last executing test programs: 14.14117265s ago: executing program 3 (id=807): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x288}, &(0x7f0000000340), &(0x7f0000000540)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 12.518061344s ago: executing program 0 (id=811): syz_open_dev$evdev(&(0x7f00000000c0), 0x9, 0x206002) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_connect(0x5, 0x51, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000a00)={0xc, &(0x7f0000000900)={0x0, 0x3, 0x2, {0x2, 0x31}}, 0x0}, &(0x7f0000000cc0)={0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="40071200faff"], 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x20, 0x87, 0x2, 0xb}, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x10, &(0x7f0000000040)={0x20, 0xd, 0xb, "4fe3a53d04c7e949cbba14"}, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b01, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615cf8c6e94b3ac320fa50046f5c18ac35b49243870e4e6b90c76177feda5469369b2b5a4739cc0b68c1772f1c9b9320d88426bc8f139429054c85b62f2a1dfc705453bea4cabf1f5eee5a0d301fb7c62e36dba0"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) 12.243526892s ago: executing program 2 (id=814): unshare(0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x5e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[], 0x18}], 0x1}, 0x0) 10.464452074s ago: executing program 0 (id=815): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) unshare(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x4, 0x1, 0x800}) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80102, 0x0) unshare(0x44010500) ioctl$TUNSETIFF(r6, 0x400454ca, 0xffffffffffffffff) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x2}) write$usbip_server(r0, &(0x7f0000000240)=ANY=[], 0x1ce8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0x1, 0x4}, 0x6) fcntl$lock(r0, 0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x81}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) 8.652434741s ago: executing program 0 (id=817): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x100000a, 0x42031, 0xffffffffffffffff, 0x100000000) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/200, 0xc8}], 0x1, 0x91, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r3, &(0x7f0000000040)='./mnt\x00', r3, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) 8.566099861s ago: executing program 3 (id=818): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4044800) fanotify_mark(0xffffffffffffffff, 0x105, 0x44009975, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x28, 0x7, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc44d1c01000bc49}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001f6c0)=""/102400, 0x19000) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioprio_set$pid(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04223d046586cd70e6073194f835a7080003ffffffab43ea6e00000000ffcf0702aaaaaaaaaa12ff035a2246f60700ff0000000000000a0c02db6ae90800090000000000000000"], 0x40) r3 = fsopen(&(0x7f0000000080)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) ioprio_get$pid(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x400}, &(0x7f0000001100)=0x8) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="24040000", @ANYRES16=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="1c02028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000040000100240001006d625f74785f686173685f746f5f706f72745f6d617070696e67000000", @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff01000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080006", @ANYRES32, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100008040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040008000000080001"], 0x424}, 0x1, 0x0, 0x0, 0x408c0}, 0x40001) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 8.294343459s ago: executing program 4 (id=820): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000480)=""/82, 0x52, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000"], 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x4014) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000010401013100000000000000"], 0x24}}, 0x0) close(0x3) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000640)={0x38, r4, 0x1, 0x30bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048044}, 0x20004014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x4c, r4, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000005}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x5c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}]}]}, 0x5c}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x5c, r8, 0x200, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x43, 0x3, "1dea4ca9560da920bad5ad26aa4e2de11a02de2637419b8b20b8f585c9a2efd5d93a5fb3f38118737cd3550b9eb6cefab551b08f8af70d8ab131c9360882c1"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 8.048720735s ago: executing program 3 (id=821): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) listen(r2, 0x1000) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xd8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffe9d, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$SO_COOKIE(r3, 0x1, 0x39, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003900)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000008400000000000000"], 0x18, 0x4}], 0x1, 0x40010) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r7, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r9}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480800b0001007470726f7879000014000280080002400000001108000140000000020900010073797a3000000000140000001100010000000000000000000700000a"], 0xc4}}, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 7.825516019s ago: executing program 2 (id=823): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRESHEX=0x0], 0x0) 7.685408363s ago: executing program 3 (id=824): r0 = socket(0x25, 0x1, 0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001840)={0x90000001}) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1b0}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000c40), 0x30000, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000280)='mountinfo\x00') fcntl$getownex(r2, 0x10, &(0x7f0000000c80)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000810}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x5d59, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @local}}}]}]}, 0xc8}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) getpgid(r4) ioctl$sock_SIOCOUTQNSD(r8, 0x894b, &(0x7f0000000080)) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f0000000cc0)={r1, r1, 0x8}) syz_usb_connect$uac2(0x3, 0x11b, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x1010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x109, 0x3, 0x1, 0x24, 0xc0, 0x6, {0x8, 0xb, 0x2, 0x1, 0x1, 0xa, 0x20, 0xff}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0xa, 0x5b, 0x6}, [@input_terminal={0x10, 0x24, 0x2, 0x3, 0x1ff, 0x1, 0x1, 0x2, 0x8, 0x1, 0x3a, 0x80}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x101, 0x0, 0x3, 0x1, 0x1, 0x9}, @input_terminal={0x10, 0x24, 0x2, 0x1, 0x205, 0x1, 0xbf, 0x2, 0x1000, 0x5, 0x8e, 0x7f}, @sample_rate={0x13, 0x24, 0xd, 0x4, 0x1, 0x4, [0x0, 0x0, 0x1, 0x1, 0x3, 0x2]}, @effect_unit={0x9, 0x24, 0x7, 0x6, 0x1, 0x2, [0x0]}, @extension_unit={0xa, 0x24, 0x9, 0x6, 0x1, 0x5, "ea4e00"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x9, 0x10, 0x0, 0x5, 0x3, 0x5de0, 0x95}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x4, 0x2, 0x5, "ba31"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xc7, 0x3, 0xc9, 0x8, "7cb4a9b7"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x4, 0x40, "54f0c7"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x1, 0xa7, 0x8, "c7", "1682b9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x3, 0x9, 0x7f, {0x8, 0x25, 0x1, 0x40, 0x30, 0x6, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1, 0x6, 0x40, "d1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x5, 0x3, {0x8, 0x25, 0x1, 0x83, 0x0, 0x2, 0xffff}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x6, 0x0, 0x1, 0xff, 0x40}, 0x89, &(0x7f00000001c0)={0x5, 0xf, 0x89, 0x2, [@generic={0x79, 0x10, 0xa, "7a878efe37f81e234a8203c88314f0fadcedf39fbd832243454ef1ea4181e3484a5286ac901aa02353da371a4e2f56e1f7309a097c068c48654b6ca02a3d7eac77154e6867f538c8348b09469266c209ce96a53e2309270427369c6b5e8e0150ab6665aba4320c844255dad1bf15ccba05583141a145"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x6, 0x8, 0xe2, 0x71}]}, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41f}}, {0xc1, &(0x7f0000000340)=@string={0xc1, 0x3, "1c686f299f9606302728218c8082a325e3ca54fcd5e605bbfcd5c170320ed5039ada6e5e9b4ebbd953fa50c423f17536c2b8e73b3fbab642ccd882bcdaa464788b306d04e00c02d1f2290567bc33c6d264744a3df0dc335af44d22a13319ea9240b13dfcb63f8d505f1ad07d536126fda4b509625af99b94897c10819da8f554cb6e16be46fb74ecf2230a4778444d08e3834647c47ce03eccd2fb5e4daf57110e9a223af71b4823998fdd55bb6988686ff22a3d0d34f533a65620061d751a"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x843}}]}) 6.692586624s ago: executing program 0 (id=827): syz_open_dev$evdev(&(0x7f00000000c0), 0x9, 0x206002) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_connect(0x5, 0x51, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000a00)={0xc, &(0x7f0000000900)={0x0, 0x3, 0x2, {0x2, 0x31}}, 0x0}, &(0x7f0000000cc0)={0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="40071200faff"], 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x20, 0x87, 0x2, 0xb}, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000140), 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b01, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615cf8c6e94b3ac320fa50046f5c18ac35b49243870e4e6b90c76177feda5469369b2b5a4739cc0b68c1772f1c9b9320d88426bc8f139429054c85b62f2a1dfc705453bea4cabf1f5eee5a0d301fb7c62e36dba0"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) 6.56295033s ago: executing program 4 (id=828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xa, @mcast2, 0x4}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @empty}, {0x2, 0xfff9, 0x8, @empty, 0xffffffff}, r4, 0x9dffffff}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r4, 0x3}}, 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b29, &(0x7f0000000040)={'wlan1\x00'}) r6 = syz_open_dev$swradio(0x0, 0x0, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x83, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xcd}, 0x1c) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r10, 0x4000003, &(0x7f00000000c0)) ioctl$VIDIOC_S_PRIORITY(r6, 0x40045644, 0x0) 6.123321937s ago: executing program 4 (id=829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) setxattr$trusted_overlay_redirect(0x0, &(0x7f00000001c0), &(0x7f0000002240)='./file1/file2\x00', 0xe, 0x3) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc0405602, &(0x7f0000000100)=@fd={0xfffffffe, 0x1, 0x4, 0x0, 0x3, {0x0, 0xea60}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x82, ';\'S;'}, 0x4}) syz_emit_vhci(0x0, 0x17) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1000, 0x40}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) 5.488808819s ago: executing program 2 (id=830): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(0x0, 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 4.281953668s ago: executing program 2 (id=831): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000400)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e", 0x2c, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020000}) close(0x3) 4.279804152s ago: executing program 4 (id=832): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x40) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00)=""/94, 0x5e}, 0x7}], 0x2, 0x20000020, 0x0) 4.228893735s ago: executing program 3 (id=833): readv(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000b40)=0xe) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="e26c", 0x2}], 0x1) 3.832339781s ago: executing program 1 (id=834): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x20980, 0x0) pread64(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x7d) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)="1b54beef9765f16d31f668d2db37f75318510ca6025213c6788499c98b9f0e44fbf86f9f5723d4dd85b291e05f5e2aff1bf823e761dd38fed3c9d4fd078734acf85dae7e65c031996462832f2e43e417a5bb2caf853034fa56ca2546e93a459f675d2eb87a6a770800000000000000f27e32f6198656ad1152d7", 0x7a}, {&(0x7f00000005c0)="fb1add96eb5c4c", 0x7}], 0x2, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000880}], 0x1, 0x4004054) recvmsg(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000003f80)=""/4117, 0x1015}], 0x1}, 0x20f2) pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)=""/69, 0x45}], 0x100000000000015a}, 0x9}], 0x1, 0x40012303, 0x0) 3.121957007s ago: executing program 4 (id=835): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) socket$inet6(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000cc2e3f2063072110c08e0000000109023f00010000000009048800"], 0x0) 3.027091321s ago: executing program 0 (id=836): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x20980, 0x0) pread64(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x7d) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)="1b54beef9765f16d31f668d2db37f75318510ca6025213c6788499c98b9f0e44fbf86f9f5723d4dd85b291e05f5e2aff1bf823e761dd38fed3c9d4fd078734acf85dae7e65c031996462832f2e43e417a5bb2caf853034fa56ca2546e93a459f675d2eb87a6a770800000000000000f27e32f6198656ad1152d7", 0x7a}, {&(0x7f00000005c0)="fb1add96eb5c4c", 0x7}], 0x2, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000880}], 0x1, 0x4004054) recvmsg(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000003f80)=""/4117, 0x1015}], 0x1}, 0x20f2) pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)=""/69, 0x45}], 0x100000000000015a}, 0x9}], 0x1, 0x40012303, 0x0) 2.94300383s ago: executing program 2 (id=837): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380), 0x0, 0x4000000}], 0x1, 0x400c0) r2 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024"], 0x250}}, 0x2000c000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$FS_IOC_GETVERSION(r7, 0xc040ff0b, &(0x7f0000000180)) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x3, 0x4) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.690788073s ago: executing program 1 (id=838): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {0x0}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 2.258822922s ago: executing program 1 (id=839): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00)=""/94, 0x5e}, 0x7}], 0x2, 0x20000020, 0x0) 2.166677567s ago: executing program 2 (id=840): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000004c0)={0x40, 0x8, 0x6, "a61623bea283"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000600)={0x20, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.161495584s ago: executing program 1 (id=841): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(0x0, 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 2.090389624s ago: executing program 0 (id=842): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 896.473421ms ago: executing program 1 (id=843): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) r3 = socket(0x10, 0x80003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000000", @ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r5, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200"], 0x64}}, 0x0) write(r3, &(0x7f0000000080)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa00925b04a3bcbc166f1157ef49853a26a130cb4749828f882702664e37eb147f1b78587ca3293eb4fa07de3dc7d7af813b4e5fb057c725bf6ee72daf9e9b94ca38f4e229683d2d94889d1ddc9a0a552f1a9d64610033557f8f5d566868bafecdb3d8caf9def7546503e3f52bacbd31586a40397f3c8de938ad53f5930dda258585568cd4e1419ad1899de8360eda8ddc85a20f7154ad14bce7e3d68d94f3dbd3d1c10ed29708c806a3ecc4e2ceb11bf94dc41d099b07de84cca6774952b89303a0f809eea19d161f4c0b9be11044", 0xe9) syz_usb_connect(0x0, 0x24, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) 867.056347ms ago: executing program 3 (id=844): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 171.629721ms ago: executing program 4 (id=845): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x40) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00)=""/94, 0x5e}, 0x7}], 0x2, 0x20000020, 0x0) 0s ago: executing program 1 (id=846): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b00000009040000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x22, 0x17, 0x4a, 0x20, 0x4b4, 0x861f, 0xf9d6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_disconnect(r0) kernel