last executing test programs: 15.425070741s ago: executing program 0 (id=4551): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 11.801169272s ago: executing program 0 (id=4561): openat$tun(0xffffffffffffff9c, &(0x7f0000001800), 0xc0241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b800800030004000000b6ffffff0200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x20000050) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000180)={0x0, 0x1}) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2825) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000000300)={0x5, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db0700", {0x2, 0x2}}) r5 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) socket$l2tp(0x2, 0x2, 0x73) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) 9.694890879s ago: executing program 1 (id=4564): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@private2}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010003000166088f05106605480102030109021200e704957081090400810100002202a4763e760f7cd80872620c7e0a51dc3e3590adaffef66bd382d67763b2c8da557e26c31ecbd34824e869da7ca63bc4736264c1d086db1c50cd003d8b18"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x0, 0x0}, {0x1, 0x2a01, 0x0, 0x0}], 0x2}) 7.975069277s ago: executing program 0 (id=4566): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x63, 0x0, 0x0, 0x0}], 0x1}) 7.547413207s ago: executing program 2 (id=4567): socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000001b00)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x260e, 0x10100, 0x0, 0x170}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r5, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) 7.053469661s ago: executing program 0 (id=4568): openat$tun(0xffffffffffffff9c, &(0x7f0000001800), 0xc0241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b800800030004000000b6ffffff0200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x20000050) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000180)={0x0, 0x1}) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2825) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000000300)={0x5, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db0700", {0x2, 0x2}}) r5 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) socket$l2tp(0x2, 0x2, 0x73) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) 6.894698874s ago: executing program 1 (id=4570): fsopen(&(0x7f0000000580)='overlay\x00', 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 6.312890278s ago: executing program 2 (id=4572): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x1000}, 0x1c) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x65942126f3d7b6a8, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000045, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.826258834s ago: executing program 2 (id=4573): r0 = socket$netlink(0x10, 0x3, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x93ea05013bd5580e) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x4048080) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x840000000002, 0x3, 0x100) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x5) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r5, 0x40184150, &(0x7f0000000100)={0x0, &(0x7f0000000500)}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.399847724s ago: executing program 2 (id=4574): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x1, 0x4ddf, 0x1}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x3000000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendfile(r3, r3, 0x0, 0x2000fb) read$FUSE(0xffffffffffffffff, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x3a, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) ptrace$getsig(0x4202, 0x0, 0x5, &(0x7f00000011c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x80, 0x4) 5.399553604s ago: executing program 3 (id=4575): r0 = socket$netlink(0x10, 0x3, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x93ea05013bd5580e) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x4048080) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x840000000002, 0x3, 0x100) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, &(0x7f0000000100)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.113178997s ago: executing program 1 (id=4576): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x63, 0x0, 0x0, 0x0}], 0x1}) 5.066795046s ago: executing program 3 (id=4577): r0 = socket$netlink(0x10, 0x3, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x93ea05013bd5580e) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x4048080) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x840000000002, 0x3, 0x100) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x5) mount_setattr(r5, &(0x7f0000000000)='.\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r5, 0x40184150, &(0x7f0000000100)={0x0, &(0x7f0000000500)="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", 0xc00}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.462323295s ago: executing program 1 (id=4578): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xd0, 0xae, 0xd1, 0x8, 0x2013, 0x246, 0xe656, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r9, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 3.906251894s ago: executing program 3 (id=4579): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = fsmount(r1, 0x0, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x40, 0x0, 0x7fff7ffc}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000680)=""/127, 0x7f}], 0x1, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x1e, &(0x7f0000000240)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe2b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r4, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cef", 0x5f, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x3c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8044) close_range(r3, 0xffffffffffffffff, 0x0) 3.249805261s ago: executing program 2 (id=4580): socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000001b00)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x260e, 0x10100, 0x0, 0x170}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r5, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) 3.119869491s ago: executing program 0 (id=4581): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 2.742879712s ago: executing program 0 (id=4582): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r0, 0x0, r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x89}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup(r4) syz_io_uring_setup(0x118d, &(0x7f0000000640)={0x0, 0x8d2dc, 0x80, 0xffffffff, 0x400003c8}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r5, 0x0, 0x0, 0x0, 0x80000}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="40330f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) socket(0x1d, 0x2, 0x6) r11 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 2.64715068s ago: executing program 1 (id=4583): r0 = socket$netlink(0x10, 0x3, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x93ea05013bd5580e) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x4048080) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x840000000002, 0x3, 0x100) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x5) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r5, 0x40184150, &(0x7f0000000100)={0x0, &(0x7f0000000500)}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.39020971s ago: executing program 1 (id=4584): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.099954412s ago: executing program 3 (id=4585): r0 = socket$netlink(0x10, 0x3, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x93ea05013bd5580e) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x4048080) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x840000000002, 0x3, 0x100) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, &(0x7f0000000100)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.972364682s ago: executing program 2 (id=4586): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x63, 0x0, 0x0, 0x0}], 0x1}) 1.881663021s ago: executing program 3 (id=4587): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001e40), 0x0, 0x100, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r5 = socket$inet(0x2b, 0x801, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, 0x0, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}, 0x1, 0xffff000000000000}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) sendfile(r7, r7, 0x0, 0x2000fb) 0s ago: executing program 3 (id=4588): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1271.265815][ T9499] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.289172][ T9499] usb 3-1: config 0 descriptor?? [ 1271.538425][ T5155] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1271.723890][ T5155] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.734309][ T9499] nzxt-smart2 0003:1E71:2009.0063: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1271.757440][ T5155] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1271.773028][ T5155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.797546][ T5155] usb 2-1: config 0 descriptor?? [ 1271.821031][ T5155] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1271.941220][T19599] relay: one or more items not logged [item size (56) > sub-buffer size (3)] [ 1272.030098][T19591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.052318][T19589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.061905][T19591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.082147][T19589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.092074][T19591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4139'. [ 1272.114667][T19591] macvtap5: entered promiscuous mode [ 1272.150505][T19591] macvtap5: entered allmulticast mode [ 1272.172576][T19591] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 1272.264445][T18426] usb 2-1: USB disconnect, device number 122 [ 1272.726061][T13963] usb 4-1: USB disconnect, device number 124 [ 1273.530806][T19589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.558302][T19589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.674319][ T9499] usb 3-1: USB disconnect, device number 116 [ 1273.720127][T19615] relay: one or more items not logged [item size (56) > sub-buffer size (3)] [ 1273.777220][T13963] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1274.023562][T13963] usb 2-1: Using ep0 maxpacket: 16 [ 1274.032250][T13963] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1274.043324][T13963] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1274.050328][T13963] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1274.065225][T13963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.082179][T13963] usb 2-1: config 0 descriptor?? [ 1274.102958][T19622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4146'. [ 1274.625360][T19626] input: syz1 as /devices/virtual/input/input144 [ 1274.715872][T13963] usbhid 2-1:0.0: can't add hid device: -71 [ 1274.731106][T13963] usbhid: probe of 2-1:0.0 failed with error -71 [ 1274.801933][T13963] usb 2-1: USB disconnect, device number 123 [ 1275.246438][T18426] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1275.459559][T18426] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1275.471189][T18426] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.482070][T18426] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1275.498328][T18426] usb 3-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=79.86 [ 1275.510942][T18426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.545266][T18426] usb 3-1: Product: syz [ 1275.558427][T18426] usb 3-1: Manufacturer: syz [ 1275.563268][T18426] usb 3-1: SerialNumber: syz [ 1275.650128][T19641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4149'. [ 1275.896255][T18426] usb 3-1: USB disconnect, device number 117 [ 1276.155914][ T5155] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1276.367935][ T5155] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.391699][ T5155] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1276.412736][ T5155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.441950][ T5155] usb 1-1: config 0 descriptor?? [ 1276.463798][ T5155] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1276.668360][T19645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.688938][T19645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.711386][T19645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4150'. [ 1276.777250][T19645] bond_slave_0: entered promiscuous mode [ 1276.783037][T19645] bond_slave_1: entered promiscuous mode [ 1276.824720][T19645] macvtap7: entered promiscuous mode [ 1276.832019][T19645] bond0: entered promiscuous mode [ 1276.843215][T19645] macvtap7: entered allmulticast mode [ 1276.853332][T19645] bond0: entered allmulticast mode [ 1276.862129][T19645] bond_slave_0: entered allmulticast mode [ 1276.873824][T19645] bond_slave_1: entered allmulticast mode [ 1276.888702][T19645] 8021q: adding VLAN 0 to HW filter on device macvtap7 [ 1276.917742][T13961] usb 1-1: USB disconnect, device number 8 [ 1277.603870][T19660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4155'. [ 1278.494780][ T5155] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1278.864461][ T5155] usb 1-1: Using ep0 maxpacket: 32 [ 1278.872386][ T5155] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.887853][ T5155] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1278.958312][ T5155] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1279.003901][T19673] input: syz1 as /devices/virtual/input/input145 [ 1279.015442][ T5155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.056872][ T5155] usb 1-1: Product: syz [ 1279.061206][ T5155] usb 1-1: Manufacturer: syz [ 1279.066037][ T5155] usb 1-1: SerialNumber: syz [ 1279.125255][ T5155] usb 1-1: config 0 descriptor?? [ 1279.444292][ T5155] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1279.636931][ T5155] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.724864][ T5155] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1279.734862][ T5155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.744906][ T5155] usb 4-1: config 0 descriptor?? [ 1279.809195][ T5155] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1280.558079][ T5155] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1280.766290][ T5155] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.821320][ T5155] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1280.941231][ T5155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.962030][ T5155] usb 2-1: config 0 descriptor?? [ 1280.973909][ T5155] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1281.175505][T19691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.189875][T19691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.199517][T19691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4164'. [ 1281.220792][T19691] macvtap6: entered promiscuous mode [ 1281.229058][T19691] macvtap6: entered allmulticast mode [ 1281.237575][T19691] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 1281.281634][ T27] usb 2-1: USB disconnect, device number 124 [ 1281.380982][T19696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4165'. [ 1281.506295][T19697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4161'. [ 1281.600490][ T5155] usb 1-1: USB disconnect, device number 9 [ 1282.790992][T19715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4169'. [ 1283.190446][T19724] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4172'. [ 1283.270558][ T9499] usb 4-1: USB disconnect, device number 125 [ 1283.522851][ T5155] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1283.702288][ T5155] usb 2-1: Using ep0 maxpacket: 8 [ 1283.717430][ T5155] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1283.728158][ T5155] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.743797][ T5155] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1283.766442][ T5155] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 1283.778390][ T5155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.804684][ T5155] usb 2-1: Product: syz [ 1283.822006][ T5155] usb 2-1: Manufacturer: syz [ 1283.843685][ T5155] usb 2-1: SerialNumber: syz [ 1283.867388][ T5155] usb 2-1: config 0 descriptor?? [ 