000 [ 590.145282][T14927] ip6tnl1: entered allmulticast mode [ 591.870672][T14972] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2892'. [ 592.590183][ T6434] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 592.792702][ T6434] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 592.802642][ T6434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.817388][ T6434] usb 3-1: config 0 descriptor?? [ 592.845823][ T6434] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 592.952147][T15004] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.2903'. [ 593.456705][ T6434] usb 3-1: USB disconnect, device number 51 [ 594.137665][T15025] fuse: Bad value for 'fd' [ 594.336073][T15030] netlink: 61687 bytes leftover after parsing attributes in process `syz.0.2913'. [ 594.654776][T15040] fuse: Bad value for 'fd' [ 594.968609][T15048] netlink: 'syz.0.2920': attribute type 1 has an invalid length. [ 595.067585][T15050] bond3: (slave gretap1): making interface the new active one [ 595.079092][T15050] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 595.102703][T15048] macvlan2: entered promiscuous mode [ 595.108038][T15048] macvlan2: entered allmulticast mode [ 595.114710][T15048] bond3: entered promiscuous mode [ 595.120224][T15048] gretap1: entered promiscuous mode [ 595.126272][T15048] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 595.134408][T15048] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 595.140196][ T6434] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 595.158972][T15048] bond3: left promiscuous mode [ 595.165407][T15048] gretap1: left promiscuous mode [ 595.245471][T15052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2921'. [ 595.317816][T15054] syzkaller0: entered promiscuous mode [ 595.324520][T15054] syzkaller0: entered allmulticast mode [ 595.366750][ T6434] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 595.378534][ T6434] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.395836][ T6434] usb 2-1: config 0 descriptor?? [ 595.405830][ T6434] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 595.490258][T15056] netlink: 61687 bytes leftover after parsing attributes in process `syz.2.2923'. [ 595.907323][T15066] fuse: Bad value for 'fd' [ 596.029681][ T6434] usb 2-1: USB disconnect, device number 55 [ 596.053730][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2930'. [ 596.146449][T15075] syzkaller0: entered promiscuous mode [ 596.157599][T15075] syzkaller0: entered allmulticast mode [ 596.225329][T15077] netlink: 61687 bytes leftover after parsing attributes in process `syz.0.2932'. [ 596.380500][ T28] kauditd_printk_skb: 671 callbacks suppressed [ 596.380516][ T28] audit: type=1326 audit(1780565909.184:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.0.2933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e339ce59 code=0x7ffc0000 [ 596.412792][ T28] audit: type=1326 audit(1780565909.184:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.0.2933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e339ce59 code=0x7ffc0000 [ 596.437062][ T28] audit: type=1326 audit(1780565909.184:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.0.2933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e339ce59 code=0x7ffc0000 [ 596.461379][ T28] audit: type=1326 audit(1780565909.184:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.0.2933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb4e339ce59 code=0x7ffc0000 [ 596.486404][ T28] audit: type=1326 audit(1780565909.184:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.0.2933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e339ce59 code=0x7ffc0000 [ 596.517020][ T28] audit: type=1326 audit(1780565909.244:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.0.2933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e339ce59 code=0x7ffc0000 [ 596.547706][ T28] audit: type=1326 audit(1780565909.244:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.0.2933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4e335d68e code=0x7ffc0000 [ 596.577913][ T28] audit: type=1326 audit(1780565909.244:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.0.2933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4e335d68e code=0x7ffc0000 [ 596.605520][ T28] audit: type=1326 audit(1780565909.244:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.0.2933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4e335d68e code=0x7ffc0000 [ 596.630445][ T28] audit: type=1326 audit(1780565909.244:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.0.2933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4e335d68e code=0x7ffc0000 [ 596.679711][ T6424] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 596.708505][T15086] netlink: 'syz.1.2935': attribute type 1 has an invalid length. [ 596.811172][T15088] macvlan2: entered promiscuous mode [ 596.816550][T15088] macvlan2: entered allmulticast mode [ 596.828261][T15088] bond2: entered promiscuous