last executing test programs: 7.953248656s ago: executing program 1 (id=1780): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2179, 0x77, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x7f}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000200)={0x20, 0x25, 0x5, {0x5, 0x32, '&Wd'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.520906689s ago: executing program 0 (id=1783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x8001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.291714453s ago: executing program 3 (id=1784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x400007, 0x6361, 0x3, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.502304975s ago: executing program 0 (id=1785): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x97, 0x6, 0x4, 0x2, 0x25}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 6.450769641s ago: executing program 4 (id=1786): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000340)=""/104, 0x68}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f0000000200)}], 0x6}, 0x0) 6.396655097s ago: executing program 2 (id=1787): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 5.762350793s ago: executing program 3 (id=1788): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) 5.547129933s ago: executing program 1 (id=1789): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x92) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x200) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x20140318, 0x627f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x6, {0x1, 0x0, 0xfffffffffffffffb, 0x8, 0x1, 0x0, {0x1, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x1, 0x4, 0x1000, 0xfffffffe, 0xee00, 0xee01, 0x8, 0x80000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.200009143s ago: executing program 2 (id=1790): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f00000007c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$xdp(0x2c, 0x3, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xffffffffffffffff, 0x8}, 0x0, 0x0) 4.981601464s ago: executing program 0 (id=1791): r0 = syz_usb_connect(0xe, 0x2d, &(0x7f0000000600)=ANY=[], 0x0) r1 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) setrlimit(0x7, &(0x7f0000000400)) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f017, 0x1}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0x16, 0x0, 0x0) close(0x4) prlimit64(0x0, 0x4, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x6, 0x8) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000480)=0x50b57792, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x4000, 0x1000, 0x5cc}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x10c, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x24, 0x0, 0x2}]}, 0x10) 4.959916942s ago: executing program 3 (id=1792): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r2, 0x16) 4.878209386s ago: executing program 4 (id=1793): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) sendto$inet(r0, &(0x7f0000000580), 0x0, 0x10048095, 0x0, 0x0) 4.795425507s ago: executing program 1 (id=1794): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x42, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000003640)}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000006c0)="04124c7f", 0x4}], 0x1}}], 0x2, 0x4000001) r1 = dup(r0) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) shutdown(r1, 0x1) 4.375144943s ago: executing program 2 (id=1795): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x8001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.281603756s ago: executing program 4 (id=1796): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004f1ffff030b00000c006dcb1abb0000", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x0, 0x2e, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000005680)=[{{&(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001a00), 0x0, &(0x7f00000002c0)=""/21, 0x15}, 0x401}, {{&(0x7f0000001a80)=@tipc, 0x80, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000003380)=""/141, 0x8d}, {&(0x7f0000004480)=""/171, 0xab}], 0x2}, 0x5}, {{&(0x7f0000004600)=@pppoe, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000004680)=""/194, 0xc2}, {&(0x7f0000004780)=""/131, 0x83}, {&(0x7f0000004840)=""/121, 0x79}, {&(0x7f00000048c0)=""/68, 0x44}, {&(0x7f0000004940)=""/162, 0xa2}, {&(0x7f0000004a00)=""/170, 0xaa}, {&(0x7f0000004ac0)=""/39, 0x27}, {&(0x7f0000004b00)=""/178, 0xb2}], 0x8}, 0x6}, {{0x0, 0x0, &(0x7f0000005040)=[{&(0x7f0000004e00)=""/25, 0x19}, {&(0x7f0000004e40)=""/225, 0xe1}, {0x0}], 0x3}, 0x6}, {{0x0, 0x0, &(0x7f0000005580)=[{&(0x7f00000051c0)=""/69, 0x45}, {&(0x7f0000005240)=""/125, 0x7d}, {&(0x7f00000052c0)=""/67, 0x43}, {&(0x7f0000005400)=""/94, 0x5e}, {&(0x7f0000005480)=""/243, 0xf3}], 0x5, &(0x7f0000005600)=""/102, 0x66}, 0x7fff}], 0x7, 0x40000040, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) ftruncate(0xffffffffffffffff, 0x2007ffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x5607, 0x3) ioctl$VT_ACTIVATE(r6, 0x5606, 0x4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}, 0x7}, 0x1c) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[], 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) 4.009152527s ago: executing program 1 (id=1797): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f0000000180)=[{0xd0, 0x1801, 0x0, 0x0}, {0x9b, 0x0, 0x0, 0x0}], 0x2}) 2.976662909s ago: executing program 0 (id=1798): unshare(0x26020480) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000300)='1', 0xfffffd46) socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000740)='vxcan1\x00', 0x10) connect$inet(r2, &(0x7f0000000440)={0x2, 0x4e22, @broadcast}, 0x10) r3 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2de, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) 2.842062914s ago: executing program 2 (id=1799): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000200)={0x20, 0x25, 0x5, {0x5, 0x32, '&Wd'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.782030577s ago: executing program 4 (id=1800): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.182859923s ago: executing program 3 (id=1801): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x97, 0x6, 0x4, 0x2, 0x25}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 1.631980919s ago: executing program 2 (id=1802): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) 1.443506279s ago: executing program 1 (id=1803): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000340)=""/104, 0x68}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f0000000200)}], 0x6}, 0x0) 1.264972122s ago: executing program 0 (id=1804): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x92) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x200) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x20140318, 0x627f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x6, {0x1, 0x0, 0xfffffffffffffffb, 0x8, 0x1, 0x0, {0x1, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x1, 0x4, 0x1000, 0xfffffffe, 0xee00, 0xee01, 0x8, 0x80000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.169953404s ago: executing program 4 (id=1805): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f00000007c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$xdp(0x2c, 0x3, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xffffffffffffffff, 0x8}, 0x0, 0x0) 864.290194ms ago: executing program 2 (id=1806): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) sendto$inet(r0, &(0x7f0000000580), 0x0, 0x10048095, 0x0, 0x0) 697.786782ms ago: executing program 3 (id=1807): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x42, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000006c0)="04124c7f", 0x4}], 0x1}}], 0x2, 0x4000001) r1 = dup(r0) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) shutdown(r1, 0x1) 511.309902ms ago: executing program 0 (id=1808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r4) 270.20357ms ago: executing program 4 (id=1809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x8001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 61.390556ms ago: executing program 3 (id=1810): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004f1ffff030b00000c006dcb1abb0000", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x0, 0x2e, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000005680)=[{{&(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001a00), 0x0, &(0x7f00000002c0)=""/21, 0x15}, 0x401}, {{&(0x7f0000001a80)=@tipc, 0x80, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000003380)=""/141, 0x8d}, {&(0x7f0000004480)=""/171, 0xab}], 0x2}, 0x5}, {{&(0x7f0000004600)=@pppoe, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000004680)=""/194, 0xc2}, {&(0x7f0000004780)=""/131, 0x83}, {&(0x7f0000004840)=""/121, 0x79}, {&(0x7f00000048c0)=""/68, 0x44}, {&(0x7f0000004940)=""/162, 0xa2}, {&(0x7f0000004a00)=""/170, 0xaa}, {&(0x7f0000004ac0)=""/39, 0x27}, {&(0x7f0000004b00)=""/178, 0xb2}], 0x8}, 0x6}, {{0x0, 0x0, &(0x7f0000005040)=[{&(0x7f0000004e00)=""/25, 0x19}, {&(0x7f0000004e40)=""/225, 0xe1}, {0x0}], 0x3}, 0x6}, {{0x0, 0x0, &(0x7f0000005580)=[{&(0x7f00000051c0)=""/69, 0x45}, {&(0x7f0000005240)=""/125, 0x7d}, {&(0x7f00000052c0)=""/67, 0x43}, {&(0x7f0000005400)=""/94, 0x5e}, {&(0x7f0000005480)=""/243, 0xf3}], 0x5, &(0x7f0000005600)=""/102, 0x66}, 0x7fff}], 0x7, 0x40000040, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) ftruncate(0xffffffffffffffff, 0x2007ffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x5607, 0x3) ioctl$VT_ACTIVATE(r6, 0x5606, 0x4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}, 0x7}, 0x1c) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[], 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) 0s ago: executing program 1 (id=1811): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0xa2c25) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000140)="8f", 0x1}], 0x1) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x82000000) kernel console output (not intermixed with test programs): is 0 [ 505.406040][ T11] usb 3-1: config 0 has no interface number 0 [ 505.412298][ T11] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 505.424442][ T11] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 505.548179][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 505.617198][ T11] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 505.627676][ T11] usb 3-1: config 0 has no interface number 0 [ 505.634672][ T11] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 505.644637][ T11] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 505.765607][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 505.772766][ T24] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected. [ 505.934419][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 505.938785][ T11] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 505.940452][ T42] dvb-usb: error while querying for an remote control event. [ 505.948779][ T11] usb 3-1: config 0 has no interface number 0 [ 505.962523][ T11] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 505.973159][ T11] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 506.002285][ T24] usb 5-1: USB disconnect, device number 16 [ 506.308314][ T11] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 506.318041][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.326285][ T11] usb 3-1: Product: syz [ 506.330529][ T11] usb 3-1: Manufacturer: syz [ 506.335363][ T11] usb 3-1: SerialNumber: syz [ 506.494674][ T11] usb 3-1: config 0 descriptor?? [ 506.757418][ T11] usb 3-1: can't set config #0, error -71 [ 506.825758][ T24] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected. [ 506.922006][ T11] usb 3-1: USB disconnect, device number 27 [ 507.061019][ T8482] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 507.075451][ T8482] team0: Port device batadv1 added [ 507.143782][ T42] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 507.855633][ T42] usb 4-1: config 0 has no interfaces? [ 508.319996][ T42] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 508.330056][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.338333][ T42] usb 4-1: Product: syz [ 508.342590][ T42] usb 4-1: Manufacturer: syz [ 508.347451][ T42] usb 4-1: SerialNumber: syz [ 508.556275][ T42] usb 4-1: config 0 descriptor?? [ 510.369304][ T8507] tipc: Enabling of bearer rejected, failed to enable media [ 513.220192][ T8527] loop2: detected capacity change from 0 to 7 [ 513.318223][ T8527] Dev loop2: unable to read RDB block 7 [ 513.324122][ T8527] loop2: unable to read partition table [ 513.344680][ T8527] loop2: partition table beyond EOD, truncated [ 513.351017][ T8527] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 516.958949][ T11] usb 4-1: USB disconnect, device number 26 [ 517.435077][ T8546] 8021q: VLANs not supported on ip6tnl0 [ 517.856101][ T8549] tipc: Enabling of bearer rejected, failed to enable media [ 519.735501][ T8565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.544395][ T11] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 520.931247][ T11] usb 3-1: config 0 has no interfaces? [ 520.998786][ T11] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 521.008337][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.016730][ T11] usb 3-1: Product: syz [ 521.021043][ T11] usb 3-1: Manufacturer: syz [ 521.025937][ T11] usb 3-1: SerialNumber: syz [ 521.157799][ T11] usb 3-1: config 0 descriptor?? [ 521.228225][ T8592] 8021q: VLANs not supported on ip6tnl0 [ 524.554689][ T8609] tipc: Enabling of bearer rejected, failed to enable media [ 526.352997][ T11] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 526.593664][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 526.633687][ T11] usb 4-1: config 0 has an invalid interface number: 161 but max is 0 [ 526.642139][ T11] usb 4-1: config 0 has no interface number 0 [ 526.648648][ T11] usb 4-1: config 0 interface 161 has no altsetting 0 [ 526.804642][ T11] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 526.814427][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.825197][ T11] usb 4-1: Product: syz [ 526.829534][ T11] usb 4-1: Manufacturer: syz [ 526.835329][ T11] usb 4-1: SerialNumber: syz [ 527.005991][ T11] usb 4-1: config 0 descriptor?? [ 527.094646][ T11] ums-jumpshot 4-1:0.161: USB Mass Storage device detected [ 527.166334][ T11] ums-jumpshot 4-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 527.299817][ T42] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 527.383847][ T11] usb 4-1: USB disconnect, device number 27 [ 527.554022][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 527.597016][ T42] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 527.606477][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.699009][ T42] usb 5-1: config 0 descriptor?? [ 528.024264][ T42] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 528.084742][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 528.136183][ T42] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 528.143853][ T42] usb 5-1: media controller created [ 528.207871][ T8628] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 528.327155][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 528.634693][ T42] az6027: usb out operation failed. (-71) [ 528.652215][ T42] az6027: usb out operation failed. (-71) [ 528.659201][ T42] stb0899_attach: Driver disabled by Kconfig [ 528.670949][ T42] az6027: no front-end attached [ 528.670949][ T42] [ 528.740357][ T42] az6027: usb out operation failed. (-71) [ 528.746706][ T42] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 