1283.952012][T13963] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1284.081535][T19733] gretap1: entered promiscuous mode [ 1284.195838][T13961] usb 2-1: USB disconnect, device number 125 [ 1284.236279][T13963] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.267881][T13963] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1284.282309][T13963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.303889][T13963] usb 1-1: config 0 descriptor?? [ 1284.318383][T13963] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1284.541633][T19735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.562711][T19735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.622415][T19735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4176'. [ 1284.657124][T19735] macvtap8: entered promiscuous mode [ 1284.671857][T19735] macvtap8: entered allmulticast mode [ 1284.678521][T19735] 8021q: adding VLAN 0 to HW filter on device macvtap8 [ 1284.709099][T13963] usb 1-1: USB disconnect, device number 10 [ 1285.621163][ T9499] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1285.848828][ T9499] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1285.874723][ T9499] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1285.894763][ T9499] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1285.904591][ T9499] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.934391][ T9499] usb 1-1: config 0 descriptor?? [ 1286.081154][T13961] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1286.145330][T19752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4182'. [ 1286.172571][ T9499] usbhid 1-1:0.0: can't add hid device: -71 [ 1286.191039][ T9499] usbhid: probe of 1-1:0.0 failed with error -71 [ 1286.209973][ T9499] usb 1-1: USB disconnect, device number 11 [ 1286.240849][T13961] usb 2-1: device descriptor read/64, error -71 [ 1286.268809][T19752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4182'. [ 1286.520726][T13961] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1286.670594][T13961] usb 2-1: device descriptor read/64, error -71 [ 1286.790873][ T9499] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 1286.791645][T13961] usb usb2-port1: attempt power cycle [ 1286.993297][ T9499] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1287.004539][ T9499] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1287.016836][ T9499] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1287.026232][ T9499] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.042259][ T9499] usb 1-1: config 0 descriptor?? [ 1287.052044][ T9499] hub 1-1:0.0: USB hub found [ 1287.075087][T13963] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1287.215181][T13961] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1287.251697][T13961] usb 2-1: device descriptor read/8, error -71 [ 1287.266520][ T9499] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1287.283090][T13963] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.293506][T13963] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1287.303856][T13963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.322492][T13963] usb 3-1: config 0 descriptor?? [ 1287.336987][T13963] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1287.478387][ T9499] usbhid 1-1:0.0: can't add hid device: -71 [ 1287.486962][ T9499] usbhid: probe of 1-1:0.0 failed with error -71 [ 1287.521779][ T9499] usb 1-1: USB disconnect, device number 12 [ 1287.540204][T13961] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1287.580689][T13961] usb 2-1: device descriptor read/8, error -71 [ 1287.724130][T13961] usb usb2-port1: unable to enumerate USB device [ 1288.359787][T13963] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1288.549700][T13963] usb 1-1: Using ep0 maxpacket: 16 [ 1288.566402][T13963] usb 1-1: config index 0 descriptor too short (expected 526, got 367) [ 1288.595650][T13963] usb 1-1: config 0 has an invalid interface number: 209 but max is 0 [ 1288.609883][T13963] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.623789][T13963] usb 1-1: config 0 has no interface number 0 [ 1288.639735][T13963] usb 1-1: config 0 interface 209 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 1288.661624][T13963] usb 1-1: config 0 interface 209 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 1288.686680][T13963] usb 1-1: config 0 interface 209 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 9 [ 1288.702261][T19773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4183'. [ 1288.742824][T13963] usb 1-1: config 0 interface 209 has no altsetting 0 [ 1288.780938][T13963] usb 1-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 1288.856748][T13963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.908731][T13963] usb 1-1: Product: syz [ 1288.925464][T13963] usb 1-1: Manufacturer: syz [ 1288.935312][T13963] usb 1-1: SerialNumber: syz [ 1288.973005][T13963] usb 1-1: config 0 descriptor?? [ 1288.990415][T19776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4187'. [ 1289.549329][ T28] audit: type=1326 audit(1772354331.746:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19763 comm="syz.0.4185" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f1cf9c799 code=0x0 [ 1289.659983][T13961] usb 1-1: USB disconnect, device number 13 [ 1289.709959][T19790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4189'. [ 1290.016972][T19791] gretap1: entered promiscuous mode [ 1290.981535][ T5155] usb 3-1: USB disconnect, device number 118 [ 1291.708197][T13961] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1291.953134][T13961] usb 2-1: Using ep0 maxpacket: 16 [ 1292.001074][T13961] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.044674][T13961] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1292.052951][T13961] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1292.063719][T13961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.083442][T13961] usb 2-1: config 0 descriptor?? [ 1292.417364][T19808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4193'. [ 1292.629271][T13961] nzxt-smart2 0003:1E71:2009.0064: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1292.632841][T19811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4193'. [ 1293.242602][T19801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.288795][T19801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.765054][T19822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4198'. [ 1293.767159][T13961] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1293.899950][T19825] relay: one or more items not logged [item size (56) > sub-buffer size (3)] [ 1293.928104][T19822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4198'. [ 1293.937194][T13961] usb 4-1: device descriptor read/64, error -71 [ 1293.974347][T19801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.023104][T19801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.207127][ T5155] usb 2-1: USB disconnect, device number 4 [ 1294.207288][T13961] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1294.376824][T13961] usb 4-1: device descriptor read/64, error -71 [ 1294.516986][T13961] usb usb4-port1: attempt power cycle [ 1294.806542][ T5155] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1294.956506][T13963] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1294.986553][T13961] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1294.988344][ T5155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.015440][ T5155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.026578][ T5155] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1295.037031][T13961] usb 4-1: device descriptor read/8, error -71 [ 1295.046954][ T5155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.064262][ T5155] usb 2-1: config 0 descriptor?? [ 1295.162504][T13963] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.175980][T13963] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1295.192107][T13963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.220167][T13963] usb 3-1: config 0 descriptor?? [ 1295.235261][T13963] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1295.306487][T13961] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1295.310811][ T5155] usbhid 2-1:0.0: can't add hid device: -71 [ 1295.326628][ T5155] usbhid: probe of 2-1:0.0 failed with error -71 [ 1295.343403][ T5155] usb 2-1: USB disconnect, device number 5 [ 1295.357461][T13961] usb 4-1: device descriptor read/8, error -71 [ 1295.390538][T19835] gretap1: entered promiscuous mode [ 1295.509648][T13961] usb usb4-port1: unable to enumerate USB device [ 1295.875979][ T9499] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1296.067578][ T9499] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1296.081112][ T9499] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1296.155902][ T9499] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1296.173929][ T9499] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.208515][ T9499] usb 2-1: config 0 descriptor?? [ 1296.223969][ T9499] hub 2-1:0.0: USB hub found [ 1296.434335][ T9499] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1296.467626][T13963] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1296.602375][T19847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4200'. [ 1296.659696][ T9499] usbhid 2-1:0.0: can't add hid device: -71 [ 1296.676312][T13963] usb 1-1: Using ep0 maxpacket: 8 [ 1296.696848][T13963] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1296.708616][T13963] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.709949][ T9499] usbhid: probe of 2-1:0.0 failed with error -71 [ 1296.728337][T13963] usb 1-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1296.787847][ T9499] usb 2-1: USB disconnect, device number 6 [ 1296.804201][T13963] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 1296.815006][T13963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.849725][T13963] usb 1-1: Product: syz [ 1296.884642][T13963] usb 1-1: Manufacturer: syz [ 1296.909422][T13963] usb 1-1: SerialNumber: syz [ 1297.157799][T13963] usb 1-1: USB disconnect, device number 14 [ 1298.013512][ T9499] usb 3-1: USB disconnect, device number 119 [ 1298.404909][T13963] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1298.604628][T13963] usb 1-1: Using ep0 maxpacket: 16 [ 1298.611611][T13963] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1298.625287][T13963] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1298.632106][T13963] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1298.647379][T13963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.690413][T19864] input: syz1 as /devices/virtual/input/input146 [ 1298.694010][T13963] usb 1-1: config 0 descriptor?? [ 1299.169993][T13963] nzxt-smart2 0003:1E71:2009.0065: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1299.374384][T19859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.404771][T19859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.465730][ T9] usb 1-1: USB disconnect, device number 15 [ 1300.004776][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.011470][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.044081][ T27] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1300.154339][T19882] relay: one or more items not logged [item size (56) > sub-buffer size (3)] [ 1300.275273][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.322060][ T27] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 1300.336914][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.348952][ T27] usb 1-1: config 0 descriptor?? [ 1300.360975][ T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1300.623714][ T5808] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1300.683589][ T9499] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1300.774658][ T5808] usb 3-1: device descriptor read/64, error -71 [ 1300.875680][ T9499] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.902438][ T9499] usb 2-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 1300.938811][ T9499] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.957247][ T9499] usb 2-1: config 0 descriptor?? [ 1300.976392][ T9499] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1301.007625][ T9499] usb 1-1: USB disconnect, device number 16 [ 1301.083802][ T5808] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1301.233547][ T5808] usb 3-1: device descriptor read/64, error -71 [ 1301.313477][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1301.335368][ T27] usb 2-1: USB disconnect, device number 7 [ 1301.369044][ T5808] usb usb3-port1: attempt power cycle [ 1301.503382][ T9499] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1301.522056][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.534354][ T9] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1301.544016][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.556326][ T9] usb 4-1: config 0 descriptor?? [ 1301.577786][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1301.663201][ T9499] usb 1-1: device descriptor read/64, error -71 [ 1301.797964][ T5808] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1301.846382][ T5808] usb 3-1: device descriptor read/8, error -71 [ 1301.962980][ T9499] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1302.122994][ T5808] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1302.130810][ T9499] usb 1-1: device descriptor read/64, error -71 [ 1302.193705][ T5808] usb 3-1: device descriptor read/8, error -71 [ 1302.274130][ T9499] usb usb1-port1: attempt power cycle [ 1302.312971][ T5808] usb usb3-port1: unable to enumerate USB device [ 1302.692641][ T9499] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1302.723922][ T9499] usb 1-1: device descriptor read/8, error -71 [ 1302.883630][T19900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4215'. [ 1302.992446][ T9499] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1303.034087][ T9499] usb 1-1: device descriptor read/8, error -71 [ 1303.155497][ T9499] usb usb1-port1: unable to enumerate USB device [ 1303.192342][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1303.454684][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1303.464974][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1303.479675][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1303.488932][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1303.499942][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.523739][ T9] usb 2-1: config 0 descriptor?? [ 1303.958862][ T9] nzxt-smart2 0003:1E71:2009.0066: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1304.171210][T19912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1304.180380][T19912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1304.283691][ T9] usb 2-1: USB disconnect, device number 8 [ 1304.521683][ T9499] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1304.714560][ T5808] usb 4-1: USB disconnect, device number 4 [ 1304.732685][ T9499] usb 1-1: Using ep0 maxpacket: 16 [ 1304.752568][ T9499] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1304.791610][ T9499] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1304.798307][ T9499] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1304.819001][ T9499] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.853723][ T9499] usb 1-1: config 0 descriptor?? [ 1305.318579][ T9499] nzxt-smart2 0003:1E71:2009.0067: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1305.481207][ T5808] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1305.691182][ T5808] usb 3-1: Using ep0 maxpacket: 16 [ 1305.734285][T19924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.756059][ T5808] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1305.776881][T19924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.806764][ T5808] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1305.850991][ T5808] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1305.929591][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.988111][ T5808] usb 3-1: config 0 descriptor?? [ 1306.321020][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1306.499222][ T5808] nzxt-smart2 0003:1E71:2009.0068: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1306.541272][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1306.576687][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.690822][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1306.869350][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1306.888904][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.902031][ T9] usb 2-1: Product: syz [ 1306.907769][ T9] usb 2-1: Manufacturer: syz [ 1306.930474][ T9] usb 2-1: SerialNumber: syz [ 1307.039587][ T9] usb 2-1: config 0 descriptor?? [ 1307.091677][T19933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.123004][T19933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.820065][ T5808] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1307.837566][T19933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.888496][T19933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.039926][ T5808] usb 4-1: Using ep0 maxpacket: 16 [ 1308.082855][ T5808] usb 4-1: no configurations [ 1308.099621][T19924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.113553][ T5808] usb 4-1: can't read configurations, error -22 [ 1308.205078][T19924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.289870][ T5808] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1308.499788][ T5808] usb 4-1: Using ep0 maxpacket: 16 [ 1308.506865][ T27] usb 1-1: USB disconnect, device number 21 [ 1308.526730][ T5808] usb 4-1: no configurations [ 1308.546684][ T5808] usb 4-1: can't read configurations, error -22 [ 1308.578055][ T5808] usb usb4-port1: attempt power cycle [ 1308.764295][ T9] usb 3-1: USB disconnect, device number 124 [ 1309.063606][ T5808] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1309.138485][ T5808] usb 4-1: Using ep0 maxpacket: 16 [ 1309.144369][ T5808] usb 4-1: no configurations [ 1309.148965][ T5808] usb 4-1: can't read configurations, error -22 [ 1309.211903][T19954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4230'. [ 1309.304474][ T9] usb 2-1: USB disconnect, device number 9 [ 1309.340137][ T5808] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1309.355746][T19954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4230'. [ 1309.392298][ T5808] usb 4-1: Using ep0 maxpacket: 16 [ 1309.398065][ T5808] usb 4-1: no configurations [ 1309.405246][ T5808] usb 4-1: can't read configurations, error -22 [ 1309.415923][ T5808] usb usb4-port1: unable to enumerate USB device [ 1309.459519][ T9499] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1309.619126][ T9499] usb 1-1: device descriptor read/64, error -71 [ 1309.839055][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1309.889614][ T9499] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1310.019494][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1310.028322][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1310.038946][ T9499] usb 1-1: device descriptor read/64, error -71 [ 1310.040095][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1310.054718][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1310.064103][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.076975][ T9] usb 2-1: config 0 descriptor?? [ 1310.161070][ T9499] usb usb1-port1: attempt power cycle [ 1310.541459][ T9] nzxt-smart2 0003:1E71:2009.0069: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1310.578703][ T9499] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1310.639494][ T9499] usb 1-1: device descriptor read/8, error -71 [ 1310.758618][T19958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.769373][T19958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.929257][ T9499] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1310.936492][ T9] usb 2-1: USB disconnect, device number 10 [ 1310.979424][ T9499] usb 1-1: device descriptor read/8, error -71 [ 1311.098507][T18426] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1311.108654][ T9499] usb usb1-port1: unable to enumerate USB device [ 1311.278352][T14517] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1311.281958][T18426] usb 4-1: Using ep0 maxpacket: 16 [ 1311.293557][T18426] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1311.308315][T18426] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1311.314979][T18426] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1311.324850][T18426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.335510][T18426] usb 4-1: config 0 descriptor?? [ 1311.438187][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1311.459193][T14517] usb 3-1: Using ep0 maxpacket: 8 [ 1311.467017][T14517] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1311.476016][T14517] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.491755][T14517] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 1311.501380][T14517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.509546][T14517] usb 3-1: Product: syz [ 1311.513908][T14517] usb 3-1: Manufacturer: syz [ 1311.518592][T14517] usb 3-1: SerialNumber: syz [ 1311.634260][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.644609][ T9] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1311.653929][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.666183][ T9] usb 2-1: config 0 descriptor?? [ 1311.676272][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1311.743658][T14517] vmk80xx 3-1:8.0: driver 'vmk80xx' failed to auto-configure device. [ 1311.758420][T14517] usb 3-1: USB disconnect, device number 125 [ 1311.779535][T18426] nzxt-smart2 0003:1E71:2009.006A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1311.889388][T19969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.903523][T19969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.915000][ T9499] usb 2-1: USB disconnect, device number 11 [ 1312.050666][T19965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.060598][T19965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.332261][T19965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.394796][T19965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.654442][T19985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4240'. [ 1312.823457][T19985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4240'. [ 1312.884220][ T9] usb 4-1: USB disconnect, device number 9 [ 1313.817026][ T5808] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1314.006978][ T5808] usb 3-1: Using ep0 maxpacket: 16 [ 1314.007109][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1314.030403][ T5808] usb 3-1: no configurations [ 1314.045827][ T5808] usb 3-1: can't read configurations, error -22 [ 1314.206852][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1314.217782][ T5808] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1314.227405][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1314.248373][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1314.278777][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1314.293944][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.312211][ T9] usb 2-1: config 0 descriptor?? [ 1314.417038][ T5808] usb 3-1: Using ep0 maxpacket: 16 [ 1314.425879][ T5808] usb 3-1: no configurations [ 1314.445228][ T5808] usb 3-1: can't read configurations, error -22 [ 1314.488361][ T5808] usb usb3-port1: attempt power cycle [ 1314.526709][T14517] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1314.716557][T14517] usb 1-1: Using ep0 maxpacket: 8 [ 1314.729799][T14517] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1314.741990][T14517] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1314.751162][T14517] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1314.764145][T14517] usb 1-1: Product: syz [ 1314.768406][T14517] usb 1-1: Manufacturer: syz [ 1314.773171][T14517] usb 1-1: SerialNumber: syz [ 1314.798240][ T9] nzxt-smart2 0003:1E71:2009.006B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1314.906906][ T5808] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1314.949436][ T5808] usb 3-1: Using ep0 maxpacket: 16 [ 1314.959532][ T5808] usb 3-1: no configurations [ 1314.964176][ T5808] usb 3-1: can't read configurations, error -22 [ 1315.020350][T19997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.037524][T19997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.070334][T14517] usb 1-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 1315.098523][T14517] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1315.126323][T14517] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1315.145113][T18426] usb 2-1: USB disconnect, device number 12 [ 1315.156384][ T5808] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1315.202489][ T5808] usb 3-1: Using ep0 maxpacket: 16 [ 1315.221081][ T5808] usb 3-1: no configurations [ 1315.234372][ T5808] usb 3-1: can't read configurations, error -22 [ 1315.249582][ T5808] usb usb3-port1: unable to enumerate USB device [ 1315.270997][T14517] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 1315.285381][T14517] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 1315.299418][T14517] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1315.311900][T14517] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1315.323063][T14517] usb 1-1: USB disconnect, device number 26 [ 1315.333675][T14517] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1315.353455][T14517] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1315.363880][T14517] visor 1-1:1.0: device disconnected [ 1315.476302][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1315.666086][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1315.676749][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1315.687376][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1315.694985][ T9] usb 4-1: can't read configurations, error -71 [ 1315.701511][T18426] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1315.889174][T18426] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.906493][T18426] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1315.915680][T18426] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.937102][T18426] usb 2-1: config 0 descriptor?? [ 1315.945634][T18426] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1316.162208][T20009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.182165][T20009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.196130][T18426] usb 2-1: USB disconnect, device number 13 [ 1316.907780][T20022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4253'. [ 1317.031870][T20022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4253'. [ 1317.065523][T13963] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1317.262084][T13963] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.283270][T13963] usb 2-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 1317.305452][T13963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.325930][T13963] usb 2-1: config 0 descriptor?? [ 1317.342972][T13963] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1317.955131][T13963] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1318.064899][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1318.145023][T13963] usb 4-1: Using ep0 maxpacket: 32 [ 1318.163737][T13963] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.195969][T13963] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1318.232598][T13963] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1318.243851][T13963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.262123][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1318.273940][T13963] usb 4-1: Product: syz [ 1318.298599][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.328191][T13963] usb 4-1: Manufacturer: syz [ 1318.346712][T13963] usb 4-1: SerialNumber: syz [ 1318.354690][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1318.400618][T13963] usb 4-1: config 0 descriptor?? [ 1318.413782][ T9] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1318.539461][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.696607][ T9] usb 1-1: config 0 descriptor?? [ 1318.811635][T18426] usb 2-1: USB disconnect, device number 14 [ 1319.151660][ T9] nzxt-smart2 0003:1E71:2009.006C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1319.369391][T20033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.402695][T20033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.518489][ T9] usb 1-1: USB disconnect, device number 27 [ 1320.064064][T18426] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1320.094669][T20046] syzkaller0: entered promiscuous mode [ 1320.100397][T20046] syzkaller0: entered allmulticast mode [ 1320.173986][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1320.265138][T18426] usb 2-1: Using ep0 maxpacket: 16 [ 1320.271525][T18426] usb 2-1: no configurations [ 1320.277213][T18426] usb 2-1: can't read configurations, error -22 [ 1320.367427][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.377816][ T9] usb 1-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1320.389005][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.433690][T18426] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1320.444599][ T9] usb 1-1: config 0 descriptor?? [ 1320.475666][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1320.520781][ T9] usb 4-1: USB disconnect, device number 12 [ 1320.583804][ T5826] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1320.643854][T18426] usb 2-1: Using ep0 maxpacket: 16 [ 1320.649621][T18426] usb 2-1: no configurations [ 1320.661661][T18426] usb 2-1: can't read configurations, error -22 [ 1320.669503][T18426] usb usb2-port1: attempt power cycle [ 1320.785695][ T5826] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.804238][ T5826] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1320.818697][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.831231][ T5826] usb 3-1: config 0 descriptor?? [ 1320.851809][ T5826] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1321.003437][ T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1321.060974][T20048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.070345][T20048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.088017][ T5826] usb 3-1: USB disconnect, device number 4 [ 1321.094133][T18426] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1321.149694][T18426] usb 2-1: Using ep0 maxpacket: 16 [ 1321.157119][T18426] usb 2-1: no configurations [ 1321.161730][T18426] usb 2-1: can't read configurations, error -22 [ 1321.220153][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.239233][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1321.266953][ T9] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1321.289596][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.301818][ T9] usb 4-1: config 0 descriptor?? [ 1321.312029][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1321.319935][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1321.342245][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1321.351078][T18426] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1321.360168][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1321.368304][ T9] usb 4-1: media controller created [ 1321.376203][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1321.386580][T18426] usb 2-1: Using ep0 maxpacket: 16 [ 1321.392853][T18426] usb 2-1: no configurations [ 1321.397578][T18426] usb 2-1: can't read configurations, error -22 [ 1321.405075][T18426] usb usb2-port1: unable to enumerate USB device [ 1321.425773][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1321.431568][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1321.457120][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input147 [ 1321.488549][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 1321.514115][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1321.630899][T20054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4258'. [ 1321.673089][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1321.699889][ T9] dvb-usb: error while querying for an remote control event. [ 1321.883363][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1321.897124][ T9] dvb-usb: error while querying for an remote control event. [ 1321.924182][T18426] usb 4-1: USB disconnect, device number 13 [ 1321.977585][T18426] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1322.979230][ T9] usb 1-1: USB disconnect, device number 28 [ 1323.102516][ T5808] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1323.337193][ T5808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.360417][ T5808] usb 4-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 