mode [ 596.834162][T15088] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 596.848068][T15088] bond2: left promiscuous mode [ 596.895469][ T6424] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 596.905871][ T6424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.914968][ T6424] usb 3-1: Product: syz [ 596.920198][ T6424] usb 3-1: Manufacturer: syz [ 596.925153][ T6424] usb 3-1: SerialNumber: syz [ 596.936281][ T6424] usb 3-1: config 0 descriptor?? [ 597.006285][T15090] fuse: Bad value for 'fd' [ 597.154728][ T6424] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 597.399230][T15096] fuse: Bad value for 'fd' [ 597.479607][T15098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2939'. [ 597.577834][T15102] netlink: 64523 bytes leftover after parsing attributes in process `syz.3.2941'. [ 598.039450][ T6425] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 598.235847][ T6425] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 598.245082][ T6425] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.256579][ T6425] usb 4-1: config 0 descriptor?? [ 598.268240][ T6425] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 598.882457][ T6425] usb 4-1: USB disconnect, device number 53 [ 598.977178][T15116] fuse: Bad value for 'fd' [ 599.407439][ T6424] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 599.435809][ T6424] usb 3-1: USB disconnect, device number 52 [ 599.882849][T15141] netlink: 'syz.3.2958': attribute type 1 has an invalid length. [ 599.956133][T15146] macvlan2: entered promiscuous mode [ 599.974310][T15146] macvlan2: entered allmulticast mode [ 599.990819][T15146] bond2: entered promiscuous mode [ 599.996448][T15146] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 600.036141][T15146] bond2: left promiscuous mode [ 600.190795][ T5782] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 600.384019][ T5782] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 600.393777][ T5782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.407030][ T5782] usb 2-1: config 0 descriptor?? [ 600.417898][ T5782] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 600.558392][T15165] fuse: Bad value for 'fd' [ 600.721551][T15169] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2968'. [ 600.732955][T15169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2968'. [ 600.839905][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2969'. [ 600.934802][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 601.028583][T15178] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2969'. [ 601.058052][ T5782] usb 2-1: USB disconnect, device number 56 [ 602.201097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 602.239375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 602.261155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 602.379410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #30a!!! [ 602.400894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 602.419397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #308!!! [ 602.439381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #30a!!! [ 602.523587][ T28] kauditd_printk_skb: 616 callbacks suppressed [ 602.523609][ T28] audit: type=1800 audit(1780565915.324:1454): pid=15196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2976" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 602.585919][T15206] fuse: Bad value for 'user_id' [ 603.269455][ T5782] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 603.451614][ T5782] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 603.470755][ T5782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.500117][ T5782] usb 4-1: config 0 descriptor?? [ 603.521856][ T5782] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 603.753818][T15232] fuse: Bad value for 'fd' [ 604.033577][T15241] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 604.127656][ T5782] usb 4-1: USB disconnect, device number 54 [ 604.433081][T15252] fuse: Bad value for 'fd' [ 604.506357][T15254] fuse: Bad value for 'fd' [ 604.955366][T15270] netlink: 64523 bytes leftover after parsing attributes in process `syz.2.3011'. [ 605.068291][T15276] fuse: Bad value for 'fd' [ 605.101472][T15278] fuse: Bad value for 'fd' [ 605.241032][T15281] fuse: Bad value for 'rootmode' [ 605.687652][T15298] netlink: 64523 bytes leftover after parsing attributes in process `syz.1.3022'. [ 605.711101][T15300] fuse: Bad value for 'fd' [ 605.847535][T15307] fuse: Bad value for 'rootmode' [ 606.359711][ T6434] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 606.473152][T15327] netlink: 64523 bytes leftover after parsing attributes in process `syz.1.3033'. [ 606.559547][ T6434] usb 3-1: Using ep0 maxpacket: 8 [ 606.576682][ T6434] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 606.593999][ T6434] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 606.605897][ T6434] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 606.631821][ T6434] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 606.645238][ T6434] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 606.663469][ T6434] usb 3-1: config 168 interface 0 has no altsetting 0 [ 606.672281][ T6434] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 606.685220][ T6434] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 606.696867][ T6434] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 606.717533][ T6434] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 606.741651][ T6434] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 606.760683][ T6434] usb 3-1: config 168 interface 0 has no altsetting 0 [ 606.769600][ T6434] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 606.777237][ T6434] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 606.793162][ T6434] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 606.804905][ T6434] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 606.820589][ T6434] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 606.840148][ T6434] usb 3-1: config 168 interface 0 has no altsetting 0 [ 606.888106][ T6434] usb 3-1: string descriptor 0 read error: -22 [ 606.904043][ T6434] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 606.928259][ T6434] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.974600][ T6434] adutux 3-1:168.0: interrupt endpoints not found [ 607.005799][T15340] fuse: Bad value for 'rootmode' [ 607.190900][T15319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3031'. [ 607.361502][T15348] xt_CT: You must specify a L4 protocol and not use inversions on it [ 607.695391][T15357] netlink: 64523 bytes leftover after parsing attributes in process `syz.3.3042'. [ 607.883305][T15365] fuse: Unknown parameter 'use00000000000000000000' [ 608.386480][T15381] netlink: 'syz.0.3053': attribute type 25 has an invalid length. [ 608.394490][T15381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3053'. [ 608.408330][T15381] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 608.510947][T15386] fuse: Unknown parameter 'use00000000000000000000' [ 608.959228][T15403] fuse: Bad value for 'fd' [ 609.073312][T15405] netlink: 'syz.3.3063': attribute type 25 has an invalid length. [ 609.099502][T15405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3063'. [ 609.132823][T15405] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 609.163449][ T6434] usb 3-1: USB disconnect, device number 53 [ 609.642988][T15423] fuse: Invalid rootmode [ 609.772647][T15430] netlink: 'syz.2.3073': attribute type 25 has an invalid length. [ 609.783359][T15430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3073'. [ 609.793991][T15430] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 609.959513][ T6434] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 610.159716][ T6434] usb 1-1: Using ep0 maxpacket: 8 [ 610.171323][ T6434] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 610.178824][ T6434] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 610.196790][ T6434] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 610.209004][ T6434] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 610.222098][ T6434] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 610.236479][ T6434] usb 1-1: config 168 interface 0 has no altsetting 0 [ 610.244986][ T6434] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 610.256865][ T6434] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 610.270950][ T6434] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 610.299579][ T6434] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 610.319995][ T6434] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 610.347527][ T6434] usb 1-1: config 168 interface 0 has no altsetting 0 [ 610.356714][ T6434] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 610.364254][ T6434] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 610.377346][ T6434] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 610.388969][ T6434] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 610.406918][ T6434] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 610.421813][ T6434] usb 1-1: config 168 interface 0 has no altsetting 0 [ 610.433076][ T6434] usb 1-1: string descriptor 0 read error: -22 [ 610.439599][ T6434] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 610.448788][ T6434] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.465054][ T6434] adutux 1-1:168.0: interrupt endpoints not found [ 610.671496][T15426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3072'. [ 610.809061][T15454] xt_CT: You must specify a L4 protocol and not use inversions on it [ 610.817820][ T5782] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 611.016214][ T5782] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 611.039113][ T5782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.047876][ T5782] usb 2-1: Product: syz [ 611.057227][ T5782] usb 2-1: Manufacturer: syz [ 611.062756][ T5782] usb 2-1: SerialNumber: syz [ 611.078770][ T5782] usb 2-1: config 0 descriptor?? [ 611.170863][T14771] Bluetooth: hci1: command 0x0406 tx timeout [ 611.317309][ T5782] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 612.743049][ T6426] usb 1-1: USB disconnect, device number 79 [ 612.969042][ T5782] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 612.995955][ T5782] usb 2-1: USB disconnect, device number 57 [ 613.266979][T15516] tipc: Enabled bearer , priority 0 [ 613.288468][T15516] tipc: Resetting bearer [ 613.310296][T15515] tipc: Disabling bearer [ 613.331625][T15519] fuse: Bad value for 'fd' [ 614.185630][T15550] syzkaller0: entered promiscuous mode [ 614.202948][T15550] syzkaller0: entered allmulticast mode [ 614.839808][ T5782] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 615.045603][ T5782] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 615.066586][ T5782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.084222][ T5782] usb 4-1: Product: syz [ 615.094418][ T5782] usb 4-1: Manufacturer: syz [ 615.104457][ T5782] usb 4-1: SerialNumber: syz [ 615.122742][ T5782] usb 4-1: config 0 descriptor?? [ 615.228545][T15590] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 615.347216][ T5782] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 616.742900][T15616] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 616.974805][ T5782] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 617.036358][ T5782] usb 4-1: USB disconnect, device number 55 [ 617.756021][T15642] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 617.810386][T15642] usb usb8: usbfs: process 15642 (syz.0.3152) did not claim interface 0 before use [ 618.030702][T15650] fuse: Bad value for 'group_id' [ 618.676048][T15671] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 618.721169][T15671] usb usb8: usbfs: process 15671 (syz.3.3163) did not claim interface 0 before use [ 618.775804][T15676] fuse: Bad value for 'group_id' [ 618.889599][ T6425] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 619.082557][ T6425] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 619.092279][ T6425] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.104961][ T6425] usb 1-1: config 0 descriptor?? [ 619.119476][ T6425] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 619.453827][T15699] fuse: Bad value for 'group_id' [ 619.520336][T15700] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 619.598873][T15700] usb usb8: usbfs: process 15700 (syz.2.3175) did not claim interface 0 before use [ 619.743995][ T6425] usb 1-1: USB disconnect, device number 80 [ 619.939107][T15719] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 620.111206][T15723] lo speed is unknown, defaulting to 1000 [ 620.530563][T15738] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 620.724412][T15748] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 621.356501][T15772] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 621.370367][T15769] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 621.409587][T14771] Bluetooth: hci2: command 0x0406 tx timeout [ 621.472802][ T5782] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 621.678805][ T5782] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 621.708965][ T5782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.735256][ T5782] usb 4-1: config 0 descriptor?? [ 621.768048][ T5782] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 622.269483][ T6426] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 622.365121][ T5782] usb 4-1: USB disconnect, device number 56 [ 622.449765][ T6434] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 622.461996][ T6426] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 622.471660][ T6426] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.480064][ T6426] usb 1-1: Product: syz [ 622.484749][ T6426] usb 1-1: Manufacturer: syz [ 622.489716][ T6426] usb 1-1: SerialNumber: syz [ 622.497071][ T6426] usb 1-1: config 0 descriptor?? [ 622.650451][ T6434] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 622.660276][ T6434] usb 3-1: config 0 has no interfaces? [ 622.668899][ T6434] usb 3-1: config 0 has no interfaces? [ 622.678959][ T6434] usb 3-1: config 0 has no interfaces? [ 622.696279][ T6434] usb 3-1: config 0 has no interfaces? [ 622.703579][ T6434] usb 3-1: config 0 has no interfaces? [ 622.724536][ T6434] usb 3-1: config 0 has no interfaces? [ 622.737578][ T6434] usb 3-1: config 0 has no interfaces? [ 622.740354][ T6426] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 622.747239][ T6434] usb 3-1: config 0 has no interfaces? [ 622.764693][ T6434] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 622.774643][ T6434] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 622.790247][ T6434] usb 3-1: Product: syz [ 622.794614][ T6434] usb 3-1: Manufacturer: syz [ 622.799256][ T6434] usb 3-1: SerialNumber: syz [ 622.813195][ T6434] usb 3-1: config 0 descriptor?? [ 622.856829][T15802] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 