528.756394][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 528.950677][ T42] dvb-usb: schedule remote query interval to 400 msecs. [ 528.957856][ T42] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 529.155161][ T42] usb 5-1: USB disconnect, device number 17 [ 529.746712][ T42] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 530.645690][ T8644] block device autoloading is deprecated and will be removed. [ 530.723233][ T8642] md2: using deprecated bitmap file support [ 530.729714][ T8642] md2: error: bitmap file must be a regular file [ 531.466521][ T11] usb 3-1: USB disconnect, device number 28 [ 532.589016][ T8654] tipc: Enabling of bearer rejected, failed to enable media [ 532.645887][ T8645] pim6reg: entered allmulticast mode [ 533.055553][ T11] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 533.254472][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 533.299152][ T11] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 533.364426][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.521201][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.680917][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.784737][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.797492][ T8638] pim6reg: left allmulticast mode [ 533.885513][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.928598][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.019636][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.083356][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.157498][ T11] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 534.167138][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 534.175493][ T11] usb 1-1: SerialNumber: syz [ 534.255712][ T11] usb 1-1: config 0 descriptor?? [ 534.296459][ T11] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 534.504714][ T8658] input: syz1 as /devices/virtual/input/input11 [ 534.561951][ T5145] bcm5974 1-1:0.0: could not read from device [ 534.587234][ T5145] bcm5974 1-1:0.0: could not read from device [ 534.619370][ T5145] bcm5974 1-1:0.0: could not read from device [ 534.662589][ T5145] bcm5974 1-1:0.0: could not read from device [ 534.670797][ T11] usb 1-1: USB disconnect, device number 18 [ 535.744018][ T42] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 535.951729][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 536.011504][ T42] usb 5-1: config 0 has an invalid interface number: 161 but max is 0 [ 536.019963][ T42] usb 5-1: config 0 has no interface number 0 [ 536.026294][ T42] usb 5-1: config 0 interface 161 has no altsetting 0 [ 536.129579][ T42] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 536.141722][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.150834][ T42] usb 5-1: Product: syz [ 536.155172][ T42] usb 5-1: Manufacturer: syz [ 536.159887][ T42] usb 5-1: SerialNumber: syz [ 536.276620][ T42] usb 5-1: config 0 descriptor?? [ 536.307433][ T42] ums-jumpshot 5-1:0.161: USB Mass Storage device detected [ 536.339885][ T42] ums-jumpshot 5-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 536.577963][ T42] usb 5-1: USB disconnect, device number 18 [ 536.812111][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.818860][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.893712][ T42] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 538.140891][ T42] usb 2-1: config 0 has no interfaces? [ 538.236042][ T42] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 538.245491][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.253910][ T42] usb 2-1: Product: syz [ 538.258262][ T42] usb 2-1: Manufacturer: syz [ 538.263037][ T42] usb 2-1: SerialNumber: syz [ 538.412992][ T42] usb 2-1: config 0 descriptor?? [ 542.381622][ T8717] tipc: Enabled bearer , priority 0 [ 542.444654][ T8719] syzkaller0: entered promiscuous mode [ 542.450322][ T8719] syzkaller0: entered allmulticast mode [ 542.571689][ T8717] tipc: Resetting bearer [ 542.644928][ T8715] tipc: Resetting bearer [ 542.681183][ T8715] tipc: Disabling bearer [ 542.756250][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 543.011340][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 543.019903][ T9] usb 4-1: config 0 has no interface number 0 [ 543.069949][ T9] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 543.079717][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.088187][ T9] usb 4-1: Product: syz [ 543.092527][ T9] usb 4-1: Manufacturer: syz [ 543.097395][ T9] usb 4-1: SerialNumber: syz [ 543.261901][ T9] usb 4-1: config 0 descriptor?? [ 543.505257][ T9] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 543.577039][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 543.588523][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 543.596900][ T9] usb 4-1: media controller created [ 543.603897][ T42] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 543.698585][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 543.844238][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 543.944014][ T42] usb 3-1: config 0 has an invalid interface number: 161 but max is 0 [ 543.952561][ T42] usb 3-1: config 0 has no interface number 0 [ 543.959241][ T42] usb 3-1: config 0 interface 161 has no altsetting 0 [ 544.070382][ T42] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 544.079852][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.088252][ T42] usb 3-1: Product: syz [ 544.092715][ T42] usb 3-1: Manufacturer: syz [ 544.097680][ T42] usb 3-1: SerialNumber: syz [ 544.262795][ T42] usb 3-1: config 0 descriptor?? [ 544.316554][ T42] ums-jumpshot 3-1:0.161: USB Mass Storage device detected [ 544.365781][ T42] ums-jumpshot 3-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 544.560486][ T42] usb 3-1: USB disconnect, device number 29 [ 544.834744][ T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 545.380459][ T9] usb 4-1: USB disconnect, device number 28 [ 545.801737][ T8738] tipc: Enabling of bearer rejected, failed to enable media [ 547.288548][ T24] usb 2-1: USB disconnect, device number 23 [ 547.514332][ T8759] tipc: Enabled bearer , priority 0 [ 547.521417][ T42] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 547.573946][ T8762] syzkaller0: entered promiscuous mode [ 547.579791][ T8762] syzkaller0: entered allmulticast mode [ 547.715772][ T8759] tipc: Resetting bearer [ 547.733290][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 547.798860][ T8757] tipc: Resetting bearer [ 547.800842][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.820740][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.832829][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 547.846417][ T42] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 547.855729][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.872678][ T8757] tipc: Disabling bearer [ 547.891363][ T42] usb 3-1: config 0 descriptor?? [ 548.338353][ T42] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 548.516814][ T42] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0004/input/input12 [ 548.838637][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 548.882719][ T42] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 548.922772][ T42] usb 3-1: USB disconnect, device number 30 [ 549.016568][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 549.052988][ T24] usb 4-1: config 0 has an invalid interface number: 161 but max is 0 [ 549.062816][ T24] usb 4-1: config 0 has no interface number 0 [ 549.069896][ T24] usb 4-1: config 0 interface 161 has no altsetting 0 [ 549.191034][ T24] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 549.200810][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.210143][ T24] usb 4-1: Product: syz [ 549.215404][ T24] usb 4-1: Manufacturer: syz [ 549.220158][ T24] usb 4-1: SerialNumber: syz [ 549.370663][ T24] usb 4-1: config 0 descriptor?? [ 549.417811][ T24] ums-jumpshot 4-1:0.161: USB Mass Storage device detected [ 549.488597][ T24] ums-jumpshot 4-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 549.595282][ T24] usb 4-1: USB disconnect, device number 29 [ 549.742186][ T8783] tipc: Enabling of bearer rejected, failed to enable media [ 549.744625][ T8775] fido_id[8775]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 551.273350][ T8811] tipc: Enabled bearer , priority 0 [ 551.338999][ T8816] syzkaller0: entered promiscuous mode [ 551.344988][ T8816] syzkaller0: entered allmulticast mode [ 551.471660][ T8811] tipc: Resetting bearer [ 551.494483][ T24] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 551.586537][ T8810] tipc: Resetting bearer [ 551.686662][ T8810] tipc: Disabling bearer [ 551.827632][ T24] usb 4-1: config 0 has no interfaces? [ 551.874348][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 551.883770][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.891955][ T24] usb 4-1: Product: syz [ 551.896563][ T24] usb 4-1: Manufacturer: syz [ 551.901322][ T24] usb 4-1: SerialNumber: syz [ 551.996834][ T24] usb 4-1: config 0 descriptor?? [ 553.223356][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 553.784030][ T8836] tipc: Enabling of bearer rejected, failed to enable media [ 553.961420][ T8838] 8021q: VLANs not supported on ip6tnl0 [ 554.014882][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 554.221562][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 554.280336][ T9] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 554.288694][ T9] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 554.299217][ T9] usb 2-1: config 6 has no interface number 0 [ 554.305574][ T9] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 554.317228][ T9] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 554.327222][ T9] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 554.758473][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 554.768192][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.779506][ T9] usb 2-1: Product: syz [ 554.784704][ T9] usb 2-1: Manufacturer: syz [ 554.789446][ T9] usb 2-1: SerialNumber: syz [ 555.107807][ T9] hso 2-1:6.2: Failed to find INT IN ep [ 555.467230][ T8855] tipc: Enabled bearer , priority 0 [ 555.517929][ T8856] syzkaller0: entered promiscuous mode [ 555.524162][ T8856] syzkaller0: entered allmulticast mode [ 555.691548][ T8855] tipc: Resetting bearer [ 555.822016][ T8854] tipc: Resetting bearer [ 555.876900][ T8854] tipc: Disabling bearer [ 556.571422][ T24] usb 2-1: USB disconnect, device number 24 [ 557.905290][ T8882] 8021q: VLANs not supported on ip6tnl0 [ 558.278789][ T8886] tipc: Enabled bearer , priority 0 [ 558.376913][ T8886] tipc: Resetting bearer [ 558.477119][ T8883] tipc: Disabling bearer [ 558.990684][ T8898] tipc: Enabled bearer , priority 0 [ 559.058654][ T8897] syzkaller0: entered promiscuous mode [ 559.069900][ T8897] syzkaller0: entered allmulticast mode [ 559.132907][ T8898] tipc: Resetting bearer [ 559.304739][ T8896] tipc: Resetting bearer [ 559.365219][ T8896] tipc: Disabling bearer [ 559.823842][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 559.943791][ T24] usb 4-1: USB disconnect, device number 30 [ 560.046974][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 560.155500][ T9] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 560.163920][ T9] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 560.174447][ T9] usb 5-1: config 6 has no interface number 0 [ 560.180704][ T9] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 560.192490][ T9] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 560.204973][ T9] usb 5-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 560.480990][ T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 560.490659][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.499043][ T9] usb 5-1: Product: syz [ 560.503359][ T9] usb 5-1: Manufacturer: syz [ 560.510409][ T9] usb 5-1: SerialNumber: syz [ 560.565064][ T8919] 8021q: VLANs not supported on ip6tnl0 [ 560.642853][ T9] hso 5-1:6.2: Failed to find INT IN ep [ 561.473857][ T8929] tipc: Enabled bearer , priority 0 [ 561.555819][ T8929] tipc: Resetting bearer [ 561.570410][ T8928] tipc: Disabling bearer [ 561.871575][ T9] usb 5-1: USB disconnect, device number 19 [ 562.722278][ T8943] fuse: Bad value for 'fd' [ 562.744291][ T8941] tipc: Enabled bearer , priority 0 [ 562.824885][ T8945] syzkaller0: entered promiscuous mode [ 562.830562][ T8945] syzkaller0: entered allmulticast mode [ 562.883967][ T8941] tipc: Resetting bearer [ 563.026233][ T8939] tipc: Resetting bearer [ 563.086571][ T8939] tipc: Disabling bearer [ 563.400759][ T9] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 563.626766][ T9] usb 1-1: config 0 has no interfaces? [ 563.737402][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 563.775381][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 563.787529][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.796982][ T9] usb 1-1: Product: syz [ 563.801347][ T9] usb 1-1: Manufacturer: syz [ 563.806307][ T9] usb 1-1: SerialNumber: syz [ 563.876789][ T9] usb 1-1: config 0 descriptor?? [ 563.994319][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 564.033325][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 564.043054][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.085111][ T24] usb 2-1: config 0 descriptor?? [ 564.172454][ T24] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 564.971193][ T8960] tipc: Enabled bearer , priority 0 [ 565.024647][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 565.055932][ T8960] tipc: Resetting bearer [ 565.091014][ T8958] tipc: Disabling bearer [ 565.213856][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 565.291992][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.303937][ T9] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 565.313265][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.427481][ T9] usb 4-1: config 0 descriptor?? [ 565.987380][ T9] belkin 0003:050D:3201.0005: ignoring exceeding usage max [ 566.136663][ T9] belkin 0003:050D:3201.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 050d:3201] on usb-dummy_hcd.3-1/input0 [ 566.270051][ T9] usb 4-1: USB disconnect, device number 31 [ 567.007308][ T8967] fido_id[8967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 567.303791][ T24] gspca_sonixj: reg_w1 err -71 [ 567.308937][ T24] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 567.352270][ T24] usb 2-1: USB disconnect, device number 25 [ 567.545366][ T8976] fuse: Bad value for 'fd' [ 567.941332][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 568.163859][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 568.233134][ T24] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 568.241756][ T24] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 568.252194][ T24] usb 4-1: config 6 has no interface number 0 [ 568.258564][ T24] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 568.270322][ T24] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 568.280469][ T24] usb 4-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 568.330746][ T24] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 568.340130][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.348523][ T24] usb 4-1: Product: syz [ 568.352856][ T24] usb 4-1: Manufacturer: syz [ 568.357816][ T24] usb 4-1: SerialNumber: syz [ 568.475561][ T24] hso 4-1:6.2: Failed to find INT IN ep [ 568.690711][ T24] usb 4-1: USB disconnect, device number 32 [ 568.723232][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 568.884262][ T9] usb 3-1: device descriptor read/64, error -71 [ 569.133994][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 569.310596][ T9] usb 3-1: device descriptor read/64, error -71 [ 569.425911][ T9] usb usb3-port1: attempt power cycle [ 569.577222][ T8991] syzkaller0: entered promiscuous mode [ 569.583066][ T8991] syzkaller0: entered allmulticast mode [ 569.813677][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 569.893164][ T9] usb 3-1: device descriptor read/8, error -71 [ 570.166321][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 570.243001][ T9] usb 3-1: device descriptor read/8, error -71 [ 570.359530][ T9] usb usb3-port1: unable to enumerate USB device [ 570.648950][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 570.808992][ T9004] fuse: Bad value for 'fd' [ 570.854737][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 570.893760][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.905205][ T24] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 570.914568][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.990072][ T24] usb 5-1: config 0 descriptor?? [ 571.602179][ T24] belkin 0003:050D:3201.0006: ignoring exceeding usage max [ 571.800514][ T24] belkin 0003:050D:3201.