last executing test programs: 25.16056141s ago: executing program 1 (id=8089): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f0000001480)=[{{&(0x7f0000000800)={0x2, 0xce23, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 25.07886923s ago: executing program 1 (id=8090): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xf3f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b78", 0x22, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 24.956262638s ago: executing program 1 (id=8093): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(r1, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b3c0)=[{{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000007d40)="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", 0xff1}, {&(0x7f0000008d40)="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", 0x19b}], 0x2, 0x0, 0x0, 0x44000}}], 0x1, 0x400c081) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 24.19605411s ago: executing program 1 (id=8102): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0/file0\x00', 0x8) 23.261409979s ago: executing program 1 (id=8111): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x5c, 0x3, 0xfffffffc}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4) 21.75127708s ago: executing program 1 (id=8118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) 21.309208483s ago: executing program 32 (id=8118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) 4.945520295s ago: executing program 4 (id=8211): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 4.855669001s ago: executing program 5 (id=8212): mount$fuse(0x0, 0x0, 0x0, 0x102004, &(0x7f00000001c0)=ANY=[@ANYRESHEX]) r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x6}, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x5, 0x4, 0x0, 0x0, 0x14}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 4.812882274s ago: executing program 0 (id=8213): io_uring_setup(0x68af, &(0x7f0000000240)={0x0, 0x0, 0x1880, 0xfffffffd}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x8}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 4.811796383s ago: executing program 4 (id=8214): ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x10001, 0x100000001, 0x4, 0xfffffffffffffffc}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400000007000000000000008500000083000000bf09000000000000550901"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x1, 0x1, &(0x7f0000000240)=""/225, &(0x7f0000000080)=""/37, &(0x7f00000001c0)=""/48, 0x9000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x1, r2}) 4.673959841s ago: executing program 5 (id=8215): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DQEVENT(r1, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 4.649846054s ago: executing program 4 (id=8216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd2d}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000180)=@x86={0xa8, 0x6, 0x10, 0x0, 0x0, 0xf7, 0x2, 0x0, 0x4, 0x3, 0x8, 0x5, 0x0, 0x6f9, 0xa, 0x3, 0x3, 0x7, 0x8, '\x00', 0x81, 0x2b}) 3.814915908s ago: executing program 4 (id=8218): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r0) 3.447937961s ago: executing program 0 (id=8220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) futex_waitv(&(0x7f0000001200)=[{0x8000, &(0x7f00000000c0)=0x63f6, 0x82}], 0x1, 0x0, 0x0, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xfec00000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x0, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.375591451s ago: executing program 5 (id=8221): socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="020409fcec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 3.219902625s ago: executing program 5 (id=8222): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.190934019s ago: executing program 2 (id=8223): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 3.181384582s ago: executing program 3 (id=8224): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = inotify_init1(0x800) getdents64(r0, &(0x7f0000000340)=""/214, 0xd6) inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x64000522) inotify_add_watch(r2, &(0x7f0000005780)='./file0\x00', 0x9600006f) fcntl$notify(r1, 0x402, 0x21) getdents64(r0, 0x0, 0x0) 3.108078963s ago: executing program 0 (id=8225): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x401, @empty}, 0x1c) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000080)={0x0, 0x374e, 0x0, 0x1, 0x30a}, &(0x7f0000000340)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0x7fffffff, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x1f, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x22ce, 0x1d, 0x0, 0x0, 0x0) 3.05725598s ago: executing program 3 (id=8226): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x7, &(0x7f0000130000/0x800000)=nil) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r4, &(0x7f0000000780)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$kcm(0xa, 0x922000000003, 0x11) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000100)=""/33, 0x21) getdents64(r7, 0xfffffffffffffffe, 0x29) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x1b, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') 2.960367204s ago: executing program 0 (id=8227): r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) r4 = socket(0x1d, 0x2, 0x6) recvfrom$l2tp6(r4, &(0x7f00000002c0)=""/75, 0x4b, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x10c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x8c, 0x1, 'gre0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14}, {0x14, 0x1, 'syzkaller0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x160}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d2", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) r10 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x80000) ioctl$EVIOCGEFFECTS(r10, 0x80044584, &(0x7f0000000380)=""/196) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) io_uring_setup(0x598, 0x0) 2.66682091s ago: executing program 2 (id=8228): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000580)=[{0x3, 0x3, 0x4, 0xff}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r2, &(0x7f0000002d40)=""/4104, 0x1008) 1.831799208s ago: executing program 2 (id=8229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8000000, 0x5f9, 0x81, 0x1ff, 0x0, [{0x6d, 0x5, 0x9, '\x00', 0xe}, {0x8, 0xb, 0x72, '\x00', 0x4}, {0x0, 0x7f, 0x9, '\x00', 0x7}, {0x81, 0x2, 0x8, '\x00', 0x5}, {0xf7, 0xf, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x6, 0x9, 0x5, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x4}, {0x8, 0x81, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x81, '\x00', 0x6}, {0x40, 0x4, 0xf1, '\x00', 0x1}, {0xd2, 0x7, 0x1c, '\x00', 0x1}, {0x2, 0x86, 0xc, '\x00', 0xf9}, {0x5, 0x4f, 0x2, '\x00', 0x9}, {0x4, 0x0, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x7, '\x00', 0x7f}, {0xb4, 0x7, 0xd1, '\x00', 0x4}, {0x6c, 0x19, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0}, {0x3e, 0x4c, 0xa, '\x00', 0x3}, {0x7, 0xff, 0x2, '\x00', 0xff}, {0x3, 0x0, 0x6, '\x00', 0x4}, {0x97, 0x9, 0x46, '\x00', 0xe6}, {0x6, 0x8, 0xdf}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x0, 0x3, 0x93, 0x0, 0x0, 0x51, 0xbf, 0x2, 0xc0, 0x6d, 0x9, 0x61, 0x7, 0x90, 0xd}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000003c0)={0x8, 0x2}) 1.606721509s ago: executing program 0 (id=8230): r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, 0x0) r4 = socket(0x1d, 0x2, 0x6) recvfrom$l2tp6(r4, &(0x7f00000002c0)=""/75, 0x4b, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x10c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x8c, 0x1, 'gre0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14}, {0x14, 0x1, 'syzkaller0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x160}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d2", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e000000180002801400"], 0x48}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) r10 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x80000) ioctl$EVIOCGEFFECTS(r10, 0x80044584, &(0x7f0000000380)=""/196) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) io_uring_setup(0x598, 0x0) 1.54804949s ago: executing program 2 (id=8231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffe9b, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x4, 0x4}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x7, 0x1, {0x10, 0x6}}]}}]}, 0x3c}}, 0x0) 1.508449818s ago: executing program 3 (id=8232): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), 0xffffffffffffffff) syz_mount_image$fuse(&(0x7f0000002040), 0x0, 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 1.474063201s ago: executing program 2 (id=8233): writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x8, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYBLOB], 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.306062533s ago: executing program 2 (id=8234): r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) r4 = socket(0x1d, 0x2, 0x6) recvfrom$l2tp6(r4, &(0x7f00000002c0)=""/75, 0x4b, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x10c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x8c, 0x1, 'gre0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14}, {0x14, 0x1, 'syzkaller0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x160}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d2", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) r10 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x80000) ioctl$EVIOCGEFFECTS(r10, 0x80044584, &(0x7f0000000380)=""/196) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) io_uring_setup(0x598, 0x0) 1.08244434s ago: executing program 3 (id=8235): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121700, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xa) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x103cfa, 0x0, 0x3, 0x69}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2201}}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000013c0)={0x4, 0xfffa, 0x8001, 0x7f, 0x13, "40999f49f937a4fd"}) 1.082030869s ago: executing program 4 (id=8236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x20) 476.419627ms ago: executing program 3 (id=8237): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 476.244295ms ago: executing program 4 (id=8238): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028008"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x200000000622c, 0x0) 364.756303ms ago: executing program 0 (id=8239): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffa, 0x0, 0x1, 0x41, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0xc0100) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000000e00)={0x2020}, 0xfdef) 282.590002ms ago: executing program 5 (id=8240): membarrier(0x2, 0x0) unshare(0x24020400) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0xf01, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1021}, 