623.414283][T15814] lo speed is unknown, defaulting to 1000 [ 624.167209][ T6426] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 624.194316][ T6426] usb 1-1: USB disconnect, device number 81 [ 624.429693][ T5782] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 624.454010][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.460545][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.626831][ T5782] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 624.636276][ T5782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.654431][ T5782] usb 4-1: config 0 descriptor?? [ 624.682441][ T5782] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 625.301942][ T5782] usb 4-1: USB disconnect, device number 57 [ 625.661563][ T5837] usb 3-1: USB disconnect, device number 54 [ 625.953270][T15864] binder_alloc: 15863: binder_alloc_buf, no vma [ 626.929644][ T6434] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 627.133469][ T6434] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 627.159344][ T6434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.190612][ T6434] usb 3-1: config 0 descriptor?? [ 627.207934][ T6434] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 627.811514][ T6434] usb 3-1: USB disconnect, device number 55 [ 628.106195][T15915] netlink: 64527 bytes leftover after parsing attributes in process `syz.0.3255'. [ 628.170391][T15919] fuse: Bad value for 'group_id' [ 628.453616][T15929] fuse: Unknown parameter 'user_id00000000000000000000' [ 628.916133][T15943] netlink: 64527 bytes leftover after parsing attributes in process `syz.1.3265'. [ 628.977019][T15946] fuse: Bad value for 'group_id' [ 629.409748][ T5782] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 629.434532][T15959] fuse: Unknown parameter 'user_id00000000000000000000' [ 629.543015][T15963] binder: BINDER_SET_CONTEXT_MGR already set [ 629.549256][T15963] binder: 15962:15963 ioctl 4018620d 200000004a80 returned -16 [ 629.604533][ T5782] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 629.617005][ T5782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.631349][ T5782] usb 4-1: config 0 descriptor?? [ 629.646365][ T5782] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 629.848347][T15970] netlink: 64527 bytes leftover after parsing attributes in process `syz.0.3275'. [ 630.064769][ T5782] gspca_stv06xx: I2C: Read error writing address: -71 [ 630.096387][ T5782] usb 4-1: USB disconnect, device number 58 [ 630.160389][T15975] lo speed is unknown, defaulting to 1000 [ 630.459425][ T6434] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 630.649763][ T6434] usb 2-1: Using ep0 maxpacket: 16 [ 630.661623][ T6434] usb 2-1: config 0 has no interfaces? [ 630.673667][ T6434] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 630.685419][ T6434] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.695447][ T6434] usb 2-1: Product: syz [ 630.701728][ T6434] usb 2-1: Manufacturer: syz [ 630.706558][ T6434] usb 2-1: SerialNumber: syz [ 630.721398][ T6434] usb 2-1: config 0 descriptor?? [ 630.978877][T15975] syzkaller1: entered promiscuous mode [ 630.984904][T15975] syzkaller1: entered allmulticast mode [ 631.063071][ T6431] usb 2-1: USB disconnect, device number 58 [ 631.139526][ T6434] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 631.247885][T15987] binder: BINDER_SET_CONTEXT_MGR already set [ 631.254280][T15987] binder: 15986:15987 ioctl 4018620d 200000004a80 returned -16 [ 631.327007][ T6434] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 631.348546][T15989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3283'. [ 631.357889][ T6434] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.372927][ T6434] usb 1-1: Product: syz [ 631.373839][T15991] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3284'. [ 631.377383][ T6434] usb 1-1: Manufacturer: syz [ 631.399093][ T6434] usb 1-1: SerialNumber: syz [ 631.407112][ T6434] usb 1-1: config 0 descriptor?? [ 631.487080][T15993] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3283'. [ 631.628986][ T6434] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 632.862273][ T6434] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 632.899838][ T6434] usb 1-1: USB disconnect, device number 82 [ 633.438791][T16016] netlink: 'syz.2.3291': attribute type 1 has an invalid length. [ 633.526633][T16021] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3293'. [ 633.796428][T16036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3299'. [ 633.927555][T16040] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3299'. [ 634.241778][ T6432] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 634.436087][ T6432] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 634.464101][ T6432] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.499060][ T6432] usb 4-1: Product: syz [ 634.504939][ T6432] usb 4-1: Manufacturer: syz [ 634.513488][ T6432] usb 4-1: SerialNumber: syz [ 634.531068][ T6432] usb 4-1: config 0 descriptor?? [ 634.608607][T16050] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3305'. [ 634.752383][ T6432] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 635.317445][T16063] netlink: 'syz.0.3310': attribute type 1 has an invalid length. [ 635.594533][T16073] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3314'. [ 635.719834][ T6434] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 635.909479][ T6434] usb 3-1: Using ep0 maxpacket: 8 [ 635.921363][ T6434] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 635.937260][ T6434] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 635.976339][ T6434] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 636.001755][ T6434] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 636.019060][ T6434] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 636.029021][ T6434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.050214][ T6432] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 636.091402][ T6432] usb 4-1: USB disconnect, device number 59 [ 636.289648][ T6434] usb 3-1: GET_CAPABILITIES returned 0 [ 636.295310][ T6434] usbtmc 3-1:16.0: can't read capabilities [ 636.454635][T16095] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3323'. [ 636.519528][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 636.549927][ T5782] usb 3-1: USB disconnect, device number 56 [ 637.062269][T16108] netlink: 'syz.1.3329': attribute type 1 has an invalid length. [ 637.298731][T16116] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.3332'. [ 637.361394][T16118] lo speed is unknown, defaulting to 1000 [ 637.659438][ T6432] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 637.839810][ T6432] usb 1-1: Using ep0 maxpacket: 16 [ 637.857114][ T6432] usb 1-1: config 0 has no interfaces? [ 637.872359][ T6432] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 637.889685][ T6432] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.897743][ T6432] usb 1-1: Product: syz [ 637.909546][ T6434] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 637.918356][ T6432] usb 1-1: Manufacturer: syz [ 637.929388][ T6432] usb 1-1: SerialNumber: syz [ 637.936667][ T6432] usb 1-1: config 0 descriptor?? [ 638.101488][ T6434] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.133908][ T6434] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.151291][ T6434] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 638.170509][ T6434] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 638.180789][ T6434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.197939][ T6434] usb 3-1: config 0 descriptor?? [ 638.275028][ T6432] usb 1-1: USB disconnect, device number 83 [ 638.636387][ T6434] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 638.657525][ T6434] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 639.260715][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3349'. [ 639.382738][T16167] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3349'. [ 639.543259][ T5837] usb 3-1: USB disconnect, device number 57 [ 639.822020][T16176] fuse: Unknown parameter '0x0000000000000003' [ 641.324490][T16215] binder: BINDER_SET_CONTEXT_MGR already set [ 641.331752][T16215] binder: 16212:16215 ioctl 4018620d 200000004a80 returned -16 [ 641.380247][ T5782] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 641.488083][T16221] syzkaller0: entered promiscuous mode [ 641.494778][T16221] syzkaller0: entered allmulticast mode [ 641.585528][ T5782] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 641.594741][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.608148][ T5782] usb 3-1: Product: syz [ 641.614221][ T5782] usb 3-1: Manufacturer: syz [ 641.626377][ T5782] usb 3-1: SerialNumber: syz [ 641.641496][ T5782] usb 3-1: config 0 descriptor?? [ 641.745155][T16226] [ 641.747548][T16226] ============================================ [ 641.753720][T16226] WARNING: possible recursive locking detected [ 641.759918][T16226] syzkaller #0 Not tainted [ 641.764374][T16226] -------------------------------------------- [ 641.770554][T16226] syz.3.3371/16226 is trying to acquire lock: [ 641.776649][T16226] ffffffff8da35bf8 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0x118/0xf10 [ 641.787013][T16226] [ 641.787013][T16226] but task is already holding lock: [ 641.794415][T16226] ffffffff8da35bf8 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0x118/0xf10 [ 641.804675][T16226] [ 641.804675][T16226] other info that might help us debug this: [ 641.812774][T16226] Possible unsafe locking scenario: [ 641.812774][T16226] [ 641.820255][T16226] CPU0 [ 641.823567][T16226] ---- [ 641.826873][T16226] lock(qp_broker_list.mutex); [ 641.831770][T16226] lock(qp_broker_list.mutex); [ 641.836665][T16226] [ 641.836665][T16226] *** DEADLOCK *** [ 641.836665][T16226] [ 641.844850][T16226] May be due to missing lock nesting notation [ 641.844850][T16226] [ 641.853223][T16226] 1 lock held by