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 050d:3201] on usb-dummy_hcd.4-1/input0 [ 571.934411][ T24] usb 5-1: USB disconnect, device number 20 [ 572.011580][ T9011] loop2: detected capacity change from 0 to 7 [ 572.095311][ T9011] Dev loop2: unable to read RDB block 7 [ 572.101130][ T9011] loop2: AHDI p1 p2 p3 [ 572.106271][ T9011] loop2: partition table partially beyond EOD, truncated [ 572.114551][ T9011] loop2: p1 start 1601398130 is beyond EOD, truncated [ 572.121468][ T9011] loop2: p2 start 1702059890 is beyond EOD, truncated [ 572.729006][ T9012] fido_id[9012]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 572.875973][ T9] usb 1-1: USB disconnect, device number 19 [ 573.359866][ T9027] syzkaller0: entered promiscuous mode [ 573.368197][ T9027] syzkaller0: entered allmulticast mode [ 573.580070][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 573.834396][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 573.918124][ T24] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 573.931182][ T24] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 573.943126][ T24] usb 3-1: config 6 has no interface number 0 [ 573.949653][ T24] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 573.961512][ T24] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 573.971648][ T24] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 574.168569][ T24] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 574.178008][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.186474][ T24] usb 3-1: Product: syz [ 574.190846][ T24] usb 3-1: Manufacturer: syz [ 574.195763][ T24] usb 3-1: SerialNumber: syz [ 574.251182][ T24] hso 3-1:6.2: Failed to find INT IN ep [ 574.476228][ T9] usb 3-1: USB disconnect, device number 35 [ 575.935646][ T9060] loop2: detected capacity change from 0 to 7 [ 576.005038][ T9060] Dev loop2: unable to read RDB block 7 [ 576.010923][ T9060] loop2: AHDI p1 p2 p3 [ 576.015590][ T9060] loop2: partition table partially beyond EOD, truncated [ 576.023939][ T9060] loop2: p1 start 1601398130 is beyond EOD, truncated [ 576.030969][ T9060] loop2: p2 start 1702059890 is beyond EOD, truncated [ 576.613901][ T24] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 576.986666][ T9056] lo: entered promiscuous mode [ 577.005028][ T9056] tunl0: entered promiscuous mode [ 577.016717][ T9056] gre0: entered promiscuous mode [ 577.035685][ T9056] gretap0: entered promiscuous mode [ 577.048411][ T9056] erspan0: entered promiscuous mode [ 577.059437][ T9056] ip_vti0: entered promiscuous mode [ 577.069338][ T9056] ip6_vti0: entered promiscuous mode [ 577.081942][ T9056] sit0: entered promiscuous mode [ 577.111365][ T9056] ip6tnl0: entered promiscuous mode [ 577.122941][ T9056] ip6gre0: entered promiscuous mode [ 577.134378][ T9056] syz_tun: entered promiscuous mode [ 577.146752][ T9056] ip6gretap0: entered promiscuous mode [ 577.165626][ T9056] vcan0: entered promiscuous mode [ 577.174698][ T9056] bond0: entered promiscuous mode [ 577.179915][ T9056] bond_slave_0: entered promiscuous mode [ 577.187810][ T9056] bond_slave_1: entered promiscuous mode [ 577.205164][ T9056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.217019][ T9056] team0: entered promiscuous mode [ 577.222273][ T9056] team_slave_0: entered promiscuous mode [ 577.229379][ T9056] team_slave_1: entered promiscuous mode [ 577.240250][ T9056] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.252444][ T9056] dummy0: entered promiscuous mode [ 577.266635][ T9056] nlmon0: entered promiscuous mode [ 577.454549][ T24] usb 1-1: config 0 has no interfaces? [ 577.515305][ T9056] caif0: entered promiscuous mode [ 577.520722][ T9056] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 577.565329][ T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 577.574851][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.583082][ T24] usb 1-1: Product: syz [ 577.587789][ T24] usb 1-1: Manufacturer: syz [ 577.592502][ T24] usb 1-1: SerialNumber: syz [ 577.715872][ T24] usb 1-1: config 0 descriptor?? [ 577.753836][ T11] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 578.055774][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 578.209734][ T11] usb 2-1: unable to get BOS descriptor or descriptor too short [ 581.534019][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 581.794489][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 581.917753][ T9] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 581.926519][ T9] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 581.937517][ T9] usb 3-1: config 6 has no interface number 0 [ 581.944117][ T9] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 581.956171][ T9] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 581.966459][ T9] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 582.128147][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 582.138029][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.146785][ T9] usb 3-1: Product: syz [ 582.151087][ T9] usb 3-1: Manufacturer: syz [ 582.155939][ T9] usb 3-1: SerialNumber: syz [ 582.342468][ T9] hso 3-1:6.2: Failed to find INT IN ep [ 582.596711][ T9] usb 3-1: USB disconnect, device number 36 [ 583.267669][ T11] usb 2-1: unable to read config index 0 descriptor/all [ 583.275176][ T11] usb 2-1: can't read configurations, error -110 [ 583.514063][ T11] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 583.691605][ T9116] loop2: detected capacity change from 0 to 7 [ 583.703989][ T11] usb 2-1: device descriptor read/64, error -32 [ 583.771311][ T9116] Dev loop2: unable to read RDB block 7 [ 583.777349][ T9116] loop2: AHDI p1 p2 p3 [ 583.781874][ T9116] loop2: partition table partially beyond EOD, truncated [ 583.790812][ T9116] loop2: p1 start 1601398130 is beyond EOD, truncated [ 583.797856][ T9116] loop2: p2 start 1702059890 is beyond EOD, truncated [ 583.836098][ T11] usb usb2-port1: attempt power cycle [ 584.270634][ T11] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 584.381709][ T11] usb 2-1: device descriptor read/8, error -32 [ 584.654056][ T11] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 584.749339][ T11] usb 2-1: device descriptor read/8, error -32 [ 584.885739][ T11] usb usb2-port1: unable to enumerate USB device [ 585.516917][ T9129] syzkaller0: entered promiscuous mode [ 585.522638][ T9129] syzkaller0: entered allmulticast mode [ 586.924081][ T11] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 587.163810][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 587.181367][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 587.277333][ T11] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 587.287278][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.295800][ T11] usb 4-1: Product: syz [ 587.300166][ T11] usb 4-1: Manufacturer: syz [ 587.307458][ T11] usb 4-1: SerialNumber: syz [ 587.451875][ T11] usb 4-1: config 0 descriptor?? [ 587.524892][ T11] hub 4-1:0.0: bad descriptor, ignoring hub [ 587.531069][ T11] hub 4-1:0.0: probe with driver hub failed with error -5 [ 587.549427][ T11] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 587.932140][ T11] usb 4-1: USB disconnect, device number 33 [ 588.452883][ T8795] udevd[8795]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 588.751883][ T9151] loop2: detected capacity change from 0 to 7 [ 588.839954][ T9151] Dev loop2: unable to read RDB block 7 [ 588.846337][ T9151] loop2: unable to read partition table [ 588.864875][ T11] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 588.923355][ T9151] loop2: partition table beyond EOD, truncated [ 588.930842][ T9151] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 589.084218][ T11] usb 3-1: Using ep0 maxpacket: 8 [ 589.114580][ T11] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 589.122982][ T11] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 589.133636][ T11] usb 3-1: config 6 has no interface number 0 [ 589.139986][ T11] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 589.152105][ T11] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 589.162414][ T11] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 589.381255][ T11] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 589.393667][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.401947][ T11] usb 3-1: Product: syz [ 589.407482][ T11] usb 3-1: Manufacturer: syz [ 589.412444][ T11] usb 3-1: SerialNumber: syz [ 589.737271][ T11] hso 3-1:6.2: Failed to find INT IN ep [ 589.811039][ T24] usb 1-1: USB disconnect, device number 20 [ 589.916937][ T11] usb 3-1: USB disconnect, device number 37 [ 590.470506][ T9162] syzkaller0: entered promiscuous mode [ 590.476389][ T9162] syzkaller0: entered allmulticast mode [ 592.775369][ T9188] loop2: detected capacity change from 0 to 7 [ 592.815772][ T9188] Dev loop2: unable to read RDB block 7 [ 592.821641][ T9188] loop2: AHDI p1 p2 p3 [ 592.826306][ T9188] loop2: partition table partially beyond EOD, truncated [ 592.834942][ T9188] loop2: p1 start 1601398130 is beyond EOD, truncated [ 592.841958][ T9188] loop2: p2 start 1702059890 is beyond EOD, truncated [ 593.384040][ T11] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 593.586308][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 593.643117][ T11] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 593.652838][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.736846][ T11] usb 1-1: config 0 descriptor?? [ 593.980181][ T11] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 594.025517][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 594.074347][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 594.083227][ T11] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 594.090969][ T11] usb 1-1: media controller created [ 594.173295][ T9190] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 594.279961][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 594.294071][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 594.341280][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.351986][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 594.511796][ T11] az6027: usb out operation failed. (-71) [ 594.532302][ T11] az6027: usb out operation failed. (-71) [ 594.538416][ T11] stb0899_attach: Driver disabled by Kconfig [ 594.545725][ T11] az6027: no front-end attached [ 594.545725][ T11] [ 594.585227][ T11] az6027: usb out operation failed. (-71) [ 594.591571][ T11] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 594.601800][ T11] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 594.618560][ T5861] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 594.668531][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 594.678099][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.686636][ T24] usb 5-1: Product: syz [ 594.691023][ T24] usb 5-1: Manufacturer: syz [ 594.696000][ T24] usb 5-1: SerialNumber: syz [ 594.804149][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 594.849489][ T5861] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 594.858141][ T5861] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 594.869054][ T5861] usb 3-1: config 6 has no interface number 0 [ 594.875496][ T5861] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 594.887499][ T5861] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 594.897605][ T5861] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 594.948806][ T11] dvb-usb: schedule remote query interval to 400 msecs. [ 594.956276][ T11] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 595.056501][ T11] usb 1-1: USB disconnect, device number 21 [ 595.150245][ T5861] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 595.160030][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.168428][ T5861] usb 3-1: Product: syz [ 595.172717][ T5861] usb 3-1: Manufacturer: syz [ 595.177561][ T5861] usb 3-1: SerialNumber: syz [ 595.397527][ T24] usb 5-1: 0:2 : does not exist [ 595.402708][ T24] usb 5-1: unit 6 not found! [ 595.537526][ T5861] hso 3-1:6.2: Failed to find INT IN ep [ 595.695433][ T5861] usb 3-1: USB disconnect, device number 38 [ 595.811278][ T24] usb 5-1: USB disconnect, device number 21 [ 595.970870][ T11] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 596.591424][ T6177] udevd[6177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 597.815438][ T9233] loop2: detected capacity change from 0 to 7 [ 597.879927][ T9233] Dev loop2: unable to read RDB block 7 [ 597.890723][ T9233] loop2: AHDI p1 p2 p3 [ 597.896884][ T9233] loop2: partition table partially beyond EOD, truncated [ 597.905924][ T9233] loop2: p1 start 1601398130 is beyond EOD, truncated [ 597.912955][ T9233] loop2: p2 start 1702059890 is beyond EOD, truncated [ 597.935434][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1140'. [ 598.267140][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.274027][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 599.286039][ T9246] loop6: detected capacity change from 0 to 7 [ 599.324283][ T9246] loop6: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 [ 599.331974][ T9246] loop6: p1 start 3690715197 is beyond EOD, truncated [ 599.339420][ T9246] loop6: p2 start 171850696 is beyond EOD, truncated [ 599.346542][ T9246] loop6: p3 start 3703405012 is beyond EOD, truncated [ 599.353668][ T9246] loop6: p4 size 1680801792 extends beyond EOD, truncated [ 599.478199][ T11] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 599.545410][ T9246] loop6: p5 start 2602905181 is beyond EOD, truncated [ 599.552639][ T9246] loop6: p6 start 1745589262 is beyond EOD, truncated [ 599.560426][ T9246] loop6: p7 start 325178268 is beyond EOD, truncated [ 599.567677][ T9246] loop6: p8 start 2326339850 is beyond EOD, truncated [ 599.574953][ T9246] loop6: p9 start 2562259694 is beyond EOD, truncated [ 599.808882][ T11] usb 3-1: unable to get BOS descriptor or descriptor too short [ 599.823887][ T11] usb 3-1: too many configurations: 111, using maximum allowed: 8 [ 599.909470][ T11] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 599.917827][ T11] usb 3-1: can't read configurations, error -71 [ 600.212940][ T6177] udevd[6177]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 600.404620][ T5861] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 600.655690][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 600.724159][ T5861] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.734710][ T5861] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 600.864659][ T5861] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 