console output (not intermixed with test programs): : IR keymap rc-hauppauge not found [ 215.093436][ T9] Registered IR keymap rc-empty [ 215.174501][ T5888] usb 3-1: USB disconnect, device number 19 [ 215.196859][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.591923][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.643013][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 215.661732][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 215.672729][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input25 [ 215.714396][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.751804][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.771774][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.792392][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.811756][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 215.811811][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.823909][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 215.823949][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.823970][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.823991][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.824009][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.824041][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 215.824061][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.011768][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 216.036742][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 216.043959][ T5888] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 216.057334][ T24] usb 4-1: usb_control_msg returned -32 [ 216.127656][ T24] usbtmc 4-1:16.0: can't read capabilities [ 216.341749][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 216.390911][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 216.582963][ T30] audit: type=1400 audit(1772329985.290:298): avc: denied { write } for pid=7437 comm="syz.3.420" name="usbtmc0" dev="devtmpfs" ino=3126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 216.612083][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.625659][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 216.665099][ T7450] usbtmc 4-1:16.0: INDICATOR_PULSE returned 0 [ 216.691178][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.709119][ T5888] usb 3-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 216.719438][ T9] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 216.740804][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.749552][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 216.769543][ T5888] usb 3-1: config 0 descriptor?? [ 216.780193][ T9] usb 1-1: USB disconnect, device number 18 [ 216.914300][ T24] usb 4-1: USB disconnect, device number 26 [ 217.241766][ T50] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 217.362390][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 217.392422][ T5888] usb 3-1: string descriptor 0 read error: -71 [ 217.400303][ T5888] uclogic 0003:5543:0081.0006: failed retrieving string descriptor #200: -71 [ 217.409228][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 217.416811][ T5888] uclogic 0003:5543:0081.0006: failed retrieving pen parameters: -71 [ 217.427588][ T50] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 217.451035][ T50] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.462750][ T5888] uclogic 0003:5543:0081.0006: failed probing pen v2 parameters: -71 [ 217.471175][ T50] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 217.481896][ T5888] uclogic 0003:5543:0081.0006: failed probing parameters: -71 [ 217.497838][ T5888] uclogic 0003:5543:0081.0006: probe with driver uclogic failed with error -71 [ 217.507191][ T50] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 217.521462][ T50] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.536109][ T5888] usb 3-1: USB disconnect, device number 20 [ 217.543273][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.554834][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.567030][ T50] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 217.577313][ T9] usb 2-1: config 1 interface 1 has no altsetting 1 [ 217.585450][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.706782][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.721299][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.739812][ T9] usb 2-1: Product: syz [ 217.749686][ T9] usb 2-1: Manufacturer: syz [ 217.761279][ T9] usb 2-1: SerialNumber: syz [ 217.784299][ T9] usb 2-1: selecting invalid altsetting 1 [ 217.983796][ T50] usb 5-1: usb_control_msg returned -32 [ 217.989478][ T50] usbtmc 5-1:16.0: can't read capabilities [ 217.994199][ T7455] netlink: 'syz.1.422': attribute type 2 has an invalid length. [ 218.033428][ T7455] !: left promiscuous mode [ 218.767717][ T7481] input: syz1 as /devices/virtual/input/input26 [ 218.848920][ T30] audit: type=1400 audit(1772329987.590:299): avc: denied { write } for pid=7476 comm="syz.0.429" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 218.949288][ T5888] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 219.137660][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 219.235128][ T5888] usb 3-1: config 0 has an invalid interface number: 136 but max is 0 [ 219.243373][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.256159][ T5888] usb 3-1: config 0 has no interface number 0 [ 219.270730][ T5888] usb 3-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 219.295642][ T5888] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 219.314301][ T5888] usb 3-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 219.339020][ T5888] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 219.374971][ T5888] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 219.399927][ T5888] usb 3-1: config 0 interface 136 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 219.431775][ T5805] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 219.440277][ T5888] usb 3-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 219.466480][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.489090][ T5888] usb 3-1: config 0 descriptor?? [ 219.515963][ T5888] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 219.629292][ T5805] usb 4-1: Using ep0 maxpacket: 16 [ 219.680977][ T5805] usb 4-1: config 5 has an invalid interface number: 168 but max is 0 [ 219.701394][ T5805] usb 4-1: config 5 has no interface number 0 [ 219.715923][ T5805] usb 4-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 219.743922][ T5805] usb 4-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 219.772838][ T5888] snd-usb-audio 3-1:0.136: probe with driver snd-usb-audio failed with error -2 [ 219.782190][ T5805] usb 4-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0x23, changing to 0x3 [ 219.895052][ T5805] usb 4-1: config 5 interface 168 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 219.905892][ T5805] usb 4-1: config 5 interface 168 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 219.935197][ T5805] usb 4-1: config 5 interface 168 has no altsetting 0 [ 219.985425][ T5888] usb 5-1: USB disconnect, device number 23 [ 219.995806][ T9] cdc_ncm 2-1:1.0: bind() failure [ 220.021434][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 220.069715][ T5805] usb 4-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 220.080890][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.093098][ T9] cdc_ncm 2-1:1.1: bind() failure [ 220.125833][ T5805] usb 4-1: Product: syz [ 220.138493][ T9] usb 2-1: USB disconnect, device number 18 [ 220.148228][ T5805] usb 4-1: Manufacturer: syz [ 220.198924][ T5805] usb 4-1: SerialNumber: syz [ 220.239244][ T7483] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 220.461760][ T56] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 220.462570][ T5805] usb 4-1: NFC: Unable to get FW version [ 220.484234][ T5805] pn533_usb 4-1:5.168: probe with driver pn533_usb failed with error -90 [ 220.497039][ T5805] usb 4-1: USB disconnect, device number 27 [ 220.531744][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 220.631723][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 220.639608][ T56] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 220.649006][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.657037][ T56] usb 5-1: Product: syz [ 220.661928][ T56] usb 5-1: Manufacturer: syz [ 220.666534][ T56] usb 5-1: SerialNumber: syz [ 220.673800][ T56] usb 5-1: config 0 descriptor?? [ 220.691721][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 220.698190][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.708686][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.719803][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 220.729501][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 220.739216][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.753287][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 220.762953][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 220.770944][ T9] usb 2-1: Manufacturer: syz [ 220.777824][ T9] usb 2-1: config 0 descriptor?? [ 220.884244][ T56] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 221.062052][ T9] rc_core: IR keymap rc-hauppauge not found [ 221.068908][ T9] Registered IR keymap rc-empty [ 221.074091][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.091779][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.112313][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 221.124985][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input27 [ 221.139046][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.161831][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.181924][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.201781][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.221794][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.241808][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.271766][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.291779][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.311804][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.361844][ T24] usb 3-1: USB disconnect, device number 21 [ 221.373053][ T7496] netlink: 332 bytes leftover after parsing attributes in process `syz.2.435'. [ 221.382472][ T7496] netlink: 196 bytes leftover after parsing attributes in process `syz.2.435'. [ 221.422301][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.445178][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 221.459961][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 221.477935][ T9] usb 2-1: USB disconnect, device number 19 [ 221.702793][ T56] usb write operation failed. (-71) [ 221.709767][ T56] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 221.750987][ T56] dvbdev: DVB: registering new adapter (Terratec H7) [ 221.759725][ T56] usb 5-1: media controller created [ 221.770133][ T56] usb read operation failed. (-71) [ 221.779773][ T56] usb write operation failed. (-71) [ 221.800585][ T56] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 221.811929][ T56] usb 5-1: USB disconnect, device number 24 [ 221.972317][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 222.082064][ T7509] syzkaller0: entered promiscuous mode [ 222.088706][ T7509] syzkaller0: entered allmulticast mode [ 222.163525][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 222.190319][ T7510] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 222.196962][ T7510] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 222.206320][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 222.236598][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 222.258925][ T7510] vhci_hcd vhci_hcd.0: Device attached [ 222.269079][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.543583][ T7502] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 222.564367][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 222.601826][ T5862] usb 40-1: SetAddress Request (2) to port 0 [ 222.610130][ T5862] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 222.851851][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 222.883549][ T7511] vhci_hcd: connection reset by peer [ 222.890916][ T12] vhci_hcd vhci_hcd.3: stop threads [ 222.903629][ T12] vhci_hcd vhci_hcd.3: release socket [ 222.942995][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 223.094359][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 223.128626][ T24] usb 1-1: USB disconnect, device number 19 [ 223.153217][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 223.170396][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.208985][ T7529] netlink: 'syz.4.445': attribute type 2 has an invalid length. [ 223.231601][ T7529] !: entered promiscuous mode [ 223.240540][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.245601][ T7527] netlink: 'syz.4.445': attribute type 2 has an invalid length. [ 223.258038][ T7527] !: left promiscuous mode [ 223.289836][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.303760][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.332791][ T9] usb 2-1: Product: syz [ 223.341736][ T9] usb 2-1: Manufacturer: syz [ 223.351711][ T9] usb 2-1: SerialNumber: syz [ 223.947917][ T9] usb 2-1: 0:2 : does not exist [ 224.051777][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 224.162653][ T5805] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 224.303581][ T5805] usb 1-1: device descriptor read/64, error -71 [ 224.591845][ T5805] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 224.825579][ T9] usb 2-1: USB disconnect, device number 20 [ 224.866063][ T5805] usb 1-1: device descriptor read/64, error -71 [ 224.881725][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 224.889661][ T24] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 224.900137][ T24] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 224.927358][ T24] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.939450][ T24] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 224.965137][ T7117] udevd[7117]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.986548][ T24] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 225.003432][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.011508][ T24] usb 4-1: Product: syz [ 225.016060][ T24] usb 4-1: Manufacturer: syz [ 225.020687][ T24] usb 4-1: SerialNumber: syz [ 225.036045][ T5805] usb usb1-port1: attempt power cycle [ 225.038719][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 225.056366][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input28 [ 225.110056][ T7542] Zero length message leads to an empty skb [ 225.364871][ T24] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 225.404842][ T24] (id 0x00) [ 225.477735][ T5805] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 225.938328][ T7552] blktrace: Concurrent blktraces are not allowed on loop3 [ 226.355641][ T5805] usb 1-1: device descriptor read/8, error -71 [ 226.443650][ T24] rc_core: IR keymap rc-imon-pad not found [ 226.449486][ T24] Registered IR keymap rc-empty [ 226.473393][ T24] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 226.511969][ T24] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 226.552201][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 226.573960][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input29 [ 226.624499][ T24] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:28> initialized [ 226.712059][ T5805] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 226.732990][ T5805] usb 1-1: device descriptor read/8, error -71 [ 226.842471][ T5805] usb usb1-port1: unable to enumerate USB device [ 227.214529][ T5875] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 227.373385][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 227.383723][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 227.414228][ T5875] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 227.431732][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.465583][ T5875] usb 3-1: Product: syz [ 227.475086][ T5875] usb 3-1: Manufacturer: syz [ 227.493168][ T5875] usb 3-1: SerialNumber: syz [ 227.500583][ T7534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.502527][ T5875] usb 3-1: config 0 descriptor?? [ 227.526513][ T7534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.537279][ T5875] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 227.562335][ T5875] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 227.871279][ T5862] usb 40-1: device descriptor read/8, error -110 [ 227.901513][ T7575] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 228.294772][ T5862] usb usb40-port1: attempt