last executing test programs: 6.006607068s ago: executing program 0 (id=950): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008891}, 0x10) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x46, &(0x7f0000000140)={@broadcast, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x3, 0x600}}}}}}}}, 0x0) 5.883404549s ago: executing program 0 (id=952): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000034709d405f0530c2acb6010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 5.443926948s ago: executing program 2 (id=958): syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) eventfd(0x0) r0 = syz_io_uring_setup(0xd0, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x325}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x1ed4, 0x0, 0x0, 0x0, 0x0) 5.31630092s ago: executing program 1 (id=959): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x6a040000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000002c80)={0x0, 0xe3d3, 0x100, 0x800005, 0x1f0}, &(0x7f0000000440)=0x0, &(0x7f0000002d00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="5492b0947d4b3bba6dca04036ab24665bb9fcf70cc89ad5f70889a5d2a52e0fc4ec99372214f5dd2f4694b692f48849a26d98624c1eb0add120fead434da4db15381c75b0449f11be87408e420a7d3a2985dbacebeba8fcca2eb0649e3e615973b7a34867b77b31b7094279d15", 0x6d}], 0x1}, 0x0, 0x24004890}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.562580246s ago: executing program 3 (id=964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x30b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x6f8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) 4.261193283s ago: executing program 3 (id=965): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4.06764212s ago: executing program 2 (id=966): listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x7, 0x9, 0x0, 0x7}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0205fc090c0000000f0f0000000000000500060000000e000a004e24fffffffdfc010000000000000000000000000000988500000000000005000500000000000a004e22fffff800fc0100000000000000000000000000010600000000000000d3ebde15c70a36c11a304d20943630d88a5e3e5872dfa380952195d9b0310cfc99ab5a847a237b8ca233c37fcbe8624b050df63458228d0951ed8bef784968b50261560f09d865d9a2834f50f1c31a39f3aa4a0df39fec808075a33ba421aaa6096583e6b818892fcb4ffc91ac6865bfa8055681d2837b972dded2d8b965981bd17eb1d83413a96f791f16d3c92e76f1deaef8f0a023c264b121b7c5f039cd039c4a21be4688a72663d38414c897cf35cdc896037ef39abcef247096ebc67e3c72175539107de37c8e86a74427e5b812ff8a44db84573f4deb88cdb047fd5aad3b864fe3dac309c7cfa2b1d448585bfc443df5ac21cbf41713e19c301a2a0cc50c4f2a041ff12d81f0df40d800c8a2352c957db4500b254fb7a36cb4eb9ca912f9e41e435f0eb245a464dffc91aa901de9fdefe51b7b68453d30f3b095c89898c5bfb06d740daa2a24f3a50c8bca3216edf943fa3e48565bc5423377677f7d8a2cdb6fd603d5a5d646000e2da04ebb"], 0x60}, 0x1, 0x400000000000000}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_setup(0x466, &(0x7f0000000440)={0x0, 0x86ed, 0x40, 0x2}, &(0x7f0000000280), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0xfd00, @l2tp={0x2, 0x0, @empty, 0x3, 0x1000000}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}, @llc={0x1a, 0x201, 0x8, 0x2, 0xf8, 0x1, @remote}, 0x4fe, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfd, 0xffffffff, 0xfffd}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1c90467cefaf9d2b"], 0x8) setsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280"], 0x48}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) openat(0xffffffffffffff9c, 0x0, 0x183001, 0x188) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00') preadv(r6, &(0x7f0000001400)=[{&(0x7f0000001ac0)=""/209, 0xd1}], 0x1, 0xc1, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 3.962509079s ago: executing program 1 (id=967): r0 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000200)) 3.867433998s ago: executing program 1 (id=968): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x18, &(0x7f0000000740)={0x40, 0x3, 0x1, 's'}, 0x0, 0x0, 0x0, 0x0}) 3.519637168s ago: executing program 0 (id=969): socket$alg(0x26, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x20180) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x4, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x44, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0x18, 0x1c2, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private1}]}, @nested={0x18, 0x9, 0x0, 0x1, [@nested={0x14, 0xff, 0x0, 0x1, [@nested={0x10, 0x14a, 0x0, 0x1, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x108, 0x0, 0x0, @pid}]}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c090}, 0x400c800) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffe15) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x8080) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) readv(r4, 0x0, 0x0) 3.497267941s ago: executing program 3 (id=970): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0x2000000000000198, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9}, 0x94) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x4a7c0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x5) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x880e) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.629862797s ago: executing program 2 (id=971): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x498, &(0x7f0000000140)={0x0, 0x79af, 0x1, 0x0, 0x9c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) unshare(0x22020400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x88, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x63, 0x0, 0x0) 2.579795962s ago: executing program 0 (id=972): r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000240)={0x0, @bt={0x3, 0x100, 0x1, 0x2, 0x1, 0x7, 0x80000001, 0x4, 0x8001, 0xcfad, 0x2, 0x6, 0xa, 0x2, 0x9, 0x0, {0x6253}, 0x10, 0xb}}) 2.48943106s ago: executing program 0 (id=973): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x30b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x6f8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) 2.223830453s ago: executing program 3 (id=974): socket$kcm(0x10, 0x100000000002, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x4, &(0x7f00007cc000/0x4000)=nil) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x42801, 0x0) 2.114975273s ago: executing program 0 (id=975): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000980)=@nat={'nat\x00', 0x19, 0x4, 0x63e, [0x80000200, 0x0, 0x0, 0x80000230, 0x800006a0], 0x0, 0x0, &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x3, 0x0, 0x1, 'syz_tun\x00', 'veth0_to_team\x00', 'syz_tun\x00', 'ip_vti0\x00', @random="144fc62810f0", [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x2d2, 0x302, 0x332, [@bpf0={{'bpf\x00', 0x0, 0x210}, {{0xb, [{0x0, 0x8, 0x2, 0x9}, {0xf, 0x1, 0x4, 0xf41}, {0x7ff, 0x8, 0xf, 0x7}, {0x27, 0x40, 0xa, 0x6}, {0x5, 0x5, 0x1, 0x7f}, {0x7, 0x0, 0x9, 0x101}, {0x9, 0x8, 0x4, 0x3}, {0x3, 0x1, 0x7, 0x7ff}, {0x0, 0x1, 0x2b, 0x80000001}, {0x2, 0xc, 0x80, 0x4}, {0x9, 0x80, 0x2, 0x80}, {0x1000, 0x4, 0x1, 0x5}, {0x2, 0x1, 0xa, 0x1}, {0xd, 0x9, 0x87, 0x3}, {0x40, 0x80, 0x3, 0x6}, {0xe, 0x8, 0x5, 0x3}, {0x8, 0x3a, 0x5, 0x180}, {0x7, 0x3, 0xd, 0x4}, {0x3e5, 0x5, 0x2, 0x3}, {0x3, 0x6, 0x1, 0x1}, {0x1, 0x0, 0xff, 0xb}, {0x9, 0xdb, 0x8, 0x1}, {0x401, 0x1, 0x80, 0x7}, {0xfffb, 0x2, 0xb, 0x3}, {0x40, 0x5, 0x6, 0x7}, {0x3, 0xb2, 0x0, 0x6}, {0x6d15, 0x8, 0x5, 0xffffffff}, {0xc127, 0x0, 0xc6, 0x7ff}, {0xfff8, 0x3e, 0x0, 0x3f3}, {0xb400, 0x8, 0x5, 0x6}, {0x31ea, 0x1, 0x8, 0x9}, {0x3, 0x6b, 0x14, 0xfffffff2}, {0x5c, 0x3, 0x96, 0x2}, {0x7, 0xd6, 0x2, 0x1}, {0x9, 0xd, 0xc, 0xc9f}, {0x1, 0x7f, 0x7, 0x6083}, {0x3, 0x9, 0x7f, 0x7fffffff}, {0x0, 0x25, 0x3, 0x8}, {0x4, 0x2, 0x2, 0xfff}, {0x9, 0x4, 0x7, 0x7f}, {0xcdc, 0x0, 0x40, 0x10}, {0x7, 0xf, 0x6, 0x804}, {0x1, 0xfc, 0x8, 0x1}, {0x7, 0xe7, 0x3, 0x3}, {0xae6b, 0x39, 0x9, 0x1}, {0xffff, 0x40, 0x8}, {0x7, 0x1, 0x4, 0x8}, {0xcde, 0x9, 0x1, 0xc}, {0x7fff, 0x9, 0xfd, 0x1}, {0xfff, 0x8, 0x3, 0x3}, {0x5, 0x8, 0x3a, 0xc}, {0x4, 0x7, 0x2, 0x8}, {0x8, 0x4, 0x40}, {0x5, 0x2, 0x7, 0x5f36}, {0x8, 0x0, 0x6, 0x7}, {0x200, 0xd, 0x7f}, {0x8, 0x9, 0xb5, 0x9}, {0xffff, 0x9, 0xa8, 0x3ff}, {0x0, 0x3, 0x4, 0x1}, {0x6, 0xb, 0x8, 0x6}, {0xc2, 0x4, 0x6, 0x6}, {0x3, 0x8, 0xb, 0xc00}, {0x2, 0x4, 0xc, 0x8b8}, {0x3, 0xfe, 0x95}], {0x400}}}}, @realm={{'realm\x00', 0x0, 0xc}, {{0xfffffffb, 0x1}}}], [@arpreply={'arpreply\x00', 0xc, {{@random="e26a6bee19d1", 0xfffffffffffffffc}}}], @arpreply={'arpreply\x00', 0xc, {{@random="fd1ff212c45b", 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x3, 0x4, 0x2, 'veth1_virt_wifi\x00', 'ip_vti0\x00', 'team_slave_0\x00', 'wlan1\x00', @local, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @remote, [0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x9a, 0xe2, [], [@common=@mark={'mark\x00', 0x8, {{0xffffffd0, 0xfffffffffffffffd}}}], @common=@log={'log\x00', 0x24, {{0xff, "5a3a79284a20114db9a55bc5931959e6608434017923bc7a6d510c611da1", 0x7}}}}, {0x9, 0x70, 0x3, 'veth0_macvtap\x00', '\x00', 'veth1_to_bridge\x00', 'vlan0\x00', @remote, [0xff, 0x0, 0x0, 0xff, 0xff], @multicast, [0xd89bc2fd95fc270a, 0x1fe, 0xff, 0xff, 0x0, 0xff], 0xaa, 0x13a, 0x16a, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{}, {0x3}], 0x0, 0x1}}}], [@common=@log={'log\x00', 0x24, {{0x2, "1448931c852d6fa73393fc113f5b977ccf51ff886e6ca16d3d0544fbe783", 0x4}}}, @common=@log={'log\x00', 0x24, {{0x9e, "796d13b06f207520e2f0c956bada9a1a9da5a258519f2e26ebdd02a7849f", 0x8}}}], @arpreply={'arpreply\x00', 0xc, {{@empty, 0xfffffffffffffffc}}}}]}]}, 0x702) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x103cfa, 0x0, 0x3, 0x69}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x47f6, 0x0, 0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)}, 0x10) 1.251811139s ago: executing program 1 (id=976): r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x1, 0x402) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000000)=0x8) 1.119355041s ago: executing program 1 (id=977): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="dd98fc1a8e3e19f846f9e45fa51503dc78f540cfee1f39f7ea50387f82", 0x1d}], 0x1) 964.489825ms ago: executing program 2 (id=978): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x100e099, 0x0, 0x3, 0xb5}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xffffff73, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x54, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x202a}}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000640)=@IORING_OP_ASYNC_CANCEL) 651.685662ms ago: executing program 1 (id=979): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xa}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f00000000c0)='ccnA\xf6gro.p\x00', 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000700)={0x4, 0x8}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000170000004c0006803c00040067636d286165732900000000000000000000000000000000000000000000000014dd0000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500080006"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x24, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x24}}, 0x0) 471.049448ms ago: executing program 2 (id=980): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, 0x0) 325.929141ms ago: executing program 2 (id=981): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 47.855296ms ago: executing program 3 (id=982): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0c090714"], 0xf) 0s ago: executing program 3 (id=983): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="e3fc1a4b6e801cac24db1c74bab6b3c36bcb2f12e38495619f", 0x19) kernel console output (not intermixed with test programs): [ T8] cdc_wdm 3-1:1.0: skipping garbage [ 86.178513][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 86.214157][ T8] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 86.868967][ T789] usb 3-1: USB disconnect, device number 3 [ 86.992928][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.202942][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 87.211514][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.230276][ T8] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 87.241507][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.254240][ T8] usb 4-1: config 0 descriptor?? [ 87.674465][ T8] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 87.935978][ T8] usb 1-1: USB disconnect, device number 3 [ 88.082779][ T6154] syzkaller0: entered promiscuous mode [ 88.089474][ T6154] syzkaller0: entered allmulticast mode [ 88.101721][ T6133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.121245][ T6133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.144306][ T6133] i2c i2c-1: unsupported multi-msg i2c transaction [ 88.249650][ T5830] usb 4-1: USB disconnect, device number 2 [ 88.674134][ T6173] fuse: Bad value for 'fd' [ 88.722411][ T6173] ipip0: entered promiscuous mode [ 88.755131][ T6173] ipip0: entered allmulticast mode [ 88.897818][ T6179] netlink: 'syz.1.85': attribute type 6 has an invalid length. [ 88.986723][ T6181] netlink: 48 bytes leftover after parsing attributes in process `syz.3.86'. [ 89.072939][ T5830] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 89.322975][ T5830] usb 3-1: Using ep0 maxpacket: 32 [ 89.335425][ T5830] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 8 [ 89.352331][ T5830] usb 3-1: config 1 interface 0 has no altsetting 0 [ 89.372993][ T5830] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.413717][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.432609][ T5830] usb 3-1: Product: syz [ 89.437778][ T5830] usb 3-1: Manufacturer: syz [ 89.442584][ T5830] usb 3-1: SerialNumber: syz [ 89.530846][ T6173] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 89.664877][ T6189] syzkaller0: entered promiscuous mode [ 89.820945][ T6189] syzkaller0: entered allmulticast mode [ 91.683047][ T5803] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 91.982922][ T5803] usb 1-1: Using ep0 maxpacket: 16 [ 92.008532][ T5803] usb 1-1: config 252 has an invalid interface number: 231 but max is 0 [ 92.021969][ T5830] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 92.038917][ T5803] usb 1-1: config 252 has no interface number 0 [ 92.059278][ T5803] usb 1-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=83.eb [ 92.103432][ T5830] usb 3-1: USB disconnect, device number 4 [ 92.110312][ T5803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.297794][ T6232] syzkaller0: entered promiscuous mode [ 92.321561][ T6232] syzkaller0: entered allmulticast mode [ 92.373926][ T6228] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.437914][ T6228] team_slave_0: entered promiscuous mode [ 92.443824][ T6228] team_slave_1: entered promiscuous mode [ 92.493245][ T6228] vlan2: entered promiscuous mode [ 92.498323][ T6228] team0: entered promiscuous mode [ 92.643920][ T5803] usb 1-1: string descriptor 0 read error: -71 [ 92.677404][ T5803] usb 1-1: USB disconnect, device number 4 [ 92.733153][ T6230] syz.1.99 (6230) used greatest stack depth: 20592 bytes left [ 92.894467][ T6247] capability: warning: `syz.3.104' uses deprecated v2 capabilities in a way that may be insecure [ 93.510320][ T6270] netlink: 20 bytes leftover after parsing attributes in process `syz.3.108'. [ 93.864591][ T6279] syzkaller0: entered promiscuous mode [ 93.870115][ T6279] syzkaller0: entered allmulticast mode [ 93.922013][ T6279] tipc: Enabled bearer , priority 0 [ 93.969171][ T6278] tipc: Resetting bearer [ 94.178281][ T6278] tipc: Disabling bearer [ 95.293781][ T6318] fuse: Bad value for 'fd' [ 96.802162][ T6350] usb