1323.411503][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.423799][ T5808] usb 4-1: config 0 descriptor?? [ 1323.432044][ T5808] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1324.780609][ T5808] usb 4-1: USB disconnect, device number 14 [ 1325.959524][T20098] gretap1: entered promiscuous mode [ 1326.695398][T20105] relay: one or more items not logged [item size (56) > sub-buffer size (3)] [ 1327.011196][ T27] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1327.210408][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 1327.264733][ T27] usb 2-1: config index 0 descriptor too short (expected 526, got 367) [ 1327.295048][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.324448][ T27] usb 2-1: config 0 has no interfaces? [ 1327.354396][ T27] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 1327.401701][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.445754][ T27] usb 2-1: Product: syz [ 1327.462767][ T27] usb 2-1: Manufacturer: syz [ 1327.467449][ T27] usb 2-1: SerialNumber: syz [ 1327.537296][ T27] usb 2-1: config 0 descriptor?? [ 1327.777719][T14517] usb 2-1: USB disconnect, device number 19 [ 1327.950006][T18426] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1327.970401][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1328.159930][T18426] usb 1-1: Using ep0 maxpacket: 16 [ 1328.168231][T18426] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.168559][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.184011][T18426] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1328.190309][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1328.190360][ T27] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1328.203546][T18426] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1328.207714][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.232984][T18426] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.243851][T18426] usb 1-1: config 0 descriptor?? [ 1328.244698][ T27] usb 3-1: config 0 descriptor?? [ 1328.499453][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 1328.514630][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 1328.553768][ T27] usb 3-1: USB disconnect, device number 5 [ 1328.700177][T18426] nzxt-smart2 0003:1E71:2009.006D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1328.729622][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1328.934488][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1328.953142][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1328.972895][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.994168][ T9] usb 2-1: config 0 descriptor?? [ 1329.049459][ T5826] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 1329.064221][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1329.163560][T20114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.182583][T20114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.251906][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1329.264278][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1329.282754][ T5826] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1329.302972][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.342421][ T5826] usb 3-1: config 0 descriptor?? [ 1329.367011][ T5826] hub 3-1:0.0: USB hub found [ 1329.588364][ T5826] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1329.802597][ T5826] usbhid 3-1:0.0: can't add hid device: -71 [ 1329.813661][ T5826] usbhid: probe of 3-1:0.0 failed with error -71 [ 1329.880047][ T5826] usb 3-1: USB disconnect, device number 6 [ 1331.507362][T14517] usb 2-1: USB disconnect, device number 20 [ 1331.725349][T20114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.796101][T20114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.079350][T14517] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1332.350150][T14517] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.390753][ T5826] usb 1-1: USB disconnect, device number 29 [ 1332.437006][T14517] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1332.466656][T14517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.493301][T14517] usb 2-1: config 0 descriptor?? [ 1332.536601][T14517] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1332.756460][T20139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.779780][T20139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.812291][T14517] usb 2-1: USB disconnect, device number 21 [ 1333.727123][T13963] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1333.937043][T13963] usb 2-1: Using ep0 maxpacket: 8 [ 1333.960593][T13963] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1333.982125][T13963] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1334.026863][T13963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.040999][T13963] usb 2-1: Product: syz [ 1334.045844][T13963] usb 2-1: Manufacturer: syz [ 1334.056040][T13963] usb 2-1: SerialNumber: syz [ 1334.075429][T13963] usb 2-1: config 0 descriptor?? [ 1334.089497][T13963] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1334.104965][T13963] usb 2-1: setting power ON [ 1334.117638][T13963] dvb-usb: bulk message failed: -22 (2/0) [ 1334.137027][T13963] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1334.165597][T13963] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1334.194109][T13963] usb 2-1: media controller created [ 1334.239999][T13963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1334.350820][T13963] usb 2-1: selecting invalid altsetting 6 [ 1334.375077][T13963] usb 2-1: digital interface selection failed (-22) [ 1334.419802][T13963] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1334.424224][T20159] dvb-usb: bulk message failed: -22 (3/0) [ 1334.460540][T13963] usb 2-1: setting power OFF [ 1334.490249][T13963] dvb-usb: bulk message failed: -22 (2/0) [ 1334.519833][T13963] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1334.544853][T13963] (NULL device *): no alternate interface [ 1334.640592][T13963] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1334.697449][T13963] usb 2-1: USB disconnect, device number 22 [ 1335.246883][T20178] fuse: Unknown parameter '0x0000000000000004' [ 1335.619502][T20183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4295'. [ 1335.713527][T20183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4295'. [ 1336.135979][ T5826] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1336.318316][ T5826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.330380][ T5826] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1336.340742][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.346022][T14517] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1336.368253][ T5826] usb 4-1: config 0 descriptor?? [ 1336.384639][ T5826] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1336.535640][T14517] usb 1-1: Using ep0 maxpacket: 16 [ 1336.543135][T14517] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.553440][T14517] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1336.570909][T14517] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1336.581696][T14517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.596665][T14517] usb 1-1: config 0 descriptor?? [ 1336.597437][T20186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.618066][T20186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.643258][ T9499] usb 4-1: USB disconnect, device number 15 [ 1336.775592][ T5826] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1336.897940][T14517] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1336.958022][ T5826] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1336.969154][ T5826] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1336.981643][ T5826] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1336.990855][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.998966][ T5826] usb 3-1: Product: syz [ 1337.003175][ T5826] usb 3-1: Manufacturer: syz [ 1337.007905][ T5826] usb 3-1: SerialNumber: syz [ 1337.020735][ T5826] cdc_mbim 3-1:1.0: skipping garbage [ 1337.085379][T14517] usb 2-1: Using ep0 maxpacket: 16 [ 1337.092539][T14517] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1337.101806][T14517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.111895][T14517] usb 2-1: config 0 descriptor?? [ 1337.121342][T14517] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1337.227578][T20194] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1337.642453][ T5826] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 1337.652006][ T5826] cdc_mbim 3-1:1.0: bind() failure [ 1337.661480][ T5826] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1337.668781][ T5826] cdc_ncm 3-1:1.1: bind() failure [ 1337.683956][ T5826] usb 3-1: USB disconnect, device number 7 [ 1337.692369][T13963] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1337.874992][T13963] usb 4-1: Using ep0 maxpacket: 8 [ 1337.881869][T13963] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1337.902659][T13963] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1337.911841][T13963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.920685][T13963] usb 4-1: Product: syz [ 1337.924988][T13963] usb 4-1: Manufacturer: syz [ 1337.929636][T13963] usb 4-1: SerialNumber: syz [ 1337.937045][T13963] usb 4-1: config 0 descriptor?? [ 1338.624760][T13963] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1338.814493][T13963] usb 3-1: Using ep0 maxpacket: 16 [ 1338.822457][T13963] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.832738][T13963] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1338.842348][T13963] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1339.105014][ T9] usb 1-1: USB disconnect, device number 30 [ 1339.195379][T20213] fuse: Unknown parameter '0x0000000000000004' [ 1339.374249][T14517] gspca_sonixj: i2c_w8 err -71 [ 1339.382137][T14517] sonixj: probe of 2-1:0.0 failed with error -71 [ 1339.401216][T14517] usb 2-1: USB disconnect, device number 23 [ 1340.404191][T18426] usb 4-1: USB disconnect, device number 16 [ 1341.421260][T13963] usb 3-1: string descriptor 0 read error: -71 [ 1341.430502][T13963] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1341.456638][T13963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.481230][T13963] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 1341.508347][T13963] usb 3-1: no configuration chosen from 1 choice [ 1341.521023][T13963] usb 3-1: USB disconnect, device number 8 [ 1341.982980][T13963] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1342.185047][T13963] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.239223][T13963] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1342.260875][T13963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.285069][T13963] usb 3-1: config 0 descriptor?? [ 1342.309406][T13963] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1343.204547][T20256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4326'. [ 1343.257055][T20259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4326'. [ 1343.990078][T20281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4315'. [ 1344.031968][ T9499] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1344.223828][ T9499] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.238379][ T9499] usb 1-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1344.254021][ T9499] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.294183][ T9499] usb 1-1: config 0 descriptor?? [ 1344.323918][ T9499] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1345.031385][ T9499] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1345.111343][T14517] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1345.211305][ T9499] usb 4-1: Using ep0 maxpacket: 16 [ 1345.242816][ T9499] usb 4-1: config index 0 descriptor too short (expected 526, got 367) [ 1345.266558][ T9499] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.296288][ T9499] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1345.311211][T14517] usb 2-1: Using ep0 maxpacket: 16 [ 1345.334640][ T9499] usb 4-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 1345.354232][ T9499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.362920][T14517] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.447745][ T9499] usb 4-1: Product: syz [ 1345.458855][T14517] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1345.467842][ T9499] usb 4-1: Manufacturer: syz [ 1345.482769][ T9499] usb 4-1: SerialNumber: syz [ 1345.494759][T14517] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1345.562063][ T9499] usb 4-1: config 0 descriptor?? [ 1345.634947][T13963] usb 3-1: USB disconnect, device number 9 [ 1345.799740][ T27] usb 4-1: USB disconnect, device number 17 [ 1347.499966][T20304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4330'. [ 1347.566877][T20306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4330'. [ 1348.163746][T18426] usb 1-1: USB disconnect, device number 31 [ 1348.809690][T14517] usb 2-1: string descriptor 0 read error: -71 [ 1348.820086][T14517] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1348.850058][T14517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.916164][T14517] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 1349.054935][T20319] kvm: kvm [20318]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 1349.083750][T14517] usb 2-1: no configuration chosen from 1 choice [ 1349.108726][T14517] usb 2-1: USB disconnect, device number 24 [ 1349.769022][T18426] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1349.799194][T14517] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1349.820965][ T5155] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1349.958927][T18426] usb 1-1: Using ep0 maxpacket: 8 [ 1349.965813][T18426] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1349.977213][T18426] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1349.986380][T18426] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.994746][T18426] usb 1-1: Product: syz [ 1350.010716][T18426] usb 1-1: Manufacturer: syz [ 1350.015363][T18426] usb 1-1: SerialNumber: syz [ 1350.020412][ T5155] usb 4-1: Using ep0 maxpacket: 16 [ 1350.033498][ T5155] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1350.045345][T18426] usb 1-1: config 0 descriptor?? [ 1350.047312][ T5155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.068517][T18426] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1350.089534][ T5155] usb 4-1: config 0 descriptor?? [ 1350.091907][T18426] usb 1-1: setting power ON [ 1350.096809][T14517] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1350.112152][ T5155] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1350.115845][T18426] dvb-usb: bulk message failed: -22 (2/0) [ 1350.119118][T14517] usb 2-1: can't read configurations, error -71 [ 1350.145291][T18426] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1350.159514][T18426] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1350.168024][T18426] usb 1-1: media controller created [ 1350.203077][T18426] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1350.234033][T18426] usb 1-1: selecting invalid altsetting 6 [ 1350.246073][T18426] usb 1-1: digital interface selection failed (-22) [ 1350.253189][T18426] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1350.262550][T18426] usb 1-1: setting power OFF [ 1350.267172][T18426] dvb-usb: bulk message failed: -22 (2/0) [ 1350.273402][T18426] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1350.291743][T18426] (NULL device *): no alternate interface [ 1350.304965][T20328] dvb-usb: bulk message failed: -22 (3/0) [ 1350.347723][T18426] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1350.363388][T18426] usb 1-1: USB disconnect, device number 32 [ 1350.520459][T14517] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1350.718523][T14517] usb 2-1: Using ep0 maxpacket: 8 [ 1350.726038][T14517] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1350.736678][T14517] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1350.745861][T14517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.753965][T14517] usb 2-1: Product: syz [ 1350.758907][T14517] usb 2-1: Manufacturer: syz [ 1350.763582][T14517] usb 2-1: SerialNumber: syz [ 1350.770368][T14517] usb 2-1: config 0 descriptor?? [ 1350.780275][T14517] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1350.788533][T14517] usb 