power cycle [ 228.301956][ T5875] em28xx 3-1:0.0: chip ID is em2874 [ 228.599782][ T5875] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 228.624463][ T5875] em28xx 3-1:0.0: board has no eeprom [ 228.814215][ T24] usb 4-1: USB disconnect, device number 28 [ 228.892834][ T5862] usb usb40-port1: unable to enumerate USB device [ 228.908675][ T5875] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 228.933226][ T5875] em28xx 3-1:0.0: dvb set to bulk mode. [ 228.961112][ T5862] em28xx 3-1:0.0: Binding DVB extension [ 229.875790][ T5875] usb 3-1: USB disconnect, device number 22 [ 229.942663][ T5875] em28xx 3-1:0.0: Disconnecting em28xx [ 229.950460][ T5862] em28xx 3-1:0.0: Registering input extension [ 230.072534][ T5862] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 230.107013][ T5862] Registered IR keymap rc-empty [ 230.120336][ T5862] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 230.242361][ T5862] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input30 [ 230.280509][ T5862] em28xx 3-1:0.0: Input extension successfully initialized [ 230.303970][ T5875] em28xx 3-1:0.0: Closing input extension [ 230.341767][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 230.352013][ T5916] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 230.403867][ T5875] em28xx 3-1:0.0: Freeing device [ 230.491821][ T24] usb 5-1: device descriptor read/64, error -71 [ 230.511941][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 230.519078][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.544941][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 230.575781][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 230.610920][ T5916] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 230.620178][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.634855][ T5916] usb 2-1: Product: syz [ 230.646724][ T5916] usb 2-1: Manufacturer: syz [ 230.660661][ T5916] usb 2-1: SerialNumber: syz [ 230.686145][ T5916] usb 2-1: config 0 descriptor?? [ 230.741729][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 230.762444][ T5916] rc_core: IR keymap rc-streamzap not found [ 230.777157][ T5916] Registered IR keymap rc-empty [ 230.798060][ T5916] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 230.830448][ T5916] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31 [ 230.891741][ T24] usb 5-1: device descriptor read/64, error -71 [ 231.022061][ T24] usb usb5-port1: attempt power cycle [ 231.040677][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.062345][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.165652][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.174465][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.198239][ T5862] usb 2-1: USB disconnect, device number 21 [ 231.226589][ T30] audit: type=1400 audit(1772329999.990:300): avc: denied { bind } for pid=7615 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 231.563369][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 231.592713][ T24] usb 5-1: device descriptor read/8, error -71 [ 231.709717][ T30] audit: type=1400 audit(1772330000.420:301): avc: denied { ioctl } for pid=7619 comm="syz.3.469" path="socket:[19097]" dev="sockfs" ino=19097 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 231.760380][ T30] audit: type=1400 audit(1772330000.520:302): avc: denied { connect } for pid=7619 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 231.972128][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 232.179974][ T24] usb 5-1: device descriptor read/8, error -71 [ 232.374151][ T24] usb usb5-port1: unable to enumerate USB device [ 233.223459][ T5916] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 233.478975][ T30] audit: type=1400 audit(1772330002.050:303): avc: denied { getopt } for pid=7636 comm="syz.4.474" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 233.738846][ T5916] usb 1-1: unable to get BOS descriptor or descriptor too short [ 233.762636][ T5916] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 233.771335][ T5916] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 233.787934][ T5916] usb 1-1: config 63 has no interface number 0 [ 233.804588][ T5916] usb 1-1: config 63 interface 66 has no altsetting 0 [ 233.840066][ T5916] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 233.860435][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.895356][ T5916] usb 1-1: Product: syz [ 233.903524][ T5916] usb 1-1: Manufacturer: syz [ 233.913876][ T5916] usb 1-1: SerialNumber: syz [ 234.221280][ T5916] uvcvideo 1-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 234.233054][ T7643] netlink: 48 bytes leftover after parsing attributes in process `syz.4.476'. [ 234.250367][ T5916] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 234.270425][ T5916] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 234.297167][ T5916] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 234.307492][ T5916] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 234.363942][ T5916] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 234.455629][ T5916] uvcvideo 1-1:63.66: No streaming interface found for terminal 29. [ 234.547485][ T5916] uvcvideo 1-1:63.66: Entity type for entity Output 32773 was not initialized! [ 234.596750][ T5916] usb 1-1: USB disconnect, device number 24 [ 234.613524][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 234.693348][ T5862] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 234.812608][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 234.839679][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 234.851238][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 234.861823][ T5862] usb 5-1: Using ep0 maxpacket: 8 [ 234.890557][ T5862] usb 5-1: unable to get BOS descriptor or descriptor too short [ 234.911765][ T24] usb 2-1: can't read configurations, error -71 [ 234.922393][ T5862] usb 5-1: config 4 interface 0 has no altsetting 0 [ 234.940783][ T5862] usb 5-1: string descriptor 0 read error: -22 [ 234.950874][ T5862] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 234.961774][ T5916] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 234.990248][ T5862] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 235.027515][ T5862] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 235.071132][ T5862] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 235.107992][ T5862] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 235.124004][ T5916] usb 1-1: unable to get BOS descriptor or descriptor too short [ 235.132425][ T5916] usb 1-1: not running at top speed; connect to a high speed hub [ 235.143497][ T5862] usb 5-1: media controller created [ 235.165953][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.232939][ T5916] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 235.241326][ T5916] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 235.313767][ T5916] usb 1-1: config 63 has no interface number 0 [ 235.320114][ T5916] usb 1-1: config 63 interface 66 has no altsetting 0 [ 235.330662][ T5916] usb 1-1: string descriptor 0 read error: -22 [ 235.392153][ T5916] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 235.427894][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.563151][ T5916] uvcvideo 1-1:63.66: Found UVC 0.07 device (174f:8acf) [ 235.755038][ T7657] netlink: 48 bytes leftover after parsing attributes in process `syz.2.480'. [ 236.248547][ T5916] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 236.262141][ T5916] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 236.290384][ T5916] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 236.301101][ T5862] zl10353_read_register: readreg error (reg=127, ret==0) [ 236.308683][ T5916] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 236.319070][ T5916] uvcvideo 1-1:63.66: No streaming interface found for terminal 29. [ 236.332297][ T5916] uvcvideo 1-1:63.66: Entity type for entity Output 32773 was not initialized! [ 236.364015][ T5916] usb 1-1: USB disconnect, device number 25 [ 236.651918][ T5862] usb 5-1: USB disconnect, device number 29 [ 236.777566][ T7621] Set syz1 is full, maxelem 65536 reached [ 237.171851][ T5862] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 237.301736][ T5862] usb 1-1: device descriptor read/64, error -71 [ 237.585464][ T7683] netlink: 'syz.1.486': attribute type 2 has an invalid length. [ 237.623518][ T5862] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 237.625088][ T7683] !: entered promiscuous mode [ 237.782082][ T5862] usb 1-1: device descriptor read/64, error -71 [ 237.892987][ T5862] usb usb1-port1: attempt power cycle [ 237.961751][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 238.169283][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.220562][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.292068][ T5862] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 238.363810][ T24] usb 2-1: config 1 interface 1 has no altsetting 1 [ 238.382064][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.398641][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.408069][ T5862] usb 1-1: device descriptor read/8, error -71 [ 238.427021][ T24] usb 2-1: Product: syz [ 238.431205][ T24] usb 2-1: Manufacturer: syz [ 238.443458][ T24] usb 2-1: SerialNumber: syz [ 238.458962][ T5916] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 238.526467][ T24] usb 2-1: selecting invalid altsetting 1 [ 238.646975][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 238.662038][ T5862] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 238.662376][ T5916] usb 3-1: unable to get BOS descriptor or descriptor too short [ 238.697123][ T5916] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 238.705257][ T5862] usb 1-1: device descriptor read/8, error -71 [ 238.716358][ T7679] netlink: 'syz.1.486': attribute type 2 has an invalid length. [ 238.724197][ T7679] !: left promiscuous mode [ 238.782106][ T5916] usb 3-1: can't read configurations, error -71 [ 238.851823][ T5862] usb usb1-port1: unable to enumerate USB device [ 238.931759][ T5805] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 239.044370][ T7693] syzkaller0: entered promiscuous mode [ 239.058249][ T7693] syzkaller0: entered allmulticast mode [ 239.091826][ T5805] usb 5-1: Using ep0 maxpacket: 32 [ 239.098256][ T5805] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 239.110393][ T5805] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 239.123083][ T5805] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 239.135160][ T5805] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 239.167312][ T5805] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 239.182607][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.190674][ T5805] usb 5-1: Product: syz [ 239.196227][ T5805] usb 5-1: Manufacturer: syz [ 239.203073][ T5805] usb 5-1: SerialNumber: syz [ 239.242663][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 239.267723][ T5805] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input32 [ 240.389235][ T30] audit: type=1800 audit(1772330008.580:304): pid=7696 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.492" name="bus" dev="overlay" ino=578 res=0 errno=0 [ 240.501502][ T24] cdc_ncm 2-1:1.0: bind() failure [ 240.510339][ T5805] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 240.521486][ T5805] (id 0x00) [ 240.533472][ T24] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 240.542242][ T24] cdc_ncm 2-1:1.1: bind() failure [ 240.572496][ T24] usb 2-1: USB disconnect, device number 24 [ 240.683109][ T5805] rc_core: IR keymap rc-imon-pad not found [ 240.688953][ T5805] Registered IR keymap rc-empty [ 240.722046][ T5805] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 240.756963][ T5805] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 240.807474][ T5805] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 240.843403][ T7708] input: syz1 as /devices/virtual/input/input34 [ 240.881725][ T56] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 240.945744][ T5805] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input33 [ 241.062499][ T56] usb 4-1: Using ep0 maxpacket: 32 [ 241.150986][ T5805] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:30> initialized [ 241.170800][ T56] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 241.202221][ T56] usb 4-1: config 0 has no interface number 0 [ 241.208325][ T56] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 241.241552][ T5805] usb 5-1: USB disconnect, device number 30 [ 241.271473][ T56] usb 4-1: config 0 interface 1 has no altsetting 0 [ 241.291069][ T56] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 241.317706][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.362671][ T56] usb 4-1: Product: syz [ 241.383275][ T56] usb 4-1: Manufacturer: syz [ 241.401176][ T56] usb 4-1: SerialNumber: syz [ 241.473121][ T56] usb 4-1: config 0 descriptor?? [ 241.701738][ T5805] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 241.730991][ T56] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 241.760048][ T56] cx231xx 4-1:0.1: Failed to read PCB config [ 241.778004][ T56] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 241.818061][ T56] usb 4-1: USB disconnect, device number 29 [ 241.884154][ T5805] usb 5-1: Using ep0 maxpacket: 32 [ 241.918740][ T5805] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 241.954727][ T5805] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 242.003197][ T5805] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 242.063594][ T5805] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 242.158010][ T5805] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 242.182324][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.195910][ T5805] usb 5-1: Product: syz [ 242.207218][ T5805] usb 5-1: Manufacturer: syz [ 242.249273][ T5805] usb 5-1: SerialNumber: syz [ 242.282246][ T5805] usb 5-1: can't set config #155, error -71 [ 242.316745][ T5805] usb 5-1: USB disconnect, device number 31 [ 242.651788][ T5805] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 242.811989][ T5805] usb 5-1: Using ep0 maxpacket: 8 [ 242.820991][ T5805] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 242.833501][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.852154][ T5805] usb 5-1: Product: syz [ 242.885946][ T5805] usb 5-1: Manufacturer: syz [ 242.956424][ T5805] usb 5-1: SerialNumber: syz [ 242.989769][ T5805] usb 5-1: config 0 descriptor?? [ 243.221918][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 243.229659][ T5888] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 243.248265][ T5805] usb read operation failed. (-71) [ 243.262568][ T5805] usb write operation failed. (-71) [ 243.268185][ T5805] usb write operation failed. (-71) [ 243.274112][ T5805] usb write operation failed. (-71) [ 243.279510][ T5805] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 243.297406][ T5805] usb 5-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 243.308912][ T30] audit: type=1400 audit(1772330012.070:305): avc: denied { firmware_load } for pid=5805 comm="kworker/0:3" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 243.329707][ T5805] usb 5-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 243.412948][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 243.423377][ T5888] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 243.432661][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 243.445656][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.454147][ T5888] usb 4-1: Product: syz [ 243.458686][ T5888] usb 4-1: Manufacturer: syz [ 243.465398][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 243.473928][ T5888] usb 4-1: SerialNumber: syz [ 243.478971][ T9] usb 1-1: config 4 interface 0 has no altsetting 0 [ 243.488307][ T9] usb 1-1: string descriptor 0 read error: -22 [ 243.495732][ T9] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 243.512986][ T5888] usb 4-1: config 0 descriptor?? [ 243.519482][ T9] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 243.543828][ T9] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 243.581403][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 243.598000][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 243.606492][ T9] usb 1-1: media controller created [ 243.623439][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 243.726901][ T7724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.737188][ T7724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.748654][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 243.887733][ T9] usb 1-1: USB disconnect, device number 30 [ 243.981322][ T5888] airspy 4-1:0.0: Board ID: 4f [ 243.986182][ T5888] airspy 4-1:0.0: Firmware version: O [ 244.184082][ T7724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.197363][ T7724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.220239][ T5888] airspy 4-1:0.0: usb_control_msg() failed -71 request 11 [ 244.234015][ T5888] airspy 4-1:0.0: Registered as swradio24 [ 244.239958][ T5888] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 244.262689][ T5888] usb 4-1: USB disconnect, device number 30 [ 244.550614][ T7719] Set syz1 is full, maxelem 65536 reached [ 244.562665][ T5888] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 244.590991][ T30] audit: type=1400 audit(1772330013.350:306): avc: denied { create } for pid=7735 comm="syz.2.