syz.3.3371/16226: [ 641.858374][T16226] #0: ffffffff8da35bf8 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0x118/0xf10 [ 641.869062][T16226] [ 641.869062][T16226] stack backtrace: [ 641.874989][T16226] CPU: 0 PID: 16226 Comm: syz.3.3371 Not tainted syzkaller #0 [ 641.882559][T16226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 641.892651][T16226] Call Trace: [ 641.895959][T16226] [ 641.898921][T16226] dump_stack_lvl+0x18c/0x250 [ 641.903752][T16226] ? show_regs_print_info+0x20/0x20 [ 641.908987][T16226] ? print_deadlock_bug+0x435/0x5d0 [ 641.914267][T16226] __lock_acquire+0x5dbc/0x7d40 [ 641.919163][T16226] ? verify_lock_unused+0x140/0x140 [ 641.924384][T16226] ? mark_lock+0x94/0x320 [ 641.928748][T16226] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 641.934777][T16226] ? lock_chain_count+0x20/0x20 [ 641.939661][T16226] lock_acquire+0x19e/0x420 [ 641.944209][T16226] ? vmci_qp_broker_detach+0x118/0xf10 [ 641.949715][T16226] ? __might_sleep+0xe0/0xe0 [ 641.954389][T16226] ? read_lock_is_recursive+0x20/0x20 [ 641.959802][T16226] ? kasan_set_track+0x5f/0x70 [ 641.964645][T16226] ? kasan_save_free_info+0x2e/0x50 [ 641.969876][T16226] ? ____kasan_slab_free+0x126/0x1e0 [ 641.975196][T16226] ? slab_free_freelist_hook+0x130/0x1a0 [ 641.980857][T16226] __mutex_lock+0x136/0xcc0 [ 641.985489][T16226] ? vmci_qp_broker_detach+0x118/0xf10 [ 641.990988][T16226] ? exit_to_user_mode_loop+0xe6/0x110 [ 641.996477][T16226] ? exit_to_user_mode_prepare+0xee/0x180 [ 642.002224][T16226] ? syscall_exit_to_user_mode+0x1a/0x50 [ 642.007904][T16226] ? do_syscall_64+0x61/0xb0 [ 642.012523][T16226] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 642.018713][T16226] ? vmci_qp_broker_detach+0x118/0xf10 [ 642.024305][T16226] ? mutex_lock_nested+0x20/0x20 [ 642.029293][T16226] ? mark_lock+0x94/0x320 [ 642.033674][T16226] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 642.039698][T16226] vmci_qp_broker_detach+0x118/0xf10 [ 642.045013][T16226] ? kasan_quarantine_put+0xd8/0x220 [ 642.050330][T16226] ? lockdep_hardirqs_on+0x98/0x150 [ 642.055561][T16226] ? qp_notify_peer+0x210/0x210 [ 642.060450][T16226] ? slab_free_freelist_hook+0x130/0x1a0 [ 642.066111][T16226] ? vmci_ctx_put+0x5ce/0xc10 [ 642.070820][T16226] ? __kmem_cache_free+0xba/0x1e0 [ 642.075878][T16226] vmci_ctx_put+0x62d/0xc10 [ 642.080420][T16226] ? vmci_ctx_put+0x142/0xc10 [ 642.085120][T16226] ? preempt_schedule_common+0x82/0xc0 [ 642.090617][T16226] ? vmci_ctx_destroy+0x100/0x100 [ 642.095665][T16226] ? preempt_schedule+0xc0/0xd0 [ 642.100539][T16226] ? schedule_preempt_disabled+0x20/0x20 [ 642.106196][T16226] ? __lock_acquire+0x7d40/0x7d40 [ 642.111247][T16226] ? __rwlock_init+0x150/0x150 [ 642.116048][T16226] vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 642.121707][T16226] vmci_datagram_dispatch+0x44d/0xc60 [ 642.127107][T16226] ? vmci_is_context_owner+0xd0/0xd0 [ 642.132423][T16226] vmci_qp_broker_detach+0x8d7/0xf10 [ 642.137736][T16226] ? qp_notify_peer+0x210/0x210 [ 642.142612][T16226] ? vmci_ctx_put+0x5ce/0xc10 [ 642.147310][T16226] ? __kmem_cache_free+0xba/0x1e0 [ 642.152365][T16226] vmci_ctx_put+0x62d/0xc10 [ 642.156896][T16226] ? vmci_ctx_put+0x142/0xc10 [ 642.161623][T16226] ? vmci_ctx_destroy+0x100/0x100 [ 642.166670][T16226] ? do_raw_spin_lock+0x11f/0x2c0 [ 642.171731][T16226] ? __rwlock_init+0x150/0x150 [ 642.176529][T16226] ? do_raw_spin_unlock+0x121/0x230 [ 642.181763][T16226] vmci_host_close+0x9b/0x160 [ 642.186476][T16226] ? vmci_host_open+0xe0/0xe0 [ 642.191183][T16226] __fput+0x234/0x970 [ 642.195206][T16226] task_work_run+0x1d4/0x260 [ 642.199834][T16226] ? task_work_cancel+0x220/0x220 [ 642.204898][T16226] ? exit_to_user_mode_loop+0x3b/0x110 [ 642.210409][T16226] exit_to_user_mode_loop+0xe6/0x110 [ 642.215725][T16226] exit_to_user_mode_prepare+0xee/0x180 [ 642.221305][T16226] syscall_exit_to_user_mode+0x1a/0x50 [ 642.226804][T16226] do_syscall_64+0x61/0xb0 [ 642.231255][T16226] ? clear_bhb_loop+0x40/0x90 [ 642.235981][T16226] ? clear_bhb_loop+0x40/0x90 [ 642.240682][T16226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 642.246628][T16226] RIP: 0033:0x7f962899ce59 [ 642.251077][T16226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.270710][T16226] RSP: 002b:00007f962987f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 642.279162][T16226] RAX: 0000000000000000 RBX: 00007f9628c16090 RCX: 00007f962899ce59 [ 642.287151][T16226] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000007 [ 642.295142][T16226] RBP: 00007f9628a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 642.303139][T16226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.311133][T16226] R13: 00007f9628c16128 R14: 00007f9628c16090 R15: 00007fffb8851a68 [ 642.319131][T16226] [ 642.345182][ T5782] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 643.758398][ T5782] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 643.769910][ T5782] usb 3-1: USB disconnect, device number 58