0x4000000) 160.16953ms ago: executing program 3 (id=8241): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x1000, 0x2, 0x1f8}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x20000000, 0x1}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008040}, 0x40000) 0s ago: executing program 5 (id=8242): socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x40000) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) kernel console output (not intermixed with test programs): found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2549.021226][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2549.034566][ T9] usb 1-1: config 0 descriptor?? [ 2549.105099][ T344] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2549.255164][ T344] usb 4-1: Using ep0 maxpacket: 32 [ 2549.262158][ T344] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2549.265064][ T5822] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2549.273076][ T344] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2549.293148][ T344] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2549.304292][ T344] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2549.320404][ T344] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2549.329680][ T344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2549.338474][ T344] usb 4-1: Product: syz [ 2549.342674][ T344] usb 4-1: Manufacturer: syz [ 2549.347533][ T344] usb 4-1: SerialNumber: syz [ 2549.360028][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2549.369248][ T344] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input125 [ 2549.447401][ T5822] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2549.458542][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2549.465365][ T5881] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 2549.472486][ T9] keytouch 0003:0926:3333.0080: fixing up Keytouch IEC report descriptor [ 2549.487585][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2549.497914][ T5822] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2549.517669][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0080/input/input127 [ 2549.531246][ T5822] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2549.540766][ T5822] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2549.549005][ T5822] usb 2-1: Manufacturer: syz [ 2549.557507][ T5822] usb 2-1: config 0 descriptor?? [ 2549.575504][ T344] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2549.584100][ T344] (id 0x00) [ 2549.627437][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2549.638932][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2549.654416][ T9] keytouch 0003:0926:3333.0080: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 2549.654433][ T344] rc_core: IR keymap rc-imon-pad not found [ 2549.654447][ T344] Registered IR keymap rc-empty [ 2549.695813][ T5881] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2549.714131][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2549.725604][ T344] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2549.751226][ T344] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2549.761998][ T5881] usb 5-1: config 0 descriptor?? [ 2549.798394][ T344] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 2549.835774][ T344] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input126 [ 2549.861145][ T344] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:4> initialized [ 2549.977846][ T5822] appleir 0003:05AC:8243.0081: unknown main item tag 0x0 [ 2550.011483][ T5822] appleir 0003:05AC:8243.0081: hiddev2,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 2550.148323][ T344] usb 1-1: USB disconnect, device number 121 [ 2550.189799][ T5881] elan 0003:04F3:0755.0082: failed to start in urb: -90 [ 2550.202561][ T5822] usb 2-1: USB disconnect, device number 123 [ 2550.217623][ T5881] elan 0003:04F3:0755.0082: hidraw2: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 2550.390861][ T5881] usb 5-1: USB disconnect, device number 33 [ 2551.255581][ T5881] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2551.267411][ T4677] input: syz1 as /devices/virtual/input/input128 [ 2551.437558][ T5881] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2551.446759][ T5881] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2551.462421][ T5881] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2551.474062][ T5881] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2551.486061][ T5881] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2551.499540][ T5881] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2551.509852][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2551.518428][ T5881] usb 2-1: Product: syz [ 2551.522729][ T5881] usb 2-1: Manufacturer: syz [ 2551.537049][ T5881] cdc_wdm 2-1:1.0: skipping garbage [ 2551.542376][ T5881] cdc_wdm 2-1:1.0: skipping garbage [ 2551.566250][ T344] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2551.574405][ T5881] cdc_wdm 2-1:1.0: cdc-wdm2: USB WDM device [ 2551.581031][ T5881] cdc_wdm 2-1:1.0: Unknown control protocol [ 2551.736901][ T344] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 2551.756941][ T344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2551.774519][ T344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2551.788620][ T344] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2551.801959][ T344] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2551.811523][ T344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2551.823439][ T344] usb 5-1: config 0 descriptor?? [ 2551.889727][ T5881] usb 4-1: USB disconnect, device number 4 [ 2551.906377][T17576] usb 3-1: USB disconnect, device number 2 [ 2552.237810][ T344] plantronics 0003:047F:FFFF.0083: reserved main item tag 0xd [ 2552.260384][ T344] plantronics 0003:047F:FFFF.0083: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2552.414949][T17576] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2552.509855][ T344] usb 5-1: USB disconnect, device number 34 [ 2552.780489][T17576] usb 3-1: Using ep0 maxpacket: 8 [ 2552.794324][T17576] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2552.816307][T17576] usb 3-1: config 0 has no interface number 0 [ 2552.828395][T17576] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2552.858767][T17576] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2552.881084][T17576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2552.906924][T17576] usb 3-1: config 0 descriptor?? [ 2552.944159][T17576] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2553.139463][ T5822] usb 3-1: USB disconnect, device number 3 [ 2553.236215][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7380'. [ 2553.434946][T17576] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2553.615054][T17576] usb 5-1: Using ep0 maxpacket: 32 [ 2553.620951][T17576] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 2553.630986][T17576] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 2553.641875][T17576] usb 5-1: config 0 has no interface number 0 [ 2553.672880][T17576] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 2553.684317][T17576] usb 5-1: config 0 has no interface number 0 [ 2553.708353][T17576] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 2553.723812][T17576] usb 5-1: config 0 has no interface number 0 [ 2553.737139][T17576] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 2553.747173][T17576] usb 5-1: config 0 has no interface number 0 [ 2553.762641][T17576] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 2553.851960][T17576] usb 5-1: config 0 has no interface number 0 [ 2553.871143][T17576] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 2553.890601][T17576] usb 5-1: config 0 has no interface number 0 [ 2553.926473][T17576] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 2553.935670][T17576] usb 5-1: config 0 has no interface number 0 [ 2553.953105][T17576] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 2553.967532][T17576] usb 5-1: config 0 has no interface number 0 [ 2553.988569][T17576] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 2554.023688][T17576] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2554.042704][T17576] usb 5-1: Product: syz [ 2554.058673][T17576] usb 5-1: Manufacturer: syz [ 2554.094811][T17576] usb 5-1: SerialNumber: syz [ 2554.106811][T17576] usb 5-1: config 0 descriptor?? [ 2554.130362][T17576] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 2554.191079][ T344] usb 2-1: USB disconnect, device number 124 [ 2554.468643][T17576] etas_es58x 5-1:0.2: could not parse product info: '424242424242' [ 2555.871230][ C1] etas_es58x 5-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 2555.882242][ C1] etas_es58x 5-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 2555.890246][ C1] etas_es58x 5-1:0.2: es58x_split_urb() returned error -EBADMSG [ 2555.898018][ C1] etas_es58x 5-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 2555.908972][ C1] etas_es58x 5-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 2555.916951][ C1] etas_es58x 5-1:0.2: es58x_split_urb() returned error -EBADMSG [ 2555.924699][ C1] etas_es58x 5-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 2555.935638][ C1] etas_es58x 5-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 2555.943639][ C1] etas_es58x 5-1:0.2: es58x_split_urb() returned error -EBADMSG [ 2555.951423][ C1] etas_es58x 5-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 2555.962410][ C1] etas_es58x 5-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 2555.970403][ C1] etas_es58x 5-1:0.2: es58x_split_urb() returned error -EBADMSG [ 2555.982385][ C1] etas_es58x 5-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 2555.993373][ C1] etas_es58x 5-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 2556.001344][ C1] etas_es58x 5-1:0.2: es58x_split_urb() returned error -EBADMSG [ 2556.009086][ C1] etas_es58x 5-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 2556.020040][ C1] etas_es58x 5-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 2556.028099][ C1] etas_es58x 5-1:0.2: es58x_split_urb() returned error -EBADMSG [ 2556.035823][ C1] etas_es58x 5-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 2556.046766][ C1] etas_es58x 5-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 2556.054729][ C1] etas_es58x 5-1:0.2: es58x_split_urb() returned error -EBADMSG [ 2556.062477][ C1] etas_es58x 5-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 2556.074213][ C1] etas_es58x 5-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 2556.082191][ C1] etas_es58x 5-1:0.2: es58x_split_urb() returned error -EBADMSG [ 2556.101916][ T5485] etas_es58x 5-1:0.2 can1: bit-timing not yet defined [ 2556.155084][ T344] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2556.211843][ C1] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 2556.221112][ C1] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 2556.230356][ C1] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 2556.239580][ C1] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 2556.248767][ C1] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 2556.257943][ C1] etas_es58x 5-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 2556.266948][T17576] usb 5-1: USB disconnect, device number 35 [ 2556.274679][T17576] etas_es58x 5-1:0.2: Disconnecting syz syz [ 2556.274994][ T5485] etas_es58x 5-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL [ 2556.366705][ T344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2556.398681][ T344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2556.425404][ T344] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2556.440383][ T4804] : left allmulticast mode [ 2556.460650][ T4804] : left promiscuous mode [ 2556.465061][ T344] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2556.480316][ T4804] bridge0: port 1() entered disabled state [ 2556.483959][ T344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2556.513463][ T4804] bridge_slave_1: left allmulticast mode [ 2556.529959][ T344] usb 3-1: config 0 descriptor?? [ 2556.533266][ T4804] bridge_slave_1: left promiscuous mode [ 2556.545620][ T4804] bridge0: port 2(bridge_slave_1) entered disabled state [ 2556.578350][ T4804] veth0_to_bond: left allmulticast mode [ 2556.587974][ T4804] veth0_to_bond: left promiscuous mode [ 2556.593842][ T4804] bridge4: port 2(veth0_to_bond) entered disabled state [ 2556.610094][ T4804] team0: Port device team_slave_0 removed [ 2556.619747][ T4804] team0: Port device team_slave_1 removed [ 2556.627505][ T4804] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2556.760548][ T4814] ªªªªªª: renamed from wg2 [ 2556.895740][T17576] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 2556.988238][ T344] plantronics 0003:047F:FFFF.0084: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2557.087849][T17576] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2557.129881][T17576] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 2557.153321][T17576] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 2557.185092][T17576] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2557.204270][T17576] usb 5-1: config 0 descriptor?? [ 2557.290643][ T344] usb 3-1: USB disconnect, device number 4 [ 2557.309708][ T4812] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2557.551891][ T4812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2557.565342][ T4812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2557.595500][T17576] usbhid 5-1:0.0: can't add hid device: -71 [ 2557.622510][T17576] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2557.639861][T17576] usb 5-1: USB disconnect, device number 36 [ 2557.880299][ T4855] batadv_slave_1: Caught tx_queue_len zero misconfig [ 2557.925100][ T344] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2558.090024][ T344] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 2558.100004][ T344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2558.111066][ T344] usb 4-1: Product: syz [ 2558.116318][ T344] usb 4-1: Manufacturer: syz [ 2558.121103][ T344] usb 4-1: SerialNumber: syz [ 2558.129034][ T344] usb 4-1: config 0 descriptor?? [ 2558.141786][ T344] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 2558.150027][T17576] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2558.315140][T17576] usb 5-1: Using ep0 maxpacket: 32 [ 2558.322729][T17576] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 2558.337189][T17576] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 2558.360752][T17576] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2558.372864][T17576] usb 5-1: config 0 descriptor?? [ 2558.386489][T17576] hub 5-1:0.0: USB hub found [ 2558.585666][T17576] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2558.800331][T17576] usbhid 5-1:0.0: can't add hid device: -71 [ 2558.816084][T17576] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2558.855682][T17576] usb 5-1: USB disconnect, device number 37 [ 2559.454028][ T344] gspca_sunplus: reg_w_riv err -71 [ 2559.460036][ T344] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 2559.482361][ T344] usb 4-1: USB disconnect, device number 5 [ 2560.304885][T17576] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 2560.529304][T17576] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 2560.540585][T17576] usb 2-1: config 7 has no interface number 0 [ 2560.570224][T17576] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 2560.589672][T17576] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2560.615164][T17576] usb 2-1: Product: syz [ 2560.627438][T17576] usb 2-1: Manufacturer: syz [ 2560.636150][T17576] usb 2-1: SerialNumber: syz [ 2560.895570][ T4919] netlink: 'syz.4.7437': attribute type 1 has an invalid length. [ 2560.929218][ T4919] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2560.968568][ T4919] bond2: (slave geneve2): making interface the new active one [ 2560.979447][ T4919] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 2560.990850][ T1161] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2561.000238][ T1161] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2561.010949][ T1161] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2561.020061][ T1161] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2561.460178][T17576] as10x_usb: device has been detected [ 2561.472887][T17576] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 2561.490376][T17576] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 2561.734590][T17576] as10x_usb: error during firmware upload part1 [ 2561.747046][T17576] Registered device Elgato EyeTV DTT Deluxe [ 2561.763790][T17576] usb 2-1: USB disconnect, device number 125 [ 2561.775277][ T5822] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2561.819645][T17576] Unregistered device Elgato EyeTV DTT Deluxe [ 2561.826284][T17576] as10x_usb: device has been disconnected [ 2561.967103][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2561.978404][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2561.998872][ T5822] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2562.016752][ T5822] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2562.027464][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2562.061127][ T5822] usb 5-1: config 0 descriptor?? [ 2562.427307][ T4952] netlink: 'syz.3.7449': attribute type 29 has an invalid length. [ 2562.512539][ T5822] plantronics 0003:047F:FFFF.0085: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2562.715273][ T4962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7453'. [ 2562.736647][ T4962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7453'. [ 2562.755532][ T4963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7452'. [ 2562.774916][ T4963] netlink: 'syz.3.7452': attribute type 7 has an invalid length. [ 2563.045144][ T5822] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2563.160586][ T9] usb 5-1: USB disconnect, device number 38 [ 2563.204840][ T5822] usb 2-1: Using ep0 maxpacket: 16 [ 2563.214664][ T5822] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2563.227853][ T5822] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2563.241426][ T5822] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2563.251950][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2563.260617][ T5822] usb 2-1: Product: syz [ 2563.270418][ T5822] usb 2-1: Manufacturer: syz [ 2563.275560][ T5822] usb 2-1: SerialNumber: syz [ 2563.324887][ T5974] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 2563.477634][ T5974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2563.496491][ T5822] usb 2-1: 0:2 : does not exist [ 2563.505567][ T5974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2563.521709][ T5974] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2563.532442][ T5974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2563.543921][ T5822] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2563.560751][ T5974] usb 1-1: config 0 descriptor?? [ 2563.618911][ T5822] usb 2-1: USB disconnect, device number 126 [ 2563.642367][T17021] udevd[17021]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2563.996293][ T5974] cm6533_jd 0003:0D8C:0022.0086: unknown main item tag 0x0 [ 2564.007661][ T5822] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2564.038737][ T5974] cm6533_jd 0003:0D8C:0022.0086: unknown main item tag 0x0 [ 2564.068797][ T5974] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0086/input/input131 [ 2564.162214][ T5974] cm6533_jd 0003:0D8C:0022.0086: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 2564.196205][ T4969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2564.225219][ T5822] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2564.226215][ T4969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2564.252831][ T5822] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2564.286654][ T5822] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2564.314070][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2564.360545][ T4976] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2564.378771][ T5822] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2564.654166][ T5822] usb 1-1: USB disconnect, device number 122 [ 2564.660920][T17576] usb 5-1: USB disconnect, device number 39 [ 2565.641336][ T5974] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2565.676710][ T5009] input: syz0 as /devices/virtual/input/input132 [ 2565.765660][ T5822] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2565.807313][ T5974] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2565.818005][ T5974] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2565.834176][ T5974] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2565.847262][ T5974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2565.860166][ T5974] usb 2-1: SerialNumber: syz [ 2565.925372][ T5822] usb 3-1: Using ep0 maxpacket: 8 [ 2565.934178][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2565.947964][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2565.966209][ T5822] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2565.979688][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 2565.998029][ T5822] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2566.008261][ T9] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 2566.022167][ T5822] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2566.031538][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2566.055677][ T5822] usb 3-1: config 0 descriptor?? [ 2566.069751][ T5007] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2566.093096][ T5974] usb 2-1: 0:2 : does not exist [ 2566.175081][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 2566.184455][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 2566.202138][ T5974] usb 2-1: USB disconnect, device number 127 [ 