600.874260][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.882433][ T5861] usb 5-1: Product: syz [ 600.886969][ T5861] usb 5-1: Manufacturer: syz [ 600.891692][ T5861] usb 5-1: SerialNumber: syz [ 601.288156][ T5861] usb 5-1: 0:2 : does not exist [ 601.293321][ T5861] usb 5-1: unit 6 not found! [ 601.441018][ T5861] usb 5-1: USB disconnect, device number 22 [ 601.723891][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 601.816136][ T6177] udevd[6177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 601.975198][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 602.035130][ T24] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 602.043686][ T24] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 602.054666][ T24] usb 3-1: config 6 has no interface number 0 [ 602.060987][ T24] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 602.073254][ T24] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 602.086936][ T24] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 602.367873][ T24] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 602.377497][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.385938][ T24] usb 3-1: Product: syz [ 602.393953][ T24] usb 3-1: Manufacturer: syz [ 602.398698][ T24] usb 3-1: SerialNumber: syz [ 602.574733][ T24] hso 3-1:6.2: Failed to find INT IN ep [ 602.795199][ T5861] usb 3-1: USB disconnect, device number 41 [ 603.279865][ T9266] loop2: detected capacity change from 0 to 7 [ 603.330529][ T9266] Dev loop2: unable to read RDB block 7 [ 603.336740][ T9266] loop2: AHDI p1 p2 p3 [ 603.341125][ T9266] loop2: partition table partially beyond EOD, truncated [ 603.349454][ T9266] loop2: p1 start 1601398130 is beyond EOD, truncated [ 603.356604][ T9266] loop2: p2 start 1702059890 is beyond EOD, truncated [ 604.380546][ T9279] loop6: detected capacity change from 0 to 7 [ 604.432126][ T9279] Dev loop6: unable to read RDB block 7 [ 604.443106][ T9279] loop6: unable to read partition table [ 604.515034][ T9279] loop6: partition table beyond EOD, truncated [ 604.521809][ T9279] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 606.653742][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 606.884039][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 606.930606][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.941313][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 607.069202][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 607.078828][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.087171][ T24] usb 5-1: Product: syz [ 607.091506][ T24] usb 5-1: Manufacturer: syz [ 607.096285][ T24] usb 5-1: SerialNumber: syz [ 607.434959][ T24] usb 5-1: 0:2 : does not exist [ 607.440263][ T24] usb 5-1: unit 6 not found! [ 607.594050][ T24] usb 5-1: USB disconnect, device number 23 [ 607.883103][ T6177] udevd[6177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 608.699761][ T9301] loop2: detected capacity change from 0 to 7 [ 608.749301][ T9301] Dev loop2: unable to read RDB block 7 [ 608.755467][ T9301] loop2: AHDI p1 p2 p3 [ 608.759966][ T9301] loop2: partition table partially beyond EOD, truncated [ 608.768620][ T9301] loop2: p1 start 1601398130 is beyond EOD, truncated [ 608.775856][ T9301] loop2: p2 start 1702059890 is beyond EOD, truncated [ 609.034178][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 609.263992][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 609.291383][ T24] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 609.299946][ T24] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 609.310460][ T24] usb 2-1: config 6 has no interface number 0 [ 609.316968][ T24] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 609.328883][ T24] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 609.339084][ T24] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 609.610151][ T9309] loop6: detected capacity change from 0 to 7 [ 609.645179][ T24] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 609.654864][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.667492][ T24] usb 2-1: Product: syz [ 609.671898][ T24] usb 2-1: Manufacturer: syz [ 609.678916][ T24] usb 2-1: SerialNumber: syz [ 609.731752][ T9309] Dev loop6: unable to read RDB block 7 [ 609.737953][ T9309] loop6: unable to read partition table [ 609.795264][ T9309] loop6: partition table beyond EOD, truncated [ 609.801976][ T9309] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 609.827819][ T24] hso 2-1:6.2: Failed to find INT IN ep [ 610.025343][ T24] usb 2-1: USB disconnect, device number 30 [ 611.052837][ T9321] netlink: 'syz.4.1174': attribute type 12 has an invalid length. [ 611.061254][ T9321] netlink: 'syz.4.1174': attribute type 29 has an invalid length. [ 611.069639][ T9321] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1174'. [ 612.649109][ T9343] loop2: detected capacity change from 0 to 7 [ 612.696470][ T9343] Dev loop2: unable to read RDB block 7 [ 612.702550][ T9343] loop2: AHDI p1 p2 p3 [ 612.707425][ T9343] loop2: partition table partially beyond EOD, truncated [ 612.715843][ T9343] loop2: p1 start 1601398130 is beyond EOD, truncated [ 612.722788][ T9343] loop2: p2 start 1702059890 is beyond EOD, truncated [ 613.739912][ T9350] loop6: detected capacity change from 0 to 7 [ 613.812153][ T9350] Dev loop6: unable to read RDB block 7 [ 613.818513][ T9350] loop6: unable to read partition table [ 613.868380][ T9350] loop6: partition table beyond EOD, truncated [ 613.875750][ T9350] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 615.193057][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 615.453783][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 615.472065][ T24] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 615.480662][ T24] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 615.491180][ T24] usb 2-1: config 6 has no interface number 0 [ 615.501855][ T24] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 615.515265][ T24] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 615.526219][ T24] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 615.616000][ T9372] netlink: 'syz.4.1189': attribute type 12 has an invalid length. [ 615.624194][ T9372] netlink: 'syz.4.1189': attribute type 29 has an invalid length. [ 615.632208][ T9372] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1189'. [ 615.838916][ T24] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 615.848492][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.857136][ T24] usb 2-1: Product: syz [ 615.861505][ T24] usb 2-1: Manufacturer: syz [ 615.866510][ T24] usb 2-1: SerialNumber: syz [ 616.003997][ T24] hso 2-1:6.2: Failed to find INT IN ep [ 616.209690][ T24] usb 2-1: USB disconnect, device number 31 [ 617.027469][ T9381] loop2: detected capacity change from 0 to 7 [ 617.102648][ T9381] Dev loop2: unable to read RDB block 7 [ 617.108867][ T9381] loop2: AHDI p1 p2 p3 [ 617.113381][ T9381] loop2: partition table partially beyond EOD, truncated [ 617.122340][ T9381] loop2: p1 start 1601398130 is beyond EOD, truncated [ 617.129544][ T9381] loop2: p2 start 1702059890 is beyond EOD, truncated [ 618.721149][ T9406] netlink: 'syz.0.1203': attribute type 12 has an invalid length. [ 618.729485][ T9406] netlink: 'syz.0.1203': attribute type 29 has an invalid length. [ 618.737886][ T9406] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1203'. [ 619.876220][ T5861] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 620.112854][ T5861] usb 1-1: Using ep0 maxpacket: 8 [ 620.185148][ T5861] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 620.194060][ T5861] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 620.213052][ T5861] usb 1-1: config 6 has no interface number 0 [ 620.220617][ T5861] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 620.232754][ T5861] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 620.242895][ T5861] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 620.385656][ T9431] loop2: detected capacity change from 0 to 7 [ 620.443982][ T5861] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 620.453641][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.461874][ T5861] usb 1-1: Product: syz [ 620.466588][ T5861] usb 1-1: Manufacturer: syz [ 620.471397][ T5861] usb 1-1: SerialNumber: syz [ 620.489605][ T9431] Dev loop2: unable to read RDB block 7 [ 620.495688][ T9431] loop2: AHDI p1 p2 p3 [ 620.500069][ T9431] loop2: partition table partially beyond EOD, truncated [ 620.508619][ T9431] loop2: p1 start 1601398130 is beyond EOD, truncated [ 620.518643][ T9431] loop2: p2 start 1702059890 is beyond EOD, truncated [ 620.637612][ T5861] hso 1-1:6.2: Failed to find INT IN ep [ 620.806842][ T5861] usb 1-1: USB disconnect, device number 22 [ 622.198482][ T9454] netlink: 'syz.0.1218': attribute type 12 has an invalid length. [ 622.206931][ T9454] netlink: 'syz.0.1218': attribute type 29 has an invalid length. [ 622.215166][ T9454] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1218'. [ 622.714761][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 623.051701][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 623.063158][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.078800][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.090640][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 623.189822][ T5861] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 623.403848][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 623.413189][ T24] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 623.421821][ T24] usb 4-1: Manufacturer: syz [ 623.456120][ T5861] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 623.465448][ T5861] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.476013][ T5861] usb 5-1: config 0 has no interface number 0 [ 623.482243][ T5861] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 623.495766][ T5861] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 623.509082][ T5861] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 623.522659][ T5861] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 623.532031][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.627017][ T24] usb 4-1: config 0 descriptor?? [ 624.067117][ T5861] usb 5-1: config 0 descriptor?? [ 624.095446][ T9469] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 624.455449][ T9465] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1220'. [ 624.501434][ T5861] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 624.596191][ T9469] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1223'. [ 624.741178][ T12] usb 5-1: Failed to submit usb control message: -71 [ 624.748563][ T12] usb 5-1: unable to send the bmi data to the device: -71 [ 624.756173][ T12] usb 5-1: unable to get target info from device [ 624.762767][ T12] usb 5-1: could not get target info (-71) [ 624.768921][ T12] usb 5-1: could not probe fw (-71) [ 624.775906][ T42] usb 5-1: USB disconnect, device number 24 [ 624.793162][ T9465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.803826][ T9465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.191138][ T9487] loop2: detected capacity change from 0 to 7 [ 625.309859][ T9487] Dev loop2: unable to read RDB block 7 [ 625.316911][ T9487] loop2: AHDI p1 p2 p3 [ 625.321446][ T9487] loop2: partition table partially beyond EOD, truncated [ 625.332813][ T9487] loop2: p1 start 1601398130 is beyond EOD, truncated [ 625.341036][ T9487] loop2: p2 start 1702059890 is beyond EOD, truncated [ 625.417035][ T42] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 625.629232][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 625.668695][ T42] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 625.677327][ T42] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 625.687855][ T42] usb 3-1: config 6 has no interface number 0 [ 625.694289][ T42] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 625.706325][ T42] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 625.716351][ T42] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 626.132141][ T42] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 626.141721][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.154593][ T42] usb 3-1: Product: syz [ 626.159001][ T42] usb 3-1: Manufacturer: syz [ 626.165691][ T42] usb 3-1: SerialNumber: syz [ 626.440739][ T42] hso 3-1:6.2: Failed to find INT IN ep [ 626.668640][ T42] usb 3-1: USB disconnect, device number 42 [ 627.685536][ T9503] netlink: 'syz.4.1232': attribute type 12 has an invalid length. [ 627.695164][ T9503] netlink: 'syz.4.1232': attribute type 29 has an invalid length. [ 627.703257][ T9503] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1232'. [ 628.936024][ T9514] loop6: detected capacity change from 0 to 7 [ 629.031663][ T9514] Dev loop6: unable to read RDB block 7 [ 629.038528][ T9514] loop6: AHDI p1 p2 [ 629.042664][ T9514] loop6: partition table partially beyond EOD, truncated [ 629.051820][ T9514] loop6: p1 start 926365495 is beyond EOD, truncated [ 629.275681][ T24] usbhid 4-1:0.0: can't add hid device: -32 [ 629.282449][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 630.373179][ T9529] loop2: detected capacity change from 0 to 7 [ 630.408803][ T9529] Dev loop2: unable to read RDB block 7 [ 630.414976][ T9529] loop2: AHDI p1 p2 p3 [ 630.419587][ T9529] loop2: partition table partially beyond EOD, truncated [ 630.428386][ T9529] loop2: p1 start 1601398130 is beyond EOD, truncated [ 630.435614][ T9529] loop2: p2 start 1702059890 is beyond EOD, truncated [ 630.524508][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 630.830329][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.841646][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.852024][ T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 630.865719][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.037327][ T24] usb 5-1: config 0 descriptor?? [ 631.495016][ T24] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 631.502546][ T24] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 631.510219][ T24] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 631.518250][ T24] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 631.525621][ T24] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 631.532864][ T24] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 631.540138][ T24] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 631.958346][ T24] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 631.987458][ T42] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 632.046230][ T24] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00 [ 632.207040][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 632.253670][ T42] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 632.262429][ T42] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 632.273132][ T42] usb 2-1: config 6 has no interface number 0 [ 632.279679][ T42] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 632.295871][ T42] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 632.307838][ T42] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 632.737809][ T42] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 632.747756][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.756546][ T42] usb 2-1: Product: syz [ 632.760938][ T42] usb 2-1: Manufacturer: syz [ 632.765938][ T42] usb 2-1: SerialNumber: syz [ 633.077289][ T42] hso 2-1:6.2: Failed to find INT IN ep [ 633.157478][ T9552] netlink: 'syz.2.1247': attribute type 12 has an invalid length. [ 633.168108][ T9552] netlink: 'syz.2.1247': attribute type 29 has an invalid length. [ 