usb1: usbfs: process 6350 (syz.3.131) did not claim interface 8 before use [ 98.011006][ T6403] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 98.032996][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 98.237384][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 98.264436][ T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 98.276649][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.301275][ T8] usb 1-1: Product: syz [ 98.312333][ T8] usb 1-1: Manufacturer: syz [ 98.326208][ T8] usb 1-1: SerialNumber: syz [ 98.345609][ T8] usb 1-1: config 0 descriptor?? [ 98.362107][ T8] appledisplay 1-1:0.0: Could not find int-in endpoint [ 98.370269][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 98.742888][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.832691][ T27] audit: type=1800 audit(1767742348.732:6): pid=6399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.149" name="bus" dev="ramfs" ino=9077 res=0 errno=0 [ 98.973071][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 99.089571][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 99.101691][ T8] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 99.145277][ T8] usb 4-1: config 7 has no interface number 0 [ 99.162890][ T8] usb 4-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 99.182767][ T8] usb 4-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 99.200728][ T8] usb 4-1: config 7 interface 187 has no altsetting 0 [ 99.224748][ T8] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 99.260621][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.303253][ T8] usb 4-1: Product: syz [ 99.307469][ T8] usb 4-1: Manufacturer: syz [ 99.335527][ T8] usb 4-1: SerialNumber: syz [ 99.615641][ T8] usb 4-1: Unknown endpoint type found, address 0x07 [ 99.622397][ T8] usb 4-1: Not enough endpoints found in device, aborting! [ 100.754780][ T5830] usb 1-1: USB disconnect, device number 5 [ 101.269962][ T28] usb 4-1: USB disconnect, device number 3 [ 101.379231][ T6450] x_tables: duplicate underflow at hook 2 [ 101.577796][ T6462] netlink: 1276 bytes leftover after parsing attributes in process `syz.3.167'. [ 101.935812][ T6475] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 102.053573][ T28] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.248516][ T28] usb 3-1: config 0 has an invalid interface number: 190 but max is 0 [ 102.260897][ T28] usb 3-1: config 0 has no interface number 0 [ 102.272505][ T28] usb 3-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=71.eb [ 102.286336][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.295037][ T28] usb 3-1: Product: syz [ 102.299341][ T28] usb 3-1: Manufacturer: syz [ 102.312751][ T28] usb 3-1: SerialNumber: syz [ 102.361186][ T28] usb 3-1: config 0 descriptor?? [ 102.440051][ T28] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.190/input/input5 [ 102.605187][ T6484] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 102.612664][ T8] IPVS: starting estimator thread 0... [ 102.630498][ T5125] bcm5974 3-1:0.190: could not read from device [ 102.656882][ T5125] bcm5974 3-1:0.190: could not read from device [ 102.675577][ T5125] bcm5974 3-1:0.190: could not read from device [ 102.686231][ T28] usb 3-1: USB disconnect, device number 5 [ 102.733123][ T6485] IPVS: using max 20 ests per chain, 48000 per kthread [ 103.433009][ T28] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.659735][ T28] usb 2-1: Using ep0 maxpacket: 16 [ 103.795497][ T28] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.874724][ T28] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.885932][ T28] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 103.895641][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.911710][ T28] usb 2-1: config 0 descriptor?? [ 104.029027][ T6517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.183'. [ 104.976991][ T6526] usb usb8: usbfs: process 6526 (syz.2.185) did not claim interface 0 before use [ 106.526489][ T28] usb 2-1: USB disconnect, device number 2 [ 108.225605][ T6572] veth1_macvtap: left promiscuous mode [ 108.283113][ T6572] macsec0: entered promiscuous mode [ 108.354908][ T5830] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.543830][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 108.554878][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.574812][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.585138][ T5830] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 108.602763][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.617304][ T5830] usb 2-1: config 0 descriptor?? [ 109.034737][ T5830] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 109.231247][ T5830] corsair 0003:1B1C:1B02.0002: Read invalid backlight brightness: 34. [ 109.454475][ T5830] usb 2-1: USB disconnect, device number 3 [ 109.514137][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 109.725850][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.740805][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 109.750150][ T8] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 109.762900][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.802199][ T8] usb 3-1: config 0 descriptor?? [ 110.198927][ T6614] vti0: entered promiscuous mode [ 110.205137][ T6614] vti0: entered allmulticast mode [ 110.416632][ T27] audit: type=1326 audit(1767742360.342:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6595 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef738f749 code=0x7fc00000 [ 112.082402][ T6658] dummy0: entered promiscuous mode [ 112.090341][ T6658] macsec1: entered promiscuous mode [ 112.098786][ T6658] dummy0: left promiscuous mode [ 112.453430][ T28] usb 3-1: USB disconnect, device number 6 [ 112.698103][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 112.714029][ T6675] netem: invalid attributes len -7 [ 112.719783][ T6675] netem: change failed [ 112.880853][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.234'. [ 112.909882][ T6679] batadv0: entered promiscuous mode [ 112.917921][ T6679] macvtap1: entered promiscuous mode [ 112.923823][ T6679] macvtap1: entered allmulticast mode [ 112.929346][ T6679] batadv0: entered allmulticast mode [ 112.955190][ T6679] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 112.980285][ T6683] batadv0: left allmulticast mode [ 112.986081][ T6683] batadv0: left promiscuous mode [ 113.225398][ T6689] netlink: 244 bytes leftover after parsing attributes in process `syz.0.236'. [ 114.661241][ T6714] tipc: Started in network mode [ 114.666201][ T6714] tipc: Node identity 92d283f83cd2, cluster identity 4711 [ 114.673818][ T6714] tipc: Enabled bearer , priority 0 [ 114.702507][ T6713] tipc: Disabling bearer [ 114.912958][ T789] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 115.130336][ T789] usb 3-1: Using ep0 maxpacket: 32 [ 115.142993][ T789] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.159289][ T789] usb 3-1: config 0 has no interface number 0 [ 115.173275][ T789] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 115.197441][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.209421][ T789] usb 3-1: Product: syz [ 115.213945][ T789] usb 3-1: Manufacturer: syz [ 115.218567][ T789] usb 3-1: SerialNumber: syz [ 115.230919][ T789] usb 3-1: config 0 descriptor?? [ 115.245323][ T789] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 115.263032][ T789] usb 3-1: selecting invalid altsetting 1 [ 115.278642][ T789] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 115.303594][ T789] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 115.314599][ T789] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 115.324418][ T789] usb 3-1: media controller created [ 115.353794][ T789] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.031886][ T6745] IPVS: Scheduler module ip_vs_ not found [ 116.258896][ T6751] tipc: Enabled bearer , priority 0 [ 116.302577][ T6750] tipc: Disabling bearer [ 116.493544][ T789] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 116.513642][ T789] zl10353_read_register: readreg error (reg=127, ret==-110) [ 116.550869][ T6716] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 116.598253][ T789] usb 3-1: USB disconnect, device number 7 [ 116.855135][ T6766] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 118.101172][ T6784] tipc: Enabled bearer , priority 0 [ 118.136698][ T6783] tipc: Disabling bearer [ 118.179913][ T6790] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 118.223069][ T6790] netlink: 'syz.0.268': attribute type 1 has an invalid length. [ 118.301705][ T6795] gretap1: entered allmulticast mode [ 118.312454][ T6795] bond2: (slave gretap1): making interface the new active one [ 118.322178][ T6795] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 118.399587][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.272'. [ 118.415272][ T6798] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.424563][ T6798] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.433457][ T6798] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.442214][ T6798] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.455858][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.272'. [ 119.226914][ T6811] fuse: Bad value for 'fd' [ 119.479138][ T6815] loop4: detected capacity change from 0 to 7 [ 119.494579][ T5756] Dev loop4: unable to read RDB block 7 [ 119.503287][ T5756] loop4: unable to read partition table [ 119.519667][ T5756] loop4: partition table beyond EOD, truncated [ 119.557073][ T6815] Dev loop4: unable to read RDB block 7 [ 119.574372][ T6815] loop4: unable to read partition table [ 119.580255][ T6815] loop4: partition table beyond EOD, truncated [ 119.626562][ T6815] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 121.312956][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 121.515747][ T8] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.589168][ T8] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 121.627354][ T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.638797][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.662781][ T6854] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 121.681071][ T8] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 122.118451][ T6867] tipc: Started in network mode [ 122.130681][ T6867] tipc: Node identity 6654991f504b, cluster identity 4711 [ 122.150560][ T6867] tipc: Enabled bearer , priority 0 [ 122.163104][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 122.226698][ T6866] tipc: Disabling bearer [ 122.353272][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 122.388138][ T8] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 122.457244][ T8] usb 2-1: config 179 has no interface number 0 [ 122.535953][ T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 122.577167][ T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 122.590124][ T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 122.605020][ T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 122.624572][ T8] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 122.643458][ T8] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 122.653201][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.675019][ T6864] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 122.800101][ T6871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 122.826565][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'. [ 122.909491][ T8] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input7 [ 123.145591][ T5830] usb 2-1: USB disconnect, device number 4 [ 123.145661][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 123.160534][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 123.202726][ T5830] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 123.992720][ T788] usb 1-1: USB disconnect, device number 6 [ 124.799469][ T6905] tipc: Enabled bearer , priority 0 [ 124.849331][ T6903] tipc: Disabling bearer [ 125.064800][ T6901] mmap: syz.3.307 (6901) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 125.442359][ T6921] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 126.753205][ T789] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 126.855152][ T6937] tipc: Enabled bearer , priority 0 [ 126.895948][ T6934] tipc: Disabling bearer [ 126.972964][ T789] usb 3-1: Using ep0 maxpacket: 32 [ 127.004492][ T789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.022898][ T789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.048647][ T789] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 127.063439][ T789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.085151][ T789] usb 3-1: config 0 descriptor?? [ 127.095720][ T789] hub 3-1:0.0: USB hub found [ 127.171569][ T6945] netlink: 64 bytes leftover after parsing attributes in process `syz.3.320'. [ 127.318301][ T789] hub 3-1:0.0: 1 port detected [ 128.404787][ T789] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 128.412735][ T789] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 128.523040][ T789] usbhid 3-1:0.0: can't add hid device: -32 [ 128.540589][ T789] usbhid: probe of 3-1:0.0 failed with error -32 [ 128.697680][ T6960] netlink: 32 bytes leftover after parsing attributes in process `syz.3.326'. [ 128.903010][ T788] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 128.919427][ T6965] syz.3.327 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 129.125302][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 129.132386][ T788] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 129.147705][ T788] usb 1-1: config 0 has no interface number 0 [ 129.162076][ T788] usb 1-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=a8.3c [ 129.175950][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.196522][ T788] usb 1-1: Product: syz [ 129.200851][ T788] usb 1-1: Manufacturer: syz [ 129.205623][ T788] usb 1-1: SerialNumber: syz [ 129.212253][ T788] usb 1-1: config 0 descriptor?? [ 129.273942][ T6968] tipc: Enabled bearer , priority 0 [ 129.295996][ T6967] tipc: Disabling bearer [ 129.435066][ T788] mos7840 1-1:0.186: required endpoints missing [ 129.506178][ T788] usb 1-1: USB disconnect, device number 7 [ 129.871437][ T789] usb 3-1: USB disconnect, device number 8 [ 130.171170][ T6988] syzkaller0: entered promiscuous mode [ 130.178291][ T6988] syzkaller0: entered allmulticast mode [ 130.210255][ T6988] tipc: Enabled bearer , priority 0 [ 130.224607][ T6987] tipc: Resetting bearer [ 130.254400][ T789] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 130.284186][ T6987] tipc: Disabling bearer [ 130.331223][ T6993] trusted_key: encrypted_key: insufficient parameters specified [ 130.382153][ T6993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.335'. [ 130.476874][ T789] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.495178][ T789] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.524977][ T789] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.551673][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.580699][ T789] usb 3-1: Product: syz [ 130.590713][ T789] usb 3-1: Manufacturer: syz [ 130.607138][ T789] usb 3-1: SerialNumber: syz [ 130.839954][ T789] usb 3-1: 0:2 : does not exist [ 130.856081][ T789] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 130.893126][ T5830] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.919531][ T789] usb 3-1: USB disconnect, device number 9 [ 130.990787][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.044822][ T5830] usb 2-1: device descriptor read/64, error -71 [ 131.383056][ T5830] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 131.561610][ T5830] usb 2-1: device descriptor read/64, error -71 [ 131.694136][ T5830] usb usb2-port1: attempt power cycle [ 131.883277][ T788] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 132.062906][ T788] usb 3-1: Using ep0 maxpacket: 32 [ 132.069827][ T788] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 132.078091][ T788] usb 3-1: config 0 has no interface number 0 [ 132.087431][ T788] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=b8.4d [ 132.097039][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.105194][ T788] usb 3-1: Product: syz [ 132.109363][ T788] usb 3-1: Manufacturer: syz [ 132.114027][ T788] usb 3-1: SerialNumber: syz [ 132.120415][ T788] usb 3-1: config 0 descriptor?? [ 132.125558][ T5830] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 132.134254][ T789] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 132.136808][ T788] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 132.165177][ T5830] usb 2-1: device descriptor read/8, error -71 [ 132.312890][ T789] usb 1-1: Using ep0 maxpacket: 8 [ 132.319661][ T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.333195][ T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.343060][ T789] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 132.356499][ T789] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 132.365636][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.377616][ T789] usb 1-1: config 0 descriptor?? [ 132.432949][ T5830] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 132.473526][ T5830] usb 2-1: device descriptor read/8, error -71 [ 132.593194][ T5830] usb usb2-port1: unable to enumerate USB device [ 132.807290][ T789] logitech 0003:046D:C293.0003: nested delimiters [ 132.818217][ T789] logitech 0003:046D:C293.0003: item 0 4 2 10 parsing failed [ 132.826923][ T789] logitech 0003:046D:C293.0003: parse failed [ 132.836568][ T789] logitech: probe of 0003:046D:C293.0003 failed with error -22 [ 132.973654][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.980182][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.986719][ T788] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 133.018420][ T8] usb 1-1: USB disconnect, device number 8 [ 133.064192][ T5830] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 133.192666][ C1] gspca_pac7302 3-1:0.56: URB error -71, resubmitting [ 133.194912][ T789] usb 3-1: USB disconnect, device number 10 [ 133.199459][ C1] gspca_main: Resubmit URB failed with error -19 [ 133.266841][ T5830] usb 4-1: config 0 has no interfaces? [ 133.272373][ T5830] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 133.282615][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.293412][ T5830] usb 4-1: config 0 descriptor?? [ 134.049902][ T788] usb 4-1: USB disconnect, device number 4 [ 134.223050][ T7037] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 134.248912][ T7037] team0 (unregistering): Port device team_slave_0 removed [ 134.287291][ T7037] team0 (unregistering): Failed to send options change via netlink (err -105) [ 134.319607][ T7037] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 134.341761][ T7037] team0 (unregistering): Port device team_slave_1 removed [ 134.428159][ T7056] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.436210][ T7056] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.541686][ T7037] syz.2.353 (7037) used greatest stack depth: 20296 bytes left [ 134.803095][ T5830] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 135.004834][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.046338][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.069859][ T5830] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.096923][ T5830] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.133405][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.174838][ T5830] usb 1-1: config 0 descriptor?? [ 135.588746][ T5830] usbhid 1-1:0.0: can't add hid device: -71 [ 135.605700][ T5830] usbhid: probe of 1-1:0.0 failed with error -71 [ 135.684381][ T5830] usb 1-1: USB disconnect, device number 9 [ 135.877341][ T7083] trusted_key: encrypted_key: insufficient parameters specified [ 135.924211][ T7083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.363'. [ 136.671262][ T7095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.367'. [ 136.681945][ T7095] netlink: set zone limit has 8 unknown bytes [ 139.385237][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.375'. [ 139.751799][ T7137] tipc: Enabling of bearer rejected, failed to enable media [ 140.063193][ T788] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 140.114377][ T7148] netlink: 'syz.1.386': attribute type 10 has an invalid length. [ 140.156571][ T7148] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 140.284272][ T788] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 140.305871][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.328106][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.354746][ T788] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 140.373986][ T788] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 140.383445][ T788] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 140.391948][ T788] usb 1-1: Manufacturer: syz [ 140.407292][ T788] usb 1-1: config 0 descriptor?? [ 140.422703][ T7153] fuse: Bad value for 'fd' [ 140.828853][ T788] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 140.837588][ T788] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 140.859780][ T788] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 140.963541][ T789] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 141.013001][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 141.142917][ T789] usb 2-1: Using ep0 maxpacket: 16 [ 141.160586][ T7162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.170436][ T7162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.184440][ T7162] netlink: 28 bytes leftover after parsing attributes in process `syz.1.391'. [ 141.193609][ T7162] netlink: 28 bytes leftover after parsing attributes in process `syz.1.391'. [ 141.208307][ T8] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 141.218359][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.229946][ T8] usb 4-1: Product: syz [ 141.235055][ T7162] dummy0: entered promiscuous mode [ 141.241976][ T8] usb 4-1: Manufacturer: syz [ 141.243444][ T7162] team0: entered promiscuous mode [ 141.249427][ T8] usb 4-1: SerialNumber: syz [ 141.259116][ T7162] team_slave_0: entered promiscuous mode [ 141.268395][ T7162] team_slave_1: entered promiscuous mode [ 141.291619][ T789] usb 2-1: unable to get BOS descriptor or descriptor too short [ 141.302383][ T789] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 141.310629][ T789] usb 2-1: can't read configurations, error -71 [ 141.681349][ T8] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 142.074239][ T7170] tipc: Enabling of bearer rejected, failed to enable media [ 142.801749][ T7180] bond_slave_0: entered promiscuous mode [ 142.807774][ T7180] bond_slave_1: entered promiscuous mode [ 142.814351][ T7180] vlan2: entered promiscuous mode [ 142.819411][ T7180] bond0: entered promiscuous mode [ 142.820731][ T7183] fuse: Bad value for 'fd' [ 143.594209][ T7208] tipc: Enabling of bearer rejected, failed to enable media [ 143.610522][ T5871] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 143.715471][ T5871] usb 1-1: device reset changed ep0 maxpacket size! [ 143.728928][ T8] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -71 [ 143.730983][ T788] usb 1-1: USB disconnect, device number 10 [ 143.758123][ T8] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -71 [ 143.794096][ T8] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e4. ret = -71 [ 143.831435][ T8] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e8. ret = -71 [ 143.851275][ T8] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000ec. ret = -71 [ 143.889776][ T8] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f0. ret = -71 [ 143.909871][ T8] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f4. ret = -71 [ 143.944480][ T8] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000090. ret = -71 [ 143.953100][ T788] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 143.982999][ T8] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 144.013939][ T8] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 144.044773][ T8] lan78xx: probe of 4-1:1.0 failed with error -71 [ 144.084012][ T8] usb 4-1: USB disconnect, device number 5 [ 144.155493][ T788] usb 1-1: Using ep0 maxpacket: 8 [ 144.174299][ T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.202926][ T788] usb 1-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 144.212352][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.293799][ T788] usb 1-1: config 0 descriptor?? [ 145.107109][ T7246] tipc: Enabling of bearer rejected, failed to enable media [ 145.404071][ T7251] syzkaller0: entered promiscuous mode [ 145.864181][ T7263] netlink: 68 bytes leftover after parsing attributes in process `syz.2.420'. [ 146.095501][ T7273] tipc: Enabling of bearer rejected, failed to enable media [ 146.170617][ T8] usb 1-1: USB disconnect, device number 11 [ 146.366978][ T7280] fuse: Bad value for 'user_id' [ 146.923283][ T788] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 147.127236][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.161097][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.205565][ T788] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 147.226925][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.268683][ T788] usb 4-1: config 0 descriptor?? [ 147.729550][ T788] steelseries 0003:1038:12B6.0005: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 147.901997][ T788] steelseries 0003:1038:12B6.0005: hid_hw_raw_request() failed with -71 [ 147.961846][ T788] usb 4-1: USB disconnect, device number 6 [ 148.037074][ T7318] tipc: Enabling of bearer rejected, failed to enable media [ 148.891597][ T7338] hsr0: entered promiscuous mode [ 149.223037][ T5871] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 149.434169][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 149.473170][ T5871] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 149.481469][ T5871] usb 2-1: config 1 has no interface number 0 [ 149.525040][ T5871] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 149.557655][ T5871] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 149.598120][ T5871] usb 2-1: config 1 interface 105 has no altsetting 0 [ 149.651580][ T5871] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 149.692889][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.731344][ T5871] usb 2-1: Product: syz [ 149.744526][ T5871] usb 2-1: Manufacturer: syz [ 149.776909][ T5871] usb 2-1: SerialNumber: syz [ 149.834752][ T7343] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 149.842058][ T7343] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 150.112240][ T7369] veth0_to_team: entered promiscuous mode [ 150.301525][ T7373] netlink: 384 bytes leftover after parsing attributes in process `syz.3.459'. [ 150.404203][ T7343] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 150.411483][ T7343] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 150.803110][ T5767] Bluetooth: hci2: command tx timeout [ 150.888924][ T5871] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 150.923277][ T5871] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 150.996779][ T5871] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 4e:9d:38:8f:9f:2f [ 151.240708][ T5871] usb 2-1: USB disconnect, device number 11 [ 151.286808][ T7396] tipc: Enabling of bearer rejected, failed to enable media [ 151.313133][ T5871] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 151.554799][ T5871] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 151.608512][ T5871] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 151.680766][ T5871] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 152.022968][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 152.213034][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 152.226580][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 152.245014][ T8] usb 1-1: config 0 has no interface number 0 [ 152.264356][ T8] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 152.277099][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.285859][ T8] usb 1-1: Product: syz [ 152.290139][ T8] usb 1-1: Manufacturer: syz [ 152.295171][ T8] usb 1-1: SerialNumber: syz [ 152.310754][ T8] usb 1-1: config 0 descriptor?? [ 152.318819][ T8] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 152.343995][ T8] usb 1-1: selecting invalid altsetting 1 [ 152.356172][ T8] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 152.394494][ T8] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 152.465218][ T8] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 152.485244][ T8] usb 1-1: media controller created [ 152.564650][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.587468][ T5871] IPVS: starting estimator thread 0... [ 152.633253][ T8] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 152.653573][ T8] zl10353_read_register: readreg error (reg=127, ret==-71) [ 152.682959][ T7439] IPVS: using max 20 ests per chain, 48000 per kthread [ 152.710369][ T8] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 152.711897][ T7444] tipc: Enabling of bearer rejected, failed to enable media [ 152.913139][ T5871] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 152.963504][ T8] usb 1-1: USB disconnect, device number 12 [ 153.152721][ T5871] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 153.176593][ T5871] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 153.243196][ T5871] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 153.286489][ T5871] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 153.312988][ T5871] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 153.340940][ T5871] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 153.402368][ T5871] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 153.425888][ T7464] fuse: Bad value for 'fd' [ 153.432385][ T5871] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 153.612883][ T5871] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 153.661878][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.482'. [ 153.686851][ T5871] usb 3-1: string descriptor 0 read error: -22 [ 153.696417][ T5871] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 153.802376][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.906143][ T5871] adutux 3-1:168.0: interrupt endpoints not found [ 154.083635][ T789] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 154.345615][ T789] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 154.372956][ T789] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 154.395815][ T789] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 154.418313][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.461763][ T789] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 154.557219][ T789] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 154.681708][ T7495] fuse: Bad value for 'fd' [ 154.691116][ T7470] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 155.112983][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 155.322905][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 155.447505][ T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 