2566.208539][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2566.220078][ T9] usb 1-1: Product: syz [ 2566.224652][ T9] usb 1-1: Manufacturer: syz [ 2566.229543][ T9] usb 1-1: SerialNumber: syz [ 2566.244645][T17021] udevd[17021]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2566.267396][ T9] usb 1-1: config 0 descriptor?? [ 2566.493550][ T9] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 2566.726417][ C1] Bluetooth: hci5: Unexpected continuation: 1 bytes [ 2566.927765][T17576] usb 3-1: USB disconnect, device number 5 [ 2566.936111][T16982] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 2567.005412][ T5974] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2567.013356][ T5822] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 2567.164969][ T5974] usb 5-1: Using ep0 maxpacket: 32 [ 2567.172543][ T5822] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 2567.190118][ T5822] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 2567.203810][ T5974] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2567.213350][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2567.221560][ T5822] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 2567.247622][ T5974] usb 5-1: Product: syz [ 2567.251882][ T5974] usb 5-1: Manufacturer: syz [ 2567.260086][ T5822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2567.266989][ T5974] usb 5-1: SerialNumber: syz [ 2567.276670][ T5822] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2567.286868][ T5974] usb 5-1: config 0 descriptor?? [ 2567.292620][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2567.301394][ T5822] usb 2-1: Product: syz [ 2567.309397][ T5822] usb 2-1: Manufacturer: syz [ 2567.315818][ T5822] usb 2-1: SerialNumber: syz [ 2567.349346][ T5822] usb 2-1: config 0 descriptor?? [ 2567.386429][ T5031] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2567.399843][ T5822] usb 2-1: selecting invalid altsetting 0 [ 2567.532689][ T5974] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 040 [ 2567.633926][ T5031] usb 2-1: BOGUS urb xfer, pipe 0 != type 1 [ 2567.655397][T17576] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2567.745384][ T9] usb write operation failed. (-71) [ 2567.753520][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2567.765469][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 2567.772203][ T9] usb 1-1: media controller created [ 2567.777900][ T9] usb read operation failed. (-71) [ 2567.783342][ T9] usb write operation failed. (-71) [ 2567.791200][ T9] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 2567.803212][ T9] usb 1-1: USB disconnect, device number 123 [ 2567.814970][T17576] usb 4-1: Using ep0 maxpacket: 8 [ 2567.822299][T17576] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2567.831468][T17576] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2567.842928][T17576] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2567.853414][T17576] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2567.864050][T17576] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2567.877338][T17576] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2567.886656][T17576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2567.894880][ T344] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2568.056285][ T344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2568.067606][ T344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2568.078216][ T344] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2568.091405][ T344] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2568.100632][ T344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2568.113010][T17576] usb 4-1: GET_CAPABILITIES returned 0 [ 2568.121430][ T344] usb 3-1: config 0 descriptor?? [ 2568.128301][T17576] usbtmc 4-1:16.0: can't read capabilities [ 2568.342697][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2568.351907][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2568.360966][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2568.370043][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2568.381785][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2568.390890][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2568.399957][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2568.409020][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2568.418075][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2568.429768][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2568.438878][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2568.447961][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2568.457025][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2568.516996][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2568.526114][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2568.535195][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2568.552534][ T9] usb 4-1: USB disconnect, device number 6 [ 2568.585144][ T344] plantronics 0003:047F:FFFF.0087: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2569.170273][ T5054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7486'. [ 2569.358404][T17576] usb 3-1: USB disconnect, device number 6 [ 2569.384834][ T344] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 2569.466449][ T5881] usb 2-1: USB disconnect, device number 2 [ 2569.555260][ T344] usb 1-1: Using ep0 maxpacket: 16 [ 2569.562639][ T344] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2569.574483][ T344] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2569.581300][ T344] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2569.590728][ T344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2569.603940][ T344] usb 1-1: config 0 descriptor?? [ 2569.782613][ T5881] usb 5-1: USB disconnect, device number 40 [ 2569.821949][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7485'. [ 2569.843622][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7485'. [ 2569.856779][ T5052] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7485'. [ 2569.867376][ T5052] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7485'. [ 2569.884613][ T344] usbhid 1-1:0.0: can't add hid device: -71 [ 2569.891326][ T344] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2569.901777][ T344] usb 1-1: USB disconnect, device number 124 [ 2570.467270][ T5091] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2570.912067][ T5098] netlink: 27 bytes leftover after parsing attributes in process `syz.3.7503'. [ 2570.931856][ T9] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 2571.115131][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 2571.123628][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2571.137399][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2571.158204][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2571.187627][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2571.200559][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2571.222449][ T9] usb 1-1: config 0 descriptor?? [ 2571.357087][ T5111] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7507'. [ 2571.366722][ T344] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2571.388389][ T5113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7508'. [ 2571.411763][ T5113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7508'. [ 2571.492959][ T5113] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7508'. [ 2571.535431][ T344] usb 3-1: Using ep0 maxpacket: 16 [ 2571.542508][ T344] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2571.553172][ T344] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2571.636944][ T344] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2571.647118][ T344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2571.655269][ T344] usb 3-1: Product: syz [ 2571.659655][ T344] usb 3-1: Manufacturer: syz [ 2571.664254][ T344] usb 3-1: SerialNumber: syz [ 2571.697546][ T9] microsoft 0003:045E:07DA.0088: ignoring exceeding usage max [ 2571.711912][ T9] microsoft 0003:045E:07DA.0088: unsupported Resolution Multiplier 0 [ 2571.897993][ T344] usb 3-1: 0:2 : does not exist [ 2571.907847][ T344] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2571.915666][ T9] microsoft 0003:045E:07DA.0088: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 2571.947586][ T9] microsoft 0003:045E:07DA.0088: no inputs found [ 2571.965579][ T9] microsoft 0003:045E:07DA.0088: could not initialize ff, continuing anyway [ 2572.001913][ T9] usb 1-1: USB disconnect, device number 125 [ 2572.126337][ T344] usb 3-1: USB disconnect, device number 7 [ 2572.167302][ T5118] fido_id[5118]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2572.255245][T17021] udevd[17021]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2572.382085][ T29] audit: type=1800 audit(1770979464.366:2236): pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7513" name="file1" dev="tmpfs" ino=8009 res=0 errno=0 [ 2572.975133][ T344] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2573.055360][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2573.127041][ T344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2573.154358][ T344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2573.183411][ T344] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2573.207263][ T344] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2573.207991][ T9] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2573.224945][ T344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2573.237348][ T344] usb 3-1: config 0 descriptor?? [ 2573.258187][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2573.275364][ T9] usb 5-1: config 0 descriptor?? [ 2573.727144][ T344] plantronics 0003:047F:FFFF.0089: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2574.431750][ T5881] usb 3-1: USB disconnect, device number 8 [ 2574.507108][ T344] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2574.707289][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 2574.717349][ T344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2574.727542][ T9] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 2574.734807][ T344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2574.774792][ T9] [drm] Initialized udl on minor 2 [ 2574.782566][ T344] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2574.782646][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2574.853953][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 2574.861751][ T5974] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2574.870016][ T5974] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 2574.880452][ T344] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2574.890843][ T344] usb 2-1: Manufacturer: syz [ 2574.935318][ T344] usb 2-1: config 0 descriptor?? [ 2574.941778][ T9] usb 5-1: USB disconnect, device number 41 [ 2575.780450][ T344] uclogic 0003:256C:006D.008A: interface is invalid, ignoring [ 2576.026338][ T9] usb 2-1: USB disconnect, device