633.176444][ T9552] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1247'. [ 633.345018][ T5861] usb 2-1: USB disconnect, device number 32 [ 633.584408][ T24] cp2112 0003:10C4:EA90.0007: error requesting SMBus config [ 633.641419][ T24] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -71 [ 634.102783][ T9558] loop6: detected capacity change from 0 to 7 [ 634.117866][ T9558] Dev loop6: unable to read RDB block 7 [ 634.125119][ T9558] loop6: AHDI p1 p2 [ 634.131037][ T9558] loop6: partition table partially beyond EOD, truncated [ 634.145278][ T9558] loop6: p1 start 926365495 is beyond EOD, truncated [ 634.501343][ T24] usb 5-1: USB disconnect, device number 25 [ 634.944674][ T9569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1253'. [ 635.081311][ T9569] vlan2: entered promiscuous mode [ 635.347423][ T9575] loop2: detected capacity change from 0 to 7 [ 635.517581][ T9575] Dev loop2: unable to read RDB block 7 [ 635.523918][ T9575] loop2: AHDI p1 p2 p3 [ 635.528309][ T9575] loop2: partition table partially beyond EOD, truncated [ 635.536824][ T9575] loop2: p1 start 1601398130 is beyond EOD, truncated [ 635.544769][ T9575] loop2: p2 start 1702059890 is beyond EOD, truncated [ 636.280573][ T24] usb 4-1: USB disconnect, device number 34 [ 636.674960][ T9590] netlink: 'syz.3.1260': attribute type 12 has an invalid length. [ 636.684465][ T9590] netlink: 'syz.3.1260': attribute type 29 has an invalid length. [ 636.697915][ T9590] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1260'. [ 637.472754][ T9599] loop6: detected capacity change from 0 to 7 [ 637.555621][ T9599] Dev loop6: unable to read RDB block 7 [ 637.561598][ T9599] loop6: AHDI p1 p2 [ 637.566106][ T9599] loop6: partition table partially beyond EOD, truncated [ 637.574468][ T9599] loop6: p1 start 926365495 is beyond EOD, truncated [ 637.906437][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 638.143972][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 638.196892][ T24] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 638.205353][ T24] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 638.216041][ T24] usb 1-1: config 6 has no interface number 0 [ 638.222351][ T24] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 638.237905][ T24] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 638.249844][ T24] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 638.365070][ T5861] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 638.566115][ T9616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1268'. [ 638.594952][ T9616] vlan2: entered promiscuous mode [ 638.646033][ T24] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 638.655472][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.664098][ T24] usb 1-1: Product: syz [ 638.668693][ T24] usb 1-1: Manufacturer: syz [ 638.673803][ T24] usb 1-1: SerialNumber: syz [ 638.712110][ T5861] usb 5-1: config 0 has no interfaces? [ 638.885991][ T24] hso 1-1:6.2: Failed to find INT IN ep [ 638.988863][ T9620] loop2: detected capacity change from 0 to 7 [ 639.007297][ T8795] Dev loop2: unable to read RDB block 7 [ 639.014162][ T8795] loop2: AHDI p1 p2 p3 [ 639.018571][ T8795] loop2: partition table partially beyond EOD, truncated [ 639.027324][ T8795] loop2: p1 start 1601398130 is beyond EOD, truncated [ 639.034468][ T8795] loop2: p2 start 1702059890 is beyond EOD, truncated [ 639.170634][ T24] usb 1-1: USB disconnect, device number 23 [ 639.251705][ T5861] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 639.263996][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.272281][ T5861] usb 5-1: Product: syz [ 639.278535][ T5861] usb 5-1: Manufacturer: syz [ 639.283358][ T5861] usb 5-1: SerialNumber: syz [ 639.381220][ T9620] Dev loop2: unable to read RDB block 7 [ 639.388116][ T9620] loop2: AHDI p1 p2 p3 [ 639.392623][ T9620] loop2: partition table partially beyond EOD, truncated [ 639.400830][ T9620] loop2: p1 start 1601398130 is beyond EOD, truncated [ 639.407853][ T9620] loop2: p2 start 1702059890 is beyond EOD, truncated [ 639.544747][ T5861] usb 5-1: config 0 descriptor?? [ 640.494309][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 640.569779][ T9624] sctp: [Deprecated]: syz.2.1270 (pid 9624) Use of int in maxseg socket option. [ 640.569779][ T9624] Use struct sctp_assoc_value instead [ 640.733945][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 640.772032][ T24] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 640.781646][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.812811][ T24] usb 4-1: config 0 descriptor?? [ 641.043040][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 641.206559][ T24] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 641.216045][ T24] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 641.481255][ T9636] netlink: 'syz.0.1274': attribute type 12 has an invalid length. [ 641.489594][ T9636] netlink: 'syz.0.1274': attribute type 29 has an invalid length. [ 641.497760][ T9636] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1274'. [ 642.254255][ T9641] loop6: detected capacity change from 0 to 7 [ 642.283313][ T9641] Dev loop6: unable to read RDB block 7 [ 642.290022][ T9641] loop6: unable to read partition table [ 642.340912][ T9641] loop6: partition table beyond EOD, truncated [ 642.349036][ T9641] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 643.085754][ T5861] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 643.213741][ T9651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1281'. [ 643.241583][ T9651] vlan2: entered promiscuous mode [ 643.284264][ T5861] usb 1-1: Using ep0 maxpacket: 8 [ 643.344764][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.358479][ T5861] usb 1-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 643.368612][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.434935][ T5861] usb 1-1: config 0 descriptor?? [ 643.982836][ T5861] belkin 0003:050D:3201.0008: ignoring exceeding usage max [ 644.053645][ T9660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1282'. [ 644.126733][ T5861] belkin 0003:050D:3201.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 050d:3201] on usb-dummy_hcd.0-1/input0 [ 644.247135][ T5861] usb 1-1: USB disconnect, device number 24 [ 645.227460][ T9662] fido_id[9662]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 646.017050][ T9680] netlink: 'syz.2.1287': attribute type 12 has an invalid length. [ 646.025577][ T9680] netlink: 'syz.2.1287': attribute type 29 has an invalid length. [ 646.034151][ T9680] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1287'. [ 647.081751][ T9690] loop6: detected capacity change from 0 to 7 [ 647.170289][ T9690] Dev loop6: unable to read RDB block 7 [ 647.176814][ T9690] loop6: unable to read partition table [ 647.214974][ T9690] loop6: partition table beyond EOD, truncated [ 647.221774][ T9690] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 649.354111][ T9705] syzkaller0: entered promiscuous mode [ 649.359821][ T9705] syzkaller0: entered allmulticast mode [ 650.031305][ T5861] usb 5-1: USB disconnect, device number 26 [ 650.366498][ T9715] netlink: 'syz.1.1300': attribute type 12 has an invalid length. [ 650.374989][ T9715] netlink: 'syz.1.1300': attribute type 29 has an invalid length. [ 650.383006][ T9715] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1300'. [ 651.311033][ T9721] loop6: detected capacity change from 0 to 7 [ 651.384633][ T9721] Dev loop6: unable to read RDB block 7 [ 651.392957][ T9721] loop6: unable to read partition table [ 651.453728][ T9721] loop6: partition table beyond EOD, truncated [ 651.460299][ T9721] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 652.415772][ T9500] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 652.643768][ T9500] usb 3-1: Using ep0 maxpacket: 8 [ 652.703090][ T9500] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 652.711548][ T9500] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 652.722848][ T9500] usb 3-1: config 6 has no interface number 0 [ 652.729334][ T9500] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 652.741162][ T9500] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 652.751328][ T9500] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 652.861376][ T9500] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 652.871590][ T9500] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.882868][ T9500] usb 3-1: Product: syz [ 652.888225][ T9500] usb 3-1: Manufacturer: syz [ 652.892951][ T9500] usb 3-1: SerialNumber: syz [ 652.986882][ T9500] hso 3-1:6.2: Failed to find INT IN ep [ 653.148679][ T9500] usb 3-1: USB disconnect, device number 43 [ 653.860079][ T9740] syzkaller0: entered promiscuous mode [ 653.866455][ T9740] syzkaller0: entered allmulticast mode [ 654.476777][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1311'. [ 654.638268][ T9747] netlink: 'syz.2.1313': attribute type 12 has an invalid length. [ 654.647454][ T9747] netlink: 'syz.2.1313': attribute type 29 has an invalid length. [ 654.656185][ T9747] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1313'. [ 655.699256][ T9755] ptrace attach of "./syz-executor exec"[9756] was attempted by "./syz-executor exec"[9755] [ 656.625149][ T9773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1324'. [ 656.708738][ T9773] vlan2: entered promiscuous mode [ 656.714243][ T9773] syz_tun: entered promiscuous mode [ 657.194389][ T9500] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 657.477696][ T9783] netlink: 'syz.4.1326': attribute type 12 has an invalid length. [ 657.489422][ T9783] netlink: 'syz.4.1326': attribute type 29 has an invalid length. [ 657.498825][ T9783] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1326'. [ 657.528750][ T9500] usb 2-1: Using ep0 maxpacket: 8 [ 657.564442][ T9500] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 657.572950][ T9500] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 657.588540][ T9500] usb 2-1: config 6 has no interface number 0 [ 657.596009][ T9500] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 657.607732][ T9500] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 657.617691][ T9500] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 657.774528][ T9500] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 657.784171][ T9500] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.796804][ T9500] usb 2-1: Product: syz [ 657.802703][ T9500] usb 2-1: Manufacturer: syz [ 657.807625][ T9500] usb 2-1: SerialNumber: syz [ 657.873332][ T9500] hso 2-1:6.2: Failed to find INT IN ep [ 658.080668][ T5861] usb 2-1: USB disconnect, device number 33 [ 658.542996][ T9790] fuse: Bad value for 'group_id' [ 658.548594][ T9790] fuse: Bad value for 'group_id' [ 659.173937][ T5861] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 659.364038][ T5861] usb 5-1: Using ep0 maxpacket: 32 [ 659.407389][ T5861] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 659.416418][ T5861] usb 5-1: config 0 has no interface number 0 [ 659.422794][ T5861] usb 5-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 659.516047][ T9796] 8021q: VLANs not supported on caif0 [ 659.588377][ T5861] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 659.598216][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.606610][ T5861] usb 5-1: Product: syz [ 659.610898][ T5861] usb 5-1: Manufacturer: syz [ 659.615725][ T5861] usb 5-1: SerialNumber: syz [ 659.637961][ T5861] usb 5-1: config 0 descriptor?? [ 659.695844][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.702658][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 659.794592][ T9798] ptrace attach of "./syz-executor exec"[9800] was attempted by "./syz-executor exec"[9798] [ 661.097767][ T9816] netlink: 'syz.3.1338': attribute type 12 has an invalid length. [ 661.106340][ T9816] netlink: 'syz.3.1338': attribute type 29 has an invalid length. [ 661.114531][ T9816] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1338'. [ 662.364084][ T5861] usb 5-1: USB disconnect, device number 27 [ 662.586533][ T9829] fuse: Bad value for 'group_id' [ 662.591728][ T9829] fuse: Bad value for 'group_id' [ 662.874621][ T9833] syzkaller0: entered promiscuous mode [ 662.880343][ T9833] syzkaller0: entered allmulticast mode [ 663.247510][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1346'. [ 664.595254][ T9854] netlink: 'syz.0.1350': attribute type 12 has an invalid length. [ 664.603711][ T9854] netlink: 'syz.0.1350': attribute type 29 has an invalid length. [ 664.611721][ T9854] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1350'. [ 665.453945][ T9859] netlink: 'syz.1.1352': attribute type 5 has an invalid length. [ 665.488055][ T9859] ip6erspan0: entered promiscuous mode [ 666.489618][ T9866] fuse: Bad value for 'group_id' [ 666.500057][ T9866] fuse: Bad value for 'group_id' [ 666.709023][ T5861] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 666.864244][ T5861] usb 1-1: Using ep0 maxpacket: 16 [ 666.924036][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.935638][ T5861] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 666.946763][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.060490][ T5861] usb 1-1: config 0 descriptor?? [ 667.605573][ T5861] usbhid 1-1:0.0: can't add hid device: -71 [ 667.612333][ T5861] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 667.692277][ T5861] usb 1-1: USB disconnect, device number 25 [ 667.998044][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1358'. [ 668.201837][ T9874] syzkaller0: entered promiscuous mode [ 668.208000][ T9874] syzkaller0: entered allmulticast mode [ 669.265939][ T9884] netlink: 'syz.3.1363': attribute type 12 has an invalid length. [ 669.274143][ T9884] netlink: 'syz.3.1363': attribute type 29 has an invalid length. [ 669.282272][ T9884] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1363'. [ 669.609752][ T9888] tipc: Enabled bearer , priority 0 [ 669.747334][ T9886] syzkaller0: entered promiscuous mode [ 669.753048][ T9886] syzkaller0: entered allmulticast mode [ 670.007746][ T9886] tipc: Resetting bearer [ 670.124599][ T9885] tipc: Resetting bearer [ 670.203840][ T9885] tipc: Disabling bearer [ 671.075559][ T9901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'. [ 671.216902][ T9903] syzkaller0: entered promiscuous mode [ 671.222641][ T9903] syzkaller0: entered allmulticast mode [ 672.614757][ T9915] netlink: 'syz.2.1377': attribute type 12 has an invalid length. [ 672.629110][ T9915] netlink: 'syz.2.1377': attribute type 29 has an invalid length. [ 672.640504][ T9915] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1377'. [ 674.298304][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1384'. [ 674.459949][ T9932] syzkaller0: entered promiscuous mode [ 674.466113][ T9932] syzkaller0: entered allmulticast mode [ 675.326878][ T9942] netlink: 'syz.2.1390': attribute type 12 has an invalid length. [ 675.335310][ T9942] netlink: 'syz.2.1390': attribute type 29 has an invalid length. [ 675.344583][ T9942] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1390'. [ 675.996686][ T9500] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 676.180359][ T9500] usb 2-1: Using ep0 maxpacket: 8 [ 676.204404][ T9500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.216100][ T9500] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 676.230589][ T9500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.316758][ T9500] usb 2-1: config 0 descriptor?? [ 676.755046][ T42] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 676.854784][ T9500] belkin 0003:050D:3201.0009: unknown main item tag 