155.487360][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.510228][ T9] usb 4-1: Product: syz [ 155.522143][ T9] usb 4-1: Manufacturer: syz [ 155.539390][ T9] usb 4-1: SerialNumber: syz [ 155.560040][ T9] usb 4-1: config 0 descriptor?? [ 155.582553][ T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 155.610277][ T9] usb 4-1: Detected FT-X [ 155.722570][ T5803] usb 3-1: USB disconnect, device number 11 [ 155.813983][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 155.833329][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 155.844731][ T9] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 155.865917][ T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 155.903107][ T9] usb 4-1: USB disconnect, device number 7 [ 155.935813][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 155.967964][ T9] ftdi_sio 4-1:0.0: device disconnected [ 156.422073][ T9] usb 1-1: USB disconnect, device number 13 [ 156.430783][ T7465] delete_channel: no stack [ 157.151361][ T7521] fuse: Bad value for 'fd' [ 157.532971][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 157.722882][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 157.750941][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.775025][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.789881][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 157.804583][ T9] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 157.816342][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.836414][ T9] usb 1-1: config 0 descriptor?? [ 158.314444][ T9] cougar 0003:060B:500A.0006: unexpected long global item [ 158.339513][ T9] cougar 0003:060B:500A.0006: parse failed [ 158.347074][ T9] cougar: probe of 0003:060B:500A.0006 failed with error -22 [ 158.493473][ T5803] usb 1-1: USB disconnect, device number 14 [ 158.529275][ T27] audit: type=1326 audit(1767742408.442:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.1.508" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81d338f749 code=0x0 [ 158.854154][ T7553] tipc: Enabled bearer , priority 0 [ 158.871137][ T7552] tipc: Disabling bearer [ 159.983211][ T5871] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 160.119532][ T7577] tipc: Enabled bearer , priority 0 [ 160.158858][ T7576] tipc: Disabling bearer [ 160.206234][ T5871] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.216822][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 160.228019][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 160.262012][ T5871] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 160.285315][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 160.295994][ T5871] usb 2-1: Product: syz [ 160.300237][ T5871] usb 2-1: Manufacturer: syz [ 160.317560][ T5871] usb 2-1: SerialNumber: syz [ 160.324427][ T5871] usb 2-1: config 0 descriptor?? [ 160.365698][ T5871] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 160.382522][ T5871] radio-si470x: probe of 2-1:0.0 failed with error -5 [ 160.396881][ T5871] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 160.578835][ T28] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 160.608452][ T7595] loop6: detected capacity change from 0 to 524288000 [ 160.628904][ T7595] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (3093) [ 160.693946][ T7595] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 160.734606][ T7595] netlink: 388 bytes leftover after parsing attributes in process `syz.3.525'. [ 160.772920][ T28] usb 3-1: Using ep0 maxpacket: 32 [ 160.782437][ T28] usb 3-1: unable to get BOS descriptor or descriptor too short [ 160.792156][ T28] usb 3-1: config 241 has an invalid interface number: 213 but max is 0 [ 160.801136][ T28] usb 3-1: config 241 has an invalid descriptor of length 0, skipping remainder of the config [ 160.824174][ T28] usb 3-1: config 241 has no interface number 0 [ 160.844232][ T28] usb 3-1: config 241 interface 213 altsetting 163 has an invalid endpoint with address 0xFF, skipping [ 160.872326][ T28] usb 3-1: config 241 interface 213 has no altsetting 0 [ 160.892020][ T28] usb 3-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=15.61 [ 160.905816][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.927452][ T28] usb 3-1: Product: syz [ 160.936912][ T28] usb 3-1: Manufacturer: syz [ 160.948065][ T28] usb 3-1: SerialNumber: syz [ 161.180927][ T28] usb 3-1: Found UVC 0.00 device syz (0408:3090) [ 161.214325][ T28] usb 3-1: No valid video chain found. [ 161.227177][ T28] usb 3-1: USB disconnect, device number 12 [ 161.803766][ T789] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 162.016959][ T789] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 162.031152][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.039653][ T789] usb 1-1: Product: syz [ 162.049613][ T789] usb 1-1: Manufacturer: syz [ 162.059927][ T789] usb 1-1: SerialNumber: syz [ 162.091433][ T789] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 162.122005][ T5803] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 165.600891][ T5803] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 165.664053][ T9] usb 1-1: USB disconnect, device number 15 [ 165.672066][ T5803] ath9k_htc: Failed to initialize the device [ 165.732899][ T28] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 165.775531][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 165.866629][ T789] usb 2-1: USB disconnect, device number 12 [ 165.993366][ T7626] tipc: Enabled bearer , priority 0 [ 166.045434][ T7630] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 166.058071][ T7624] tipc: Disabling bearer [ 166.976285][ T7662] syzkaller0: entered promiscuous mode [ 166.982027][ T7662] syzkaller0: entered allmulticast mode [ 166.999100][ T7662] tipc: Enabled bearer , priority 0 [ 167.027335][ T7661] tipc: Resetting bearer [ 167.105636][ T7661] tipc: Disabling bearer [ 168.372994][ T28] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 168.624835][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.649509][ T28] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 168.674125][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.736301][ T28] usb 3-1: config 0 descriptor?? [ 168.922890][ T789] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 168.988098][ T28] usbhid 3-1:0.0: can't add hid device: -71 [ 169.033494][ T28] usbhid: probe of 3-1:0.0 failed with error -71 [ 169.061187][ T28] usb 3-1: USB disconnect, device number 13 [ 169.220571][ T789] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 169.243079][ T789] usb 1-1: config 0 has no interface number 0 [ 169.272996][ T789] usb 1-1: config 0 interface 122 has no altsetting 0 [ 169.333343][ T789] usb 1-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 169.349299][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.406366][ T789] usb 1-1: Product: syz [ 169.427237][ T789] usb 1-1: Manufacturer: syz [ 169.438212][ T789] usb 1-1: SerialNumber: syz [ 169.457949][ T789] usb 1-1: config 0 descriptor?? [ 169.543041][ T28] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 169.734332][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.831290][ T28] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 169.875869][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.926965][ T28] usb 3-1: config 0 descriptor?? [ 170.348215][ T28] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 170.431946][ T28] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0007/input/input10 [ 170.463322][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 170.672749][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 170.695327][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.731781][ T9] usb 2-1: Product: syz [ 170.751174][ T28] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 170.754709][ T9] usb 2-1: Manufacturer: syz [ 170.807184][ T9] usb 2-1: SerialNumber: syz [ 171.295549][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 171.993492][ T28] usb 1-1: USB disconnect, device number 16 [ 172.000061][ T28] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 172.158195][ T789] usb 3-1: USB disconnect, device number 14 [ 172.482950][ T28] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 172.539704][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 172.561509][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 172.579387][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -32 [ 172.609828][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 172.640925][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 172.652954][ T789] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 172.667948][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 172.681388][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 172.701007][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 172.703081][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 172.720559][ T28] usb 1-1: config 1 has an invalid descriptor of length 113, skipping remainder of the config [ 172.723073][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 172.731558][ T28] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.754864][ T28] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.764208][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.767083][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 172.772205][ T28] usb 1-1: Product: syz [ 172.772220][ T28] usb 1-1: Manufacturer: syz [ 172.772232][ T28] usb 1-1: SerialNumber: syz [ 172.799509][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 172.812508][ T9] lan78xx: probe of 2-1:1.0 failed with error -71 [ 172.836151][ T9] usb 2-1: USB disconnect, device number 13 [ 172.859207][ T789] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 172.869696][ T789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.906300][ T789] usb 3-1: config 0 descriptor?? [ 172.929574][ T789] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 173.224111][ T28] usb 1-1: 0:2 : does not exist [ 173.341277][ T789] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 173.440258][ T28] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 173.501789][ T28] usb 1-1: USB disconnect, device number 17 [ 173.744692][ T789] gspca_cpia1: usb_control_msg 02, error -71 [ 173.750725][ T789] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 173.764987][ T789] usb 3-1: USB disconnect, device number 15 [ 174.433031][ T28] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 174.686363][ T28] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.710015][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 174.723355][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 174.737895][ T28] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 174.780932][ T28] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 174.790774][ T28] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 174.799318][ T28] usb 2-1: Manufacturer: syz [ 174.820009][ T28] usb 2-1: config 0 descriptor?? [ 175.178663][ T28] rc_core: IR keymap rc-hauppauge not found [ 175.197757][ T28] Registered IR keymap rc-empty [ 175.210863][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.242969][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.299225][ T28] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 175.323515][ T28] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 175.357739][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.403404][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.432948][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.463789][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.483006][ T5830] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 175.503037][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.532961][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.563649][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.604714][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.633167][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.656443][ T7780] netlink: 'syz.0.582': attribute type 10 has an invalid length. [ 175.665165][ T28] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.668762][ T7780] netlink: 40 bytes leftover after parsing attributes in process `syz.0.582'. [ 175.691595][ T5830] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 175.697882][ T7780] geneve0: entered promiscuous mode [ 175.704792][ T28] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 175.718439][ T7780] team0: Port device geneve0 added [ 175.720722][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.731800][ T28] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 175.744728][ T5830] usb 3-1: Product: syz [ 175.748924][ T5830] usb 3-1: Manufacturer: syz [ 175.760638][ T5830] usb 3-1: SerialNumber: syz [ 175.767777][ T28] usb 2-1: USB disconnect, device number 14 [ 176.312617][ T7798] netlink: 'syz.1.591': attribute type 10 has an invalid length. [ 176.340986][ T7798] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 176.350109][ T7798] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 177.282249][ T7824] netlink: 36 bytes leftover after parsing attributes in process `syz.3.600'. [ 177.416733][ T5830] net_ratelimit: 2 callbacks suppressed [ 177.416746][ T5830] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 177.842521][ T5830] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 177.862897][ T5830] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 177.881697][ T5830] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 177.924265][ T5830] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 177.943309][ T5830] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 177.961233][ T5830] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 177.987498][ T5830] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 178.009711][ T5830] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 178.029988][ T5830] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 178.045253][ T5830] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 178.066932][ T5830] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 178.086805][ T5830] lan78xx: probe of 3-1:1.0 failed with error -71 [ 178.123176][ T5830] usb 3-1: USB disconnect, device number 16 [ 178.532068][ T5767] Bluetooth: hci2: Malformed Event: 0x02 [ 178.912958][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 179.103084][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 179.127175][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 179.152005][ T9] usb 3-1: config 179 has no interface number 0 [ 179.168755][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 179.194263][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 179.205759][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 179.219142][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 179.236497][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.259547][ T7844] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 179.632694][ T788] usb 3-1: USB disconnect, device number 17 [ 180.856346][ T7873] syzkaller0: entered promiscuous mode [ 180.861960][ T7873] syzkaller0: entered allmulticast mode [ 180.871915][ T7873] tipc: Enabled bearer , priority 0 [ 180.883476][ T7872] tipc: Resetting bearer [ 180.912409][ T7872] tipc: Disabling bearer [ 181.059049][ T27] audit: type=1326 audit(1767742430.982:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14198f749 code=0x7ffc0000 [ 181.111722][ T27] audit: type=1326 audit(1767742430.982:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14198f749 code=0x7ffc0000 [ 181.134560][ T27] audit: type=1326 audit(1767742430.982:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc14198f749 code=0x7ffc0000 [ 181.159997][ T27] audit: type=1326 audit(1767742430.982:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14198f749 code=0x7ffc0000 [ 181.182661][ T27] audit: type=1326 audit(1767742430.982:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14198f749 code=0x7ffc0000 [ 181.230060][ T27] audit: type=1326 audit(1767742431.002:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fc14198f749 code=0x7ffc0000 [ 181.253693][ T27] audit: type=1326 audit(1767742431.002:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14198f749 code=0x7ffc0000 [ 181.315422][ T27] audit: type=1326 audit(1767742431.002:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14198f749 code=0x7ffc0000 [ 181.360543][ T27] audit: type=1326 audit(1767742431.002:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fc14198f749 code=0x7ffc0000 [ 181.405964][ T27] audit: type=1326 audit(1767742431.012:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14198f749 code=0x7ffc0000 [ 182.178530][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 182.315387][ T7896] syzkaller0: entered promiscuous mode [ 182.321067][ T7896] syzkaller0: entered allmulticast mode [ 182.348315][ T7896] tipc: Enabled bearer , priority 0 [ 182.359622][ T7895] tipc: Resetting bearer [ 182.385132][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 182.432673][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 182.441778][ T9] usb 2-1: config 179 has no interface number 0 [ 182.453830][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 182.468369][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 182.489942][ T9] usb 2-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 182.514821][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 182.525624][ T7895] tipc: Disabling bearer [ 182.532606][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.556194][ T7888] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 182.817069][ T5871] usb 2-1: USB disconnect, device number 15 [ 183.743129][ T5871] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 183.966065][ T7930] tipc: Can't bind to reserved service type 2 [ 184.018431][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.054338][ T7931] syzkaller0: entered promiscuous mode [ 184.060214][ T7931] syzkaller0: entered allmulticast mode [ 184.063804][ T7930] process 'syz.3.635' launched './file2' with NULL argv: empty string added [ 184.067226][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.136318][ T7931] tipc: Enabled bearer , priority 0 [ 184.145440][ T5871] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 184.154654][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.168805][ T5871] usb 2-1: config 0 descriptor?? [ 184.176338][ T7929] tipc: Resetting bearer [ 184.247040][ T7929] tipc: Disabling bearer [ 184.591589][ T5871] usbhid 2-1:0.0: can't add hid device: -71 [ 184.597767][ T5871] usbhid: probe of 2-1:0.0 failed with error -71 [ 184.612989][ T5871] usb 2-1: USB disconnect, device number 16 [ 184.712940][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 184.832901][ T789] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 184.913286][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 184.921782][ T9] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 184.931865][ T9] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 184.940572][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 184.952152][ T9] usb 3-1: config 1 has no interface number 0 [ 184.958342][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.972427][ T9] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 184.989331][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 185.008671][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.016922][ T789] usb 1-1: Using ep0 maxpacket: 32 [ 185.030248][ T789] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 185.039091][ T789] usb 1-1: config 0 has no interface number 0 [ 185.055106][ T789] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 185.070500][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.087536][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 185.119527][ T789] usb 1-1: Product: syz [ 185.125381][ T789] usb 1-1: Manufacturer: syz [ 185.130065][ T789] usb 1-1: SerialNumber: syz [ 185.167956][ T789] usb 1-1: config 0 descriptor?? [ 185.208203][ T789] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 185.228298][ T789] usb 1-1: selecting invalid altsetting 1 [ 185.235111][ T789] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 185.286988][ T789] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 185.300975][ T789] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 185.315497][ T789] usb 1-1: media controller created [ 185.329031][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 185.371481][ T789] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.767674][ T5830] usb 3-1: USB disconnect, device number 18 [ 185.776072][ T5830] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 185.852910][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 186.052896][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 186.059408][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 186.069292][ T9] usb 4-1: config 179 has no interface number 0 [ 186.075667][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 186.086929][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 186.098257][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 186.111475][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 186.120853][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.131950][ T7947] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 186.368918][ T5871] usb 4-1: USB disconnect, device number 9 [ 186.495287][ T789] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 186.502645][ T789] zl10353_read_register: readreg error (reg=127, ret==-110) [ 186.523200][ T7942] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 186.591278][ T789] usb 1-1: USB disconnect, device number 18 [ 186.603120][ T5830] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 186.805715][ T5830] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.820171][ T5830] usb 3-1: config 0 has no interfaces? [ 186.831193][ T5830] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 186.845672][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.854272][ T5830] usb 3-1: Product: syz [ 186.858463][ T5830] usb 3-1: Manufacturer: syz [ 186.864859][ T5830] usb 3-1: SerialNumber: syz [ 186.872502][ T5830] usb 3-1: config 0 descriptor?? [ 187.149259][ T789] usb 3-1: USB disconnect, device number 19 [ 187.542884][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 187.864057][ T9] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 187.879541][ T9] usb 2-1: config 0 has no interface number 0 [ 187.896877][ T9] usb 2-1: config 0 interface 122 has no altsetting 0 [ 187.925602][ T9] usb 2-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 187.942542][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.964648][ T9] usb 2-1: Product: syz [ 187.970020][ T9] usb 2-1: Manufacturer: syz [ 187.981274][ T9] usb 2-1: SerialNumber: syz [ 187.996202][ T9] usb 2-1: config 0 descriptor?? [ 188.093002][ T5871] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 188.297236][ T5871] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 188.311075][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.328198][ T5871] usb 3-1: Product: syz [ 188.345679][ T5871] usb 3-1: Manufacturer: syz [ 188.362528][ T5871] usb 3-1: SerialNumber: syz [ 188.784846][ T5871] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 190.620940][ T5871] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -71 [ 190.628041][ T7995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.658'. [ 190.648269][ T5871] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 190.664388][ T5871] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 190.674767][ T5871] lan78xx: probe of 3-1:1.0 failed with error -71 [ 190.698127][ T5871] usb 3-1: USB disconnect, device number 20 [ 190.752648][ T9] usb 2-1: USB disconnect, device number 17 [ 190.763583][ T9] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 190.938476][ T8000] netlink: 64 bytes leftover after parsing attributes in process `syz.1.659'. [ 191.386042][ T5086] Bluetooth: hci1: command 0x0406 tx timeout [ 191.392123][ T5086] Bluetooth: hci2: command 0x0406 tx timeout [ 191.398429][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 191.404649][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 191.954988][ T8013] syzkaller0: entered promiscuous mode [ 191.960475][ T8013] syzkaller0: entered allmulticast mode [ 191.984333][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'. [ 191.995362][ T8013] tipc: Enabled bearer , priority 0 [ 192.003908][ T8012] tipc: Resetting bearer [ 192.048045][ T8012] tipc: Disabling bearer [ 192.462967][ T9] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 192.524966][ T8027] netlink: 'syz.3.669': attribute type 18 has an invalid length. [ 192.694662][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 192.736510][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 192.785328][ T9] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 192.835830][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.902486][ T9] usb 1-1: config 0 descriptor?? [ 192.908269][ T8017] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 193.033553][ T8041] syzkaller0: entered promiscuous mode [ 193.039317][ T8041] syzkaller0: entered allmulticast mode [ 193.091608][ T8041] tipc: Enabled bearer , priority 0 [ 193.101359][ T8040] tipc: Resetting bearer [ 193.140605][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 193.147108][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 193.154771][ T8040] tipc: Disabling bearer [ 193.171650][ T9] usb 1-1: USB disconnect, device number 19 [ 193.753000][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 193.943108][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 193.949911][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 193.962817][ T9] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 193.971869][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.981538][ T9] usb 1-1: config 0 descriptor?? [ 194.103250][ T788] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 194.267104][ T8053] usb usb8: usbfs: process 8053 (syz.3.680) did not claim interface 0 before use [ 194.302912][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 194.312773][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.331778][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.342356][ T788] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 194.357171][ T788] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 194.367950][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.387282][ T788] usb 3-1: config 0 descriptor?? [ 194.416142][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.427611][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.438737][ T9] hid-rmi 0003:06CB:81A7.0008: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.0-1/input0 [ 194.710666][ T9] usb 1-1: USB disconnect, device number 20 [ 194.756885][ T8063] syzkaller0: entered promiscuous mode [ 194.772991][ T8063] syzkaller0: entered allmulticast mode [ 194.802543][ T788] microsoft 0003:045E:07DA.0009: unbalanced collection at end of report description [ 194.827932][ T788] microsoft 0003:045E:07DA.0009: parse failed [ 194.835856][ T788] microsoft: probe of 0003:045E:07DA.0009 failed with error -22 [ 194.842470][ T8063] tipc: Enabled bearer , priority 0 [ 194.858114][ T8062] tipc: Resetting bearer [ 194.889891][ T8062] tipc: Disabling bearer [ 195.005395][ T788] usb 3-1: USB disconnect, device number 21 [ 195.469138][ T8087] netlink: 64 bytes leftover after parsing attributes in process `syz.1.689'. [ 195.988398][ T8105] syz_tun: entered promiscuous mode [ 195.993924][ T8105] macsec1: entered allmulticast mode [ 195.999359][ T8105] syz_tun: entered allmulticast mode [ 196.051680][ T8105] syz_tun: left allmulticast mode [ 196.057479][ T8105] syz_tun: left promiscuous mode [ 196.403147][ T5771] Bluetooth: hci3: command 0x0406 tx timeout [ 196.439751][ T8120] netlink: 'syz.3.696': attribute type 21 has an invalid length. [ 196.457397][ T8120] netlink: 128 bytes leftover after parsing attributes in process `syz.3.696'. [ 196.488025][ T8120] netlink: 'syz.3.696': attribute type 4 has an invalid length. [ 196.541687][ T8120] netlink: 'syz.3.696': attribute type 5 has an invalid length. [ 196.563755][ T8120] netlink: 3 bytes leftover after parsing attributes in process `syz.3.696'. [ 196.597650][ T8121] tipc: Cannot configure node identity twice [ 196.842965][ T788] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 197.023071][ T5871] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 197.052909][ T788] usb 4-1: Using ep0 maxpacket: 8 [ 197.061530][ T788] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 197.130443][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.153091][ T788] usb 4-1: Product: syz [ 197.157296][ T788] usb 4-1: Manufacturer: syz [ 197.162044][ T788] usb 4-1: SerialNumber: syz [ 197.178155][ T788] usb 4-1: config 0 descriptor?? [ 197.188001][ T788] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 197.199445][ T788] dvb-usb: bulk message failed: -22 (2/0) [ 197.217006][ T5871] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 197.239669][ T5871] usb 2-1: config 0 has no interface number 0 [ 197.251203][ T5871] usb 2-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 197.274841][ T788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 197.308805][ T5871] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 197.334078][ T788] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 197.343778][ T5871] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 128 [ 197.363012][ T788] usb 4-1: media controller created [ 197.382551][ T5871] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 197.405251][ T5871] usb 2-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 197.416375][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.428504][ T5871] usb 2-1: Product: syz [ 197.438474][ T5871] usb 2-1: Manufacturer: syz [ 197.458149][ T5871] usb 2-1: SerialNumber: syz [ 197.481425][ T5871] usb 2-1: config 0 descriptor?? [ 197.489802][ T788] cxusb: set interface failed [ 197.501951][ T788] dvb-usb: bulk message failed: -22 (1/0) [ 197.508285][ T8133] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 197.536264][ T5871] ni6501 2-1:0.238: driver 'ni6501' failed to auto-configure device. [ 197.590889][ T788] DVB: Unable to find symbol mt352_attach() [ 197.598769][ T788] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 197.727714][ T5830] usb 2-1: USB disconnect, device number 18 [ 197.753362][ T788] rc_core: IR keymap rc-dvico-portable not found [ 197.767801][ T788] Registered IR keymap rc-empty [ 197.785397][ T788] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 197.874968][ T788] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input12 [ 197.892480][ T788] dvb-usb: schedule remote query interval to 100 msecs. [ 197.911494][ T788] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 197.957667][ T788] usb 4-1: USB disconnect, device number 10 [ 198.036040][ T788] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 198.753087][ T788] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 198.957075][ T788] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 198.975181][ T788] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 198.989799][ T788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 199.009580][ T788] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 199.023519][ T788] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 199.036809][ T788] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 199.047462][ T788] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 199.056103][ T788] usb 2-1: Product: syz [ 199.060528][ T788] usb 2-1: Manufacturer: syz [ 199.074448][ T788] cdc_wdm 2-1:1.0: skipping garbage [ 199.091682][ T788] cdc_wdm 2-1:1.0: skipping garbage [ 199.120569][ T788] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 199.132088][ T788] cdc_wdm 2-1:1.0: Unknown control protocol [ 199.281822][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 199.486001][ T788] usb 2-1: USB disconnect, device number 19 [ 200.122921][ T789] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 200.306864][ T789] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 200.316236][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.324341][ T5803] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 200.333100][ T789] usb 4-1: Product: syz [ 200.337340][ T789] usb 4-1: Manufacturer: syz [ 200.342302][ T789] usb 4-1: SerialNumber: syz [ 200.522923][ T5803] usb 2-1: Using ep0 maxpacket: 8 [ 200.530256][ T5803] usb 2-1: unable to get BOS descriptor or descriptor too short [ 200.539159][ T5803] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 200.548011][ T5803] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.558446][ T5803] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 200.568532][ T5803] usb 2-1: config 1 has no interface number 1 [ 200.575139][ T5803] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 200.587981][ T5803] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.600897][ T5803] usb 2-1: config 1 interface 2 has no altsetting 0 [ 200.609716][ T5803] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.618870][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.626979][ T5803] usb 2-1: Product: syz [ 200.631189][ T5803] usb 2-1: Manufacturer: syz [ 200.635888][ T5803] usb 2-1: SerialNumber: syz [ 200.769660][ T789] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 200.864090][ T5803] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 200.871145][ T5803] usb 2-1: MIDIStreaming interface descriptor not found [ 200.909409][ T5803] usb 2-1: USB disconnect, device number 20 [ 200.995059][ T8189] udevd[8189]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.700172][ T8211] syzkaller0: entered promiscuous mode [ 201.727130][ T8211] syzkaller0: entered allmulticast mode [ 201.766269][ T8212] syz_tun: entered promiscuous mode [ 201.771780][ T8212] macsec1: entered allmulticast mode [ 201.777444][ T8212] syz_tun: entered allmulticast mode [ 201.792953][ T8212] syz_tun: left allmulticast mode [ 201.798210][ T8212] syz_tun: left promiscuous mode [ 201.856406][ T8211] tipc: Enabled bearer , priority 0 [ 201.870942][ T8210] tipc: Resetting bearer [ 201.905817][ T8210] tipc: Disabling bearer [ 202.911248][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 203.032000][ T789] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -71 [ 203.053647][ T789] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e4. ret = -71 [ 203.077067][ T789] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e8. ret = -71 [ 203.099700][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 203.122079][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 203.135201][ T789] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000ec. ret = -71 [ 203.136207][ T789] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f0. ret = -71 [ 203.161918][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 203.172085][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 203.182453][ T789] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f4. ret = -71 [ 203.194158][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.252350][ T789] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000090. ret = -71 [ 203.276519][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 203.335469][ T789] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 203.355134][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.365534][ T789] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 203.379796][ T789] lan78xx: probe of 4-1:1.0 failed with error -71 [ 203.401987][ T789] usb 4-1: USB disconnect, device number 11 [ 203.583450][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 203.599060][ T9] usbtmc 3-1:16.0: can't read capabilities [ 203.809421][ T788] usb 3-1: USB disconnect, device number 22 [ 203.815492][ T5830] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 204.003256][ T5830] usb 1-1: Using ep0 maxpacket: 32 [ 204.019842][ T5830] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.030178][ T5830] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.049214][ T5830] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.060521][ T5830] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 204.073830][ T5830] usb 1-1: config 0 interface 0 has no altsetting 0 [ 204.080526][ T5830] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 204.090936][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.107249][ T5830] usb 1-1: config 0 descriptor?? [ 204.521117][ T5830] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 204.532160][ T5830] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 204.540847][ T5830] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 204.554503][ T5830] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 204.562443][ T5830] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 204.580139][ T5830] hid-thrustmaster 0003:044F:B65D.000A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 204.608014][ T5830] hid-thrustmaster 0003:044F:B65D.000A: Wrong number of endpoints? [ 204.851100][ C1] hid-thrustmaster 0003:044F:B65D.000A: Unknown packet type 0x0, unable to proceed further with wheel init [ 205.072487][ T789] usb 1-1: USB disconnect, device number 21 [ 205.172541][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'. [ 205.355847][ T8262] netlink: 6 bytes leftover after parsing attributes in process `syz.1.741'. [ 205.446710][ T8262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.633202][ T789] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 205.685996][ T8248] syz.2.737 (8248): drop_caches: 2 [ 205.848743][ T789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.870766][ T789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.883710][ T789] usb 4-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 205.904129][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.926902][ T789] usb 4-1: config 0 descriptor?? [ 205.954597][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.746'. [ 206.013079][ T8] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 206.202959][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 206.209668][ T8] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 206.218503][ T8] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 206.226808][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'. [ 206.230616][ T8] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 206.249892][ T8] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 206.263639][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 206.273785][ T8] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 206.284333][ T8] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 206.299332][ T8] usb 1-1: Product: syz [ 206.304004][ T8] usb 1-1: Manufacturer: syz [ 206.308816][ T8] usb 1-1: SerialNumber: syz [ 206.331957][ T8] usb 1-1: config 0 descriptor?? [ 206.350748][ T789] usbhid 4-1:0.0: can't add hid device: -71 [ 206.364496][ T789] usbhid: probe of 4-1:0.0 failed with error -71 [ 206.371895][ T8] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 206.393081][ T789] usb 4-1: USB disconnect, device number 12 [ 206.411099][ T8] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 207.008913][ T8293] syzkaller0: entered promiscuous mode [ 207.018266][ T8293] syzkaller0: entered allmulticast mode [ 207.047579][ T8293] tipc: Enabled bearer , priority 0 [ 207.061859][ T8292] tipc: Resetting bearer [ 207.100011][ T8292] tipc: Disabling bearer [ 207.135741][ T5830] usb 1-1: USB disconnect, device number 22 [ 207.149915][ T5830] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 207.388892][ T8298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.754'. [ 209.251788][ T8304] syz.1.755 (8304): drop_caches: 2 [ 209.364980][ T8326] netlink: 'syz.0.762': attribute type 29 has an invalid length. [ 209.373244][ T8326] netlink: 'syz.0.762': attribute type 29 has an invalid length. [ 209.466622][ T8330] tipc: Cannot configure node identity twice [ 210.072916][ T789] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 210.254554][ T789] usb 3-1: Using ep0 maxpacket: 16 [ 210.261721][ T789] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.272215][ T789] usb 3-1: config 0 has no interfaces? [ 210.283265][ T789] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 210.292379][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.307242][ T789] usb 3-1: Product: syz [ 210.311453][ T789] usb 3-1: Manufacturer: syz [ 210.316521][ T789] usb 3-1: SerialNumber: syz [ 210.323824][ T789] usb 3-1: config 0 descriptor?? [ 210.663008][ T5830] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 210.882551][ T5830] usb 2-1: Using ep0 maxpacket: 8 [ 210.975018][ T5830] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 211.017508][ T5830] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 211.043136][ T5830] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.087741][ T5830] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.142265][ T5830] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 211.152369][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.452939][ T5830] usb 2-1: GET_CAPABILITIES returned 0 [ 211.498165][ T5830] usbtmc 2-1:16.0: can't read capabilities [ 211.684612][ T8350] syz.0.772 (8350): drop_caches: 2 [ 212.110147][ T788] usb 2-1: USB disconnect, device number 21 [ 213.434377][ T8] usb 3-1: USB disconnect, device number 23 [ 213.639659][ T8379] syzkaller0: entered promiscuous mode [ 213.652708][ T8379] syzkaller0: entered allmulticast mode [ 213.712185][ T8379] tipc: Enabled bearer , priority 0 [ 213.720915][ T8378] tipc: Resetting bearer [ 213.751921][ T8378] tipc: Disabling bearer [ 213.945836][ T788] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 214.201537][ T788] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 214.218145][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.239333][ T788] usb 3-1: Product: syz [ 214.247207][ T788] usb 3-1: Manufacturer: syz [ 214.254376][ T788] usb 3-1: SerialNumber: syz [ 214.676329][ T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 214.995087][ T8390] syz.3.782 (8390): drop_caches: 2 [ 215.456175][ T5803] IPVS: starting estimator thread 0... [ 215.470267][ T8415] bridge_slave_0: left allmulticast mode [ 215.480647][ T8415] bridge_slave_0: left promiscuous mode [ 215.498626][ T8415] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.530530][ T8415] bridge_slave_1: left allmulticast mode [ 215.549828][ T8415] bridge_slave_1: left promiscuous mode [ 215.569723][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.583008][ T8418] IPVS: using max 23 ests per chain, 55200 per kthread [ 215.640055][ T8415] bond0: (slave bond_slave_0): Releasing backup interface [ 215.682475][ T8415] bond0: (slave bond_slave_1): Releasing backup interface [ 215.707806][ T8415] team_slave_0: left promiscuous mode [ 215.810737][ T8415] team0: Port device team_slave_0 removed [ 215.836663][ T8415] team_slave_1: left promiscuous mode [ 215.906110][ T8415] team0: Port device team_slave_1 removed [ 215.939440][ T8415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.974460][ T8415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.019011][ T8415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.029188][ T8415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.110916][ T8415] geneve0: left promiscuous mode [ 216.306437][ T8415] team0: Port device geneve0 removed [ 216.333792][ T8415] bond2: (slave gretap1): Releasing active interface [ 216.826419][ T8430] tipc: Cannot configure node identity twice [ 216.908187][ T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 216.973385][ T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 217.026103][ T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 217.103389][ T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 217.133008][ T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 217.224394][ T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 217.261682][ T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 217.317304][ T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 217.372289][ T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 217.422911][ T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 217.441263][ T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 217.465058][ T788] lan78xx: probe of 3-1:1.0 failed with error -71 [ 217.511248][ T788] usb 3-1: USB disconnect, device number 24 [ 218.578011][ T8447] netlink: 'syz.2.803': attribute type 11 has an invalid length. [ 220.006739][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 220.006753][ T27] audit: type=1326 audit(1767742469.932:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.3.809" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc14198f749 code=0x0 [ 221.448678][ T8501] net_ratelimit: 7 callbacks suppressed [ 221.448690][ T8501] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3860 [ 222.003056][ T788] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 222.204928][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 222.240076][ T788] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 222.254185][ T788] usb 1-1: config 0 interface 0 has no altsetting 0 [ 222.283485][ T788] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 222.313024][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.355463][ T788] usb 1-1: config 0 descriptor?? [ 222.628494][ T8516] tipc: New replicast peer: 255.255.255.255 [ 222.636706][ T8516] tipc: Enabled bearer , priority 10 [ 223.033074][ T5803] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 223.152535][ T788] corsair-psu 0003:1B1C:1C09.000B: unknown main item tag 0x0 [ 223.168932][ T788] corsair-psu 0003:1B1C:1C09.000B: unknown main item tag 0x0 [ 223.182278][ T788] corsair-psu 0003:1B1C:1C09.000B: unknown main item tag 0x0 [ 223.189894][ T788] corsair-psu 0003:1B1C:1C09.000B: unknown main item tag 0x0 [ 223.197529][ T788] corsair-psu 0003:1B1C:1C09.000B: unknown main item tag 0x0 [ 223.209665][ T788] corsair-psu 0003:1B1C:1C09.000B: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 223.350908][ T5803] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 223.374556][ T5803] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 223.386928][ T5803] usb 2-1: config 0 interface 0 has no altsetting 0 [ 223.397781][ T5803] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 223.417218][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 