2-1: setting power ON [ 1350.793101][T14517] dvb-usb: bulk message failed: -22 (2/0) [ 1350.803648][T14517] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1350.813527][T14517] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1350.822255][T14517] usb 2-1: media controller created [ 1350.845658][T14517] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1350.867319][T14517] usb 2-1: selecting invalid altsetting 6 [ 1350.873126][T14517] usb 2-1: digital interface selection failed (-22) [ 1350.878461][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1350.879826][T14517] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1350.896544][T14517] usb 2-1: setting power OFF [ 1350.901269][T14517] dvb-usb: bulk message failed: -22 (2/0) [ 1350.907070][T14517] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1350.925363][T14517] (NULL device *): no alternate interface [ 1350.945959][T14517] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1351.079960][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1351.105059][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1351.143851][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1351.162130][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.167033][T14517] usb 2-1: USB disconnect, device number 26 [ 1351.178340][ T9] usb 3-1: Product: syz [ 1351.182550][ T9] usb 3-1: Manufacturer: syz [ 1351.194795][ T9] usb 3-1: SerialNumber: syz [ 1351.215209][ T9] cdc_mbim 3-1:1.0: skipping garbage [ 1351.434719][T20334] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1352.048284][T20334] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1352.055918][ T9] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1352.063743][ T9] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 1352.257502][ T9] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 1352.272883][ T9] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 1352.296215][ T9] wwan wwan0: port wwan0mbim0 attached [ 1352.316268][ T9] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 56:81:e0:b3:66:fc [ 1352.337472][ T9] usb 3-1: USB disconnect, device number 10 [ 1352.354400][ T9] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 1352.502756][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 1352.668241][T14517] usb 4-1: USB disconnect, device number 18 [ 1353.167911][ T9499] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1353.391985][ T9499] usb 1-1: Using ep0 maxpacket: 16 [ 1353.419545][ T9499] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1353.428757][ T9499] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.444364][ T9499] usb 1-1: config 0 descriptor?? [ 1353.452537][ T9499] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1354.004592][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4349'. [ 1354.247069][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4349'. [ 1354.292887][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4349'. [ 1354.423638][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4349'. [ 1354.465427][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4349'. [ 1354.563508][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4349'. [ 1354.646341][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4349'. [ 1354.677898][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4349'. [ 1354.699287][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4349'. [ 1354.711550][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4349'. [ 1354.787245][T20389] net_ratelimit: 2 callbacks suppressed [ 1354.787257][T20389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1355.909455][ T9499] usb 1-1: USB disconnect, device number 33 [ 1356.446117][ T9499] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1356.647564][ T9499] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.664161][ T9499] usb 1-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1356.723175][ T9499] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.773650][ T9499] usb 1-1: config 0 descriptor?? [ 1356.828739][ T9499] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1356.829564][T20434] relay: one or more items not logged [item size (56) > sub-buffer size (3)] [ 1359.867825][T18426] usb 1-1: USB disconnect, device number 34 [ 1360.084340][T14517] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1360.096757][T20464] kvm: kvm [20463]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000 [ 1360.117460][T20469] __nla_validate_parse: 9 callbacks suppressed [ 1360.117472][T20469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4367'. [ 1360.186508][T20469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4367'. [ 1360.270374][T14517] usb 4-1: Using ep0 maxpacket: 16 [ 1360.282290][T14517] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1360.291526][T14517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.302148][T14517] usb 4-1: config 0 descriptor?? [ 1360.310984][T14517] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1360.973774][ T27] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1361.103391][T18426] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1361.163432][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 1361.171921][ T27] usb 3-1: config index 0 descriptor too short (expected 526, got 367) [ 1361.182434][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.207079][ T27] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1361.231060][ T27] usb 3-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 1361.243830][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.262152][ T27] usb 3-1: Product: syz [ 1361.266530][ T27] usb 3-1: Manufacturer: syz [ 1361.272265][ T27] usb 3-1: SerialNumber: syz [ 1361.293777][ T27] usb 3-1: config 0 descriptor?? [ 1361.320809][T18426] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1361.340329][T18426] usb 2-1: can't read configurations, error -71 [ 1361.397891][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.413726][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.510959][ T27] usb 3-1: USB disconnect, device number 11 [ 1361.642565][T20482] relay: one or more items not logged [item size (56) > sub-buffer size (3)] [ 1362.761822][T18426] usb 4-1: USB disconnect, device number 19 [ 1363.536184][T20504] relay: one or more items not logged [item size (56) > sub-buffer size (3)] [ 1363.682105][T14517] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1363.884873][T14517] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.909923][T14517] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1363.951243][T14517] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1363.964774][T14517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.985063][T14517] usb 1-1: Product: syz [ 1363.991024][T14517] usb 1-1: Manufacturer: syz [ 1363.997568][T14517] usb 1-1: SerialNumber: syz [ 1364.010481][T14517] cdc_mbim 1-1:1.0: skipping garbage [ 1364.217561][T20502] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1364.842293][T20502] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1364.872011][T14517] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1364.904792][T14517] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 1365.088503][T14517] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 1365.119991][T14517] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 1365.157085][T14517] wwan wwan0: port wwan0mbim0 attached [ 1365.199165][T14517] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 5e:08:13:c1:5a:bc [ 1365.250756][T14517] usb 1-1: USB disconnect, device number 35 [ 1365.282424][T14517] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 1365.414390][T14517] wwan wwan0: port wwan0mbim0 disconnected [ 1366.045422][T14517] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 1366.178743][T20529] syzkaller0: entered promiscuous mode [ 1366.200933][T20529] syzkaller0: entered allmulticast mode [ 1366.266350][T14517] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1366.290815][T14517] usb 3-1: can't read configurations, error -71 [ 1366.598869][T20531] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4386'. [ 1366.749580][T20531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4386'. [ 1367.737427][T20554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4393'. [ 1367.810128][T20554] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4393'. [ 1368.088224][T20558] syzkaller0: entered promiscuous mode [ 1368.104068][T20558] syzkaller0: entered allmulticast mode [ 1368.249839][T14517] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1368.508635][T14517] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1368.532268][T14517] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1368.547885][T14517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.575447][T14517] usb 1-1: config 0 descriptor?? [ 1368.600459][T14517] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1368.783579][T18426] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1368.802262][T20556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.837989][T20556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.874151][T13963] usb 1-1: USB disconnect, device number 36 [ 1368.998999][T18426] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1369.009682][T18426] usb 3-1: can't read configurations, error -71 [ 1369.626152][T20581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4403'. [ 1369.703734][T20581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4403'. [ 1369.840145][T13963] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1370.043022][T13963] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.060965][T13963] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1370.070340][T13963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.089903][T13963] usb 4-1: config 0 descriptor?? [ 1370.116121][T13963] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1370.616826][T20588] syzkaller0: entered promiscuous mode [ 1370.633903][T20588] syzkaller0: entered allmulticast mode [ 1370.958263][T20604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4406'. [ 1370.968229][T20604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4406'. [ 1370.983772][T20604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4406'. [ 1371.017442][T20604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4406'. [ 1371.192561][T20604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1371.538203][ T5155] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1371.748076][ T5155] usb 1-1: Using ep0 maxpacket: 16 [ 1371.767215][ T5155] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.830562][ T5155] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1371.905687][ T5155] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1372.081734][ T5155] usb 1-1: string descriptor 0 read error: -71 [ 1372.123214][ T5155] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1372.165803][ T5155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.201087][ T5155] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 1372.237618][ T5155] usb 1-1: no configuration chosen from 1 choice [ 1372.263388][ T5155] usb 1-1: USB disconnect, device number 37 [ 1372.624362][T20613] __nla_validate_parse: 15 callbacks suppressed [ 1372.624377][T20613] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4409'. [ 1372.947476][ T5826] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1373.159959][ T5826] usb 3-1: Using ep0 maxpacket: 8 [ 1373.189670][ T5826] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1373.237449][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 1373.247442][ T5826] usb 3-1: config 4 has too many interfaces: 231, using maximum allowed: 32 [ 1373.266501][ T5826] usb 3-1: config 4 has 1 interface, different from the descriptor's value: 231 [ 1373.276445][ T5826] usb 3-1: config 4 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1373.289771][ T5826] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1373.301797][ T5826] usb 3-1: string descriptor 0 read error: -22 [ 1373.308275][ T5826] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1373.321557][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.338193][ T5826] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1373.365568][ T5826] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1373.397714][ T5826] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1373.407219][T14517] usb 4-1: USB disconnect, device number 20 [ 1373.433618][ T5826] usb 3-1: media controller created [ 1373.558044][T20613] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 1373.574422][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1373.649771][ T5826] zl10353_read_register: readreg error (reg=127, ret==0) [ 1373.784212][ T5826] usb 3-1: USB disconnect, device number 16 [ 1373.977020][T14517] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1374.188687][T14517] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1374.205896][T14517] usb 4-1: can't read configurations, error -71 [ 1375.361796][ T9499] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1375.641191][ T9499] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1375.652784][ T9499] usb 1-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1375.696322][ T9499] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.720511][ T9499] usb 1-1: config 0 descriptor?? [ 1375.733213][ T9499] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1376.085860][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1376.275764][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1376.288983][ T9] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1376.320243][ T9] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1376.337690][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.375904][ T9] usb 2-1: Product: syz [ 1376.385801][ T9] usb 2-1: Manufacturer: syz [ 1376.402475][ T9] usb 2-1: SerialNumber: syz [ 1376.429701][ T9] usb 2-1: config 0 descriptor?? [ 1376.452716][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1376.474855][ T9] usb 2-1: setting power ON [ 1376.493698][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 1376.527634][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1376.558808][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1376.567744][ T9] usb 2-1: media controller created [ 1376.598641][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1376.689484][T20646] dvb-usb: bulk message failed: -22 (3/0) [ 1376.724061][ T9] usb 2-1: selecting invalid altsetting 6 [ 1376.737918][ T9] usb 2-1: digital interface selection failed (-22) [ 1376.781482][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1376.811792][ T9] usb 2-1: setting power OFF [ 1376.818736][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 1376.840788][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1376.861548][ T9] (NULL device *): no alternate interface [ 1376.941373][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1377.044031][ T9] usb 2-1: USB disconnect, device number 29 [ 1377.147618][T20663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4418'. [ 1377.461837][T20665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4422'. [ 1377.895210][ T27] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1378.118191][ T27] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1378.135256][ T27] usb 3-1: can't read configurations, error -71 [ 1378.616255][T20677] syzkaller0: entered promiscuous mode [ 1378.627273][T20677] syzkaller0: entered allmulticast mode [ 1378.790500][ T9499] usb 1-1: USB disconnect, device number 38 [ 1378.917257][T20684] syzkaller0: entered promiscuous mode [ 1378.922787][T20684] syzkaller0: entered allmulticast mode [ 1378.926152][T20682] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4429'. [ 1379.094355][ T5826] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1379.224493][T14517] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1379.274366][ T5826] usb 4-1: Using ep0 maxpacket: 8 [ 1379.274416][ T27] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1379.285332][ T5826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.299919][ T5826] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1379.311725][ T5826] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 1379.321001][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.329096][ T5826] usb 4-1: Product: syz [ 1379.333269][ T5826] usb 4-1: Manufacturer: syz [ 1379.337999][ T5826] usb 4-1: SerialNumber: syz [ 1379.344229][ T5826] usb 4-1: config 0 descriptor?? [ 1379.354270][ T9499] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1379.414931][T14517] usb 2-1: Using ep0 maxpacket: 8 [ 1379.422327][T14517] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1379.431110][T14517] usb 2-1: config 4 has too many interfaces: 231, using maximum allowed: 32 [ 1379.439989][T14517] usb 2-1: config 4 has 1 interface, different from the descriptor's value: 231 [ 1379.449336][T14517] usb 2-1: config 4 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1379.462911][T14517] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1379.473140][T14517] usb 2-1: string descriptor 0 read error: -22 [ 1379.479604][T14517] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1379.488760][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 1379.493957][T14517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.503706][ T27] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1379.513659][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.532514][T14517] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1379.549153][ T27] usb 3-1: config 0 descriptor?? [ 1379.554278][ T9499] usb 1-1: Using ep0 maxpacket: 8 [ 1379.560005][T14517] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1379.576402][ T9499] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.587619][T14517] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1379.596642][ T5826] usb 4-1: USB disconnect, device number 23 [ 1379.598066][ T27] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1379.611708][ T9499] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1379.630351][T14517] usb 2-1: media controller created [ 1379.638827][ T9499] usb 1-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 1379.654886][ T9499] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.674067][ T9499] usb 1-1: Product: syz [ 1379.678359][ T9499] usb 1-1: Manufacturer: syz [ 1379.689134][T14517] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1379.697638][ T9499] usb 1-1: SerialNumber: syz [ 1379.704824][ T9499] usb 1-1: config 0 descriptor?? [ 1379.751207][T14517] zl10353_read_register: readreg error (reg=127, ret==0) [ 1379.802996][T14517] usb 2-1: USB disconnect, device number 30 [ 1379.950647][ T5826] usb 1-1: USB disconnect, device number 39 [ 1380.398894][ T27] gspca_sonixj: reg_r err -71 [ 1380.413754][ T27] sonixj: probe of 3-1:0.0 failed with error -71 [ 1380.435047][ T27] usb 3-1: USB disconnect, device number 18 [ 1380.579397][T20693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4433'. [ 1381.153346][ T27] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 1381.414198][ T27] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1381.440796][ T27] usb 1-1: can't read configurations, error -71 [ 1381.623207][T14517] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1381.817298][T14517] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.839861][T14517] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1381.870691][T14517] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.894102][T14517] usb 4-1: config 0 descriptor?? [ 1381.937892][T14517] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1382.343035][T14517] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1382.552679][T14517] usb 2-1: Using ep0 maxpacket: 8 [ 1382.568688][T14517] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1382.633726][T14517] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1382.679715][T14517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.710486][T14517] usb 2-1: Product: syz [ 1382.725761][T14517] usb 2-1: Manufacturer: syz [ 1382.753655][T14517] usb 2-1: SerialNumber: syz [ 1382.767982][T14517] usb 2-1: config 0 descriptor?? [ 1382.783920][T14517] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1382.802550][T14517] usb 2-1: setting power ON [ 1382.811628][T14517] dvb-usb: bulk message failed: -22 (2/0) [ 1382.837974][T14517] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1382.908939][T14517] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1382.920782][T20724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4438'. [ 1382.953321][T14517] usb 2-1: media controller created [ 1382.987023][T14517] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1383.049849][T20711] dvb-usb: bulk message failed: -22 (3/0) [ 1383.092103][T14517] usb 2-1: selecting invalid altsetting 6 [ 1383.162386][T14517] usb 2-1: digital interface selection failed (-22) [ 1383.178180][T14517] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1383.231731][T14517] usb 2-1: setting power OFF [ 1383.248561][T14517] dvb-usb: bulk message failed: -22 (2/0) [ 1383.282279][T14517] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1383.304192][T14517] (NULL device *): no alternate interface [ 1383.510654][T14517] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1383.600493][T20731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4443'. [ 1383.625459][T14517] usb 2-1: USB disconnect, device number 31 [ 1383.844636][T20733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4444'. [ 1383.867794][T20733] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4444'. [ 1384.191922][T14517] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1384.381693][T14517] usb 2-1: Using ep0 maxpacket: 16 [ 1384.397410][T14517] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1384.407206][T14517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.419715][T14517] usb 2-1: config 0 descriptor?? [ 1384.445172][T14517] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1384.608862][T13963] usb 4-1: USB disconnect, device number 24 [ 1384.811482][ T5826] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1385.064228][ T5826] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1385.074944][ T5826] usb 3-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1385.087632][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.114509][ T5826] usb 3-1: config 0 descriptor?? [ 1385.149183][ T5826] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1385.252753][T14517] gspca_sonixj: reg_r err -71 [ 1385.257574][T14517] sonixj: probe of 2-1:0.0 failed with error -71 [ 1385.295588][T14517] usb 2-1: USB disconnect, device number 32 [ 1385.881142][ T5826] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1386.076114][ T5826] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1386.096311][ T5826] usb 4-1: can't read configurations, error -71 [ 1386.330951][T20748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4447'. [ 1386.754785][T20772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4453'. [ 1388.263181][T14517] usb 3-1: USB disconnect, device number 19 [ 1388.561993][T20787] syzkaller0: entered promiscuous mode [ 1388.567492][T20787] syzkaller0: entered allmulticast mode [ 1389.019647][T14517] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1389.189534][ T5826] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1389.209259][T14517] usb 2-1: Using ep0 maxpacket: 8 [ 1389.219494][T14517] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.250469][T14517] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1389.284697][T14517] usb 2-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 1389.299173][T14517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.314507][T14517] usb 2-1: Product: syz [ 1389.318723][T14517] usb 2-1: Manufacturer: syz [ 1389.324189][T14517] usb 2-1: SerialNumber: syz [ 1389.331664][T14517] usb 2-1: config 0 descriptor?? [ 1389.389495][ T5826] usb 1-1: Using ep0 maxpacket: 8 [ 1389.410172][ T5826] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1389.431872][ T5826] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1389.454106][ T5155] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1389.490726][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.499557][ T5826] usb 1-1: Product: syz [ 1389.511358][ T5826] usb 1-1: Manufacturer: syz [ 1389.519343][ T5826] usb 1-1: SerialNumber: syz [ 1389.530952][ T5826] usb 1-1: config 0 descriptor?? [ 1389.560253][ T5826] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1389.568363][ T5826] usb 1-1: setting power ON [ 1389.568900][T14517] usb 2-1: USB disconnect, device number 33 [ 1389.585362][ T5826] dvb-usb: bulk message failed: -22 (2/0) [ 1389.608175][ T5826] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1389.619258][ T5826] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1389.627771][ T5826] usb 1-1: media controller created [ 1389.654641][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1389.676865][ T5155] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1389.685726][ T5155] usb 3-1: can't read configurations, error -71 [ 1389.686356][ T5826] usb 1-1: selecting invalid altsetting 6 [ 1389.707354][ T5826] usb 1-1: digital interface selection failed (-22) [ 1389.714557][ T5826] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1389.726211][ T5826] usb 1-1: setting power OFF [ 1389.730913][ T5826] dvb-usb: bulk message failed: -22 (2/0) [ 1389.736665][ T5826] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1389.752309][ T5826] (NULL device *): no alternate interface [ 1389.762101][T20797] dvb-usb: bulk message failed: -22 (3/0) [ 1389.797907][ T5826] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1389.813861][ T5826] usb 1-1: USB disconnect, device number 42 [ 1392.517618][ T9499] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 1392.537709][ T5826] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1392.715630][ T9499] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1392.719776][ T5826] usb 4-1: Using ep0 maxpacket: 8 [ 1392.724239][ T9499] usb 2-1: can't read configurations, error -71 [ 1392.736794][ T5826] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1392.747339][ T5826] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1392.756972][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.765571][ T5826] usb 4-1: Product: syz [ 1392.770023][ T5826] usb 4-1: Manufacturer: syz [ 1392.774649][ T5826] usb 4-1: SerialNumber: syz [ 1392.789616][ T5826] usb 4-1: config 0 descriptor?? [ 1392.797727][ T5826] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1392.805821][ T5826] usb 4-1: setting power ON [ 1392.810512][ T5826] dvb-usb: bulk message failed: -22 (2/0) [ 1392.819135][ T5826] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1392.830320][ T5826] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1392.839011][ T5826] usb 4-1: media controller created [ 1392.857818][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1392.878093][ T5826] usb 4-1: selecting invalid altsetting 6 [ 1392.883902][ T5826] usb 4-1: digital interface selection failed (-22) [ 1392.890780][ T5826] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1392.905452][ T5826] usb 4-1: setting power OFF [ 1392.911366][ T5826] dvb-usb: bulk message failed: -22 (2/0) [ 1392.917125][ T5826] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1392.927490][ T5826] (NULL device *): no alternate interface [ 1392.952786][ T5826] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1393.014663][ T5826] usb 4-1: USB disconnect, device number 27 [ 1395.240049][ T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 1395.463777][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1395.473894][ T9] usb 3-1: can't read configurations, error -71 [ 1395.591768][T14517] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1395.825952][T14517] usb 1-1: Using ep0 maxpacket: 8 [ 1395.845334][T14517] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1395.868417][T14517] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1395.892136][T14517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.913067][T14517] usb 1-1: Product: syz [ 1395.932756][T14517] usb 1-1: Manufacturer: syz [ 1395.937994][T14517] usb 1-1: SerialNumber: syz [ 1395.957560][T14517] usb 1-1: config 0 descriptor?? [ 1395.964619][T14517] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1396.003234][T14517] usb 1-1: setting power ON [ 1396.024545][T14517] dvb-usb: bulk message failed: -22 (2/0) [ 1396.059927][T14517] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1396.114833][T14517] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1396.145977][T14517] usb 1-1: media controller created [ 1396.178602][T20885] dvb-usb: bulk message failed: -22 (3/0) [ 1396.234479][T14517] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1396.326692][T14517] usb 1-1: selecting invalid altsetting 6 [ 1396.332591][T14517] usb 1-1: digital interface selection failed (-22) [ 1396.366982][T14517] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1396.378304][T14517] usb 1-1: setting power OFF [ 1396.383960][T14517] dvb-usb: bulk message failed: -22 (2/0) [ 1396.390167][T14517] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1396.402555][T14517] (NULL device *): no alternate interface [ 1396.440092][T14517] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1396.473306][T14517] usb 1-1: USB disconnect, device number 43 [ 1396.605920][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1396.799912][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1396.821810][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.846859][ T9] usb 3-1: config 0 descriptor?? [ 1396.862977][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1397.984895][ T5155] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1398.177580][ T5155] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1398.199952][ T5155] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1398.209189][ T5155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.234509][ T5155] usb 4-1: config 0 descriptor?? [ 1398.248077][ T5155] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1398.255461][ T5826] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1398.295209][ T9] usb 3-1: USB disconnect, device number 23 [ 1398.444632][ T5826] usb 1-1: Using ep0 maxpacket: 16 [ 1398.470922][ T5826] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1398.487999][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.512194][ T5826] usb 1-1: config 0 descriptor?? [ 1398.535026][ T5826] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1399.119123][T20921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4498'. [ 1399.239653][T20928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4494'. [ 1399.339982][T20921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4498'. [ 1399.412265][ T5826] gspca_sonixj: reg_r err -71 [ 1399.464303][ T5826] sonixj: probe of 1-1:0.0 failed with error -71 [ 1399.481641][ T5826] usb 1-1: USB disconnect, device number 44 [ 1399.564088][ T5155] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1399.744044][ T5155] usb 2-1: Using ep0 maxpacket: 8 [ 1399.751638][ T5155] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1399.770507][ T5155] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1399.782930][ T5155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.791727][ T5155] usb 2-1: Product: syz [ 1399.796466][ T5155] usb 2-1: Manufacturer: syz [ 1399.801208][ T5155] usb 2-1: SerialNumber: syz [ 1399.809356][ T5155] usb 2-1: config 0 descriptor?? [ 1399.823696][ T5155] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1399.832730][ T5155] usb 2-1: setting power ON [ 1399.837648][ T5155] dvb-usb: bulk message failed: -22 (2/0) [ 1399.850456][ T5155] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1399.860636][ T5155] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1399.869574][ T5155] usb 2-1: media controller created [ 1399.900120][ T5155] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1399.933335][ T5155] usb 2-1: selecting invalid altsetting 6 [ 1399.965874][ T5155] usb 2-1: digital interface selection failed (-22) [ 1400.008360][ T5155] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1400.029085][T20930] dvb-usb: bulk message failed: -22 (3/0) [ 1400.047603][ T5155] usb 2-1: setting power OFF [ 1400.069320][ T5155] dvb-usb: bulk message failed: -22 (2/0) [ 1400.078859][ T5155] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1400.182736][ T5155] (NULL device *): no alternate interface [ 