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 244.608726][ T7736] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.618807][ T30] audit: type=1400 audit(1772330013.370:307): avc: denied { write } for pid=7735 comm="syz.2.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 244.619209][ T7736] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.649731][ T7736] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.658513][ T7736] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 244.701728][ T5888] usb 1-1: device descriptor read/64, error -71 [ 244.719633][ T7736] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 244.778061][ T7736] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.799082][ T7736] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.813375][ T7736] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.828397][ T7736] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.838553][ T7736] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.941756][ T5888] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 245.158124][ T5888] usb 1-1: device descriptor read/64, error -71 [ 245.178372][ T7740] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.225759][ T7750] netlink: 'syz.2.510': attribute type 2 has an invalid length. [ 245.269827][ T7750] !: entered promiscuous mode [ 245.284076][ T5888] usb usb1-port1: attempt power cycle [ 245.318019][ T7750] netlink: 'syz.2.510': attribute type 2 has an invalid length. [ 245.325877][ T7750] !: left promiscuous mode [ 245.542006][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 245.632874][ T5888] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 245.765235][ T5888] usb 1-1: device descriptor read/8, error -71 [ 245.771761][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 245.779969][ T9] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 245.789723][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.799825][ T9] usb 2-1: Product: syz [ 245.804137][ T9] usb 2-1: Manufacturer: syz [ 245.808726][ T9] usb 2-1: SerialNumber: syz [ 245.824280][ T9] usb 2-1: config 0 descriptor?? [ 246.032608][ T7752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.041335][ T7752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.067092][ T5888] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 246.112759][ T5888] usb 1-1: device descriptor read/8, error -71 [ 246.221944][ T5888] usb usb1-port1: unable to enumerate USB device [ 246.378251][ T9] airspy 2-1:0.0: Board ID: 4f [ 246.385443][ T9] airspy 2-1:0.0: Firmware version: O [ 246.587548][ T7752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.604914][ T7752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.618197][ T9] airspy 2-1:0.0: usb_control_msg() failed -71 request 11 [ 246.640913][ T9] airspy 2-1:0.0: Registered as swradio24 [ 246.652924][ T9] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 246.680341][ T9] usb 2-1: USB disconnect, device number 25 [ 246.991816][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 247.093855][ T7769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7769 comm=syz.3.516 [ 247.216077][ T24] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 247.229022][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.284495][ T24] usb 3-1: Product: syz [ 247.293514][ T24] usb 3-1: Manufacturer: syz [ 247.319578][ T24] usb 3-1: SerialNumber: syz [ 247.358951][ T24] usb 3-1: config 0 descriptor?? [ 247.880190][ T24] usb 3-1: Firmware: major: 236, minor: 109, hardware type: UNKNOWN (126) [ 248.021741][ T56] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 248.095035][ T24] usb 3-1: failed to fetch extended address, random address set [ 248.103655][ T24] usb 3-1: atusb_probe: initialization failed, error = -524 [ 248.111103][ T24] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 248.141726][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 248.151779][ T56] usb 1-1: device descriptor read/64, error -71 [ 248.301783][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 248.310865][ T24] usb 3-1: USB disconnect, device number 25 [ 248.322779][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 248.337709][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.349862][ T9] usb 4-1: Product: syz [ 248.354158][ T9] usb 4-1: Manufacturer: syz [ 248.358892][ T9] usb 4-1: SerialNumber: syz [ 248.366730][ T9] usb 4-1: config 0 descriptor?? [ 248.401803][ T56] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 248.531814][ T56] usb 1-1: device descriptor read/64, error -71 [ 248.589231][ T9] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 248.642024][ T56] usb usb1-port1: attempt power cycle [ 248.991735][ T56] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 249.012323][ T56] usb 1-1: device descriptor read/8, error -71 [ 249.190692][ T9] usb write operation failed. (-71) [ 249.198898][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 249.214202][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 249.220997][ T9] usb 4-1: media controller created [ 249.234983][ T9] usb read operation failed. (-71) [ 249.251174][ T9] usb write operation failed. (-71) [ 249.262371][ T9] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 249.263395][ T56] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 249.278356][ T9] usb 4-1: USB disconnect, device number 31 [ 249.324569][ T56] usb 1-1: device descriptor read/8, error -71 [ 249.435391][ T7803] netlink: 332 bytes leftover after parsing attributes in process `syz.2.529'. [ 249.444592][ T56] usb usb1-port1: unable to enumerate USB device [ 249.444616][ T7803] netlink: 160 bytes leftover after parsing attributes in process `syz.2.529'. [ 249.540837][ T30] audit: type=1400 audit(1772330018.300:308): avc: denied { bind } for pid=7807 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 249.562781][ T30] audit: type=1400 audit(1772330018.330:309): avc: denied { read append } for pid=7807 comm="syz.2.531" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 249.586602][ T30] audit: type=1400 audit(1772330018.330:310): avc: denied { open } for pid=7807 comm="syz.2.531" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 249.611161][ T30] audit: type=1400 audit(1772330018.350:311): avc: denied { ioctl } for pid=7807 comm="syz.2.531" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 249.807431][ T7813] faux_driver vkms: [drm] Unknown color mode 55359; guessing buffer size. [ 249.897710][ T7814] ======================================================= [ 249.897710][ T7814] WARNING: The mand mount option has been deprecated and [ 249.897710][ T7814] and is ignored by this kernel. Remove the mand [ 249.897710][ T7814] option from the mount to silence this warning. [ 249.897710][ T7814] ======================================================= [ 249.952494][ T30] audit: type=1400 audit(1772330018.660:312): avc: denied { mount } for pid=7809 comm="syz.2.532" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 249.987999][ T30] audit: type=1400 audit(1772330018.660:313): avc: denied { remount } for pid=7809 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 250.111856][ T56] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 250.144324][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.151051][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.271821][ T56] usb 4-1: Using ep0 maxpacket: 8 [ 250.278113][ T56] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 250.286397][ T56] usb 4-1: config 0 has no interface number 0 [ 250.292533][ T56] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 250.303346][ T56] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 250.314920][ T56] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 250.325974][ T56] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 250.338943][ T56] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 250.348022][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.358318][ T56] usb 4-1: config 0 descriptor?? [ 250.367833][ T56] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 250.401738][ T5916] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 250.551704][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 250.558593][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.573994][ T30] audit: type=1400 audit(1772330019.330:314): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 250.581768][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 250.657025][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 250.683983][ T5916] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 250.695243][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.710234][ T5916] usb 2-1: Product: syz [ 250.718204][ T5916] usb 2-1: Manufacturer: syz [ 250.725248][ T56] usb 4-1: USB disconnect, device number 32 [ 250.731202][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 250.753078][ T5916] usb 2-1: SerialNumber: syz [ 250.787084][ T5916] usb 2-1: config 0 descriptor?? [ 250.901732][ T5916] rc_core: IR keymap rc-streamzap not found [ 250.926977][ T5916] Registered IR keymap rc-empty [ 250.936755][ T5916] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 250.954749][ T5916] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input35 [ 250.998411][ T7826] netlink: 48 bytes leftover after parsing attributes in process `syz.4.537'. [ 251.059412][ T7816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.090540][ T7816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.120343][ T7816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.133178][ T7816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.145105][ T5916] usb 2-1: USB disconnect, device number 26 [ 251.712456][ T7838] netlink: 'syz.0.541': attribute type 2 has an invalid length. [ 251.750966][ T7838] !: entered promiscuous mode [ 252.146986][ T5916] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 252.251749][ T5862] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 252.321705][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 252.328239][ T5916] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 252.336278][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.346421][ T5916] usb 2-1: config 0 has no interface number 0 [ 252.352572][ T5916] usb 2-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.365508][ T5916] usb 2-1: config 0 interface 1 has no altsetting 0 [ 252.373725][ T5916] usb 2-1: New USB device found, idVendor=0572, idProduct=58a2, bcdDevice=27.0a [ 252.382882][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.390858][ T5916] usb 2-1: Product: syz [ 252.395061][ T5916] usb 2-1: Manufacturer: syz [ 252.399639][ T5916] usb 2-1: SerialNumber: syz [ 252.403960][ T5862] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.406522][ T5916] usb 2-1: config 0 descriptor?? [ 252.417896][ T5862] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.430275][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 252.438113][ T5862] usb 1-1: config 1 interface 1 has no altsetting 1 [ 252.447748][ T5862] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.457600][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.465635][ T5862] usb 1-1: Product: syz [ 252.469873][ T5862] usb 1-1: Manufacturer: syz [ 252.475277][ T5862] usb 1-1: SerialNumber: syz [ 252.488119][ T5862] usb 1-1: selecting invalid altsetting 1 [ 252.591739][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 252.598881][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 252.608832][ T24] usb 3-1: config 4 interface 0 has no altsetting 0 [ 252.618206][ T24] usb 3-1: string descriptor 0 read error: -22 [ 252.624594][ T24] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 252.633777][ T24] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 252.635951][ T5916] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a2) with 1 interfaces [ 252.653905][ T5916] cx231xx 2-1:0.1: Not found matching IAD interface [ 252.657012][ T24] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 252.677810][ T5916] usb 2-1: USB disconnect, device number 27 [ 252.681618][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 252.695344][ T7836] netlink: 'syz.0.541': attribute type 2 has an invalid length. [ 252.703533][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 252.713569][ T24] usb 3-1: media controller created [ 252.724349][ T7836] !: left promiscuous mode [ 252.737248][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.764956][ T5862] cdc_ncm 1-1:1.0: bind() failure [ 252.778148][ T5862] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 252.785596][ T5862] cdc_ncm 1-1:1.1: bind() failure [ 252.795771][ T5862] usb 1-1: USB disconnect, device number 39 [ 252.814742][ T56] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 252.885031][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 252.928184][ T24] usb 3-1: USB disconnect, device number 26 [ 253.171794][ T5916] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 253.352166][ T5916] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 253.360443][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.377523][ T5916] usb 2-1: config 0 has no interface number 0 [ 253.383811][ T5916] usb 2-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.396799][ T5916] usb 2-1: config 0 interface 1 has no altsetting 0 [ 253.414795][ T5916] usb 2-1: New USB device found, idVendor=0572, idProduct=58a2, bcdDevice=27.0a [ 253.424755][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.433873][ T5916] usb 2-1: Product: syz [ 253.438424][ T5916] usb 2-1: Manufacturer: syz [ 253.445165][ T5916] usb 2-1: SerialNumber: syz [ 253.610744][ T5916] usb 2-1: config 0 descriptor?? [ 253.804964][ T7858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7858 comm=syz.2.548 [ 253.976149][ T5916] cx231xx 2-1:0.1: New device syz syz @ 12 Mbps (0572:58a2) with 1 interfaces [ 253.988659][ T5916] cx231xx 2-1:0.1: Not found matching IAD interface [ 254.575393][ T7871] netlink: 16 bytes leftover after parsing attributes in process `syz.2.553'. [ 254.593061][ T7871] netlink: 16 bytes leftover after parsing attributes in process `syz.2.553'. [ 254.648396][ T7870] tipc: Failed to obtain node identity [ 254.660922][ T7870] tipc: Enabling of bearer rejected, failed to enable media [ 254.714272][ T5916] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 254.930363][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 255.032724][ T5916] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 255.034085][ T24] usb 2-1: USB disconnect, device number 28 [ 255.042073][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.067746][ T5916] usb 1-1: Product: syz [ 255.072332][ T5916] usb 1-1: Manufacturer: syz [ 255.077716][ T5916] usb 1-1: SerialNumber: syz [ 255.088737][ T5916] usb 1-1: config 0 descriptor?? [ 255.330110][ T7868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.343773][ T7868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.492191][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 255.591755][ T5916] airspy 1-1:0.0: Board ID: 4f [ 255.602415][ T5916] airspy 1-1:0.0: Firmware version: O [ 255.652365][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 255.680744][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 255.690664][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 255.700430][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 255.737568][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.760876][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 255.771891][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.780032][ T5916] airspy 1-1:0.0: usb_control_msg() failed -71 request 11 [ 255.788715][ T5916] airspy 1-1:0.0: Registered as swradio24 [ 255.794989][ T5916] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 255.825920][ T5916] usb 1-1: USB disconnect, device number 40 [ 