223.449181][ T5803] usb 2-1: Product: syz [ 223.468039][ T5803] usb 2-1: Manufacturer: syz [ 223.485445][ T5803] usb 2-1: SerialNumber: syz [ 223.507642][ T5803] usb 2-1: config 0 descriptor?? [ 223.542919][ T788] corsair-psu 0003:1B1C:1C09.000B: unable to initialize device (-110) [ 223.567716][ T788] corsair-psu: probe of 0003:1B1C:1C09.000B failed with error -110 [ 223.575010][ T5803] usb 2-1: selecting invalid altsetting 0 [ 223.580154][ T788] usb 1-1: USB disconnect, device number 23 [ 223.635852][ T789] tipc: Node number set to 3812985963 [ 223.773330][ T8517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.794898][ T8517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.815779][ T8517] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow! [ 223.834495][ T788] usb 2-1: USB disconnect, device number 22 [ 224.252965][ T5803] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 224.452979][ T5803] usb 4-1: Using ep0 maxpacket: 32 [ 224.460762][ T5803] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 224.471815][ T5803] usb 4-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 224.482718][ T5803] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 224.500027][ T5803] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 224.509289][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.517491][ T5803] usb 4-1: Product: syz [ 224.521661][ T5803] usb 4-1: Manufacturer: syz [ 224.526352][ T5803] usb 4-1: SerialNumber: syz [ 224.538234][ T5803] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 224.547128][ T5803] imon 4-1:155.0: unable to initialize intf0, err -19 [ 224.562843][ T5803] imon:imon_probe: failed to initialize context! [ 224.569252][ T5803] imon 4-1:155.0: unable to register, err -19 [ 225.037369][ T8536] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 225.059918][ T8536] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 225.622936][ T5803] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 225.823007][ T5803] usb 3-1: Using ep0 maxpacket: 16 [ 225.832466][ T5803] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 225.842163][ T5803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.852850][ T5803] usb 3-1: Product: syz [ 225.857171][ T5803] usb 3-1: Manufacturer: syz [ 225.866999][ T5803] usb 3-1: SerialNumber: syz [ 225.872990][ T789] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 225.882394][ T5803] usb 3-1: config 0 descriptor?? [ 225.895182][ T5803] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 226.065471][ T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.081939][ T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.092718][ T789] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 226.098488][ T8541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.109249][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.111913][ T8541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.139788][ T789] usb 2-1: config 0 descriptor?? [ 226.141010][ T8541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.171801][ T8541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.185579][ T8541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.196421][ T8541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.208639][ T8541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.829'. [ 226.224441][ T8541] bridge0: entered promiscuous mode [ 226.233861][ T8541] macvtap2: entered promiscuous mode [ 226.239349][ T8541] macvtap2: entered allmulticast mode [ 226.249960][ T8541] bridge0: entered allmulticast mode [ 226.270102][ T8549] bridge0: left allmulticast mode [ 226.276061][ T8549] bridge0: left promiscuous mode [ 226.301820][ T5803] usb 3-1: clie_3_5_startup: get config number failed: -71 [ 226.311604][ T5803] visor: probe of 3-1:0.0 failed with error -71 [ 226.323899][ T5803] usb 3-1: USB disconnect, device number 25 [ 226.568945][ T789] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 226.761504][ T789] cp2112 0003:10C4:EA90.000C: Part Number: 0x82 Device Version: 0xFE [ 227.368395][ T8546] cp2112 0003:10C4:EA90.000C: Unsupported transaction 0 [ 227.378813][ T8546] cp2112 0003:10C4:EA90.000C: Error starting transaction: -38 [ 227.390509][ T789] cp2112 0003:10C4:EA90.000C: error reading lock byte: -71 [ 227.407919][ T789] usb 2-1: USB disconnect, device number 23 [ 227.743314][ T789] usb 4-1: USB disconnect, device number 13 [ 228.054424][ T5770] Bluetooth: hci0: Malformed LE Event: 0x0b [ 228.413405][ T8] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 228.642981][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 228.643560][ T8597] tipc: Cannot configure node identity twice [ 228.660616][ T8] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 228.673007][ T8] usb 2-1: config 0 has no interface number 0 [ 228.685242][ T8] usb 2-1: config 0 interface 230 has no altsetting 0 [ 228.719504][ T8] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 228.766384][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.797506][ T8] usb 2-1: Product: syz [ 228.806139][ T8] usb 2-1: Manufacturer: syz [ 228.819040][ T8] usb 2-1: SerialNumber: syz [ 228.829688][ T8] usb 2-1: config 0 descriptor?? [ 228.846671][ T8] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 228.866789][ T8] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 229.584058][ T5871] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 229.763932][ T8617] netlink: 'syz.2.852': attribute type 4 has an invalid length. [ 229.782971][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 229.797177][ T5871] usb 1-1: config 0 has an invalid interface number: 125 but max is 0 [ 229.816914][ T5871] usb 1-1: config 0 has no interface number 0 [ 229.833033][ T5871] usb 1-1: config 0 interface 125 has no altsetting 0 [ 229.852362][ T5871] usb 1-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 229.889809][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.933954][ T5871] usb 1-1: Product: syz [ 229.938169][ T5871] usb 1-1: Manufacturer: syz [ 229.957286][ T5871] usb 1-1: SerialNumber: syz [ 229.973267][ T5871] usb 1-1: config 0 descriptor?? [ 230.194920][ T5871] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 230.904427][ T5871] usb 1-1: reset high-speed USB device number 24 using dummy_hcd [ 231.169778][ T8] ums-usbat: probe of 2-1:0.230 failed with error -5 [ 231.337429][ T788] usb 2-1: USB disconnect, device number 24 [ 231.516872][ T5871] ueagle-atm 1-1:0.125: usbatm_usb_probe: bind failed: -19! [ 231.534600][ T5871] usb 1-1: USB disconnect, device number 24 [ 232.279681][ T8670] netlink: 'syz.0.866': attribute type 29 has an invalid length. [ 232.287610][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 232.308547][ T8670] netlink: 'syz.0.866': attribute type 29 has an invalid length. [ 232.319478][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 232.453017][ T8] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 232.466744][ T8670] netlink: set zone limit has 8 unknown bytes [ 232.652890][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 232.660643][ T8] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 232.681091][ T8] usb 2-1: config 0 has no interface number 0 [ 232.689190][ T8] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 232.712106][ T8] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 232.721653][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.739950][ T8] usb 2-1: Product: syz [ 232.745677][ T8] usb 2-1: Manufacturer: syz [ 232.750518][ T8] usb 2-1: SerialNumber: syz [ 232.761452][ T8] usb 2-1: config 0 descriptor?? [ 232.767776][ T8668] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 232.848805][ T8680] netlink: 208 bytes leftover after parsing attributes in process `syz.3.869'. [ 232.983513][ T8668] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 234.252557][ T8699] syzkaller0: entered promiscuous mode [ 234.258498][ T8699] syzkaller0: entered allmulticast mode [ 234.264354][ T8] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 234.286596][ T8] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 234.323811][ T8] asix: probe of 2-1:0.188 failed with error -71 [ 234.350574][ T8] usb 2-1: USB disconnect, device number 25 [ 235.122369][ T8717] netlink: 'syz.1.879': attribute type 10 has an invalid length. [ 235.634469][ T8725] syzkaller0: entered promiscuous mode [ 235.653860][ T8725] syzkaller0: entered allmulticast mode [ 236.320955][ T8739] netlink: 60 bytes leftover after parsing attributes in process `syz.2.888'. [ 236.743130][ T788] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 236.812928][ T8] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 236.925185][ T788] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 236.932728][ T788] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 236.945041][ T788] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 236.957556][ T788] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 236.971354][ T788] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 236.985171][ T788] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 237.007760][ T788] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 237.011901][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 237.015294][ T788] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 237.043946][ T788] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 237.047990][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.061200][ T788] usb 1-1: string descriptor 0 read error: -22 [ 237.063593][ T8] usb 2-1: Product: syz [ 237.069654][ T788] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 237.088888][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.097127][ T8] usb 2-1: Manufacturer: syz [ 237.101887][ T8] usb 2-1: SerialNumber: syz [ 237.104197][ T788] adutux 1-1:168.0: interrupt endpoints not found [ 237.119847][ T8] usb 2-1: config 0 descriptor?? [ 237.333103][ T789] usb 1-1: USB disconnect, device number 25 [ 237.346427][ T8] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 237.590270][ T8759] syzkaller0: entered promiscuous mode [ 237.596934][ T8759] syzkaller0: entered allmulticast mode [ 238.413140][ T5803] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 238.603009][ T5803] usb 3-1: Using ep0 maxpacket: 32 [ 238.618039][ T5803] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 238.627914][ T5803] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 238.638014][ T5803] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.651572][ T5803] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 238.661129][ T5803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.671571][ T5803] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 238.697542][ T5803] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 238.712184][ T5803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.732661][ T5803] usb 3-1: config 0 descriptor?? [ 238.765272][ T8] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 238.789069][ T8] usb 2-1: USB disconnect, device number 26 [ 238.955648][ T5871] usb 3-1: USB disconnect, device number 26 [ 239.106673][ T8783] syzkaller0: entered promiscuous mode [ 239.112163][ T8783] syzkaller0: entered allmulticast mode [ 239.256791][ T8788] netlink: 'syz.3.905': attribute type 8 has an invalid length. [ 239.274437][ T8788] mkiss: ax0: crc mode is auto. [ 239.533019][ T5871] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 239.712910][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 239.719657][ T5871] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 239.728197][ T5871] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 239.736902][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.747103][ T5871] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 239.756168][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 239.766121][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 239.780786][ T5871] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 239.789899][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.800238][ T5871] usb 3-1: config 0 descriptor?? [ 239.814045][ T8] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 239.909630][ T8808] syzkaller0: entered promiscuous mode [ 239.917837][ T8808] syzkaller0: entered allmulticast mode [ 240.018255][ T8] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 240.030601][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.040432][ T8] usb 2-1: Product: syz [ 240.048444][ T8] usb 2-1: Manufacturer: syz [ 240.053540][ T8] usb 2-1: SerialNumber: syz [ 240.062369][ T8] usb 2-1: config 0 descriptor?? [ 240.075281][ T8] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 027 [ 240.411250][ T8816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.898'. [ 240.449887][ T8817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.914'. [ 240.460833][ T8817] warning: `syz.0.914' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 240.498928][ T8] (null): failure reading functionality [ 240.517430][ T8] i2c i2c-1: failure reading functionality [ 240.531186][ T8] i2c i2c-1: connected i2c-tiny-usb device [ 240.908402][ T8823] i2c i2c-1: failure reading functionality [ 240.920232][ T5871] usb 2-1: USB disconnect, device number 27 [ 241.566159][ T8] usb 3-1: USB disconnect, device number 27 [ 241.850620][ T8841] netlink: 'syz.3.919': attribute type 10 has an invalid length. [ 241.864699][ T8843] syzkaller0: entered promiscuous mode [ 241.872523][ T8843] syzkaller0: entered allmulticast mode [ 242.603040][ T5803] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 242.662606][ T8862] syzkaller0: entered promiscuous mode [ 242.671972][ T8862] syzkaller0: entered allmulticast mode [ 242.854619][ T5803] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 242.910817][ T5803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.995152][ T5803] usb 3-1: Product: syz [ 243.000146][ T5803] usb 3-1: Manufacturer: syz [ 243.006237][ T5803] usb 3-1: SerialNumber: syz [ 243.018191][ T5803] usb 3-1: config 0 descriptor?? [ 243.042234][ T5803] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 028 [ 243.463959][ T5803] (null): failure reading functionality [ 243.471255][ T5803] i2c i2c-1: failure reading functionality [ 243.482627][ T5803] i2c i2c-1: connected i2c-tiny-usb device [ 243.592953][ T789] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 243.796822][ T789] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 243.815277][ T789] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 243.836650][ T8886] netlink: 'syz.1.940': attribute type 6 has an invalid length. [ 243.866701][ T789] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 243.876128][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.890285][ T8885] i2c i2c-1: failure reading functionality [ 243.896645][ T789] usb 4-1: Product: syz [ 243.902656][ T5803] usb 3-1: USB disconnect, device number 28 [ 243.909234][ T789] usb 4-1: Manufacturer: syz [ 243.925246][ T789] usb 4-1: SerialNumber: syz [ 243.941489][ T789] usb 4-1: config 0 descriptor?? [ 243.953819][ T8878] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 243.961235][ T8878] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 243.974364][ T789] usb 4-1: ucan: probing device on interface #0 [ 243.980512][ T8888] syzkaller0: entered promiscuous mode [ 243.980731][ T789] usb 4-1: ucan: invalid EP count (1) [ 243.999154][ T789] usb 4-1: ucan: probe failed; try to update the device firmware [ 244.009907][ T8888] syzkaller0: entered allmulticast mode [ 244.157379][ T5770] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 244.513116][ T5803] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 244.706345][ T5803] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 244.719392][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.730118][ T5803] usb 2-1: config 0 descriptor?? [ 244.741787][ T5803] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 244.949620][ T5803] gp8psk: usb in 128 operation failed. [ 244.981395][ T5803] gp8psk: usb in 137 operation failed. [ 245.003054][ T5803] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 245.033189][ T5803] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 245.047329][ T5803] usb 2-1: media controller created [ 245.073088][ T5803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 245.119370][ T5803] gp8psk_fe: Frontend attached [ 245.141910][ T5803] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 245.152640][ T5803] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 245.359203][ T5803] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 245.391718][ T5803] gp8psk: found Genpix USB device pID = 203 (hex) [ 245.577029][ T5803] usb 2-1: USB disconnect, device number 28 [ 245.679757][ T5803] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 245.773617][ T8923] syzkaller0: entered promiscuous mode [ 245.779147][ T8923] syzkaller0: entered allmulticast mode [ 245.883037][ T8] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 246.077334][ T8] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 246.086527][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.094595][ T8] usb 1-1: Product: syz [ 246.098974][ T8] usb 1-1: Manufacturer: syz [ 246.103652][ T8] usb 1-1: SerialNumber: syz [ 246.111170][ T8] usb 1-1: config 0 descriptor?? [ 246.124997][ T8] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 246.253620][ T5803] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 246.367728][ T9] usb 4-1: USB disconnect, device number 14 [ 246.463321][ T5803] usb 3-1: Using ep0 maxpacket: 8 [ 246.490395][ T5803] usb 3-1: config 0 has no interfaces? [ 246.506475][ T5803] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 246.517737][ T5803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.541624][ T5803] usb 3-1: config 0 descriptor?? [ 246.777373][ T5803] usb 3-1: USB disconnect, device number 29 [ 246.851216][ T8944] netlink: 16 bytes leftover after parsing attributes in process `syz.3.963'. [ 246.973757][ T8946] syzkaller0: entered promiscuous mode [ 246.980737][ T8946] syzkaller0: entered allmulticast mode [ 247.364148][ T8] gspca_sunplus: reg_r err -71 [ 247.380224][ T8] sunplus: probe of 1-1:0.0 failed with error -71 [ 247.413087][ T8] usb 1-1: USB disconnect, device number 26 [ 247.650762][ T8956] trusted_key: encrypted_key: insufficient parameters specified [ 247.913243][ T5803] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 247.993155][ T8956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.966'. [ 248.103067][ T5803] usb 2-1: Using ep0 maxpacket: 32 [ 248.115090][ T5803] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 248.124979][ T5803] usb 2-1: config 0 has no interface number 0 [ 248.131085][ T5803] usb 2-1: config 0 interface 89 has no altsetting 0 [ 248.199874][ T5803] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 248.229587][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.243080][ T5803] usb 2-1: Product: syz [ 248.260931][ T5803] usb 2-1: Manufacturer: syz [ 248.269036][ T5803] usb 2-1: SerialNumber: syz [ 248.286023][ T5803] usb 2-1: config 0 descriptor?? [ 248.307036][ T5803] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 248.319579][ T5803] em28xx 2-1:0.89: Video interface 89 found: bulk [ 248.922139][ T5803] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 249.034557][ T8978] syzkaller0: entered promiscuous mode [ 249.060787][ T8978] syzkaller0: entered allmulticast mode [ 249.373171][ T5803] em28xx 2-1:0.89: AC97 command still being executed: not handled properly! [ 249.509238][ T8985] netlink: 'syz.0.975': attribute type 21 has an invalid length. [ 249.522351][ T8985] netlink: 128 bytes leftover after parsing attributes in process `syz.0.975'. [ 249.532333][ T8985] netlink: 'syz.0.975': attribute type 4 has an invalid length. [ 249.541113][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 249.549662][ T8985] netlink: 'syz.0.975': attribute type 5 has an invalid length. [ 249.550076][ T5803] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 249.579320][ T8985] netlink: 3 bytes leftover after parsing attributes in process `syz.0.975'. [ 249.629396][ T5803] em28xx 2-1:0.89: board has no eeprom [ 249.706945][ T5803] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 249.726747][ T5803] em28xx 2-1:0.89: analog set to bulk mode. [ 249.766982][ T8] em28xx 2-1:0.89: Registering V4L2 extension [ 249.803704][ T5803] usb 2-1: USB disconnect, device number 29 [ 249.824006][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 249.873581][ T5871] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 249.905697][ T5803] em28xx 2-1:0.89: Disconnecting em28xx [ 249.912978][ T8] em28xx 2-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 249.961041][ T9] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 249.994415][ T8] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 250.002722][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.011357][ T8] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 250.022979][ T9] usb 4-1: Product: syz [ 250.027159][ T9] usb 4-1: Manufacturer: syz [ 250.031751][ T8] em28xx 2-1:0.89: No AC97 audio processor [ 250.038768][ T9] usb 4-1: SerialNumber: syz [ 250.060818][ T8] usb 2-1: Decoder not found [ 250.066683][ T9] usb 4-1: config 0 descriptor?? [ 250.078320][ T5871] usb 1-1: Using ep0 maxpacket: 8 [ 250.081852][ T8] em28xx 2-1:0.89: failed to create media graph [ 250.090865][ T8] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 250.100268][ T9] as10x_usb: device has been detected [ 250.106414][ T9] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 250.124940][ T8] em28xx 2-1:0.89: Registering snapshot button... [ 250.147932][ T8] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input13 [ 250.173285][ T9] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 250.173460][ T5871] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 250.225136][ T8] em28xx 2-1:0.89: Remote control support is not available for this card. [ 250.251898][ T9] as10x_usb: error during firmware upload part1 [ 250.264297][ T5803] em28xx 2-1:0.89: Closing input extension [ 250.280054][ T9] Registered device Sky IT Digital Key (green led) [ 250.284934][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.302603][ T5803] em28xx 2-1:0.89: Deregistering snapshot button [ 250.310609][ T8981] random: crng reseeded on system resumption [ 250.418880][ T5803] em28xx 2-1:0.89: Freeing device [ 250.461368][ T5871] usb 1-1: Product: syz [ 250.636506][ T5871] usb 1-1: Manufacturer: syz [ 250.649518][ T5871] usb 1-1: SerialNumber: syz [ 250.706207][ T5871] usb 1-1: config 0 descriptor?? [ 250.736542][ T5871] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 250.799827][ T9] usb 4-1: USB disconnect, device number 15 [ 250.840156][ T5871] dvb-usb: bulk message failed: -22 (2/0) [ 250.841197][ T9] Unregistered device Sky IT Digital Key (green led) [ 250.859602][ T9] as10x_usb: device has been disconnected [ 250.878215][ T5871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 250.901670][ T5871] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 250.925582][ T5871] usb 1-1: media controller created [ 250.985761][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 251.073292][ T5803] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 251.265028][ T5803] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 251.281032][ T5803] usb 2-1: config 0 interface 0 has no altsetting 0 [ 251.299605][ T5803] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 251.311616][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 251.338659][ T5803] usb 2-1: Product: syz [ 251.351460][ T5803] usb 2-1: Manufacturer: syz [ 251.369320][ T5803] usb 2-1: SerialNumber: syz [ 251.400716][ T5803] usb 2-1: config 0 descriptor?? [ 251.419701][ T5770] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 251.432973][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 251.468105][ T5803] usb 2-1: selecting invalid altsetting 0 [ 251.633444][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 251.646705][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 251.674601][ T9] usb 3-1: config 0 has no interface number 0 [ 251.689425][ T8999] [ 251.691779][ T8999] ============================================ [ 251.697925][ T8999] WARNING: possible recursive locking detected [ 251.704081][ T8999] syzkaller #0 Not tainted [ 251.708504][ T8999] -------------------------------------------- [ 251.715100][ T8999] syz.1.979/8999 is trying to acquire lock: [ 251.720994][ T8999] ffff888030eeeb30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_close+0x3c/0x4c0 [ 251.730522][ T8999] [ 251.730522][ T8999] but task is already holding lock: [ 251.737891][ T8999] ffff888030eeeb30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b50 [ 251.747942][ T8999] [ 251.747942][ T8999] other info that might help us debug this: [ 251.756008][ T8999] Possible unsafe locking scenario: [ 251.756008][ T8999] [ 251.763896][ T8999] CPU0 [ 251.767184][ T8999] ---- [ 251.770460][ T8999] lock(&chip->mutex); [ 251.774626][ T8999] lock(&chip->mutex); [ 251.778875][ T8999] [ 251.778875][ T8999] *** DEADLOCK *** [ 251.778875][ T8999] [ 251.787018][ T8999] May be due to missing lock nesting notation [ 251.787018][ T8999] [ 251.795336][ T8999] 3 locks held by syz.1.979/8999: [ 251.800361][ T8999] #0: ffff888030ca34e0 (&runtime->oss.params_lock){+.+.}-{3:3}, at: snd_pcm_oss_write+0x293/0x1120 [ 251.811159][ T8999] #1: ffff888030ca3238 (&runtime->buffer_mutex){+.+.}-{3:3}, at: snd_pcm_hw_params+0x15a/0x1c50 [ 251.821712][ T8999] #2: ffff888030eeeb30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b50 [ 251.832176][ T8999] [ 251.832176][ T8999] stack backtrace: [ 251.838084][ T8999] CPU: 0 PID: 8999 Comm: syz.1.979 Not tainted syzkaller #0 [ 251.845380][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.855461][ T8999] Call Trace: [ 251.858734][ T8999] [ 251.861661][ T8999] dump_stack_lvl+0x16c/0x230 [ 251.866359][ T8999] ? show_regs_print_info+0x20/0x20 [ 251.871586][ T8999] ? print_deadlock_bug+0x435/0x5d0 [ 251.876789][ T8999] __lock_acquire+0x5d40/0x7c80 [ 251.881689][ T8999] ? verify_lock_unused+0x140/0x140 [ 251.886925][ T8999] lock_acquire+0x197/0x410 [ 251.891434][ T8999] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 251.896904][ T8999] ? trace_contention_end+0x39/0xe0 [ 251.902135][ T8999] ? __might_sleep+0xe0/0xe0 [ 251.906729][ T8999] ? read_lock_is_recursive+0x20/0x20 [ 251.912104][ T8999] ? wait_clear_urbs+0x184/0x390 [ 251.917051][ T8999] ? snd_usb_endpoint_sync_pending_stop+0x30/0x30 [ 251.923486][ T8999] __mutex_lock+0x129/0xcc0 [ 251.927998][ T8999] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 251.933481][ T8999] ? usb_free_coherent+0x5d/0x90 [ 251.938413][ T8999] ? release_urbs+0x3fe/0x4a0 [ 251.943086][ T8999] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 251.948533][ T8999] ? mutex_lock_nested+0x20/0x20 [ 251.953462][ T8999] ? snd_usb_endpoint_set_params+0x407/0x2b50 [ 251.959636][ T8999] snd_usb_endpoint_close+0x3c/0x4c0 [ 251.964946][ T8999] snd_usb_hw_params+0x1357/0x19c0 [ 251.970084][ T8999] ? snd_usb_pcm_close+0x300/0x300 [ 251.975212][ T8999] ? snd_pcm_lib_malloc_pages+0x270/0x690 [ 251.980953][ T8999] snd_pcm_hw_params+0x835/0x1c50 [ 251.986001][ T8999] ? snd_pcm_hw_param_first+0x6a0/0xb30 [ 251.991554][ T8999] ? snd_pcm_forward+0x6d0/0x6d0 [ 251.996511][ T8999] snd_pcm_oss_change_params_locked+0x2144/0x3d30 [ 252.002956][ T8999] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 252.008086][ T8999] ? mutex_lock_nested+0x20/0x20 [ 252.013039][ T8999] ? aa_file_perm+0x3e8/0xec0 [ 252.017715][ T8999] ? futex_wait_queue+0x27/0x1b0 [ 252.022669][ T8999] ? futex_wait_queue+0x138/0x1b0 [ 252.027710][ T8999] snd_pcm_oss_write+0x2ff/0x1120 [ 252.032737][ T8999] ? snd_pcm_oss_read+0x8c0/0x8c0 [ 252.037778][ T8999] ? common_file_perm+0x198/0x1f0 [ 252.042817][ T8999] ? fsnotify_perm+0x5d/0x5e0 [ 252.047502][ T8999] ? security_file_permission+0x79/0xa0 [ 252.053064][ T8999] ? snd_pcm_oss_read+0x8c0/0x8c0 [ 252.058277][ T8999] vfs_write+0x288/0x940 [ 252.062535][ T8999] ? file_end_write+0x250/0x250 [ 252.067373][ T8999] ? __fget_files+0x28/0x4d0 [ 252.071993][ T8999] ? __fget_files+0x44a/0x4d0 [ 252.076676][ T8999] ? __fdget_pos+0x1d8/0x330 [ 252.081272][ T8999] ? ksys_write+0x75/0x250 [ 252.085690][ T8999] ksys_write+0x147/0x250 [ 252.090024][ T8999] ? __ia32_sys_read+0x90/0x90 [ 252.094800][ T8999] ? lockdep_hardirqs_on+0x98/0x150 [ 252.100002][ T8999] do_syscall_64+0x55/0xb0 [ 252.104437][ T8999] ? clear_bhb_loop+0x40/0x90 [ 252.109112][ T8999] ? clear_bhb_loop+0x40/0x90 [ 252.113781][ T8999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.119668][ T8999] RIP: 0033:0x7f81d338f749 [ 252.124107][ T8999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.143720][ T8999] RSP: 002b:00007f81d416b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 252.152126][ T8999] RAX: ffffffffffffffda RBX: 00007f81d35e5fa0 RCX: 00007f81d338f749 [ 252.160108][ T8999] RDX: 0000000000000010 RSI: 0000200000000700 RDI: 0000000000000005 [ 252.168091][ T8999] RBP: 00007f81d3413f91 R08: 0000000000000000 R09: 0000000000000000 [ 252.176063][ T8999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.184029][ T8999] R13: 00007f81d35e6038 R14: 00007f81d35e5fa0 R15: 00007ffe5ae21b68 [ 252.192000][ T8999] [ 252.228365][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 252.228894][ T5830] usb 2-1: USB disconnect, device number 30 [ 252.240345][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.266496][ T9] usb 3-1: Product: syz [ 252.270699][ T9] usb 3-1: Manufacturer: syz [ 252.276484][ T9] usb 3-1: SerialNumber: syz [ 252.284007][ T9] usb 3-1: config 0 descriptor?? [ 252.294905][ T9] smsc95xx v2.0.0 [ 252.698818][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 252.709888][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 253.288168][ T5871] cxusb: set interface failed [ 253.300310][ T5871] dvb-usb: bulk message failed: -22 (1/0) [ 253.328838][ T5871] DVB: Unable to find symbol mt352_attach() [ 253.336397][ T5871] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 253.404003][ T5871] rc_core: IR keymap rc-dvico-portable not found [ 253.410375][ T5871] Registered IR keymap rc-empty [ 253.418640][ T5871] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 253.430316][ T5871] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input14 [ 253.442884][ T5871] dvb-usb: schedule remote query interval to 100 msecs. [ 253.450104][ T5871] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 253.463579][ T5871] usb 1-1: USB disconnect, device number 27 [ 253.506056][ T5871] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 254.732746][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 254.743826][ T9] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 254.754838][ T9] usb 3-1: USB disconnect, device number 30 [ 255.845302][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.851694][ T1279] ieee802154 phy1 wpan1: encryption failed: -22