0x3 [ 676.862083][ T9500] belkin 0003:050D:3201.0009: unknown global tag 0xe [ 676.869709][ T9500] belkin 0003:050D:3201.0009: item 0 0 1 14 parsing failed [ 676.954216][ T5809] Bluetooth: hci4: unexpected event for opcode 0x2029 [ 676.963795][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 676.985633][ T9500] belkin 0003:050D:3201.0009: parse failed [ 676.991980][ T9500] belkin 0003:050D:3201.0009: probe with driver belkin failed with error -22 [ 677.014732][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.026481][ T42] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 677.036301][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.070229][ T9500] usb 2-1: USB disconnect, device number 34 [ 677.122564][ T42] usb 5-1: config 0 descriptor?? [ 678.023674][ T42] usbhid 5-1:0.0: can't add hid device: -71 [ 678.030761][ T42] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 678.119690][ T42] usb 5-1: USB disconnect, device number 28 [ 678.862050][ T9981] netlink: 'syz.1.1405': attribute type 12 has an invalid length. [ 678.870836][ T9981] netlink: 'syz.1.1405': attribute type 29 has an invalid length. [ 678.879280][ T9981] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1405'. [ 678.980153][ T9980] syzkaller0: entered promiscuous mode [ 678.995253][ T9980] syzkaller0: entered allmulticast mode [ 681.023927][ T5809] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 681.037323][ T5809] Bluetooth: hci4: Injecting HCI hardware error event [ 681.046956][ T49] Bluetooth: hci4: hardware error 0x00 [ 681.255446][ T42] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 681.469401][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 681.526139][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.537779][ T42] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 681.551357][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.622037][ T42] usb 5-1: config 0 descriptor?? [ 682.085412][ T42] belkin 0003:050D:3201.000A: unknown main item tag 0x3 [ 682.092694][ T42] belkin 0003:050D:3201.000A: unknown global tag 0xe [ 682.100052][ T42] belkin 0003:050D:3201.000A: item 0 0 1 14 parsing failed [ 682.149065][ T42] belkin 0003:050D:3201.000A: parse failed [ 682.155773][ T42] belkin 0003:050D:3201.000A: probe with driver belkin failed with error -22 [ 682.213066][T10010] fuse: Bad value for 'fd' [ 682.285715][ T42] usb 5-1: USB disconnect, device number 29 [ 682.784301][ T9500] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 682.821881][T10015] netlink: 'syz.0.1418': attribute type 12 has an invalid length. [ 682.830745][T10015] netlink: 'syz.0.1418': attribute type 29 has an invalid length. [ 682.838995][T10015] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1418'. [ 682.995711][ T9500] usb 2-1: Using ep0 maxpacket: 16 [ 683.019024][ T9500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.033758][ T9500] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 683.043062][ T9500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.124843][ T49] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 683.215324][ T9500] usb 2-1: config 0 descriptor?? [ 684.788619][T10025] ptrace attach of "./syz-executor exec"[10026] was attempted by "./syz-executor exec"[10025] [ 686.168591][ T9500] usbhid 2-1:0.0: can't add hid device: -71 [ 686.175486][ T9500] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 686.346810][ T9500] usb 2-1: USB disconnect, device number 35 [ 686.825598][T10044] netlink: 'syz.3.1429': attribute type 12 has an invalid length. [ 686.833961][T10044] netlink: 'syz.3.1429': attribute type 29 has an invalid length. [ 686.842037][T10044] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1429'. [ 687.134867][ T9500] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 687.344613][ T9500] usb 5-1: Using ep0 maxpacket: 8 [ 687.424854][ T9500] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.436341][ T9500] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 687.445821][ T9500] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.554862][ T9500] usb 5-1: config 0 descriptor?? [ 687.674082][ T42] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 687.874591][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 687.907086][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.918720][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.928977][ T42] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 687.942574][ T42] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 687.952125][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.978717][ T42] usb 2-1: config 0 descriptor?? [ 688.075105][ T9500] belkin 0003:050D:3201.000B: unknown main item tag 0x3 [ 688.082789][ T9500] belkin 0003:050D:3201.000B: unknown global tag 0xe [ 688.090467][ T9500] belkin 0003:050D:3201.000B: item 0 0 1 14 parsing failed [ 688.211166][ T9500] belkin 0003:050D:3201.000B: parse failed [ 688.217822][ T9500] belkin 0003:050D:3201.000B: probe with driver belkin failed with error -22 [ 688.311913][ T9500] usb 5-1: USB disconnect, device number 30 [ 688.426309][ T42] usbhid 2-1:0.0: can't add hid device: -71 [ 688.432954][ T42] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 688.481769][ T42] usb 2-1: USB disconnect, device number 36 [ 690.230153][T10076] netlink: 'syz.0.1443': attribute type 12 has an invalid length. [ 690.238613][T10076] netlink: 'syz.0.1443': attribute type 29 has an invalid length. [ 690.246886][T10076] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1443'. [ 691.453709][ T42] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 691.564024][ T9500] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 691.729069][ T42] usb 5-1: config 0 has no interfaces? [ 691.757761][ T42] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 691.767345][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.775791][ T42] usb 5-1: Product: syz [ 691.780160][ T42] usb 5-1: Manufacturer: syz [ 691.788520][ T42] usb 5-1: SerialNumber: syz [ 691.855084][ T9500] usb 2-1: Using ep0 maxpacket: 8 [ 691.933764][ T9500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.945120][ T9500] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 691.954670][ T9500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.023187][ T42] usb 5-1: config 0 descriptor?? [ 692.058520][ T9500] usb 2-1: config 0 descriptor?? [ 692.576883][ T9500] belkin 0003:050D:3201.000C: unknown main item tag 0x3 [ 692.584666][ T9500] belkin 0003:050D:3201.000C: unknown global tag 0xe [ 692.591495][ T9500] belkin 0003:050D:3201.000C: item 0 0 1 14 parsing failed [ 692.758924][ T9500] belkin 0003:050D:3201.000C: parse failed [ 692.765463][ T9500] belkin 0003:050D:3201.000C: probe with driver belkin failed with error -22 [ 692.895219][ T9500] usb 2-1: USB disconnect, device number 37 [ 692.984062][ T5861] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 693.170975][ T5861] usb 1-1: Using ep0 maxpacket: 16 [ 693.211215][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.225753][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.236858][ T5861] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 693.255840][ T5861] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 693.265433][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.487735][ T5861] usb 1-1: config 0 descriptor?? [ 693.926214][ T5861] usbhid 1-1:0.0: can't add hid device: -71 [ 693.933062][ T5861] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 694.051612][ T5861] usb 1-1: USB disconnect, device number 26 [ 694.850940][T10112] netlink: 'syz.3.1457': attribute type 12 has an invalid length. [ 694.862618][T10112] netlink: 'syz.3.1457': attribute type 29 has an invalid length. [ 694.871917][T10112] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1457'. [ 696.309088][ T9500] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 696.504897][ T9500] usb 3-1: Using ep0 maxpacket: 16 [ 696.534063][ T9500] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.545446][ T9500] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 696.554803][ T9500] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.666533][ T9500] usb 3-1: config 0 descriptor?? [ 698.894312][T10141] ptrace attach of "./syz-executor exec"[10143] was attempted by "./syz-executor exec"[10141] [ 698.919748][T10144] netlink: 'syz.0.1470': attribute type 12 has an invalid length. [ 698.928060][T10144] netlink: 'syz.0.1470': attribute type 29 has an invalid length. [ 698.936364][T10144] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1470'. [ 699.144014][ T9500] usbhid 3-1:0.0: can't add hid device: -71 [ 699.150685][ T9500] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 699.257851][ T9500] usb 3-1: USB disconnect, device number 44 [ 699.849446][T10151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1473'. [ 700.194069][ T9500] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 700.442834][ T9500] usb 2-1: Using ep0 maxpacket: 16 [ 700.480020][ T9500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.494633][ T9500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.505764][ T9500] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 700.515081][ T9500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.627548][ T9500] usb 2-1: config 0 descriptor?? [ 700.785202][T10157] fuse: Unknown parameter 'group_i00000000000000000000' [ 701.117854][ T9500] corsair 0003:1B1C:1B02.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 701.334452][ T9500] corsair 0003:1B1C:1B02.000D: Failed to get K90 initial state (error -71). [ 701.435157][ T9500] usb 2-1: USB disconnect, device number 38 [ 702.101500][T10160] fido_id[10160]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 702.605745][T10172] netlink: 'syz.0.1482': attribute type 12 has an invalid length. [ 702.615243][T10172] netlink: 'syz.0.1482': attribute type 29 has an invalid length. [ 702.623250][T10172] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1482'. [ 702.714291][ T9500] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 702.943949][ T9500] usb 2-1: Using ep0 maxpacket: 16 [ 702.980801][ T9500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.992250][ T9500] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 703.001677][ T9500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.021122][T10174] tipc: Enabling of bearer rejected, failed to enable media [ 703.057795][T10174] syzkaller0: entered promiscuous mode [ 703.064078][T10174] syzkaller0: entered allmulticast mode [ 703.072468][ T9500] usb 2-1: config 0 descriptor?? [ 703.447694][ T42] usb 5-1: USB disconnect, device number 31 [ 703.595578][T10176] ptrace attach of "./syz-executor exec"[10179] was attempted by "./syz-executor exec"[10176] [ 703.714782][ T9500] usbhid 2-1:0.0: can't add hid device: -71 [ 703.721431][ T9500] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 703.799728][ T9500] usb 2-1: USB disconnect, device number 39 [ 704.224160][T10189] fuse: Unknown parameter 'group_i00000000000000000000' [ 705.762408][ T24] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 705.778632][ T24] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 705.995097][ T24] usb 4-1: USB disconnect, device number 35 [ 706.696203][T10220] tipc: Enabling of bearer rejected, failed to enable media [ 706.779735][T10227] syzkaller0: entered promiscuous mode [ 706.785735][T10227] syzkaller0: entered allmulticast mode [ 706.891063][T10224] ptrace attach of "./syz-executor exec"[10228] was attempted by "./syz-executor exec"[10224] [ 706.944550][ T24] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 707.252160][ T24] usb 1-1: config 0 has no interfaces? [ 707.308154][ T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 707.318011][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.326724][ T24] usb 1-1: Product: syz [ 707.331127][ T24] usb 1-1: Manufacturer: syz [ 707.336066][ T24] usb 1-1: SerialNumber: syz [ 707.419618][T10234] fuse: Unknown parameter 'group_i00000000000000000000' [ 707.439347][ T24] usb 1-1: config 0 descriptor?? [ 707.994764][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 708.207713][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 708.229244][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.241024][ T24] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 708.250514][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.366709][ T24] usb 2-1: config 0 descriptor?? [ 709.395621][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 709.406769][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 709.505176][ T24] usb 2-1: USB disconnect, device number 40 [ 711.322257][T10275] fuse: Unknown parameter 'group_id00000000000000000000' [ 711.384847][T10273] tipc: Enabling of bearer rejected, failed to enable media [ 711.461917][T10273] syzkaller0: entered promiscuous mode [ 711.467889][T10273] syzkaller0: entered allmulticast mode [ 713.219482][T10294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1522'. [ 713.245827][T10294] vlan0: entered promiscuous mode [ 713.293924][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 713.464197][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 713.505812][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.517227][ T24] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 713.526944][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.761325][ T24] usb 4-1: config 0 descriptor?? [ 714.437857][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 714.444738][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 714.494998][ T24] usb 4-1: USB disconnect, device number 36 [ 714.585553][T10303] fuse: Unknown parameter 'group_id00000000000000000000' [ 715.209935][T10308] tipc: Enabling of bearer rejected, failed to enable media [ 715.240583][ T49] Bluetooth: hci1: unexpected event for opcode 0x2029 [ 717.119899][ T24] usb 1-1: USB disconnect, device number 27 [ 717.174104][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1534'. [ 717.186038][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1534'. [ 717.259946][T10334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1535'. [ 717.343238][T10334] vlan2: entered promiscuous mode [ 718.192842][ T49] Bluetooth: hci0: unexpected event for opcode 0x2029 [ 718.283885][ T5861] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 718.473955][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 718.519627][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.531260][ T5861] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 718.541201][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.638543][T10355] tipc: Enabling of bearer rejected, failed to enable media [ 718.682311][ T5861] usb 4-1: config 0 descriptor?? [ 719.309714][ T49] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 719.318510][ T49] Bluetooth: hci1: Injecting HCI hardware error event [ 719.326515][ T49] Bluetooth: hci1: hardware error 0x00 [ 719.485568][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 719.652207][ T5861] usbhid 4-1:0.0: can't add hid device: -71 [ 719.659107][ T5861] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 719.775762][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 719.784395][ T9] usb 1-1: config 0 has no interface number 0 [ 719.824574][ T5861] usb 4-1: USB disconnect, device number 37 [ 719.865876][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 719.875949][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.884528][ T9] usb 1-1: Product: syz [ 719.888926][ T9] usb 1-1: Manufacturer: syz [ 719.893981][ T9] usb 1-1: SerialNumber: syz [ 720.069237][ T9] usb 