256.042089][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 256.047570][ T9] usbtmc 3-1:16.0: can't read capabilities [ 256.053471][ T5806] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 256.211794][ T5806] usb 4-1: Using ep0 maxpacket: 8 [ 256.218497][ T5806] usb 4-1: unable to get BOS descriptor or descriptor too short [ 256.227080][ T5806] usb 4-1: config 4 interface 0 has no altsetting 0 [ 256.235855][ T5806] usb 4-1: string descriptor 0 read error: -22 [ 256.242266][ T5806] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 256.246384][ T56] usb 3-1: USB disconnect, device number 27 [ 256.251324][ T5806] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 256.271187][ T5806] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 256.282036][ T5806] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 256.302607][ T5806] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 256.313739][ T5806] usb 4-1: media controller created [ 256.329349][ T5806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.361776][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 256.470332][ T5806] zl10353_read_register: readreg error (reg=127, ret==0) [ 256.493969][ T5806] usb 4-1: USB disconnect, device number 33 [ 256.512353][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 256.518599][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.529569][ T24] usb 2-1: config 0 has no interfaces? [ 256.536755][ T24] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 256.545857][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.553997][ T24] usb 2-1: Product: syz [ 256.558154][ T24] usb 2-1: Manufacturer: syz [ 256.563969][ T24] usb 2-1: SerialNumber: syz [ 256.569939][ T24] usb 2-1: config 0 descriptor?? [ 256.787678][ T7886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.804226][ T7886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.181318][ T7896] binder: BINDER_SET_CONTEXT_MGR already set [ 257.187591][ T7896] binder: 7885:7896 ioctl 4018620d 200000004a80 returned -16 [ 257.521784][ T56] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 257.681826][ T56] usb 1-1: Using ep0 maxpacket: 16 [ 257.690478][ T56] usb 1-1: config 5 has an invalid interface number: 168 but max is 0 [ 257.730402][ T56] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 257.758814][ T56] usb 1-1: config 5 has no interface number 0 [ 257.771752][ T56] usb 1-1: config 5 interface 168 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 257.876168][ T56] usb 1-1: config 5 interface 168 has no altsetting 0 [ 257.889491][ T56] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 257.898963][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.910731][ T56] usb 1-1: Product: syz [ 257.915123][ T56] usb 1-1: Manufacturer: syz [ 257.919826][ T56] usb 1-1: SerialNumber: syz [ 258.279731][ T56] pn533_usb 1-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint [ 258.301283][ T56] usb 1-1: USB disconnect, device number 41 [ 259.157560][ T9] usb 2-1: USB disconnect, device number 29 [ 259.503151][ T7929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.571'. [ 259.514304][ T7929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.571'. [ 259.536373][ T7929] tipc: Failed to obtain node identity [ 259.541906][ T7929] tipc: Enabling of bearer rejected, failed to enable media [ 259.763473][ T56] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 259.831900][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 259.932832][ T56] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 259.951725][ T56] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 259.981715][ T56] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 259.995581][ T56] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 260.010605][ T56] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.014523][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 260.020003][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.029119][ T9] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 260.042375][ T5806] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 260.048926][ T56] usb 4-1: config 0 descriptor?? [ 260.050028][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.063979][ T9] usb 2-1: Product: 栜⥯隟〆⠧谡芀▣쫣ﱔ묅헼烁าϕ幮些禎쑐㙵룂㯧먿䊶벂ꓚ硤るѭೠ턂⧲朅㎼틆瑤㵊娳䷴ꄢᤳ鋪녀ﰽ㾶傍᩟緐慓ﴦ떤戉讀钛粉脐ꢝ哵滋븖צּ⏲䜊䑸ࡍ菣䝆糄㻠틌廻꽍ᅗ騎㨢᯷⍈辙嗝榻梈㴪㐍㏵嚦ؠ甝 [ 260.091923][ T9] usb 2-1: Manufacturer: П [ 260.096425][ T9] usb 2-1: SerialNumber: ࡃ [ 260.222915][ T5806] usb 3-1: Using ep0 maxpacket: 8 [ 260.229716][ T5806] usb 3-1: unable to get BOS descriptor or descriptor too short [ 260.238360][ T5806] usb 3-1: config 4 interface 0 has no altsetting 0 [ 260.247387][ T5806] usb 3-1: string descriptor 0 read error: -22 [ 260.253777][ T5806] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 260.262840][ T5806] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 260.271934][ T5862] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 260.283155][ T5806] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 260.310580][ T5806] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 260.321236][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 260.334608][ T5806] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 260.341851][ T9] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 260.351725][ T5806] usb 3-1: media controller created [ 260.363007][ T9] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 260.383409][ T5806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 260.394843][ T9] usb 2-1: USB disconnect, device number 30 [ 260.443928][ T5862] usb 1-1: Using ep0 maxpacket: 8 [ 260.460562][ T5862] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 260.473392][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 260.485075][ T5806] zl10353_read_register: readreg error (reg=127, ret==0) [ 260.501527][ T56] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 260.516995][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 260.549552][ T5806] usb 3-1: USB disconnect, device number 28 [ 260.559723][ T5862] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 260.579307][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.592296][ T5862] usb 1-1: Product: syz [ 260.597300][ T5862] usb 1-1: Manufacturer: syz [ 260.611759][ T5862] usb 1-1: SerialNumber: syz [ 260.628734][ T5862] usb 1-1: config 0 descriptor?? [ 260.711757][ T5862] rc_core: IR keymap rc-streamzap not found [ 260.722259][ T5862] Registered IR keymap rc-empty [ 260.727657][ T5862] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 260.753354][ T5862] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input37 [ 260.853329][ T7933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.864066][ T7933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.878490][ T5862] usb 1-1: USB disconnect, device number 42 [ 261.204344][ T7946] syzkaller0: entered promiscuous mode [ 261.210954][ T7946] syzkaller0: entered allmulticast mode [ 261.394918][ T5889] usb 4-1: USB disconnect, device number 34 [ 261.402028][ T5862] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 261.563319][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.575341][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.590700][ T5862] usb 2-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 261.607938][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.058561][ T5862] usb 2-1: config 0 descriptor?? [ 262.938854][ T5862] usb 2-1: string descriptor 0 read error: -71 [ 262.945519][ T5862] uclogic 0003:5543:0081.0008: failed retrieving string descriptor #200: -71 [ 262.955548][ T5862] uclogic 0003:5543:0081.0008: failed retrieving pen parameters: -71 [ 262.963755][ T5862] uclogic 0003:5543:0081.0008: failed probing pen v2 parameters: -71 [ 262.989450][ T5862] uclogic 0003:5543:0081.0008: failed probing parameters: -71 [ 262.998888][ T5862] uclogic 0003:5543:0081.0008: probe with driver uclogic failed with error -71 [ 263.024283][ T5862] usb 2-1: USB disconnect, device number 31 [ 263.432855][ T7978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.584'. [ 263.443764][ T7978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.584'. [ 263.465491][ T7978] tipc: Failed to obtain node identity [ 263.471014][ T7978] tipc: Enabling of bearer rejected, failed to enable media [ 264.120438][ T30] audit: type=1400 audit(1772330032.640:315): avc: denied { connect } for pid=7974 comm="syz.1.586" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 264.237314][ T7983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.587'. [ 264.254763][ T30] audit: type=1400 audit(1772330032.640:316): avc: denied { write } for pid=7974 comm="syz.1.586" laddr=127.0.0.1 lport=4 faddr=127.0.0.1 fport=20256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 264.351199][ T7989] netlink: 48 bytes leftover after parsing attributes in process `syz.2.590'. [ 264.368337][ T7985] syzkaller0: entered promiscuous mode [ 264.410022][ T7985] syzkaller0: entered allmulticast mode [ 264.942813][ T7995] blktrace: Concurrent blktraces are not allowed on loop3 [ 265.477796][ T7998] netlink: 16 bytes leftover after parsing attributes in process `syz.4.591'. [ 265.493706][ T7998] netlink: 16 bytes leftover after parsing attributes in process `syz.4.591'. [ 265.541738][ T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 265.561870][ T7999] tipc: Failed to obtain node identity [ 265.653256][ T7999] tipc: Enabling of bearer rejected, failed to enable media [ 265.691905][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 265.704703][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 265.723254][ T24] usb 3-1: config 4 interface 0 has no altsetting 0 [ 265.784341][ T24] usb 3-1: string descriptor 0 read error: -22 [ 265.829187][ T24] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 265.851696][ T24] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 265.885282][ T24] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 265.912830][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 265.932019][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 265.949440][ T24] usb 3-1: media controller created [ 265.959166][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 266.131761][ T5888] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 266.301687][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 266.488405][ T5888] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 266.507858][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.521952][ T5888] usb 1-1: Product: syz [ 266.526140][ T5888] usb 1-1: Manufacturer: syz [ 266.540879][ T5888] usb 1-1: SerialNumber: syz [ 266.554177][ T5888] usb 1-1: config 0 descriptor?? [ 266.764124][ T8003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.776145][ T8003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.988490][ T5888] airspy 1-1:0.0: usb_control_msg() failed -71 request 0a [ 266.995759][ T5888] airspy 1-1:0.0: Could not detect board [ 267.002569][ T5888] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 267.015072][ T5888] usb 1-1: USB disconnect, device number 43 [ 267.092434][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 267.132310][ T24] usb 3-1: USB disconnect, device number 29 [ 267.652323][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.600'. [ 268.026507][ T8029] syzkaller0: entered promiscuous mode [ 268.032234][ T8029] syzkaller0: entered allmulticast mode [ 269.571750][ T5806] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 269.742948][ T5806] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 269.757679][ T5806] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.785398][ T5806] usb 4-1: config 0 has no interface number 0 [ 269.796569][ T5806] usb 4-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 270.137648][ T5806] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 270.161842][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.173361][ T5806] usb 4-1: Product: syz [ 270.177545][ T5806] usb 4-1: Manufacturer: syz [ 270.185429][ T5806] usb 4-1: SerialNumber: syz [ 270.249809][ T8060] netlink: 48 bytes leftover after parsing attributes in process `syz.2.613'. [ 270.269748][ T5806] usb 4-1: config 0 descriptor?? [ 270.386962][ T8064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.614'. [ 270.455222][ T8068] syzkaller0: entered promiscuous mode [ 270.460725][ T8068] syzkaller0: entered allmulticast mode [ 270.615808][ T5806] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 270.616631][ T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 270.782543][ T5806] usb 3-1: Using ep0 maxpacket: 8 [ 270.790384][ T5806] usb 3-1: unable to get BOS descriptor or descriptor too short [ 270.799033][ T5806] usb 3-1: config 4 interface 0 has no altsetting 0 [ 270.807733][ T5806] usb 3-1: string descriptor 0 read error: -22 [ 270.814205][ T5806] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 270.815769][ T24] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 270.823525][ T5806] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 270.832732][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.846856][ T5806] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 270.855636][ T24] usb 2-1: Product: syz [ 270.860759][ T24] usb 2-1: Manufacturer: syz [ 270.865514][ T24] usb 2-1: SerialNumber: syz [ 270.871318][ T5806] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 270.883386][ T24] usb 2-1: config 0 descriptor?? [ 270.890540][ T5806] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 270.898380][ T5806] usb 3-1: media controller created [ 270.910362][ T5806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 271.293904][ T24] usb 2-1: Firmware: major: 236, minor: 109, hardware type: UNKNOWN (126) [ 271.537712][ T24] usb 2-1: no permanent extended address found, random address set [ 271.558454][ T24] usb 2-1: atusb_probe: initialization failed, error = -524 [ 271.572104][ T24] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 271.691117][ T30] audit: type=1400 audit(1772330040.450:317): avc: denied { name_connect } for pid=8074 comm="syz.0.618" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 271.765615][ T24] usb 2-1: USB disconnect, device number 32 [ 271.981892][ T5806] zl10353_read_register: readreg error (reg=127, ret==0) [ 272.009401][ T5806] usb 3-1: USB disconnect, device number 30 [ 272.331133][ T24] usb 4-1: USB disconnect, device number 35 [ 272.433082][ T8083] netlink: 'syz.1.619': attribute type 2 has an invalid length. [ 272.448922][ T8083] !: entered promiscuous mode [ 272.485432][ T8083] netlink: 'syz.1.619': attribute type 2 has an invalid length. [ 272.514146][ T8083] !: left promiscuous mode [ 272.713788][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 272.927319][ T8088] netlink: 332 bytes leftover after parsing attributes in process `syz.2.622'. [ 272.936856][ T8088] netlink: 196 bytes leftover after parsing attributes in process `syz.2.622'. [ 273.631281][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 273.640451][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.655835][ T24] usb 4-1: Product: syz [ 273.690453][ T24] usb 4-1: Manufacturer: syz [ 273.708154][ T24] usb 4-1: SerialNumber: syz [ 273.935837][ T8101] syzkaller0: entered promiscuous mode [ 273.945736][ T8101] syzkaller0: entered allmulticast mode [ 274.197296][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 274.284483][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 274.667616][ T8115] netlink: 'syz.2.627': attribute type 2 has an invalid length. [ 274.874705][ T8115] !: entered promiscuous mode [ 275.071716][ T5888] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 275.243672][ T5888] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.265680][ T5888] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.292624][ T5888] usb 3-1: config 1 interface 1 has no altsetting 1 [ 275.309290][ T5888] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.331680][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.402447][ T5888] usb 3-1: Product: syz [ 275.414400][ T5888] usb 3-1: Manufacturer: syz [ 275.419152][ T5888] usb 3-1: SerialNumber: syz [ 275.447974][ T5888] usb 3-1: selecting invalid altsetting 1 [ 275.586543][ T8120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.629'. [ 275.597332][ T8120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.629'. [ 275.607722][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 275.629795][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 275.659034][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 275.695565][ T8120] tipc: Failed to obtain node identity [ 275.701275][ T8120] tipc: Enabling of bearer rejected, failed to enable media [ 275.717244][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 275.740391][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 275.814638][ T24] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 275.829262][ T24] usb 4-1: USB disconnect, device number 36 [ 275.866554][ T8110] netlink: 'syz.2.627': attribute type 2 has an invalid length. [ 275.882027][ T8110] !: left promiscuous mode [ 275.893088][ T8085] Set syz1 is full, maxelem 65536 reached [ 276.757392][ T8134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.634'. [ 277.157511][ T5888] cdc_ncm 3-1:1.0: bind() failure [ 277.621317][ T5888] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 277.628466][ T5888] cdc_ncm 3-1:1.1: bind() failure [ 277.691341][ T5888] usb 3-1: USB disconnect, device number 31 [ 278.627910][ T8156] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 279.792604][ T8167] netlink: 332 bytes leftover after parsing attributes in process `syz.3.642'. [ 279.831734][ T8167] netlink: 196 bytes leftover after parsing attributes in process `syz.3.642'. [ 280.511889][ T8174] input: syz1 as /devices/virtual/input/input38 [ 284.331735][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 284.502005][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 284.521284][ T9] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 284.571798][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 284.701797][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.801722][ T56] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 285.012306][ T56] usb 4-1: Using ep0 maxpacket: 32 [ 285.034422][ T56] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 285.056814][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.083979][ T56] usb 4-1: Product: syz [ 285.101708][ T56] usb 4-1: Manufacturer: syz [ 285.153703][ T56] usb 4-1: SerialNumber: syz [ 285.188914][ T56] usb 4-1: config 0 descriptor?? [ 285.354990][ T5862] usb 3-1: USB disconnect, device number 32 [ 285.451762][ T8220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.490862][ T8220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.739548][ T56] airspy 4-1:0.0: Board ID: 4f [ 285.755238][ T56] airspy 4-1:0.0: Firmware version: O [ 285.948256][ T8220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.992140][ T8220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.169314][ T8229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8229 comm=syz.2.660 [ 286.176587][ T8220] binder: BINDER_SET_CONTEXT_MGR already set [ 286.189921][ T8220] binder: 8218:8220 ioctl 4018620d 200000004a80 returned -16 [ 286.862541][ T56] airspy 4-1:0.0: usb_control_msg() failed -110 request 11 [ 286.881939][ T56] airspy 4-1:0.0: Registered as swradio24 [ 286.890226][ T56] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 287.588067][ T9] usb 4-1: USB disconnect, device number 37 [ 287.812517][ T5888] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 288.443911][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 288.582113][ T30] audit: type=1800 audit(1772330057.120:318): pid=8253 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.667" name="bus" dev="overlay" ino=707 res=0 errno=0 [ 288.661734][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 288.674681][ T5888] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 288.702706][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.720964][ T5888] usb 2-1: Product: 栜⥯隟〆⠧谡芀▣쫣ﱔ묅헼烁าϕ幮些禎쑐㙵룂㯧먿䊶벂ꓚ硤るѭೠ턂⧲朅㎼틆瑤㵊娳䷴ꄢᤳ鋪녀ﰽ㾶傍᩟緐慓ﴦ떤戉讀钛粉脐ꢝ哵滋븖צּ⏲䜊䑸ࡍ菣䝆糄㻠틌廻꽍ᅗ騎㨢᯷⍈辙嗝榻梈㴪㐍㏵嚦ؠ甝 [ 288.773510][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 288.781185][ T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 288.790398][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.810591][ T9] usb 4-1: Product: syz [ 288.816544][ T5888] usb 2-1: Manufacturer: П [ 288.824272][ T9] usb 4-1: Manufacturer: syz [ 288.840174][ T5888] usb 2-1: SerialNumber: ࡃ [ 288.844861][ T9] usb 4-1: SerialNumber: syz [ 288.882724][ T9] usb 4-1: config 0 descriptor?? [ 289.135630][ T8247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.175445][ T8247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.211754][ T5888] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 289.412154][ T9] airspy 4-1:0.0: Board ID: 4f [ 289.678504][ T5888] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 289.690861][ T9] airspy 4-1:0.0: Firmware version: O [ 289.699923][ T9] airspy 4-1:0.0: usb_control_msg() failed -71 request 11 [ 289.712357][ T5888] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 289.722921][ T9] airspy 4-1:0.0: Registered as swradio24 [ 289.729042][ T9] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 289.747255][ T5888] usb 2-1: USB disconnect, device number 33 [ 289.782365][ T9] usb 4-1: USB disconnect, device number 38 [ 291.113461][ T8287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8287 comm=syz.1.674 [ 291.311685][ T56] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 291.329450][ T8288] blktrace: Concurrent blktraces are not allowed on loop7 [ 291.471765][ T56] usb 3-1: Using ep0 maxpacket: 32 [ 291.484089][ T56] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 291.494399][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.505284][ T56] usb 3-1: Product: syz [ 291.510616][ T56] usb 3-1: Manufacturer: syz [ 291.517504][ T56] usb 3-1: SerialNumber: syz [ 291.540519][ T56] usb 3-1: config 0 descriptor?? [ 291.592466][ T5888] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 291.751007][ T8286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.782703][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 291.789232][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.809655][ T5888] usb 1-1: config 0 has no interfaces? [ 291.817214][ T5888] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 291.837664][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.843694][ T8286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.861690][ T5888] usb 1-1: Product: syz [ 291.875655][ T8286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.885642][ T5888] usb 1-1: Manufacturer: syz [ 291.993832][ T5888] usb 1-1: SerialNumber: syz [ 292.008636][ T5888] usb 1-1: config 0 descriptor?? [ 292.010253][ T8286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.105821][ T56] airspy 3-1:0.0: usb_control_msg() failed -71 request 09 [ 292.170983][ T56] airspy 3-1:0.0: Could not detect board [ 292.177622][ T56] airspy 3-1:0.0: probe with driver airspy failed with error -71 [ 292.201886][ T56] usb 3-1: USB disconnect, device number 33 [ 292.342572][ T5862] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 292.374816][ T8303] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 292.894010][ T5862] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 292.904471][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.912890][ T5862] usb 2-1: Product: syz [ 292.918977][ T5862] usb 2-1: Manufacturer: syz [ 292.930775][ T5862] usb 2-1: SerialNumber: syz [ 293.166796][ T8311] binder: BINDER_SET_CONTEXT_MGR already set [ 293.172866][ T8311] binder: 8290:8311 ioctl 4018620d 200000004a80 returned -16 [ 293.458630][ T5862] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 293.473415][ T5862] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 294.358180][ T24] usb 1-1: USB disconnect, device number 44 [ 294.405306][ T56] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 294.611786][ T56] usb 3-1: Using ep0 maxpacket: 8 [ 294.625784][ T56] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 294.671558][ T56] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 294.695683][ T56] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 294.725154][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.749634][ T5862] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 294.840681][ T5862] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 294.892630][ T5862] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 294.935268][ T5862] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 294.957625][ T5862] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 294.979902][ T5862] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 295.001433][ T8333] syzkaller0: entered promiscuous mode [ 295.009386][ T5862] usb 2-1: USB disconnect, device number 34 [ 295.023344][ T8333] syzkaller0: entered allmulticast mode [ 295.056084][ T8333] tipc: Started in network mode [ 295.061119][ T8333] tipc: Node identity f299fb0fa65f, cluster identity 4711 [ 295.073364][ T8333] tipc: Enabled bearer , priority 0 [ 295.093822][ T8332] tipc: Resetting bearer [ 295.132662][ T8332] tipc: Disabling bearer [ 295.438453][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'. [ 296.270932][ T8350] netlink: 332 bytes leftover after parsing attributes in process `syz.0.692'. [ 296.303314][ T8350] netlink: 196 bytes leftover after parsing attributes in process `syz.0.692'. [ 296.449340][ T8352] netlink: 332 bytes leftover after parsing attributes in process `syz.1.693'. [ 296.458872][ T8352] netlink: 196 bytes leftover after parsing attributes in process `syz.1.693'. [ 296.791730][ T24] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 296.921979][ T5862] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 296.931466][ T24] usb 1-1: device descriptor read/64, error -71 [ 297.086039][ T30] audit: type=1400 audit(1772330065.840:319): avc: denied { create } for pid=8359 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 297.101691][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 297.140583][ T5862] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 297.150273][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.163325][ T5862] usb 2-1: Product: 栜⥯隟〆⠧谡芀▣쫣ﱔ묅헼烁าϕ幮些禎쑐㙵룂㯧먿䊶벂ꓚ硤るѭೠ턂⧲朅㎼틆瑤㵊娳䷴ꄢᤳ鋪녀ﰽ㾶傍᩟緐慓ﴦ떤戉讀钛粉脐ꢝ哵滋븖צּ⏲䜊䑸ࡍ菣䝆糄㻠틌廻꽍ᅗ騎㨢᯷⍈辙嗝榻梈㴪㐍㏵嚦ؠ甝 [ 297.191572][ T24] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 297.230800][ T5862] usb 2-1: Manufacturer: П [ 297.264347][ T5862] usb 2-1: SerialNumber: ࡃ [ 297.347695][ T56] usb 3-1: USB disconnect, device number 34 [ 297.371748][ T24] usb 1-1: device descriptor read/64, error -71 [ 297.502045][ T24] usb usb1-port1: attempt power cycle [ 297.544091][ T5862] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 297.557027][ T5862] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 297.569069][ T5862] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 297.581149][ T5862] usb 2-1: USB disconnect, device number 35 [ 297.841987][ T24] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 297.868954][ T24] usb 1-1: device descriptor read/8, error -71 [ 298.195700][ T24] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 298.295107][ T24] usb 1-1: device descriptor read/8, error -71 [ 298.430824][ T24] usb usb1-port1: unable to enumerate USB device [ 299.569772][ T8390] netlink: 332 bytes leftover after parsing attributes in process `syz.2.705'. [ 299.604915][ T8390] netlink: 196 bytes leftover after parsing attributes in process `syz.2.705'. [ 300.508866][ T8404] netlink: 48 bytes leftover after parsing attributes in process `syz.2.709'. [ 300.711721][ T5806] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 300.811721][ T5862] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 300.829887][ T8412] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 300.861699][ T5806] usb 1-1: Using ep0 maxpacket: 32 [ 300.867298][ T5806] usb 1-1: no configurations [ 300.871948][ T5806] usb 1-1: can't read configurations, error -22 [ 300.971689][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 300.978450][ T5862] usb 3-1: unable to get BOS descriptor or descriptor too short [ 300.987351][ T5862] usb 3-1: config 4 interface 0 has no altsetting 0 [ 300.996727][ T5862] usb 3-1: string descriptor 0 read error: -22 [ 301.003251][ T5862] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 301.012637][ T5862] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 301.020886][ T5806] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 301.035213][ T5862] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 301.055945][ T5862] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 301.068038][ T5862] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 301.075304][ T5862] usb 3-1: media controller created [ 301.086163][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.181728][ T5806] usb 1-1: Using ep0 maxpacket: 32 [ 301.195759][ T5806] usb 1-1: no configurations [ 301.205059][ T5806] usb 1-1: can't read configurations, error -22 [ 301.217902][ T5806] usb usb1-port1: attempt power cycle [ 301.471747][ T5888] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 301.561774][ T5806] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 301.584643][ T5806] usb 1-1: Using ep0 maxpacket: 32 [ 301.605753][ T5806] usb 1-1: no configurations [ 301.613451][ T5806] usb 1-1: can't read configurations, error -22 [ 301.632094][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 301.653132][ T5888] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 301.679602][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.689471][ T5888] usb 4-1: Product: syz [ 301.695123][ T5888] usb 4-1: Manufacturer: syz [ 301.700108][ T5888] usb 4-1: SerialNumber: syz [ 301.723992][ T5888] usb 4-1: config 0 descriptor?? [ 301.771718][ T5806] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 301.816756][ T8422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8422 comm=syz.4.715 [ 301.863679][ T5806] usb 1-1: Using ep0 maxpacket: 32 [ 301.894848][ T5806] usb 1-1: no configurations [ 301.900239][ T5806] usb 1-1: can't read configurations, error -22 [ 301.908804][ T5806] usb usb1-port1: unable to enumerate USB device [ 301.971131][ T5888] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 039 [ 302.134611][ T5862] zl10353_read_register: readreg error (reg=127, ret==0) [ 302.706184][ T8427] netlink: 332 bytes leftover after parsing attributes in process `syz.2.717'. [ 302.715409][ T8427] netlink: 196 bytes leftover after parsing attributes in process `syz.2.717'. [ 302.970653][ T8433] fuse: Invalid rootmode [ 303.006681][ T8416] Set syz1 is full, maxelem 65536 reached [ 304.260654][ T5916] usb 4-1: USB disconnect, device number 39 [ 304.262914][ T5862] usb 3-1: USB disconnect, device number 35 [ 304.362629][ T8450] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 304.437585][ T8454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.724'. [ 304.531707][ T5875] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 304.613075][ T8454] tipc: Failed to obtain node identity [ 304.619097][ T8454] tipc: Enabling of bearer rejected, failed to enable media [ 304.682012][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 304.702567][ T5875] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 304.732859][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.756879][ T5875] usb 1-1: Product: syz [ 304.767043][ T5875] usb 1-1: Manufacturer: syz [ 304.777181][ T5875] usb 1-1: SerialNumber: syz [ 304.800129][ T5875] usb 1-1: config 0 descriptor?? [ 305.165859][ T8445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.185752][ T8445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.225663][ T8445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.262084][ T8445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.319309][ T5875] airspy 1-1:0.0: usb_control_msg() failed -71 request 09 [ 305.432404][ T5875] airspy 1-1:0.0: Could not detect board [ 305.446101][ T5875] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 305.514624][ T5875] usb 1-1: USB disconnect, device number 53 [ 305.801940][ T5916] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 305.961925][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 305.976424][ T5916] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 305.997869][ T5916] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 306.022042][ T5916] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 306.043438][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.141918][ T5862] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 306.291753][ T5862] usb 2-1: device descriptor read/64, error -71 [ 306.343574][ T8483] syzkaller0: entered promiscuous mode [ 306.356807][ T8483] syzkaller0: entered allmulticast mode [ 306.392955][ T8483] tipc: Enabled bearer , priority 0 [ 306.404117][ T8482] tipc: Resetting bearer [ 306.442509][ T8482] tipc: Disabling bearer [ 306.455385][ T5805] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 306.478859][ T5805] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 306.503153][ T5805] usb 5-1: USB disconnect, device number 32 [ 306.550537][ T5862] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 306.691994][ T5862] usb 2-1: device descriptor read/64, error -71 [ 306.694181][ T30] audit: type=1400 audit(1772330075.460:320): avc: denied { create } for pid=8487 comm="syz.0.