number 3 [ 2576.570954][ T5225] __nla_validate_parse: 2 callbacks suppressed [ 2576.570996][ T5225] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7546'. [ 2578.707275][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2578.830137][ T5284] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7568'. [ 2578.897939][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 2578.925542][ T9] usb 5-1: config index 0 descriptor too short (expected 45, got 27) [ 2578.933818][ T9] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 2578.966186][ T9] usb 5-1: config 1 has no interface number 0 [ 2578.972342][ T9] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 32 [ 2578.982540][ T9] usb 5-1: config 1 interface 7 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2579.104079][ T9] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice= 0.00 [ 2579.113400][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2579.147111][ T9] usb 5-1: Product: syz [ 2579.151376][ T9] usb 5-1: Manufacturer: syz [ 2579.197799][ T9] usb 5-1: SerialNumber: syz [ 2579.209562][ T5276] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2579.236236][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 2579.600928][ T5298] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2579.607423][ T5298] syzkaller1: Linktype set failed because interface is up [ 2579.625082][ T5974] syzkaller1: tun_net_xmit 90 [ 2580.036390][ T9] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input133 [ 2580.094835][ T344] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2580.244095][ T5881] usb 5-1: USB disconnect, device number 42 [ 2580.264808][ T344] usb 3-1: Using ep0 maxpacket: 16 [ 2580.271691][ T344] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2580.285429][ T344] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2580.292077][ T344] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2580.301613][ T344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2580.340712][ T344] usb 3-1: config 0 descriptor?? [ 2580.752596][ T5327] veth0: entered promiscuous mode [ 2580.785390][ T344] nzxt-smart2 0003:1E71:2009.008B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 2580.799606][ T5327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7587'. [ 2580.823839][ T5327] veth0 (unregistering): left promiscuous mode [ 2580.992254][ T5336] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7588'. [ 2581.413703][ T344] usb 3-1: USB disconnect, device number 9 [ 2582.134820][ T344] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2582.299267][ T344] usb 4-1: config 0 has no interfaces? [ 2582.319006][ T344] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2582.352101][ T344] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2582.374953][ T344] usb 4-1: Product: syz [ 2582.379148][ T344] usb 4-1: Manufacturer: syz [ 2582.400685][ T5367] loop3: detected capacity change from 0 to 7 [ 2582.411969][ T5367] Dev loop3: unable to read RDB block 7 [ 2582.415714][ T344] usb 4-1: config 0 descriptor?? [ 2582.429068][ T5367] loop3: unable to read partition table [ 2582.453246][ T5367] loop3: partition table beyond EOD, truncated [ 2582.454638][ T5369] loop8: detected capacity change from 0 to 8 [ 2582.479946][ T5367] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2582.624983][ T9] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 2582.646115][ T5974] usb 4-1: USB disconnect, device number 7 [ 2582.659446][ T5369] loop8: detected capacity change from 8 to 7 [ 2582.759519][ T5369] Dev loop8: unable to read RDB block 7 [ 2582.776140][ T5369] loop8: unable to read partition table [ 2582.781942][ T5369] loop8: partition table beyond EOD, truncated [ 2582.803934][ T5369] loop_reread_partitions: partition scan of loop8 (”Q˜y,øÿÿÿüFê¦)) failed (rc=-5) [ 2582.814209][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 2582.835345][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2582.865008][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2582.915101][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2582.942995][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2582.970052][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2582.987324][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2583.020525][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2583.202469][ T5383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7607'. [ 2583.258931][ T5383] gtp0: entered promiscuous mode [ 2583.273937][ T5383] gtp0: entered allmulticast mode [ 2583.299188][ T5974] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2583.495338][ T5974] usb 4-1: config 0 has no interfaces? [ 2583.557507][ T5974] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2583.568254][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2583.576757][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 2583.584093][ T9] usbtmc 1-1:16.0: can't read capabilities [ 2583.591657][ T5974] usb 4-1: Product: syz [ 2583.599574][ T5974] usb 4-1: Manufacturer: syz [ 2583.618704][ T5974] usb 4-1: config 0 descriptor?? [ 2583.767520][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2583.776628][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2583.785713][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2583.795283][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2583.804420][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2583.813685][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2583.822767][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2583.831845][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2583.840910][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2583.849976][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2583.861192][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2583.870388][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2583.879475][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2583.888566][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2583.901425][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2583.910523][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 2583.930349][ T9] usb 1-1: USB disconnect, device number 126 [ 2583.943764][ T5974] usb 4-1: USB disconnect, device number 8 [ 2584.245173][ T5393] pim6reg1: entered promiscuous mode [ 2584.250478][ T5393] pim6reg1: entered allmulticast mode [ 2584.574682][ T5407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7615'. [ 2584.678554][ T5406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7614'. [ 2585.555063][ T5428] input: syz1 as /devices/virtual/input/input134 [ 2586.315222][ T5974] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2586.468948][ T5974] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2586.478662][ T5974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2586.487438][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2586.496217][ T5974] usb 2-1: Product: syz [ 2586.500624][ T5974] usb 2-1: Manufacturer: syz [ 2586.510933][ T5974] usb 2-1: SerialNumber: syz [ 2586.526286][ T5974] usb 2-1: config 0 descriptor?? [ 2586.538642][ T5974] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2586.644835][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 2586.655647][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2586.675738][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2586.687499][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2586.697283][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2586.715815][ T9] usb 5-1: config 0 descriptor?? [ 2586.726153][ T9] hub 5-1:0.0: USB hub found [ 2586.933955][ T9] hub 5-1:0.0: 1 port detected [ 2587.551605][ T5974] gspca_sunplus: reg_r err -71 [ 2587.562191][ T5974] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 2587.585645][ T5974] usb 2-1: USB disconnect, device number 4 [ 2587.593879][ T9] hub 5-1:0.0: activate --> -90 [ 2588.053953][ T5974] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 2588.062691][ T5881] usb 5-1: USB disconnect, device number 43 [ 2588.110961][ T5489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7642'. [ 2588.244067][ T5974] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 2588.260643][ T5974] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 2588.272625][ T5974] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 90, setting to 64 [ 2588.284979][ T5974] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2588.297629][ T5974] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2588.310604][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2588.332708][ T5974] usb 4-1: Product: syz [ 2588.337633][ T5974] usb 4-1: Manufacturer: syz [ 2588.342628][ T5974] usb 4-1: SerialNumber: syz [ 2588.365042][ T5974] usb 4-1: config 0 descriptor?? [ 2588.371956][ T5475] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2588.395322][ T5974] usb 4-1: selecting invalid altsetting 0 [ 2588.643478][ T5475] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2588.653742][ T5475] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2588.662297][ T5475] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2588.671979][ T5475] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2588.682383][ T5475] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2588.692305][ T5475] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 2588.710407][ T5881] usb 4-1: USB disconnect, device number 9 [ 2589.007625][ T5502] input: syz1 as /devices/virtual/input/input135 [ 2589.079525][T16296] udevd[16296]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 2589.430154][ T5514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7651'. [ 2589.476211][ T5521] netlink: 'syz.3.7655': attribute type 3 has an invalid length. [ 2589.614846][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2589.765450][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 2589.776873][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2589.789505][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2589.802763][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2589.813692][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2589.824708][ T9] usb 2-1: Product: syz [ 2589.830038][ T9] usb 2-1: Manufacturer: syz [ 2589.838878][ T9] usb 2-1: SerialNumber: syz [ 2589.842877][ T5530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7657'. [ 2590.094868][ T9] usb 2-1: 0:2 : does not exist [ 2590.113219][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2590.288801][ T5534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7658'. [ 2590.312167][ T9] usb 2-1: USB disconnect, device number 5 [ 2590.400281][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.408235][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.800360][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2590.875019][ T5881] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2591.054847][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 