1-1: config 0 descriptor?? [ 720.510216][ T9] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 720.534410][ T9] usb 1-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 720.543182][ T9] usb 1-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 720.699914][T10380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1550'. [ 720.904105][ T5861] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 721.046963][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 721.130976][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 721.138687][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 721.260032][ T5861] usb 3-1: config 0 has no interfaces? [ 721.264109][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 721.320435][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.332044][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.342264][ T24] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 721.352783][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.387879][ T49] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 721.445031][ T5861] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 721.455770][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.464397][ T5861] usb 3-1: Product: syz [ 721.468768][ T5861] usb 3-1: Manufacturer: syz [ 721.473813][ T5861] usb 3-1: SerialNumber: syz [ 721.489602][ T5861] usb 3-1: config 0 descriptor?? [ 721.617550][ T24] usb 4-1: config 0 descriptor?? [ 722.137370][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 722.144342][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 722.211419][ T24] usb 4-1: USB disconnect, device number 38 [ 722.237161][ T49] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 722.246137][ T49] Bluetooth: hci0: Injecting HCI hardware error event [ 722.257686][ T5809] Bluetooth: hci0: hardware error 0x00 [ 723.376923][T10403] tipc: Enabling of bearer rejected, failed to enable media [ 723.665945][ T30] audit: type=1326 audit(1755723256.746:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 723.689179][ T30] audit: type=1326 audit(1755723256.746:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 723.942157][ T30] audit: type=1326 audit(1755723256.816:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 723.965276][ T30] audit: type=1326 audit(1755723256.816:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 723.987845][ T30] audit: type=1326 audit(1755723256.816:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 724.010456][ T30] audit: type=1326 audit(1755723256.826:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 724.035341][ T30] audit: type=1326 audit(1755723256.826:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 724.059758][ T30] audit: type=1326 audit(1755723256.836:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 724.082787][ T30] audit: type=1326 audit(1755723256.836:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 724.105070][ T30] audit: type=1326 audit(1755723256.836:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 724.400477][ T5809] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 724.794452][ T5861] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 725.046087][ T5861] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 725.054715][ T5861] usb 2-1: config 0 has no interface number 0 [ 725.136755][ T5861] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 725.146440][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.156187][ T5861] usb 2-1: Product: syz [ 725.160582][ T5861] usb 2-1: Manufacturer: syz [ 725.165569][ T5861] usb 2-1: SerialNumber: syz [ 725.307249][ T5861] usb 2-1: config 0 descriptor?? [ 725.593053][ T5861] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 726.765837][T10436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1568'. [ 727.123796][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 727.340490][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 727.425546][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.437088][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.447293][ T24] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 727.456580][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.766503][ T24] usb 5-1: config 0 descriptor?? [ 728.246037][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 728.266949][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 728.274298][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 728.456823][ T24] usb 5-1: USB disconnect, device number 32 [ 728.543703][T10453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1573'. [ 728.577441][T10453] vlan2: entered promiscuous mode [ 728.755499][T10456] tipc: Enabling of bearer rejected, failed to enable media [ 733.051135][ T11] usb 3-1: USB disconnect, device number 45 [ 733.312835][T10492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1585'. [ 733.604376][ T11] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 733.820228][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 733.875340][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.886792][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.897770][ T11] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 733.907362][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.991802][ T11] usb 3-1: config 0 descriptor?? [ 734.050820][T10497] tipc: Enabling of bearer rejected, failed to enable media [ 734.152974][T10500] fuse: Unknown parameter 'group_id00000000000000000000' [ 734.507104][ T11] corsair 0003:1B1C:1B02.000E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 734.934062][ T24] usb 3-1: USB disconnect, device number 46 [ 735.540206][T10509] fido_id[10509]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 735.673691][T10511] syz_tun: entered allmulticast mode [ 735.725236][T10511] dvmrp8: entered allmulticast mode [ 735.899198][T10511] syz_tun: left allmulticast mode [ 735.905828][T10511] dvmrp8: left allmulticast mode [ 737.652092][T10525] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 738.324073][T10537] tipc: Enabling of bearer rejected, failed to enable media [ 738.423909][ T24] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 738.736190][ T24] usb 3-1: config 0 has no interfaces? [ 738.799399][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 738.809225][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.817517][ T24] usb 3-1: Product: syz [ 738.821886][ T24] usb 3-1: Manufacturer: syz [ 738.826731][ T24] usb 3-1: SerialNumber: syz [ 738.927503][T10544] fuse: Unknown parameter 'group_id00000000000000000000' [ 738.932317][ T24] usb 3-1: config 0 descriptor?? [ 740.194988][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 740.231927][T10552] geneve2: entered promiscuous mode [ 740.237904][T10552] geneve2: entered allmulticast mode [ 740.394160][ T24] usb 5-1: device descriptor read/64, error -71 [ 740.664021][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 740.814022][ T24] usb 5-1: device descriptor read/64, error -71 [ 740.913419][ C1] hrtimer: interrupt took 469622 ns [ 740.926648][ T24] usb usb5-port1: attempt power cycle [ 741.313799][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 741.387826][ T24] usb 5-1: device descriptor read/8, error -71 [ 741.644027][ T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 741.709001][ T24] usb 5-1: device descriptor read/8, error -71 [ 741.830921][ T24] usb usb5-port1: unable to enumerate USB device [ 742.233633][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 743.244237][ T30] audit: type=1326 audit(1755723276.326:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.0.1607" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x0 [ 743.427573][T10574] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1609'. [ 744.831549][T10585] tipc: Enabling of bearer rejected, failed to enable media [ 745.146368][T10590] fuse: Unknown parameter 'group_id00000000000000000000' [ 746.880885][T10603] tipc: Enabled bearer , priority 0 [ 747.015874][T10602] syzkaller0: entered promiscuous mode [ 747.021597][T10602] syzkaller0: entered allmulticast mode [ 747.202357][T10602] tipc: Resetting bearer [ 747.339342][T10601] tipc: Resetting bearer [ 747.379566][T10601] tipc: Disabling bearer [ 748.665512][ T11] usb 3-1: USB disconnect, device number 47 [ 750.222064][T10622] tipc: Enabling of bearer rejected, failed to enable media [ 750.306150][T10626] fuse: Bad value for 'user_id' [ 750.311357][T10626] fuse: Bad value for 'user_id' [ 752.325561][T10649] fuse: Unknown parameter 'use00000000000000000000' [ 752.514291][T10651] Invalid logical block size (7) [ 753.723197][T10668] fuse: Bad value for 'user_id' [ 753.730132][T10668] fuse: Bad value for 'user_id' [ 753.786383][T10667] tipc: Enabling of bearer rejected, failed to enable media [ 755.094397][T10689] fuse: Unknown parameter 'use00000000000000000000' [ 756.493318][T10711] syzkaller0: entered promiscuous mode [ 756.512920][T10711] syzkaller0: entered allmulticast mode [ 756.886051][T10717] tipc: Enabling of bearer rejected, failed to enable media [ 757.066300][T10721] fuse: Bad value for 'user_id' [ 757.071509][T10721] fuse: Bad value for 'user_id' [ 757.168669][T10725] fuse: Unknown parameter 'use00000000000000000000' [ 760.306467][T10763] syzkaller0: entered promiscuous mode [ 760.312195][T10763] syzkaller0: entered allmulticast mode [ 760.396408][T10771] fuse: Unknown parameter 'user_i00000000000000000000' [ 760.915584][T10773] tipc: Enabling of bearer rejected, failed to enable media [ 761.847522][T10788] fuse: Bad value for 'fd' [ 764.468228][T10810] fuse: Unknown parameter 'user_i00000000000000000000' [ 765.159582][T10821] tipc: Enabled bearer , priority 0 [ 765.276278][T10813] tipc: Resetting bearer [ 765.384882][T10811] tipc: Disabling bearer [ 765.935783][T10827] tipc: Enabling of bearer rejected, failed to enable media [ 766.745279][ T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 767.005043][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 767.071093][ T24] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 767.079856][ T24] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 767.090241][ T24] usb 3-1: config 6 has no interface number 0 [ 767.096560][ T24] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 767.108328][ T24] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 767.118289][ T24] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 767.446923][ T24] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 767.457793][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.470825][ T24] usb 3-1: Product: syz [ 767.476683][ T24] usb 3-1: Manufacturer: syz [ 767.481475][ T24] usb 3-1: SerialNumber: syz [ 767.624034][ T24] hso 3-1:6.2: Failed to find INT IN ep [ 767.841940][ T24] usb 3-1: USB disconnect, device number 48 [ 768.303302][T10851] tipc: Enabled bearer , priority 0 [ 768.355973][T10854] syzkaller0: entered promiscuous mode [ 768.361864][T10854] syzkaller0: entered allmulticast mode [ 768.485405][T10850] tipc: Resetting bearer [ 768.548640][T10850] tipc: Disabling bearer [ 768.752333][T10859] fuse: Unknown parameter 'user_i00000000000000000000' [ 769.246511][T10866] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1700'. [ 769.316267][T10863] tipc: Enabled bearer , priority 0 [ 769.421996][T10863] tipc: Resetting bearer [ 769.471333][T10872] tipc: Enabled bearer , priority 0 [ 769.501779][T10861] tipc: Disabling bearer [ 769.626989][T10872] tipc: Resetting bearer [ 769.726387][T10868] tipc: Disabling bearer [ 770.887143][T10892] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 771.884891][ T11] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 772.093855][ T11] usb 5-1: Using ep0 maxpacket: 8 [ 772.130293][ T11] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 772.139025][ T11] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 772.149618][ T11] usb 5-1: config 6 has no interface number 0 [ 772.156096][ T11] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 772.170410][ T11] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 772.181483][ T11] usb 5-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 772.298866][T10909] fuse: Unknown parameter 'user_id00000000000000000000' [ 772.452428][ T11] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 772.461972][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.470748][ T11] usb 5-1: Product: syz [ 772.477808][ T11] usb 5-1: Manufacturer: syz [ 772.482631][ T11] usb 5-1: SerialNumber: syz [ 772.668909][ T11] hso 5-1:6.2: Failed to find INT IN ep [ 772.869948][ T11] usb 5-1: USB disconnect, device number 37 [ 773.085750][T10914] tipc: Enabled bearer , priority 0 [ 773.146751][T10917] tipc: Enabled bearer , priority 0 [ 773.166509][T10916] tipc: Resetting bearer [ 773.275464][T10913] tipc: Disabling bearer [ 773.350749][T10918] tipc: Resetting bearer [ 773.456695][T10915] tipc: Disabling bearer [ 775.563979][T10947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1724'. [ 775.869362][T10949] fuse: Unknown parameter 'user_id00000000000000000000' [ 776.467008][T10953] tipc: Enabled bearer , priority 0 [ 776.543289][T10956] syzkaller0: entered promiscuous mode [ 776.549199][T10956] syzkaller0: entered allmulticast mode [ 776.654824][T10952] tipc: Resetting bearer [ 776.775202][T10952] tipc: Disabling bearer [ 776.965358][T10961] tipc: Enabled bearer , priority 0 [ 776.990666][ T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 777.059478][T10960] tipc: Resetting bearer [ 777.117328][T10958] tipc: Disabling bearer [ 777.168515][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 777.212228][ T24] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 777.221000][ T24] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 777.231544][ T24] usb 5-1: config 6 has no interface number 0 [ 777.237879][ T24] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 777.249593][ T24] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 777.259525][ T24] usb 5-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 777.286655][ T24] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 777.299021][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.308157][ T24] usb 5-1: Product: syz [ 777.312440][ T24] usb 5-1: Manufacturer: syz [ 777.317332][ T24] usb 5-1: SerialNumber: syz [ 777.360124][ T24] hso 5-1:6.2: Failed to find INT IN ep [ 777.570185][ T24] usb 5-1: USB disconnect, device number 38 [ 779.764434][T10986] syz_tun: entered allmulticast mode [ 779.827695][T10986] dvmrp8: entered allmulticast mode [ 779.957648][T10984] syz_tun: left allmulticast mode [ 779.964133][T10984] dvmrp8: left allmulticast mode [ 779.991898][T10990] fuse: Unknown parameter 'user_id00000000000000000000' [ 780.451716][T10995] syzkaller0: entered promiscuous mode [ 780.458331][T10995] syzkaller0: entered allmulticast mode [ 780.535068][T10996] tipc: Enabled bearer , priority 0 [ 780.569149][T10996] syzkaller0: entered promiscuous mode [ 780.576648][T10996] syzkaller0: entered allmulticast mode [ 780.839887][T10993] tipc: Resetting bearer [ 780.897580][T10993] tipc: Disabling bearer [ 781.075557][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 781.305862][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 781.340841][T11012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1745'. [ 781.343758][ T24] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 781.358548][ T24] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 781.368961][ T24] usb 3-1: config 6 has no interface number 0 [ 781.375516][ T24] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 781.391126][ T24] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 781.402632][ T24] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 781.671533][ T24] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 781.681594][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.690034][ T24] usb 3-1: Product: syz [ 781.699026][ T24] usb 3-1: Manufacturer: syz [ 781.705595][ T24] usb 3-1: SerialNumber: syz [ 781.778325][ T9500] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 781.866830][ T24] hso 3-1:6.2: Failed to find INT IN ep [ 781.954576][ T9500] usb 4-1: Using ep0 maxpacket: 16 [ 781.970778][ T9500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.982173][ T9500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.992497][ T9500] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 782.005840][ T9500] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.082633][ T11] usb 3-1: USB disconnect, device number 49 [ 782.196896][ T9500] usb 4-1: config 0 descriptor?? [ 782.577755][ T9] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 782.589426][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.595874][ T9] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 782.600752][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 782.657928][ T5861] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 782.675923][ T5861] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 782.829678][ T9500] corsair 0003:1B1C:1B02.000F: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 782.975437][ T5861] usb 2-1: USB disconnect, device number 41 [ 783.026221][ T9] usb 1-1: USB disconnect, device number 28 [ 783.086552][ T9500] usb 4-1: USB disconnect, device number 39 [ 783.664762][T11036] fuse: Bad value for 'fd' [ 784.156798][T11034] fido_id[11034]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 784.405539][T11042] syz_tun: entered allmulticast mode [ 784.469647][T11042] dvmrp8: entered allmulticast mode [ 784.657414][T11040] syz_tun: left allmulticast mode [ 784.667324][T11040] dvmrp8: left allmulticast mode [ 784.815314][T11047] fuse: Bad value for 'group_id' [ 784.821308][T11047] fuse: Bad value for 'group_id' [ 785.526773][T11050] syzkaller0: entered promiscuous mode [ 785.532570][T11050] syzkaller0: entered allmulticast mode [ 785.567348][T11051] tipc: Enabled bearer , priority 0 [ 785.611684][T11051] syzkaller0: entered promiscuous mode [ 785.617639][T11051] syzkaller0: entered allmulticast mode [ 785.804245][T11049] tipc: Resetting bearer [ 785.847674][T11049] tipc: Disabling bearer [ 787.894523][T11072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1763'. [ 788.013743][T11074] fuse: Bad value for 'fd' [ 788.244070][ T5861] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 788.443693][ T5861] usb 3-1: Using ep0 maxpacket: 16 [ 788.550380][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.564957][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.576208][ T5861] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 788.585779][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.645070][ T5861] usb 3-1: config 0 descriptor?? [ 789.135865][ T5861] corsair 0003:1B1C:1B02.0010: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 789.453952][T11081] fuse: Bad value for 'fd' [ 789.507452][ T9500] usb 3-1: USB disconnect, device number 50 [ 790.243327][T11082] fido_id[11082]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 790.800674][T11089] syzkaller0: entered promiscuous mode [ 790.812729][T11089] syzkaller0: entered allmulticast mode [ 791.200931][T11092] tipc: Enabled bearer , priority 0 [ 791.257777][T11093] syzkaller0: entered promiscuous mode [ 791.263789][T11093] syzkaller0: entered allmulticast mode [ 791.530686][T11092] tipc: Resetting bearer [ 791.606243][T11090] tipc: Resetting bearer [ 791.651415][T11090] tipc: Disabling bearer [ 792.869529][T11113] fuse: Bad value for 'fd' [ 793.523889][ T9500] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 793.724764][ T9500] usb 3-1: Using ep0 maxpacket: 32 [ 793.764601][ T9500] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 793.778153][ T9500] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.856978][ T9500] usb 3-1: config 0 descriptor?? [ 794.148261][ T9500] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 794.195236][ T9500] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 794.251330][ T9500] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 794.259076][ T9500] usb 3-1: media controller created [ 794.321651][ T5861] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 794.360142][ T9500] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 794.578655][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 794.590469][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.603252][ T5861] usb 2-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 794.613797][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.636748][T11130] syzkaller0: entered promiscuous mode [ 794.642424][T11130] syzkaller0: entered allmulticast mode [ 794.731518][ T5861] usb 2-1: config 0 descriptor?? [ 794.841745][ T9500] az6027: usb out operation failed. (-71) [ 794.867505][T11133] tipc: Enabled bearer , priority 0 [ 794.869538][ T9500] az6027: usb out operation failed. (-71) [ 794.880242][T11133] syzkaller0: entered promiscuous mode [ 794.880783][ T9500] stb0899_attach: Driver disabled by Kconfig [ 794.880846][ T9500] az6027: no front-end attached [ 794.880846][ T9500] [ 794.904707][T11133] syzkaller0: entered allmulticast mode [ 794.906996][ T9500] az6027: usb out operation failed. (-71) [ 794.916805][ T9500] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 794.927691][ T9500] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 795.082613][ T9500] dvb-usb: schedule remote query interval to 400 msecs. [ 795.090176][ T9500] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 795.131378][T11133] tipc: Resetting bearer [ 795.191389][ T5861] usbhid 2-1:0.0: can't add hid device: -71 [ 795.198241][ T5861] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 795.218450][ T9500] usb 3-1: USB disconnect, device number 51 [ 795.283864][T11131] tipc: Resetting bearer [ 795.305510][ T5861] usb 2-1: USB disconnect, device number 42 [ 795.367642][T11131] tipc: Disabling bearer [ 795.817987][ T9500] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 796.503657][T11154] fuse: Unknown parameter '0x0000000000000003' [ 797.294494][ T9500] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 797.528578][ T9500] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 797.734230][ T9500] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 797.743720][ T9500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 797.752022][ T9500] usb 4-1: Product: syz [ 797.756548][ T9500] usb 4-1: Manufacturer: syz [ 797.761319][ T9500] usb 4-1: SerialNumber: syz [ 798.140076][ T9500] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 798.385723][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 798.545367][ T5861] usb 4-1: USB disconnect, device number 40 [ 798.575709][ T5861] usblp0: removed [ 798.597549][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 798.631301][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 798.641341][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.716913][ T9] usb 2-1: config 0 descriptor?? [ 798.993944][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 799.027445][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 799.080024][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 799.087642][ T9] usb 2-1: media controller created [ 799.208401][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 799.516537][ T9] az6027: usb out operation failed. (-71) [ 799.533628][ T9] az6027: usb out operation failed. (-71) [ 799.539758][ T9] stb0899_attach: Driver disabled by Kconfig [ 799.546231][ T9] az6027: no front-end attached [ 799.546231][ T9] [ 799.637177][ T9] az6027: usb out operation failed. (-71) [ 799.643156][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 799.654739][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 799.672490][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 799.680374][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 799.762911][ T9] usb 2-1: USB disconnect, device number 43 [ 800.477607][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 800.803889][T11206] fuse: Unknown parameter '0x0000000000000003' [ 801.116078][T11212] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 801.775701][T11218] ===================================================== [ 801.783153][T11218] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xf0e/0x33f0 [ 801.790894][T11218] _copy_to_iter+0xf0e/0x33f0 [ 801.795920][T11218] __skb_datagram_iter+0x196/0x12c0 [ 801.801296][T11218] skb_copy_datagram_iter+0x5b/0x1e0 [ 801.806886][T11218] netlink_recvmsg+0x4bb/0xfe0 [ 801.811833][T11218] sock_recvmsg+0x2dc/0x390 [ 801.816782][T11218] __sys_recvfrom+0x282/0x550 [ 801.821608][T11218] __ia32_compat_sys_socketcall+0x1058/0x1af0 [ 801.826592][T11220] syzkaller0: entered promiscuous mode [ 801.828148][T11218] ia32_sys_call+0x2942/0x4310 [ 801.828254][T11218] __do_fast_syscall_32+0xb0/0x150 [ 801.834772][T11220] syzkaller0: entered allmulticast mode [ 801.838720][T11218] do_fast_syscall_32+0x38/0x80 [ 801.855192][T11218] do_SYSENTER_32+0x1f/0x30 [ 801.859899][T11218] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 801.871192][T11218] [ 801.875768][T11218] Uninit was created at: [ 801.880282][T11218] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 801.887114][T11218] kmalloc_reserve+0x22f/0x4b0 [ 801.892047][T11218] __alloc_skb+0x347/0x7d0 [ 801.896768][T11218] netlink_dump+0x24f/0x17d0 [ 801.901532][T11218] __netlink_dump_start+0x716/0xd60 [ 801.907168][T11218] rtnetlink_rcv_msg+0x1262/0x14b0 [ 801.912502][T11218] netlink_rcv_skb+0x54d/0x680 [ 801.917557][T11218] rtnetlink_rcv+0x35/0x40 [ 801.922168][T11218] netlink_unicast+0xf04/0x12b0 [ 801.927343][T11218] netlink_sendmsg+0x10b3/0x1250 [ 801.932461][T11218] __sock_sendmsg+0x330/0x3d0 [ 801.937480][T11218] ____sys_sendmsg+0x7e0/0xd80 [ 801.942414][T11218] ___sys_sendmsg+0x271/0x3b0 [ 801.947460][T11218] __sys_sendmsg+0x1aa/0x300 [ 801.952224][T11218] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 801.958095][T11218] ia32_sys_call+0x3f6c/0x4310 [ 801.963009][T11218] __do_fast_syscall_32+0xb0/0x150 [ 801.973150][T11218] do_fast_syscall_32+0x38/0x80 [ 801.979685][T11218] do_SYSENTER_32+0x1f/0x30 [ 801.984511][T11218] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 801.991031][T11218] [ 801.993532][T11218] Bytes 32-35 of 44 are uninitialized [ 801.999004][T11218] Memory access of size 44 starts at ffff888116ddf000 [ 802.006022][T11218] Data copied to user address 00000000f549d560 [ 802.012272][T11218] [ 802.014869][T11218] CPU: 1 UID: 0 PID: 11218 Comm: syz.0.1808 Not tainted syzkaller #0 PREEMPT(none) [ 802.024641][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 802.034931][T11218] ===================================================== [ 802.041972][T11218] Disabling lock debugging due to kernel taint [ 802.048397][T11218] Kernel panic - not syncing: kmsan.panic set ... [ 802.054967][T11218] CPU: 1 UID: 0 PID: 11218 Comm: syz.0.1808 Tainted: G B syzkaller #0 PREEMPT(none) [ 802.066141][T11218] Tainted: [B]=BAD_PAGE [ 802.070397][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 802.080613][T11218] Call Trace: [ 802.084011][T11218] [ 802.087046][T11218] __dump_stack+0x26/0x30 [ 802.091579][T11218] dump_stack_lvl+0x53/0x270 [ 802.096412][T11218] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 802.102449][T11218] dump_stack+0x1e/0x25 [ 802.106812][T11218] vpanic+0x361/0xc50 [ 802.111011][T11218] panic+0x15d/0x160 [ 802.115150][T11218] kmsan_report+0x31c/0x320 [ 802.119829][T11218] ? kmsan_internal_check_memory+0x16c/0x230 [ 802.125996][T11218] ? kmsan_copy_to_user+0xf1/0x190 [ 802.131298][T11218] ? _copy_to_iter+0xf0e/0x33f0 [ 802.136373][T11218] ? __skb_datagram_iter+0x196/0x12c0 [ 802.141925][T11218] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 802.147573][T11218] ? netlink_recvmsg+0x4bb/0xfe0 [ 802.152678][T11218] ? sock_recvmsg+0x2dc/0x390 [ 802.157585][T11218] ? __sys_recvfrom+0x282/0x550 [ 802.162595][T11218] ? __ia32_compat_sys_socketcall+0x1058/0x1af0 [ 802.169059][T11218] ? ia32_sys_call+0x2942/0x4310 [ 802.174171][T11218] ? __do_fast_syscall_32+0xb0/0x150 [ 802.179659][T11218] ? do_fast_syscall_32+0x38/0x80 [ 802.184878][T11218] ? do_SYSENTER_32+0x1f/0x30 [ 802.189733][T11218] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 802.196415][T11218] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 802.202427][T11218] ? __do_fast_syscall_32+0x111/0x150 [ 802.208021][T11218] ? filter_irq_stacks+0x49/0x190 [ 802.213283][T11218] ? stack_depot_save_flags+0x35/0x7b0 [ 802.218946][T11218] ? kmsan_get_metadata+0xfb/0x160 [ 802.224265][T11218] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 802.230808][T11218] ? kmsan_internal_poison_memory+0x7f/0xa0 [ 802.236965][T11218] ? kmsan_internal_poison_memory+0x4a/0xa0 [ 802.243095][T11218] ? kmsan_get_metadata+0xfb/0x160 [ 802.248426][T11218] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 802.254447][T11218] kmsan_internal_check_memory+0x16c/0x230 [ 802.260460][T11218] kmsan_copy_to_user+0xf1/0x190 [ 802.265578][T11218] _copy_to_iter+0xf0e/0x33f0 [ 802.270473][T11218] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 802.277001][T11218] ? kmsan_get_metadata+0xfb/0x160 [ 802.282324][T11218] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 802.288352][T11218] ? kmsan_get_metadata+0xfb/0x160 [ 802.293678][T11218] ? kmsan_save_stack_with_flags+0x21/0x60 [ 802.299741][T11218] ? kmsan_get_metadata+0xfb/0x160 [ 802.305066][T11218] __skb_datagram_iter+0x196/0x12c0 [ 802.310485][T11218] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 802.316353][T11218] skb_copy_datagram_iter+0x5b/0x1e0 [ 802.321837][T11218] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 802.327875][T11218] netlink_recvmsg+0x4bb/0xfe0 [ 802.332871][T11218] ? aa_sock_msg_perm+0x29c/0x2f0 [ 802.338123][T11218] ? __pfx_netlink_recvmsg+0x10/0x10 [ 802.343614][T11218] sock_recvmsg+0x2dc/0x390 [ 802.348357][T11218] __sys_recvfrom+0x282/0x550 [ 802.353221][T11218] ? filter_irq_stacks+0x49/0x190 [ 802.358526][T11218] ? stack_depot_save_flags+0x35/0x7b0 [ 802.364268][T11218] __ia32_compat_sys_socketcall+0x1058/0x1af0 [ 802.370592][T11218] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 802.377131][T11218] ia32_sys_call+0x2942/0x4310 [ 802.382084][T11218] __do_fast_syscall_32+0xb0/0x150 [ 802.387435][T11218] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 802.393358][T11218] do_fast_syscall_32+0x38/0x80 [ 802.398407][T11218] do_SYSENTER_32+0x1f/0x30 [ 802.403109][T11218] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 802.409644][T11218] RIP: 0023:0xf70ae539 [ 802.413837][T11218] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 802.433619][T11218] RSP: 002b:00000000f549d440 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 802.442211][T11218] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f549d45c [ 802.450432][T11218] RDX: 0000000000000000 RSI: 00000000f549d560 RDI: 00000000f7414ff4 [ 802.458539][T11218] RBP: 00000000f549d560 R08: 0000000000000000 R09: 0000000000000000 [ 802.466647][T11218] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 802.474753][T11218] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 802.482950][T11218] [ 802.486456][T11218] Kernel Offset: disabled [ 802.490851][T11218] Rebooting in 86400 seconds..