1400.235519][ T5155] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1400.286725][ T5155] usb 2-1: USB disconnect, device number 36 [ 1400.892426][ T9] usb 4-1: USB disconnect, device number 28 [ 1401.583133][ T5826] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1401.775193][ T5826] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1401.788252][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.860331][ T5826] usb 4-1: config 0 descriptor?? [ 1401.953017][ T5826] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1402.773104][T13963] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1402.972483][T13963] usb 3-1: Using ep0 maxpacket: 16 [ 1402.979518][T13963] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1402.989184][T13963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.013448][T13963] usb 3-1: config 0 descriptor?? [ 1403.027092][T13963] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1403.092470][ T5155] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1403.282237][ T5155] usb 1-1: Using ep0 maxpacket: 16 [ 1403.291793][ T5155] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1403.312418][ T5155] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1403.331990][ T5155] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1403.342350][ T5155] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1403.350786][ T5826] usb 4-1: USB disconnect, device number 29 [ 1403.375921][ T5155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.413454][ T5155] usb 1-1: config 0 descriptor?? [ 1403.428501][T13963] gspca_sonixj: reg_r err -32 [ 1403.436362][T13963] sonixj: probe of 3-1:0.0 failed with error -32 [ 1403.846113][ T5155] nzxt-smart2 0003:1E71:2009.006E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1404.256698][T20979] relay: one or more items not logged [item size (56) > sub-buffer size (3)] [ 1404.741622][T13963] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1404.931462][T13963] usb 2-1: Using ep0 maxpacket: 8 [ 1404.950495][T13963] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1404.967027][T13963] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1404.978588][T13963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.995264][T13963] usb 2-1: Product: syz [ 1405.005589][T13963] usb 2-1: Manufacturer: syz [ 1405.015307][T13963] usb 2-1: SerialNumber: syz [ 1405.033514][T13963] usb 2-1: config 0 descriptor?? [ 1405.051464][T13963] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1405.059549][T13963] usb 2-1: setting power ON [ 1405.076651][T13963] dvb-usb: bulk message failed: -22 (2/0) [ 1405.095195][T13963] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1405.115744][T13963] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1405.126764][T13963] usb 2-1: media controller created [ 1405.141399][ T9499] usb 1-1: reset high-speed USB device number 45 using dummy_hcd [ 1405.176115][T13963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1405.196515][T13963] usb 2-1: selecting invalid altsetting 6 [ 1405.209580][T13963] usb 2-1: digital interface selection failed (-22) [ 1405.218558][T13963] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1405.234636][T13963] usb 2-1: setting power OFF [ 1405.248726][T13963] dvb-usb: bulk message failed: -22 (2/0) [ 1405.261990][T13963] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1405.280354][T13963] (NULL device *): no alternate interface [ 1405.341044][T13963] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1405.404895][T13963] usb 2-1: USB disconnect, device number 37 [ 1405.632104][ T5155] usb 3-1: USB disconnect, device number 24 [ 1406.731915][T14517] usb 1-1: USB disconnect, device number 45 [ 1406.917685][ T5826] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1407.142304][ T5826] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1407.153857][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.179457][ T5826] usb 4-1: config 0 descriptor?? [ 1407.193461][ T5826] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1407.360334][T14517] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1407.562178][T14517] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1407.597082][T14517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.639590][T14517] usb 1-1: config 0 descriptor?? [ 1407.653949][T14517] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1408.691507][ T5826] usb 4-1: USB disconnect, device number 30 [ 1408.696581][ T9499] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1408.939678][ T9499] usb 2-1: Using ep0 maxpacket: 16 [ 1408.956978][ T9499] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1408.967175][ T9499] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.979692][ T9499] usb 2-1: config 0 descriptor?? [ 1408.993977][ T9499] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1409.136829][T14517] usb 1-1: USB disconnect, device number 46 [ 1409.329436][ T27] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1409.391868][ T9499] gspca_sonixj: reg_r err -32 [ 1409.396703][ T9499] sonixj: probe of 2-1:0.0 failed with error -32 [ 1409.511362][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 1409.520378][ T27] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1409.531547][ T27] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1409.541929][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1409.548577][ T27] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1409.557846][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.571156][ T27] usb 3-1: config 0 descriptor?? [ 1409.723316][ T5826] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1409.908973][ T5826] usb 4-1: Using ep0 maxpacket: 16 [ 1409.919402][ T5826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.932761][ T5826] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1409.942242][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.953558][ T5826] usb 4-1: config 0 descriptor?? [ 1409.962307][ T5826] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1410.004858][ T27] nzxt-smart2 0003:1E71:2009.006F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1411.298356][ T27] usb 3-1: reset high-speed USB device number 25 using dummy_hcd [ 1411.405945][ T5826] usb 2-1: USB disconnect, device number 38 [ 1412.405201][ T5826] usb 4-1: USB disconnect, device number 31 [ 1412.740823][T21064] kvm: kvm [21062]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 1412.948539][ T5155] usb 3-1: USB disconnect, device number 25 [ 1413.050405][T21071] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4540'. [ 1413.063059][T21071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4540'. [ 1413.517303][ T5826] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1413.777116][ T5826] usb 2-1: Using ep0 maxpacket: 16 [ 1413.784210][ T5826] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1413.796270][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.853829][ T5826] usb 2-1: config 0 descriptor?? [ 1413.865661][ T5826] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1414.266088][ T5826] gspca_sonixj: reg_r err -32 [ 1414.273599][ T5826] sonixj: probe of 2-1:0.0 failed with error -32 [ 1415.927592][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4546'. [ 1415.940435][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4546'. [ 1415.950347][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4546'. [ 1415.961799][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4546'. [ 1415.971518][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4546'. [ 1415.981861][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4546'. [ 1415.991925][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4546'. [ 1416.006025][ T5155] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1416.008030][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4546'. [ 1416.034284][T21093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1416.193269][ T27] usb 2-1: USB disconnect, device number 39 [ 1416.205926][ T5155] usb 1-1: Using ep0 maxpacket: 16 [ 1416.252254][ T5155] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1416.271789][ T5155] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1416.293291][ T5155] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1416.385026][ T5155] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1416.402625][ T5155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.441726][ T5155] usb 1-1: config 0 descriptor?? [ 1416.745574][ T27] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1416.890848][ T5155] nzxt-smart2 0003:1E71:2009.0070: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1416.945493][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 1416.955183][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.970011][ T27] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1416.982412][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.012844][ T27] usb 2-1: config 0 descriptor?? [ 1417.051425][ T27] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1418.205105][ T5155] usb 1-1: reset high-speed USB device number 47 using dummy_hcd [ 1419.254244][T14517] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1419.279643][T13963] usb 2-1: USB disconnect, device number 40 [ 1419.294808][ T5155] usb 1-1: device descriptor read/64, error -71 [ 1419.374322][ T5826] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1419.436718][T14517] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.447475][T14517] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1419.456485][T14517] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1419.465742][T14517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.477727][T14517] usb 3-1: config 0 descriptor?? [ 1419.487174][T14517] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1419.493857][T14517] dvb-usb: bulk message failed: -22 (3/0) [ 1419.502750][T14517] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1419.512919][T14517] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1419.520152][T14517] usb 3-1: media controller created [ 1419.527349][T14517] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1419.546251][T14517] dvb-usb: bulk message failed: -22 (6/0) [ 1419.552222][T14517] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1419.561172][T14517] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input148 [ 1419.577225][ T5155] usb 1-1: reset high-speed USB device number 47 using dummy_hcd [ 1419.581063][ T5826] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1419.585532][T14517] dvb-usb: schedule remote query interval to 150 msecs. [ 1419.601806][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.614139][ T5155] usb 1-1: device reset changed ep0 maxpacket size! [ 1419.621523][ T27] usb 1-1: USB disconnect, device number 47 [ 1419.625577][ T5826] usb 4-1: config 0 descriptor?? [ 1419.631627][T14517] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1419.660045][ T5826] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1419.734192][T13963] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1419.784102][T14517] dvb-usb: bulk message failed: -22 (1/0) [ 1419.789920][T14517] dvb-usb: error while querying for an remote control event. [ 1419.833951][ T27] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1419.916211][T14517] usb 3-1: USB disconnect, device number 26 [ 1419.924401][T13963] usb 2-1: Using ep0 maxpacket: 16 [ 1419.947854][T13963] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1419.954641][T14517] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1419.961595][T13963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.984683][T13963] usb 2-1: config 0 descriptor?? [ 1420.000636][T13963] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1420.044325][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 1420.052100][ T27] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1420.060629][ T27] usb 1-1: config 0 has no interface number 0 [ 1420.066823][ T27] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1420.077056][ T27] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1420.088878][ T27] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1420.098012][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.106167][ T27] usb 1-1: Product: syz [ 1420.110351][ T27] usb 1-1: Manufacturer: syz [ 1420.115073][ T27] usb 1-1: SerialNumber: syz [ 1420.122863][ T27] usb 1-1: config 0 descriptor?? [ 1420.136590][ T27] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1420.146272][ T27] em28xx 1-1:0.89: Video interface 89 found: [ 1420.398652][T13963] gspca_sonixj: reg_r err -32 [ 1420.403511][T13963] sonixj: probe of 2-1:0.0 failed with error -32 [ 1420.672812][ T5826] usb 4-1: USB disconnect, device number 32 [ 1420.759020][ T27] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1421.794313][ T27] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1421.822060][ T27] em28xx 1-1:0.89: board has no eeprom [ 1421.904853][ T27] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1421.944229][ T27] em28xx 1-1:0.89: analog set to bulk mode. [ 1421.972098][ T9499] em28xx 1-1:0.89: Registering V4L2 extension [ 1422.006022][ T27] usb 1-1: USB disconnect, device number 48 [ 1422.031857][ T9499] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 1422.084023][ T27] em28xx 1-1:0.89: Disconnecting em28xx [ 1422.112808][ T9499] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1422.124559][ T9499] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1422.153456][ T9499] em28xx 1-1:0.89: No AC97 audio processor [ 1422.198034][ T9499] usb 1-1: Decoder not found [ 1422.231120][ T9499] em28xx 1-1:0.89: failed to create media graph [ 1422.258217][ T9499] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1422.301594][ T9499] em28xx 1-1:0.89: Registering snapshot button... [ 1422.326644][ T9499] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input149 [ 1422.351009][ T9499] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1422.360194][ T27] em28xx 1-1:0.89: Closing input extension [ 1422.375723][ T27] em28xx 1-1:0.89: Deregistering snapshot button [ 1422.388495][ T9499] usb 2-1: USB disconnect, device number 41 [ 1422.462834][ T27] em28xx 1-1:0.89: Freeing device [ 1422.817951][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.832587][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.937809][T21156] __nla_validate_parse: 10 callbacks suppressed [ 1422.937832][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4561'. [ 1422.972523][ T9499] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1423.004811][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4561'. [ 1423.066895][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4561'. [ 1423.085925][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4561'. [ 1423.146144][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4561'. [ 1423.158386][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4561'. [ 1423.172374][ T9499] usb 2-1: Using ep0 maxpacket: 16 [ 1423.184009][ T9499] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1423.197730][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4561'. [ 1423.199110][ T9499] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1423.214233][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4561'. [ 1423.230974][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4561'. [ 1423.247727][ T9499] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1423.250703][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4561'. [ 1423.270873][ T9499] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.316628][ T9499] usb 2-1: config 0 descriptor?? [ 1423.370898][T21156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1423.987054][ T9499] usbhid 2-1:0.0: can't add hid device: -71 [ 1423.994604][ T9499] usbhid: probe of 2-1:0.0 failed with error -71 [ 1424.048586][ T9499] usb 2-1: USB disconnect, device number 42 [ 1424.941479][ T27] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1425.151403][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 1425.165398][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1425.184262][ T27] usb 2-1: config 4 has too many interfaces: 231, using maximum allowed: 32 [ 1425.209647][ T27] usb 2-1: config 4 has 1 interface, different from the descriptor's value: 231 [ 1425.239382][ T27] usb 2-1: config 4 