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 306.722149][ T30] audit: type=1400 audit(1772330075.480:321): avc: denied { bind } for pid=8487 comm="syz.0.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 306.815756][ T8491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.738'. [ 306.999950][ T5862] usb usb2-port1: attempt power cycle [ 307.051714][ T5805] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 307.202094][ T5805] usb 5-1: Using ep0 maxpacket: 32 [ 307.223349][ T5805] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.255391][ T5805] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 307.264731][ T5805] usb 5-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 307.690936][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.713555][ T5805] usb 5-1: config 0 descriptor?? [ 307.764293][ T5862] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 307.792732][ T5862] usb 2-1: device descriptor read/8, error -71 [ 308.009157][ T5805] usb 5-1: USB disconnect, device number 33 [ 308.081040][ T5862] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 308.112249][ T5862] usb 2-1: device descriptor read/8, error -71 [ 308.251468][ T5862] usb usb2-port1: unable to enumerate USB device [ 308.381716][ T5805] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 308.541690][ T5805] usb 3-1: Using ep0 maxpacket: 32 [ 308.571448][ T5805] usb 3-1: config 0 has an invalid interface number: 136 but max is 0 [ 308.597446][ T5805] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.618463][ T5805] usb 3-1: config 0 has no interface number 0 [ 308.632349][ T5805] usb 3-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 309.151540][ T5805] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 309.241899][ T5805] usb 3-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 309.256845][ T5805] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 309.269438][ T5805] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 309.273834][ T24] usb 4-1: USB disconnect, device number 40 [ 309.279434][ T5805] usb 3-1: config 0 interface 136 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 309.301298][ T5805] usb 3-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 309.768481][ T5805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.882190][ T5805] usb 3-1: config 0 descriptor?? [ 310.761852][ T5805] usb 3-1: can't set config #0, error -71 [ 310.827243][ T5805] usb 3-1: USB disconnect, device number 36 [ 311.492033][ T5888] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 311.575496][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.602177][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.681688][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 311.934215][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.944530][ T5888] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 311.959239][ T5888] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 311.968651][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.981956][ T5805] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 312.001729][ T5888] usb 5-1: Product: syz [ 312.008893][ T5888] usb 5-1: Manufacturer: syz [ 312.019009][ T5888] usb 5-1: SerialNumber: syz [ 312.121705][ T5805] usb 1-1: device descriptor read/64, error -71 [ 312.130645][ T5888] usb 5-1: config 0 descriptor?? [ 312.171718][ T5916] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 312.331757][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 312.362421][ T5888] usb 5-1: USB disconnect, device number 34 [ 312.369462][ T5805] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 312.379823][ T5916] usb 3-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 312.399123][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.420099][ T5916] usb 3-1: Product: 栜⥯隟〆⠧谡芀▣쫣ﱔ묅헼烁าϕ幮些禎쑐㙵룂㯧먿䊶벂ꓚ硤るѭೠ턂⧲朅㎼틆瑤㵊娳䷴ꄢᤳ鋪녀ﰽ㾶傍᩟緐慓ﴦ떤戉讀钛粉脐ꢝ哵滋븖צּ⏲䜊䑸ࡍ菣䝆糄㻠틌廻꽍ᅗ騎㨢᯷⍈辙嗝榻梈㴪㐍㏵嚦ؠ甝 [ 312.448420][ T5916] usb 3-1: Manufacturer: П [ 312.454905][ T5916] usb 3-1: SerialNumber: ࡃ [ 312.551820][ T5805] usb 1-1: device descriptor read/64, error -71 [ 312.662420][ T5805] usb usb1-port1: attempt power cycle [ 312.706322][ T5916] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 312.719197][ T5916] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 312.730315][ T5916] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 312.741783][ T5916] usb 3-1: USB disconnect, device number 37 [ 313.021712][ T5805] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 313.078476][ T30] audit: type=1800 audit(1772330081.840:322): pid=8554 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.757" name="bus" dev="overlay" ino=875 res=0 errno=0 [ 313.170050][ T5805] usb 1-1: device descriptor read/8, error -71 [ 313.451864][ T5805] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 313.725462][ T5805] usb 1-1: device descriptor read/8, error -71 [ 313.746022][ T8565] syzkaller0: entered promiscuous mode [ 313.959219][ T5805] usb usb1-port1: unable to enumerate USB device [ 313.969790][ T8565] syzkaller0: entered allmulticast mode [ 314.260266][ T8570] netlink: 332 bytes leftover after parsing attributes in process `syz.1.762'. [ 314.317716][ T8570] netlink: 196 bytes leftover after parsing attributes in process `syz.1.762'. [ 315.321827][ T5805] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 315.409466][ T8584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.767'. [ 315.512498][ T5805] usb 1-1: Using ep0 maxpacket: 8 [ 315.544594][ T5805] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.554746][ T5805] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 315.570251][ T5805] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 315.599953][ T5805] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 315.831774][ T5805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.928056][ T5805] hub 1-1:1.0: bad descriptor, ignoring hub [ 315.952960][ T5805] hub 1-1:1.0: probe with driver hub failed with error -5 [ 315.977043][ T5805] cdc_wdm 1-1:1.0: skipping garbage [ 315.995027][ T5805] cdc_wdm 1-1:1.0: skipping garbage [ 316.005134][ T5805] cdc_wdm 1-1:1.0: skipping garbage [ 316.025122][ T5805] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 316.254922][ T5862] usb 1-1: USB disconnect, device number 58 [ 318.166287][ T8605] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 318.175318][ T8605] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 318.660411][ T8610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.770'. [ 318.706377][ T8610] tipc: Failed to obtain node identity [ 318.712606][ T8610] tipc: Enabling of bearer rejected, failed to enable media [ 318.831720][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 318.911870][ T5805] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 318.981726][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 318.988122][ T24] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 318.998008][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.008317][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 319.019135][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 319.028505][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.036705][ T24] usb 4-1: Product: syz [ 319.079632][ T24] usb 4-1: Manufacturer: syz [ 319.092055][ T24] usb 4-1: SerialNumber: syz [ 319.092129][ T5805] usb 5-1: Using ep0 maxpacket: 16 [ 319.146101][ T5805] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 319.154486][ T5805] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.174856][ T5805] usb 5-1: config 0 has no interface number 0 [ 319.195985][ T5805] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 319.216392][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.243302][ T5805] usb 5-1: Product: syz [ 319.253667][ T5805] usb 5-1: Manufacturer: syz [ 319.258274][ T5805] usb 5-1: SerialNumber: syz [ 319.278245][ T5805] usb 5-1: config 0 descriptor?? [ 319.297769][ T5805] uvcvideo 5-1:0.105: probe with driver uvcvideo failed with error -22 [ 319.972411][ T24] usb 4-1: 0:2 : does not exist [ 320.022374][ T5862] usb 5-1: USB disconnect, device number 35 [ 320.184776][ T24] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 320.303650][ T8624] binder: BINDER_SET_CONTEXT_MGR already set [ 320.321220][ T8624] binder: 8623:8624 ioctl 4018620d 200000004a80 returned -16 [ 320.360395][ T24] usb 4-1: USB disconnect, device number 41 [ 320.526931][ T8632] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 320.676018][ T8636] netlink: 'syz.4.780': attribute type 1 has an invalid length. [ 320.728625][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.779'. [ 320.744120][ T8637] bridge0: entered promiscuous mode [ 320.751320][ T8637] bridge0: port 3(macvtap1) entered blocking state [ 320.757977][ T8637] bridge0: port 3(macvtap1) entered disabled state [ 320.764646][ T8637] macvtap1: entered allmulticast mode [ 320.770011][ T8637] bridge0: entered allmulticast mode [ 320.777599][ T8637] macvtap1: left allmulticast mode [ 320.782990][ T8637] bridge0: left allmulticast mode [ 320.818276][ T8637] bridge0: left promiscuous mode [ 320.877328][ T8636] netlink: 96 bytes leftover after parsing attributes in process `syz.4.780'. [ 320.965965][ T8636] netlink: 1 bytes leftover after parsing attributes in process `syz.4.780'. [ 321.117888][ T8636] netlink: 658 bytes leftover after parsing attributes in process `syz.4.780'. [ 322.455532][ T5804] Bluetooth: hci4: command 0x0406 tx timeout [ 322.545572][ T5875] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 323.034062][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 323.048880][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.789'. [ 323.053990][ T5875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.092108][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 323.117490][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 323.244657][ T5875] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 323.299953][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.367921][ T5875] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 323.384165][ T5875] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 323.420249][ T5875] usb 4-1: Manufacturer: syz [ 323.500163][ T8678] netlink: 'syz.1.792': attribute type 1 has an invalid length. [ 323.507992][ T8678] netlink: 96 bytes leftover after parsing attributes in process `syz.1.792'. [ 323.542169][ T5875] usb 4-1: config 0 descriptor?? [ 323.562963][ T8678] netlink: 1 bytes leftover after parsing attributes in process `syz.1.792'. [ 323.730659][ T8678] netlink: 658 bytes leftover after parsing attributes in process `syz.1.792'. [ 324.862205][ T5875] rc_core: IR keymap rc-hauppauge not found [ 324.868139][ T5875] Registered IR keymap rc-empty [ 324.882094][ T5875] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 324.930405][ T5875] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 324.963088][ T5875] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 325.022146][ T5875] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input39 [ 325.105257][ T30] audit: type=1400 audit(1772330093.870:323): avc: denied { accept } for pid=8686 comm="syz.4.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 325.854287][ T5875] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 325.884232][ T5875] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 325.921772][ T5875] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 325.941995][ T5875] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 325.961735][ T5875] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 326.021992][ T5875] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 326.085236][ T5875] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 326.381962][ T5875] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 326.412487][ T5875] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 326.511749][ T5875] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 326.631089][ T5875] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 326.772787][ T5875] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 326.832093][ T5875] usb 4-1: USB disconnect, device number 42 [ 327.131747][ T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 327.281681][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 327.297401][ T24] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 327.316035][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.331871][ T24] usb 5-1: Product: syz [ 327.341678][ T24] usb 5-1: Manufacturer: syz [ 327.351801][ T24] usb 5-1: SerialNumber: syz [ 327.363251][ T24] usb 5-1: config 0 descriptor?? [ 327.681694][ T8706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.719835][ T8706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.732714][ T8717] netlink: 'syz.0.804': attribute type 1 has an invalid length. [ 327.740584][ T8717] netlink: 96 bytes leftover after parsing attributes in process `syz.0.804'. [ 327.752099][ T8717] netlink: 1 bytes leftover after parsing attributes in process `syz.0.804'. [ 327.763603][ T8717] netlink: 658 bytes leftover after parsing attributes in process `syz.0.804'. [ 327.966418][ T24] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 327.979353][ T24] airspy 5-1:0.0: Could not detect board [ 328.009120][ T24] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 328.052707][ T24] usb 5-1: USB disconnect, device number 36 [ 329.277445][ T8728] syzkaller0: entered promiscuous mode [ 329.284985][ T8728] syzkaller0: entered allmulticast mode [ 329.304118][ T8728] tipc: Enabled bearer , priority 0 [ 329.314832][ T8726] tipc: Resetting bearer [ 329.393210][ T8726] tipc: Disabling bearer [ 329.527502][ T8730] syzkaller0: entered promiscuous mode [ 329.533035][ T8730] syzkaller0: entered allmulticast mode [ 329.591515][ T8734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.810'. [ 329.931784][ T5916] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 330.101774][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 330.227183][ T5916] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 330.278968][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.302575][ T5916] usb 1-1: Product: syz [ 330.315508][ T5916] usb 1-1: Manufacturer: syz [ 330.320372][ T5916] usb 1-1: SerialNumber: syz [ 330.336922][ T5916] usb 1-1: config 0 descriptor?? [ 330.838530][ T8736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.852658][ T8736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.083856][ T8736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.092982][ T8736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.121754][ T5916] airspy 1-1:0.0: usb_control_msg() failed -71 request 0a [ 331.146190][ T5916] airspy 1-1:0.0: Could not detect board [ 331.165114][ T24] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 331.205810][ T5916] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 331.275430][ T5916] usb 1-1: USB disconnect, device number 59 [ 331.362729][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 331.370527][ T24] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 331.379994][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.408910][ T24] usb 5-1: Product: 栜⥯隟〆⠧谡芀▣쫣ﱔ묅헼烁าϕ幮些禎쑐㙵룂㯧먿䊶벂ꓚ硤るѭೠ턂⧲朅㎼틆瑤㵊娳䷴ꄢᤳ鋪녀ﰽ㾶傍᩟緐慓ﴦ떤戉讀钛粉脐ꢝ哵滋븖צּ⏲䜊䑸ࡍ菣䝆糄㻠틌廻꽍ᅗ騎㨢᯷⍈辙嗝榻梈㴪㐍㏵嚦ؠ甝 [ 331.481727][ T24] usb 5-1: Manufacturer: П [ 331.486316][ T24] usb 5-1: SerialNumber: ࡃ [ 331.769267][ T24] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 332.336429][ T8755] blktrace: Concurrent blktraces are not allowed on loop1 [ 332.370624][ T24] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 332.407788][ T24] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 332.435151][ T24] usb 5-1: USB disconnect, device number 37 [ 333.725733][ T8764] netlink: 'syz.3.818': attribute type 1 has an invalid length. [ 333.736051][ T8764] netlink: 96 bytes leftover after parsing attributes in process `syz.3.818'. [ 333.745841][ T8764] netlink: 1 bytes leftover after parsing attributes in process `syz.3.818'. [ 333.766129][ T8764] netlink: 658 bytes leftover after parsing attributes in process `syz.3.818'. [ 333.913612][ T8766] syzkaller0: entered promiscuous mode [ 333.947673][ T8766] syzkaller0: entered allmulticast mode [ 334.229820][ T8775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.820'. [ 334.240079][ T8775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.820'. [ 334.257749][ T8776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.821'. [ 334.370313][ T8773] tipc: Failed to obtain node identity [ 334.375961][ T8773] tipc: Enabling of bearer rejected, failed to enable media [ 334.761703][ T5806] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 335.241792][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 335.323857][ T5806] usb 3-1: Using ep0 maxpacket: 8 [ 335.343563][ T5806] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 335.369442][ T5806] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 335.384855][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.393088][ T5806] usb 3-1: Product: syz [ 335.399464][ T5806] usb 3-1: Manufacturer: syz [ 335.404206][ T5806] usb 3-1: SerialNumber: syz [ 335.416140][ T5806] usb 3-1: config 0 descriptor?? [ 335.453765][ T5806] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 335.472456][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 335.485084][ T24] usb 4-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 335.494662][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.507517][ T24] usb 4-1: Product: 栜⥯隟〆⠧谡芀▣쫣ﱔ묅헼烁าϕ幮些禎쑐㙵룂㯧먿䊶벂ꓚ硤るѭೠ턂⧲朅㎼틆瑤㵊娳䷴ꄢᤳ鋪녀ﰽ㾶傍᩟緐慓ﴦ떤戉讀钛粉脐ꢝ哵滋븖צּ⏲䜊䑸ࡍ菣䝆糄㻠틌廻꽍ᅗ騎㨢᯷⍈辙嗝榻梈㴪㐍㏵嚦ؠ甝 [ 335.561733][ T5889] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 335.579527][ T24] usb 4-1: Manufacturer: П [ 335.584203][ T24] usb 4-1: SerialNumber: ࡃ [ 335.741881][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 335.782126][ T5862] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 335.784516][ T5806] usb 3-1: USB disconnect, device number 38 [ 335.955570][ T5889] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 335.972173][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.990437][ T5889] usb 2-1: Product: 栜⥯隟〆⠧谡芀▣쫣ﱔ묅헼烁าϕ幮些禎쑐㙵룂㯧먿䊶벂ꓚ硤るѭೠ턂⧲朅㎼틆瑤㵊娳䷴ꄢᤳ鋪녀ﰽ㾶傍᩟緐慓ﴦ떤戉讀钛粉脐ꢝ哵滋븖צּ⏲䜊䑸ࡍ菣䝆糄㻠틌廻꽍ᅗ騎㨢᯷⍈辙嗝榻梈㴪㐍㏵嚦ؠ甝 [ 336.049225][ T5889] usb 2-1: Manufacturer: П [ 336.054067][ T5862] usb 1-1: Using ep0 maxpacket: 32 [ 336.062054][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 336.074755][ T5889] usb 2-1: SerialNumber: ࡃ [ 336.081844][ T5862] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 336.094876][ T24] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 336.105449][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.114183][ T5862] usb 1-1: Product: syz [ 336.121203][ T5862] usb 1-1: Manufacturer: syz [ 336.126163][ T24] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 336.211498][ T5862] usb 1-1: SerialNumber: syz [ 336.221061][ T24] usb 4-1: USB disconnect, device number 43 [ 336.231541][ T5862] usb 1-1: config 0 descriptor?? [ 336.633597][ T8798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.669051][ T8798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.711514][ T5889] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 337.850907][ T5862] airspy 1-1:0.0: usb_control_msg() failed -110 request 0a [ 337.866991][ T8798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.882373][ T5862] airspy 1-1:0.0: Could not detect board [ 337.883792][ T8798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.888256][ T5862] airspy 1-1:0.0: probe with driver airspy failed with error -110 [ 337.915471][ T5889] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 337.933921][ T5889] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 337.994077][ T5889] usb 2-1: USB disconnect, device number 40 [ 338.061355][ T5806] usb 1-1: USB disconnect, device number 60 [ 338.262661][ T5916] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 338.472066][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 338.975058][ T8821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.094853][ T5916] usb 4-1: unable to get BOS descriptor or descriptor too short [ 339.106072][ T5916] usb 4-1: config 4 interface 0 has no altsetting 0 [ 339.124072][ T5916] usb 4-1: string descriptor 0 read error: -22 [ 339.130445][ T5916] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 339.139819][ T5916] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 339.158890][ T5916] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 339.175447][ T5916] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 339.190407][ T5916] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 339.224669][ T5916] usb 4-1: media controller created [ 339.504559][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 339.852065][ T5806] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 339.896686][ T8832] netlink: 332 bytes leftover after parsing attributes in process `syz.2.837'. [ 339.914380][ T8832] netlink: 196 bytes leftover after parsing attributes in process `syz.2.837'. [ 340.021676][ T5806] usb 5-1: Using ep0 maxpacket: 32 [ 340.081726][ T5806] usb 5-1: config 0 has an invalid interface number: 136 but max is 0 [ 340.116372][ T5806] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.152757][ T5806] usb 5-1: config 0 has no interface number 0 [ 340.159369][ T5806] usb 5-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 341.208377][ T5806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.221709][ T5916] zl10353_read_register: readreg error (reg=127, ret==0) [ 341.232826][ T5806] usb 5-1: config 0 descriptor?? [ 341.299473][ T5916] usb 4-1: USB disconnect, device number 44 [ 341.361873][ T56] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 341.369507][ T5862] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 341.450630][ T24] usb 5-1: USB disconnect, device number 38 [ 341.501706][ T5862] usb 1-1: device descriptor read/64, error -71 [ 341.531805][ T56] usb 3-1: Using ep0 maxpacket: 8 [ 341.547436][ T56] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.601689][ T56] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 341.627401][ T8847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.843'. [ 341.640179][ T56] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 341.650704][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.659588][ T56] usb 3-1: Product: syz [ 341.664840][ T56] usb 3-1: Manufacturer: syz [ 341.669422][ T56] usb 3-1: SerialNumber: syz [ 341.671711][ T5916] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 341.676378][ T56] usb 3-1: config 0 descriptor?? [ 341.752436][ T5862] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 341.842767][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 341.852507][ T5916] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 341.863497][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 341.873479][ T5916] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 341.881757][ T5862] usb 1-1: device descriptor read/64, error -71 [ 341.883364][ T5916] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 341.898599][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.908538][ T5916] usb 4-1: config 0 descriptor?? [ 341.992051][ T5862] usb usb1-port1: attempt power cycle [ 342.120360][ T5916] hdpvr 4-1:0.0: unexpected answer of status request, len -32 [ 342.131394][ T5916] hdpvr 4-1:0.0: device init failed [ 342.136811][ T5916] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 342.156939][ T5916] usb 4-1: USB disconnect, device number 45 [ 342.293053][ C1] ------------[ cut here ]------------ [ 342.298831][ C1] ODEBUG: free active (active state 0) object: ffff888053b34090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 342.311726][ C1] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#1: swapper/1/0 [ 342.321444][ C1] Modules linked in: [ 342.325506][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 342.334452][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 342.344517][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 342.350341][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 62 24 e6 0b 41 56 48 8b 14 dd e0 03 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 8c e9 db 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 342.369966][ C1] RSP: 0018:ffffc90000a08a38 EFLAGS: 00010246 [ 342.376053][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 342.384073][ C1] RDX: ffffffff8c1b0320 RSI: ffffffff8c1aff40 RDI: ffffffff90e3e7d0 [ 342.392070][ C1] RBP: 0000000000000001 R08: ffff888053b34090 R09: ffffffff8bb2b860 [ 342.400035][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1aff40 [ 342.408027][ C1] R13: ffffffff8bb2b8a0 R14: ffffffff8a7b9140 R15: ffffc90000a08b38 [ 342.416010][ C1] FS: 0000000000000000(0000) GS:ffff888124447000(0000) knlGS:0000000000000000 [ 342.424954][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.431546][ C1] CR2: 00007f7422592d58 CR3: 0000000062e1c000 CR4: 00000000003526f0 [ 342.439519][ C1] Call Trace: [ 342.442801][ C1] [ 342.445620][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 342.451236][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 342.451681][ T5806] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 342.457088][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 342.470178][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 342.476267][ C1] ? mark_held_locks+0x40/0x70 [ 342.481047][ C1] ? kasan_quarantine_put+0x104/0x240 [ 342.486433][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 342.491650][ C1] ? rose_timer_expiry+0x53f/0x630 [ 342.496752][ C1] kfree+0x38f/0x6b0 [ 342.500631][ C1] rose_timer_expiry+0x53f/0x630 [ 342.505571][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 342.511041][ C1] call_timer_fn+0x19a/0x670 [ 342.515642][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 342.520748][ C1] ? __run_timers+0x747/0xb30 [ 342.525435][ C1] ? rcu_is_watching+0x12/0xc0 [ 342.530194][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 342.535664][ C1] __run_timers+0x757/0xb30 [ 342.540177][ C1] ? __pfx___run_timers+0x10/0x10 [ 342.545240][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 342.550273][ C1] run_timer_base+0x114/0x190 [ 342.555001][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 342.560195][ C1] run_timer_softirq+0x1a/0x50 [ 342.564964][ C1] handle_softirqs+0x1eb/0x9e0 [ 342.569723][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 342.575016][ C1] __irq_exit_rcu+0xef/0x150 [ 342.579597][ C1] irq_exit_rcu+0x9/0x30 [ 342.583840][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 342.589472][ C1] [ 342.592400][ C1] [ 342.595319][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 342.601275][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 342.606906][ C1] Code: 98 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 bc 1b 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 342.626547][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 342.631683][ T5806] usb 2-1: Using ep0 maxpacket: 32 [ 342.632643][ C1] RAX: 00000000013b684b RBX: ffff88801e69a480 RCX: ffffffff8b8fcc75 [ 342.639532][ T5806] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 342.645693][ C1] RDX: 0000000000000000 RSI: ffffffff8de72aaa RDI: ffffffff8c1af220 [ 342.645710][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795 [ 342.645722][ C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cd3490 [ 342.645736][ C1] R13: 0000000000000001 R14: ffffffff90d97910 R15: 0000000000000000 [ 342.659104][ T5806] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 342.663951][ C1] ? ct_kernel_exit+0x125/0x180 [ 342.663982][ C1] default_idle+0x9/0x10 [ 342.705961][ C1] default_idle_call+0x6c/0xb0 [ 342.710746][ C1] do_idle+0x35b/0x4b0 [ 342.714871][ C1] ? __pfx_do_idle+0x10/0x10 [ 342.719464][ C1] cpu_startup_entry+0x4f/0x60 [ 342.721687][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.724257][ C1] start_secondary+0x21d/0x2d0 [ 342.736967][ C1] ? __pfx_start_secondary+0x10/0x10 [ 342.742314][ C1] common_startup_64+0x13e/0x148 [ 342.742652][ T5806] usb 2-1: Product: syz [ 342.747262][ C1] [ 342.747276][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 342.747289][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 342.747308][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 342.747317][ C1] Call Trace: [ 342.747324][ C1] [ 342.747330][ C1] dump_stack_lvl+0x100/0x190 [ 342.747359][ C1] vpanic+0x552/0x970 [ 342.747376][ C1] ? __pfx_vpanic+0x10/0x10 [ 342.747399][ C1] panic+0xd1/0xe0 [ 342.747414][ C1] ? __pfx_panic+0x10/0x10 [ 342.747436][ C1] ? check_panic_on_warn+0x1f/0x90 [ 342.747463][ C1] check_panic_on_warn.cold+0x19/0x34 [ 342.747481][ C1] ? debug_print_object+0x18e/0x2a0 [ 342.747498][ C1] __warn.cold+0x191/0x348 [ 342.747517][ C1] __report_bug+0x296/0x3d0 [ 342.747545][ C1] ? debug_print_object+0x18e/0x2a0 [ 342.747564][ C1] ? __pfx___report_bug+0x10/0x10 [ 342.747587][ C1] ? lock_acquire+0x1cf/0x380 [ 342.747616][ C1] ? mark_held_locks+0x40/0x70 [ 342.747639][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 342.747663][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 342.747682][ C1] report_bug_entry+0xe1/0x290 [ 342.747706][ C1] ? debug_print_object+0x19b/0x2a0 [ 342.747723][ C1] handle_bug+0x1c9/0x2a0 [ 342.747742][ C1] exc_invalid_op+0x17/0x50 [ 342.747761][ C1] asm_exc_invalid_op+0x1a/0x20 [ 342.747777][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 342.747795][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 62 24 e6 0b 41 56 48 8b 14 dd e0 03 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 8c e9 db 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 342.747810][ C1] RSP: 0018:ffffc90000a08a38 EFLAGS: 00010246 [ 342.747825][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 342.747835][ C1] RDX: ffffffff8c1b0320 RSI: ffffffff8c1aff40 RDI: ffffffff90e3e7d0 [ 342.747846][ C1] RBP: 0000000000000001 R08: ffff888053b34090 R09: ffffffff8bb2b860 [ 342.747857][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1aff40 [ 342.747867][ C1] R13: ffffffff8bb2b8a0 R14: ffffffff8a7b9140 R15: ffffc90000a08b38 [ 342.747877][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 342.747907][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 342.747924][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 342.747950][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 342.747976][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 342.747998][ C1] ? mark_held_locks+0x40/0x70 [ 342.748022][ C1] ? kasan_quarantine_put+0x104/0x240 [ 342.748044][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 342.748061][ C1] ? rose_timer_expiry+0x53f/0x630 [ 342.748083][ C1] kfree+0x38f/0x6b0 [ 342.748105][ C1] rose_timer_expiry+0x53f/0x630 [ 342.748128][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 342.748149][ C1] call_timer_fn+0x19a/0x670 [ 342.748171][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 342.748194][ C1] ? __run_timers+0x747/0xb30 [ 342.748217][ C1] ? rcu_is_watching+0x12/0xc0 [ 342.748238][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 342.748258][ C1] __run_timers+0x757/0xb30 [ 342.748286][ C1] ? __pfx___run_timers+0x10/0x10 [ 342.748316][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 342.748342][ C1] run_timer_base+0x114/0x190 [ 342.748365][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 342.748389][ C1] run_timer_softirq+0x1a/0x50 [ 342.748410][ C1] handle_softirqs+0x1eb/0x9e0 [ 342.748434][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 342.748457][ C1] __irq_exit_rcu+0xef/0x150 [ 342.748476][ C1] irq_exit_rcu+0x9/0x30 [ 342.748494][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 342.748518][ C1] [ 342.748524][ C1] [ 342.748535][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 342.748552][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 342.748568][ C1] Code: 98 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 bc 1b 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 342.748582][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 342.748595][ C1] RAX: 00000000013b684b RBX: ffff88801e69a480 RCX: ffffffff8b8fcc75 [ 342.748606][ C1] RDX: 0000000000000000 RSI: ffffffff8de72aaa RDI: ffffffff8c1af220 [ 342.748617][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795 [ 342.748626][ C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cd3490 [ 342.748637][ C1] R13: 0000000000000001 R14: ffffffff90d97910 R15: 0000000000000000 [ 342.748653][ C1] ? ct_kernel_exit+0x125/0x180 [ 342.748673][ C1] default_idle+0x9/0x10 [ 342.748690][ C1] default_idle_call+0x6c/0xb0 [ 342.748709][ C1] do_idle+0x35b/0x4b0 [ 342.748730][ C1] ? __pfx_do_idle+0x10/0x10 [ 342.748755][ C1] cpu_startup_entry+0x4f/0x60 [ 342.748775][ C1] start_secondary+0x21d/0x2d0 [ 342.748799][ C1] ? __pfx_start_secondary+0x10/0x10 [ 342.748827][ C1] common_startup_64+0x13e/0x148 [ 342.748856][ C1] [ 342.751695][ C1] Kernel Offset: disabled