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1425.266911][ T27] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1425.314266][ T27] usb 2-1: string descriptor 0 read error: -22 [ 1425.326028][ T27] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1425.339557][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.380620][ T27] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1425.453111][ T27] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1425.467123][ T27] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1425.476680][ T27] usb 2-1: media controller created [ 1425.519749][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1426.643420][T21172] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 1426.650764][ T27] zl10353_read_register: readreg error (reg=127, ret==0) [ 1426.680942][T21180] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 1426.787714][ T27] usb 2-1: USB disconnect, device number 43 [ 1427.356548][T21191] syz_tun: entered promiscuous mode [ 1427.364520][T21191] vlan2: entered promiscuous mode [ 1427.585220][T21196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1429.287712][T21217] relay: one or more items not logged [item size (56) > sub-buffer size (3)] [ 1429.961730][T21226] syzkaller0: entered promiscuous mode [ 1429.976095][T21226] syzkaller0: entered allmulticast mode [ 1430.298994][ T5826] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1430.488812][ T5826] usb 2-1: Using ep0 maxpacket: 8 [ 1430.499240][ T5826] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1430.515153][ T5826] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1430.555855][ T5826] usb 2-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 1430.600068][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.614242][ T5826] usb 2-1: Product: syz [ 1430.638643][ T5826] usb 2-1: Manufacturer: syz [ 1430.643435][ T5826] usb 2-1: SerialNumber: syz [ 1430.662713][ T5826] usb 2-1: config 0 descriptor?? [ 1430.909161][ T5826] usb 2-1: USB disconnect, device number 44 [ 1431.277363][T21236] __nla_validate_parse: 26 callbacks suppressed [ 1431.277385][T21236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4581'. [ 1431.344081][T21236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4581'. [ 1431.918641][ T27] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1432.121826][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.136631][ T27] usb 1-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1432.152084][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.209835][ T27] usb 1-1: config 0 descriptor?? [ 1432.220475][ T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1432.329929][ T5826] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1432.527668][ T5826] usb 2-1: Using ep0 maxpacket: 32 [ 1432.539044][ T5826] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1432.553359][ T5826] usb 2-1: config 0 has no interface number 0 [ 1432.569880][ T5826] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1432.587596][ T5826] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1432.597231][ T5826] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1432.627580][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1432.657651][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.666989][ T5826] usb 2-1: Product: syz [ 1432.671286][ T5826] usb 2-1: Manufacturer: syz [ 1432.676167][ T5826] usb 2-1: SerialNumber: syz [ 1432.682603][ T5826] usb 2-1: config 0 descriptor?? [ 1432.691323][ T5826] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1432.704124][ T5826] em28xx 2-1:0.89: Video interface 89 found: [ 1432.808399][ T9] usb 3-1: device descriptor read/64, error -71 [ 1433.090508][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1433.311511][ T5826] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1433.318031][ T9] usb 3-1: device descriptor read/64, error -71 [ 1433.456300][ T9] usb usb3-port1: attempt power cycle [ 1433.579220][T21265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4582'. [ 1433.897046][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1433.961703][ T9] usb 3-1: device descriptor read/8, error -71 [ 1434.134462][ T5826] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1434.173720][ T5826] em28xx 2-1:0.89: board has no eeprom [ 1434.266939][ T5826] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1434.288069][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1434.322235][ T5826] em28xx 2-1:0.89: analog set to bulk mode. [ 1434.334400][T18426] em28xx 2-1:0.89: Registering V4L2 extension [ 1434.360804][ T9] usb 3-1: device descriptor read/8, error -71 [ 1434.369280][ T5826] usb 2-1: USB disconnect, device number 45 [ 1434.424219][ T5826] em28xx 2-1:0.89: Disconnecting em28xx [ 1434.430121][T18426] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1434.446059][T18426] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1434.454318][T18426] em28xx 2-1:0.89: No AC97 audio processor [ 1434.467787][T18426] usb 2-1: Decoder not found [ 1434.485763][T18426] em28xx 2-1:0.89: failed to create media graph [ 1434.516876][ T9] usb usb3-port1: unable to enumerate USB device [ 1434.531377][T18426] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1434.551475][T21271] ================================================================== [ 1434.559567][T21271] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xca/0x430 [ 1434.566937][T21271] Read of size 8 at addr ffff888058a9c738 by task v4l_id/21271 [ 1434.574468][T21271] [ 1434.576781][T21271] CPU: 1 PID: 21271 Comm: v4l_id Not tainted syzkaller #0 [ 1434.583880][T21271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1434.593930][T21271] Call Trace: [ 1434.597206][T21271] [ 1434.600127][T21271] dump_stack_lvl+0x18c/0x250 [ 1434.604838][T21271] ? __lock_acquire+0x7d40/0x7d40 [ 1434.609857][T21271] ? show_regs_print_info+0x20/0x20 [ 1434.615050][T21271] ? load_image+0x400/0x400 [ 1434.619556][T21271] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1434.625050][T21271] ? __virt_addr_valid+0x18c/0x540 [ 1434.630155][T21271] ? __virt_addr_valid+0x469/0x540 [ 1434.635256][T21271] print_report+0xa8/0x210 [ 1434.639668][T21271] ? v4l2_fh_open+0xca/0x430 [ 1434.644249][T21271] kasan_report+0x117/0x150 [ 1434.648748][T21271] ? v4l2_fh_open+0xca/0x430 [ 1434.653353][T21271] v4l2_fh_open+0xca/0x430 [ 1434.657782][T21271] em28xx_v4l2_open+0x157/0x980 [ 1434.662734][T21271] v4l2_open+0x212/0x360 [ 1434.666988][T21271] chrdev_open+0x5cc/0x6a0 [ 1434.671403][T21271] ? cd_forget+0x160/0x160 [ 1434.675811][T21271] ? fsnotify_perm+0x3ed/0x5e0 [ 1434.680575][T21271] ? cd_forget+0x160/0x160 [ 1434.684989][T21271] do_dentry_open+0x8c6/0x1500 [ 1434.689751][T21271] path_openat+0x27f1/0x3230 [ 1434.694337][T21271] ? do_sys_openat2+0xda/0x1d0 [ 1434.699097][T21271] ? verify_lock_unused+0x140/0x140 [ 1434.704286][T21271] ? do_filp_open+0x430/0x430 [ 1434.708953][T21271] ? __virt_addr_valid+0x18c/0x540 [ 1434.714060][T21271] do_filp_open+0x1f5/0x430 [ 1434.718586][T21271] ? vfs_tmpfile+0x490/0x490 [ 1434.723185][T21271] ? _raw_spin_unlock+0x28/0x40 [ 1434.728037][T21271] ? alloc_fd+0x58f/0x630 [ 1434.732369][T21271] do_sys_openat2+0x134/0x1d0 [ 1434.737045][T21271] ? do_sys_open+0xe0/0xe0 [ 1434.741454][T21271] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1434.747430][T21271] ? lock_chain_count+0x20/0x20 [ 1434.752273][T21271] ? lock_chain_count+0x20/0x20 [ 1434.757117][T21271] __x64_sys_openat+0x139/0x160 [ 1434.761981][T21271] do_syscall_64+0x55/0xa0 [ 1434.766401][T21271] ? clear_bhb_loop+0x40/0x90 [ 1434.771124][T21271] ? clear_bhb_loop+0x40/0x90 [ 1434.775790][T21271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1434.781674][T21271] RIP: 0033:0x7f3e140a7407 [ 1434.786084][T21271] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1434.805687][T21271] RSP: 002b:00007ffc0b4c0590 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1434.814110][T21271] RAX: ffffffffffffffda RBX: 00007f3e14760880 RCX: 00007f3e140a7407 [ 1434.822075][T21271] RDX: 0000000000000000 RSI: 00007ffc0b4c0f1b RDI: ffffffffffffff9c [ 1434.830039][T21271] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1434.837998][T21271] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1434.845958][T21271] R13: 00007ffc0b4c07e0 R14: 00007f3e148bf000 R15: 000055c60ddf24d8 [ 1434.853923][T21271] [ 1434.856934][T21271] [ 1434.859245][T21271] Allocated by task 18426: [ 1434.863641][T21271] kasan_set_track+0x4e/0x70 [ 1434.868223][T21271] __kasan_kmalloc+0x8f/0xa0 [ 1434.872830][T21271] em28xx_v4l2_init+0x10b/0x2e70 [ 1434.877759][T21271] em28xx_init_extension+0x11c/0x1b0 [ 1434.883032][T21271] process_scheduled_works+0xa5d/0x15d0 [ 1434.888567][T21271] worker_thread+0xa55/0xfc0 [ 1434.893148][T21271] kthread+0x2fa/0x390 [ 1434.896500][T18426] em28xx 2-1:0.89: Registering snapshot button... [ 1434.897199][T21271] ret_from_fork+0x48/0x80 [ 1434.908059][T21271] ret_from_fork_asm+0x11/0x20 [ 1434.912821][T21271] [ 1434.915136][T21271] Freed by task 18426: [ 1434.919194][T21271] kasan_set_track+0x4e/0x70 [ 1434.923778][T21271] kasan_save_free_info+0x2e/0x50 [ 1434.928815][T21271] ____kasan_slab_free+0x126/0x1e0 [ 1434.933922][T21271] slab_free_freelist_hook+0x130/0x1a0 [ 1434.939374][T21271] __kmem_cache_free+0xba/0x1e0 [ 1434.944218][T21271] em28xx_v4l2_init+0x1670/0x2e70 [ 1434.949239][T21271] em28xx_init_extension+0x11c/0x1b0 [ 1434.954537][T21271] process_scheduled_works+0xa5d/0x15d0 [ 1434.960075][T21271] worker_thread+0xa55/0xfc0 [ 1434.964654][T21271] kthread+0x2fa/0x390 [ 1434.968711][T21271] ret_from_fork+0x48/0x80 [ 1434.973119][T21271] ret_from_fork_asm+0x11/0x20 [ 1434.977882][T21271] [ 1434.980195][T21271] The buggy address belongs to the object at ffff888058a9c000 [ 1434.980195][T21271] which belongs to the cache kmalloc-8k of size 8192 [ 1434.994241][T21271] The buggy address is located 1848 bytes inside of [ 1434.994241][T21271] freed 8192-byte region [ffff888058a9c000, ffff888058a9e000) [ 1435.008304][T21271] [ 1435.010617][T21271] The buggy address belongs to the physical page: [ 1435.017017][T21271] page:ffffea000162a600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58a98 [ 1435.027196][T21271] head:ffffea000162a600 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1435.036121][T21271] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1435.044089][T21271] page_type: 0xffffffff() [ 1435.048416][T21271] raw: 00fff00000000840 ffff888017c42280 ffffea0001aa2800 0000000000000002 [ 1435.056991][T21271] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 1435.065559][T21271] page dumped because: kasan: bad access detected [ 1435.071957][T21271] page_owner tracks the page as allocated [ 1435.077661][T21271] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 20558, tgid 20557 (syz.3.4395), ts 1368088199919, free_ts 1367853099192 [ 1435.100748][T21271] post_alloc_hook+0x1c1/0x200 [ 1435.105510][T21271] get_page_from_freelist+0x1951/0x19e0 [ 1435.111045][T21271] __alloc_pages+0x1f0/0x460 [ 1435.115622][T21271] alloc_slab_page+0x5d/0x160 [ 1435.120301][T21271] new_slab+0x87/0x2d0 [ 1435.124366][T21271] ___slab_alloc+0xc5d/0x12f0 [ 1435.129034][T21271] __kmem_cache_alloc_node+0x19e/0x250 [ 1435.134483][T21271] __kmalloc_node+0xa4/0x230 [ 1435.139062][T21271] kvmalloc_node+0x70/0x180 [ 1435.143554][T21271] pfifo_fast_init+0x238/0x6a0 [ 1435.148376][T21271] qdisc_create_dflt+0x11e/0x430 [ 1435.153322][T21271] dev_activate+0x397/0x11a0 [ 1435.157926][T21271] __dev_open+0x347/0x430 [ 1435.162275][T21271] __dev_change_flags+0x211/0x6a0 [ 1435.167336][T21271] dev_change_flags+0x88/0x1a0 [ 1435.172095][T21271] dev_ioctl+0x7b4/0x1140 [ 1435.176443][T21271] page last free stack trace: [ 1435.181100][T21271] free_unref_page_prepare+0x7b2/0x8c0 [ 1435.186571][T21271] free_unref_page+0x32/0x2e0 [ 1435.191253][T21271] __slab_free+0x35a/0x400 [ 1435.195667][T21271] qlist_free_all+0x75/0xd0 [ 1435.200166][T21271] kasan_quarantine_reduce+0x143/0x160 [ 1435.205615][T21271] __kasan_slab_alloc+0x22/0x80 [ 1435.210455][T21271] slab_post_alloc_hook+0x6e/0x4b0 [ 1435.215559][T21271] kmem_cache_alloc+0x11a/0x2d0 [ 1435.220424][T21271] getname_flags+0xbb/0x500 [ 1435.224920][T21271] user_path_at_empty+0x2c/0x60 [ 1435.229764][T21271] __x64_sys_umount+0xfd/0x180 [ 1435.234512][T21271] do_syscall_64+0x55/0xa0 [ 1435.238921][T21271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1435.244802][T21271] [ 1435.247114][T21271] Memory state around the buggy address: [ 1435.252732][T21271] ffff888058a9c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1435.260792][T21271] ffff888058a9c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1435.268841][T21271] >ffff888058a9c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1435.276897][T21271] ^ [ 1435.282784][T21271] ffff888058a9c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1435.290840][T21271] ffff888058a9c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1435.298893][T21271] ================================================================== [ 1435.316329][T18426] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input150 [ 1435.329205][ T27] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1435.350621][T21271] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1435.357869][T21271] CPU: 0 PID: 21271 Comm: v4l_id Not tainted syzkaller #0 [ 1435.364971][T21271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1435.375027][T21271] Call Trace: [ 1435.378311][T21271] [ 1435.381238][T21271] dump_stack_lvl+0x18c/0x250 [ 1435.385917][T21271] ? show_regs_print_info+0x20/0x20 [ 1435.391118][T21271] ? load_image+0x400/0x400 [ 1435.395625][T21271] panic+0x2dc/0x730 [ 1435.399515][T21271] ? bpf_jit_dump+0xd0/0xd0 [ 1435.404008][T21271] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1435.409997][T21271] ? _raw_spin_unlock+0x40/0x40 [ 1435.414861][T21271] ? print_memory_metadata+0x314/0x400 [ 1435.420318][T21271] ? v4l2_fh_open+0xca/0x430 [ 1435.424900][T21271] check_panic_on_warn+0x84/0xa0 [ 1435.429847][T21271] ? v4l2_fh_open+0xca/0x430 [ 1435.434427][T21271] end_report+0x6f/0x130 [ 1435.438663][T21271] kasan_report+0x128/0x150 [ 1435.443169][T21271] ? v4l2_fh_open+0xca/0x430 [ 1435.447758][T21271] v4l2_fh_open+0xca/0x430 [ 1435.452167][T21271] em28xx_v4l2_open+0x157/0x980 [ 1435.457017][T21271] v4l2_open+0x212/0x360 [ 1435.461273][T21271] chrdev_open+0x5cc/0x6a0 [ 1435.465714][T21271] ? cd_forget+0x160/0x160 [ 1435.470130][T21271] ? fsnotify_perm+0x3ed/0x5e0 [ 1435.474890][T21271] ? cd_forget+0x160/0x160 [ 1435.479325][T21271] do_dentry_open+0x8c6/0x1500 [ 1435.484095][T21271] path_openat+0x27f1/0x3230 [ 1435.488682][T21271] ? do_sys_openat2+0xda/0x1d0 [ 1435.493440][T21271] ? verify_lock_unused+0x140/0x140 [ 1435.498629][T21271] ? do_filp_open+0x430/0x430 [ 1435.503301][T21271] ? __virt_addr_valid+0x18c/0x540 [ 1435.508411][T21271] do_filp_open+0x1f5/0x430 [ 1435.512919][T21271] ? vfs_tmpfile+0x490/0x490 [ 1435.517541][T21271] ? _raw_spin_unlock+0x28/0x40 [ 1435.522403][T21271] ? alloc_fd+0x58f/0x630 [ 1435.526729][T21271] do_sys_openat2+0x134/0x1d0 [ 1435.531403][T21271] ? do_sys_open+0xe0/0xe0 [ 1435.535812][T21271] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1435.541787][T21271] ? lock_chain_count+0x20/0x20 [ 1435.546632][T21271] ? lock_chain_count+0x20/0x20 [ 1435.551477][T21271] __x64_sys_openat+0x139/0x160 [ 1435.556324][T21271] do_syscall_64+0x55/0xa0 [ 1435.560739][T21271] ? clear_bhb_loop+0x40/0x90 [ 1435.565408][T21271] ? clear_bhb_loop+0x40/0x90 [ 1435.570079][T21271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1435.575967][T21271] RIP: 0033:0x7f3e140a7407 [ 1435.580396][T21271] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1435.599994][T21271] RSP: 002b:00007ffc0b4c0590 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1435.608404][T21271] RAX: ffffffffffffffda RBX: 00007f3e14760880 RCX: 00007f3e140a7407 [ 1435.616370][T21271] RDX: 0000000000000000 RSI: 00007ffc0b4c0f1b RDI: ffffffffffffff9c [ 1435.624350][T21271] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1435.632314][T21271] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1435.640276][T21271] R13: 00007ffc0b4c07e0 R14: 00007f3e148bf000 R15: 000055c60ddf24d8 [ 1435.648248][T21271] [ 1435.651635][T21271] Kernel Offset: disabled [ 1435.655953][T21271] Rebooting in 86400 seconds..