2591.061465][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2591.072943][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2591.097027][ T5881] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.50 [ 2591.113798][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 2591.166812][ T5881] usb 4-1: Product: syz [ 2591.171330][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2591.201329][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2591.201357][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2591.201375][ T9] usb 5-1: Product: syz [ 2591.201388][ T9] usb 5-1: Manufacturer: syz [ 2591.201402][ T9] usb 5-1: SerialNumber: syz [ 2591.209514][ T5881] usb 4-1: config 0 descriptor?? [ 2591.212104][ T5881] hub 4-1:0.0: USB hub found [ 2591.433996][ T5881] hub 4-1:0.0: 1 port detected [ 2592.106850][ T5571] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7672'. [ 2592.128769][ T5881] hub 4-1:0.0: activate --> -90 [ 2592.305435][ T9] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2592.319940][ T9] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 2592.343026][ T9] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 2592.487584][ T9] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 2592.516684][ T9] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2592.536192][ T5881] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 2592.536403][ T5974] usb 4-1: USB disconnect, device number 10 [ 2592.603143][ T9] usb 5-1: USB disconnect, device number 44 [ 2592.628422][ T9] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 2593.360488][ T5606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7682'. [ 2593.402912][ T5606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7682'. [ 2593.736381][ T5617] syzkaller1: entered promiscuous mode [ 2593.742270][ T5617] syzkaller1: entered allmulticast mode [ 2594.385465][ T5881] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 2594.519073][ T5648] syzkaller1: entered promiscuous mode [ 2594.525071][ T5648] syzkaller1: entered allmulticast mode [ 2594.560272][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 2594.568045][ T5881] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 2594.577049][ T5881] usb 1-1: config 0 has no interface number 0 [ 2594.588924][ T5881] usb 1-1: config 0 interface 184 has no altsetting 0 [ 2594.598781][ T5881] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2594.608619][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2594.618225][ T5881] usb 1-1: Product: syz [ 2594.622568][ T5881] usb 1-1: Manufacturer: syz [ 2594.627633][ T5881] usb 1-1: SerialNumber: syz [ 2594.665783][ T5881] usb 1-1: config 0 descriptor?? [ 2594.734897][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2594.884857][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 2594.896569][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2594.915025][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2594.927072][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.50 [ 2594.937135][ T9] usb 2-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 2594.945737][ T9] usb 2-1: Product: syz [ 2594.953822][ T9] usb 2-1: config 0 descriptor?? [ 2594.966951][ T9] hub 2-1:0.0: USB hub found [ 2595.169772][ T9] hub 2-1:0.0: 1 port detected [ 2595.225080][T17576] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2595.375228][T17576] usb 5-1: Using ep0 maxpacket: 32 [ 2595.389845][T17576] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2595.408311][T17576] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2595.432112][T17576] usb 5-1: config 0 descriptor?? [ 2595.462289][T17576] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2595.829367][ T9] hub 2-1:0.0: activate --> -90 [ 2595.907651][ T5881] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 2595.924377][ T5881] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 2595.925081][ T5974] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 2595.934867][ T5881] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2595.953247][ T5881] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2595.972393][ T5881] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2595.984965][ T5881] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2596.006596][ T5669] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7699'. [ 2596.024173][ T5881] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 2596.046370][ T5881] usb 1-1: USB disconnect, device number 127 [ 2596.139852][ T5974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2596.151885][ T5974] usb 4-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 2596.164446][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2596.190922][ T5974] usb 4-1: config 0 descriptor?? [ 2596.203065][ T5663] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 2596.240001][ T5822] usb 2-1: USB disconnect, device number 6 [ 2596.640373][ T5974] saitek 0003:0738:1709.008C: report_id 1146923740 is invalid [ 2596.659148][ T5974] saitek 0003:0738:1709.008C: item 0 4 1 8 parsing failed [ 2596.661709][T17576] gspca_vc032x: reg_w err -71 [ 2596.681774][ T5974] saitek 0003:0738:1709.008C: parse failed [ 2596.688661][T17576] gspca_vc032x: I2c Bus Busy Wait 00 [ 2596.689520][ T5974] saitek 0003:0738:1709.008C: probe with driver saitek failed with error -22 [ 2596.702877][T17576] gspca_vc032x: I2c Bus Busy Wait 00 [ 2596.702895][T17576] gspca_vc032x: I2c Bus Busy Wait 00 [ 2596.736904][T17576] gspca_vc032x: I2c Bus Busy Wait 00 [ 2596.742221][T17576] gspca_vc032x: I2c Bus Busy Wait 00 [ 2596.757172][T17576] gspca_vc032x: I2c Bus Busy Wait 00 [ 2596.762572][T17576] gspca_vc032x: I2c Bus Busy Wait 00 [ 2596.778888][T17576] gspca_vc032x: I2c Bus Busy Wait 00 [ 2596.784216][T17576] gspca_vc032x: I2c Bus Busy Wait 00 [ 2596.792105][T17576] gspca_vc032x: I2c Bus Busy Wait 00 [ 2596.797888][T17576] gspca_vc032x: I2c Bus Busy Wait 00 [ 2596.813498][T17576] gspca_vc032x: I2c Bus Busy Wait 00 [ 2596.847295][T17576] gspca_vc032x: I2c Bus Busy Wait 00 [ 2596.860094][T17576] gspca_vc032x: I2c Bus Busy Wait 00 [ 2596.894976][T17576] gspca_vc032x: I2c Bus Busy Wait 00 [ 2596.907270][T17576] gspca_vc032x: I2c Bus Busy Wait 00 [ 2596.919870][T17576] gspca_vc032x: I2c Bus Busy Wait 00 [ 2596.927118][T17576] gspca_vc032x: I2c Bus Busy Wait 00 [ 2596.932439][T17576] gspca_vc032x: Unknown sensor... [ 2596.940242][T17576] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 2596.957130][T17576] usb 5-1: USB disconnect, device number 45 [ 2596.979159][ T5974] usb 4-1: USB disconnect, device number 11 [ 2597.129334][ T5680] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7702'. [ 2597.856105][ T5698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7711'. [ 2598.450432][ T5711] kvm: user requested TSC rate below hardware speed [ 2599.456425][ T5752] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7729'. [ 2599.955089][ T5974] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2600.145726][ T5974] usb 2-1: Using ep0 maxpacket: 8 [ 2600.172858][ T5974] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2600.183589][ T5974] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2600.194270][ T5974] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2600.206123][ T5974] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2600.235928][ T5974] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2600.255218][ T5974] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2600.272178][ T5974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2600.511037][ T5974] usb 2-1: GET_CAPABILITIES returned 0 [ 2600.523329][ T5974] usbtmc 2-1:16.0: can't read capabilities [ 2600.535097][ T5822] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2600.542688][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805909a000: rx timeout, send abort [ 2600.551437][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805909a000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 2600.695364][ T5781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7742'. [ 2600.736340][ T5822] usb 5-1: too many configurations: 61, using maximum allowed: 8 [ 2600.771219][ T5822] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2600.785394][T17576] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 2600.805257][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2600.813297][ T5822] usb 5-1: Product: syz [ 2600.822937][ T5881] usb 2-1: USB disconnect, device number 7 [ 2600.829914][ T5757] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 2600.839375][ T5822] usb 5-1: Manufacturer: syz [ 2600.844000][ T5822] usb 5-1: SerialNumber: syz [ 2600.844225][ T5783] usbtmc 2-1:16.0: stb usb_control_msg returned -19 [ 2601.045821][T17576] usb 1-1: Using ep0 maxpacket: 32 [ 2601.060315][T17576] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 2601.081589][T17576] usb 1-1: config 0 has no interface number 0 [ 2601.095068][T17576] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2601.113852][T17576] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2601.133263][T17576] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2601.155093][T17576] usb 1-1: Product: syz [ 2601.163622][T17576] usb 1-1: Manufacturer: syz [ 2601.183903][T17576] usb 1-1: SerialNumber: syz [ 2601.191696][T17576] usb 1-1: config 0 descriptor?? [ 2601.210121][T17576] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2601.230250][T17576] em28xx 1-1:0.132: Video interface 132 found: [ 2601.385546][ T5822] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2601.418199][ T5822] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2601.656084][T17576] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 2601.985055][ T5881] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2602.095096][T17576] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 2602.115603][T17576] em28xx 1-1:0.132: board has no eeprom [ 2602.196693][ T5881] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2602.206349][T17576] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2602.214519][T17576] em28xx 1-1:0.132: analog set to bulk mode. [ 2602.223184][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2602.235461][ T344] em28xx 1-1:0.132: Registering V4L2 extension [ 2602.294625][ T5881] usb 4-1: config 0 descriptor?? [ 2602.374002][ T5822] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 2602.393591][T17576] usb 1-1: USB disconnect, device number 2 [ 2602.404580][T17576] em28xx 1-1:0.132: Disconnecting em28xx [ 2602.415180][ T5822] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2602.473847][ T5822] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2602.496516][ T5822] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 2602.536384][ T5822] usb 5-1: USB disconnect, device number 46 [ 2602.759592][ T344] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 2602.770037][ T344] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 2602.785198][ T344] em28xx 1-1:0.132: No AC97 audio processor [ 2602.825648][ T344] usb 1-1: Decoder not found [ 2602.830275][ T344] em28xx 1-1:0.132: failed to create media graph [ 2602.854856][ T344] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 2602.936734][ T344] em28xx 1-1:0.132: Remote control support is not available for this card. [ 2602.954035][T17576] em28xx 1-1:0.132: Closing input extension [ 2602.987933][T17576] em28xx 1-1:0.132: Freeing device [ 2603.304819][ T5822] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2603.454843][ T5822] usb 5-1: Using ep0 maxpacket: 8 [ 2603.463786][ T5822] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2603.479478][ T5822] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2603.489605][ T5822] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2603.495079][T17576] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2603.508670][ T5822] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2603.538160][ T5822] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2603.540056][ T5881] usb 4-1: Cannot set autoneg [ 2603.553800][ T5881] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2603.566662][ T344] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2603.566714][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2603.623547][ T5881] usb 4-1: USB disconnect, device number 12 [ 2603.686050][T17576] usb 2-1: Using ep0 maxpacket: 32 [ 2603.697809][T17576] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2603.726575][ T344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2603.737996][ T344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2603.748351][T17576] usb 2-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 2603.757704][ T344] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2603.771374][T17576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2603.783055][T17576] usb 2-1: config 0 descriptor?? [ 2603.788470][ T344] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2603.798371][ T344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2603.819541][ T5822] usb 5-1: GET_CAPABILITIES returned 0 [ 2603.821835][ T344] usb 1-1: config 0 descriptor?? [ 2603.835090][ T5822] usbtmc 5-1:16.0: can't read capabilities [ 2604.072120][ T5881] usb 5-1: USB disconnect, device number 47 [ 2604.278334][ T344] plantronics 0003:047F:FFFF.008E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2604.428241][ T5849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2604.439390][ T5849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2604.450126][ T5822] usb 2-1: USB disconnect, device number 8 [ 2604.594863][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2604.689551][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7756'. [ 2604.758452][ T9] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2604.767983][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2604.776689][ T9] usb 3-1: Product: syz [ 2604.780937][ T9] usb 3-1: Manufacturer: syz [ 2604.785584][ T9] usb 3-1: SerialNumber: syz [ 2604.796055][ T9] usb 3-1: config 0 descriptor?? [ 2605.575508][ C1] plantronics 0003:047F:FFFF.008E: usb_submit_urb(ctrl) failed: -1 [ 2605.589179][ T5881] usb 1-1: USB disconnect, device number 3 [ 2605.735206][T17576] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2605.817627][ T9] usb 3-1: non-Atmel transceiver xxxx0447 [ 2605.819776][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7764'. [ 2605.895173][T17576] usb 2-1: Using ep0 maxpacket: 16 [ 2605.907251][T17576] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2605.922064][T17576] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2605.929117][T17576] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2605.941277][T17576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2605.951856][T17576] usb 2-1: config 0 descriptor?? [ 2606.018457][ T9] usb 3-1: Firmware version (0.0) predates our first public release. [ 2606.030854][ T9] usb 3-1: Please update to version 0.2 or newer [ 2606.040695][ T9] usb 3-1: atusb_probe: initialization failed, error = -19 [ 2606.065064][ T9] usb 3-1: USB disconnect, device number 10 [ 2606.165099][ T5822] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2606.324885][ T5822] usb 4-1: Using ep0 maxpacket: 32 [ 2606.342196][ T5822] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 2606.360691][ T5822] usb 4-1: config 0 has no interface number 0 [ 2606.370724][ T5822] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2606.395632][T17576] nzxt-smart2 0003:1E71:2009.008F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 2606.396810][ T5822] usb 4-1: config 0 interface 89 has no altsetting 0 [ 2606.436259][ T5822] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 2606.445775][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2606.459971][ T5822] usb 4-1: Product: syz [ 2606.467777][ T5822] usb 4-1: Manufacturer: syz [ 2606.481495][ T5822] usb 4-1: SerialNumber: syz [ 2606.532940][ T5822] usb 4-1: config 0 descriptor?? [ 2606.548226][ T5822] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2606.558333][ T5822] em28xx 4-1:0.89: Video interface 89 found: [ 2606.812584][ T5881] usb 2-1: USB disconnect, device number 9 [ 2606.895363][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2606.943805][ T5952] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7772'. [ 2607.058705][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2607.076134][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2607.115506][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2607.157440][ T5822] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 2607.177617][ T9] usb 3-1: Product: syz [ 2607.188850][ T9] usb 3-1: Manufacturer: syz [ 2607.194794][ T9] usb 3-1: SerialNumber: syz [ 2607.230944][ T5956] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7773'. [ 2607.656323][ T5964] input: syz1 as /devices/virtual/input/input136 [ 2607.780756][ T5822] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 2607.794048][ T5822] em28xx 4-1:0.89: board has no eeprom [ 2607.894968][ T5822] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 2607.902704][ T5822] em28xx 4-1:0.89: analog set to bulk mode. [ 2607.909901][ T5974] em28xx 4-1:0.89: Registering V4L2 extension [ 2607.969209][ T5822] usb 4-1: USB disconnect, device number 13 [ 2607.983936][ T5974] em28xx 4-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 2608.027053][ T5822] em28xx 4-1:0.89: Disconnecting em28xx [ 2608.037558][ T5974] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 2608.055458][ T5974] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 2608.062554][ T5974] em28xx 4-1:0.89: No AC97 audio processor [ 2608.090637][ T5974] usb 4-1: Decoder not found [ 2608.102028][ T5974] em28xx 4-1:0.89: failed to create media graph [ 2608.115369][ T5974] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 2608.126122][ T5974] em28xx 4-1:0.89: Registering snapshot button... [ 2608.134847][ T5881] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2608.136247][ T5974] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input137 [ 2608.204100][ T5974] em28xx 4-1:0.89: Remote control support is not available for this card. [ 2608.255542][ T5822] em28xx 4-1:0.89: Closing input extension [ 2608.266847][ T5822] em28xx 4-1:0.89: Deregistering snapshot button [ 2608.289045][ T9] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2608.300681][ T9] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 2608.311687][ T9] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 2608.324830][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 2608.331785][ T5881] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2608.355013][ T5881] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2608.388064][ T5881] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2608.398188][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2608.407990][ T5881] usb 5-1: Product: syz [ 2608.412893][ T5881] usb 5-1: Manufacturer: syz [ 2608.417646][ T5881] usb 5-1: SerialNumber: syz [ 2608.492748][ T9] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 2608.645663][ T5822] em28xx 4-1:0.89: Freeing device [ 2608.717136][ T5881] usb 5-1: 0:2 : does not exist [ 2608.759857][ T5881] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 2608.786822][ T9] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2608.845330][ T9] usb 3-1: USB disconnect, device number 11 [ 2608.923108][ T9] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 2609.031962][ T5881] usb 5-1: USB disconnect, device number 48 [ 2609.458836][T17021] udevd[17021]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2609.514246][ T5997] vivid-000: disconnect [ 2609.685360][ T5881] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 2609.839023][ T6008] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7788'. [ 2609.896428][ T6009] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7789'. [ 2609.905576][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2609.987563][ T5881] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2610.003662][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2610.103891][ T5881] usb 2-1: config 0 descriptor?? [ 2610.113115][ T5993] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2610.161615][ T5990] vivid-000: reconnect [ 2610.591041][ T5881] elan 0003:04F3:0755.0090: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 2610.623944][ T6012] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.7791'. [ 2610.775767][ T5881] usb 2-1: USB disconnect, device number 10 [ 2610.816549][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2610.886720][ T6015] fido_id[6015]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2611.015315][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 2611.041756][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2611.059596][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2611.072948][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2611.083840][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2611.095427][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2611.118031][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2611.128163][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2611.408279][ T9] usb 1-1: usb_control_msg returned -32 [ 2611.410497][ T6026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7795'. [ 2611.482753][ T6028] kvm: user requested TSC rate below hardware speed [ 2611.482812][ T6026] geneve2: entered promiscuous mode [ 2611.491636][ T6024] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 2611.504442][ T6024] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2611.507344][ T9] usbtmc 1-1:16.0: can't read capabilities [ 2611.527972][ T1161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2611.538027][ T1161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2611.549630][ T1161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2611.564996][ T1161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2611.965445][ T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 2612.235699][ T9] usb 3-1: config 145 has an invalid descriptor of length 0, skipping remainder of the config [ 2612.246369][ T9] usb 3-1: config 145 has 0 interfaces, different from the descriptor's value: 1 [ 2612.284982][ T5881] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2612.286918][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2612.302802][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2612.311175][ T9] usb 3-1: Product: syz [ 2612.321863][ T9] usb 3-1: Manufacturer: syz [ 2612.326740][ T9] usb 3-1: SerialNumber: syz [ 2612.435996][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 2612.449014][ T5881] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2612.460728][ T5881] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2612.478821][ T5881] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2612.491919][ T5881] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2612.510098][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2612.528059][ T6043] tipc: Enabling of bearer rejected, already enabled [ 2612.538241][ T5881] usb 4-1: config 0 descriptor?? [ 2612.589344][T17576] usb 1-1: USB disconnect, device number 4 [ 2612.886138][T28112] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2612.963852][ T5881] hid (null): unknown global tag 0x8c [ 2612.974800][ T5881] hid (null): unknown global tag 0xd [ 2612.980194][ T5881] hid (null): invalid report_count 22290 [ 2612.995034][ T5881] hid (null): unknown global tag 0xe [ 2613.000397][ T5881] hid (null): report_id 1783045783 is invalid [ 2613.007050][ T5881] hid (null): unknown global tag 0xe [ 2613.012425][ T5881] hid (null): global environment stack underflow [ 2613.021230][ T5881] hid (null): global environment stack underflow [ 2613.028082][ T5881] hid (null): report_id 0 is invalid [ 2613.044700][ T9] usb 3-1: USB disconnect, device number 12 [ 2613.045059][T28112] usb 5-1: Using ep0 maxpacket: 8 [ 2613.059129][T28112] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2613.067921][T28112] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2613.078268][T28112] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2613.088858][T28112] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2613.099077][T28112] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2613.151330][T28112] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2613.181262][T28112] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2613.218594][ T5881] usb 4-1: USB disconnect, device number 14 [ 2613.413821][T28112] usb 5-1: GET_CAPABILITIES returned 0 [ 2613.424999][T28112] usbtmc 5-1:16.0: can't read capabilities [ 2614.025323][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2614.034459][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2614.043523][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2614.052584][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2614.061648][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2614.072931][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2614.076690][ T6078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7815'. [ 2614.082041][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2614.092164][ T9] usb 5-1: USB disconnect, device number 49 [ 2614.100535][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2614.115358][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2614.134853][ T6078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7815'. [ 2615.032089][ T6090] netlink: 'syz.0.7818': attribute type 1 has an invalid length. [ 2615.125610][ T6093] bond4: (slave bridge7): making interface the new active one [ 2615.133518][ T6093] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 2616.454962][ T6125] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7829'. [ 2617.421812][ T6147] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7836'. [ 2618.175587][T28112] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 2618.185095][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2618.375810][T28112] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2618.387303][T28112] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2618.406238][ T9] usb 2-1: too many configurations: 61, using maximum allowed: 8 [ 2618.425301][T28112] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2618.452283][T28112] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2618.482180][T28112] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2618.495526][T28112] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2618.504005][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2618.513968][T28112] usb 4-1: Manufacturer: syz [ 2618.526266][T28112] usb 4-1: config 0 descriptor?? [ 2618.592485][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2618.606124][ T9] usb 2-1: Product: syz [ 2618.615719][ T9] usb 2-1: Manufacturer: syz [ 2618.655165][ T9] usb 2-1: SerialNumber: syz [ 2618.725112][ T5822] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2618.876129][ T5822] usb 1-1: Using ep0 maxpacket: 8 [ 2618.890827][ T5822] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 2618.905304][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2618.914379][ T5822] usb 1-1: Product: syz [ 2618.918712][ T5822] usb 1-1: Manufacturer: syz [ 2618.923544][ T5822] usb 1-1: SerialNumber: syz [ 2618.939580][ T5822] usb 1-1: config 0 descriptor?? [ 2618.959964][T28112] appleir 0003:05AC:8243.0092: unknown main item tag 0x0 [ 2618.982352][ T5822] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 2619.041598][T28112] appleir 0003:05AC:8243.0092: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 2619.085111][ T5974] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 2619.114374][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2619.153761][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2619.244944][ T5974] usb 5-1: Using ep0 maxpacket: 32 [ 2619.255679][ T5974] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2619.265457][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2619.273504][ T5974] usb 5-1: Product: syz [ 2619.278550][ T5974] usb 5-1: Manufacturer: syz [ 2619.283205][ T5974] usb 5-1: SerialNumber: syz [ 2619.295170][ T5974] usb 5-1: config 0 descriptor?? [ 2619.529206][ T5974] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 050 [ 2619.776052][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 2619.796881][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2619.815582][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2619.885099][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 2619.911101][ T9] usb 2-1: USB disconnect, device number 11 [ 2620.198934][ T6178] i2c i2c-1: failure reading status [ 2620.208579][ T9] usb 5-1: USB disconnect, device number 50 [ 2620.219559][ T5822] input: sonixj as /devices/platform/dummy_hcd.0/usb1/1-1/input/input138 [ 2620.398395][ T6194] syzkaller1: entered promiscuous mode [ 2620.403883][ T6194] syzkaller1: entered allmulticast mode [ 2620.436406][T28112] usb 1-1: USB disconnect, device number 5 [ 2621.117579][ T5974] usb 4-1: USB disconnect, device number 15 [ 2621.278239][ T6213] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7860'. [ 2622.596086][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7877'. [ 2622.648938][ T6254] erspan0: entered promiscuous mode [ 2622.665379][ T6254] macvtap0: entered promiscuous mode [ 2622.670877][ T6254] macvtap0: entered allmulticast mode [ 2622.677108][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7877'. [ 2622.678635][ T6254] erspan0: entered allmulticast mode [ 2622.761889][ T6258] erspan0: left allmulticast mode [ 2622.852364][ T6258] erspan0: left promiscuous mode [ 2623.320433][ T6270] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7881'. [ 2624.464947][T28112] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 2624.825053][T28112] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2624.845990][T28112] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2624.914605][T28112] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2624.966891][ T5881] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 2624.987112][T28112] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2625.018428][T28112] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2625.094106][T28112] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2625.112497][T28112] usb 5-1: Manufacturer: syz [ 2625.140143][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7890'. [ 2625.142048][T28112] usb 5-1: config 0 descriptor?? [ 2625.155410][ T5881] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2625.184411][ T5881] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2625.205388][ T5881] usb 3-1: can't read configurations, error -71 [ 2625.444869][T17576] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2625.594943][T17576] usb 2-1: Using ep0 maxpacket: 8 [ 2625.608681][T17576] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2625.687537][T28112] appleir 0003:05AC:8243.0093: unknown main item tag 0x0 [ 2625.694675][T17576] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2625.722535][T28112] appleir 0003:05AC:8243.0093: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 2625.734300][T17576] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2625.752291][T17576] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2625.783415][T17576] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2625.807040][T17576] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2625.841077][T17576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2626.079982][T17576] usb 2-1: GET_CAPABILITIES returned 0 [ 2626.087941][T17576] usbtmc 2-1:16.0: can't read capabilities [ 2626.592738][T17576] usb 2-1: USB disconnect, device number 12 [ 2626.934829][ T5974] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2627.086394][ T5974] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2627.097475][ T5974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2627.115193][ T5974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2627.135083][ T5974] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2627.162065][ T5974] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2627.247942][ T5974] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2627.265428][ T5974] usb 4-1: Manufacturer: syz [ 2627.282081][ T5974] usb 4-1: config 0 descriptor?? [ 2627.600124][ T6333] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7901'. [ 2627.761501][ T5974] appleir 0003:05AC:8243.0094: unknown main item tag 0x0 [ 2627.837734][T28112] usb 5-1: USB disconnect, device number 51 [ 2627.854514][ T5974] appleir 0003:05AC:8243.0094: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 2628.026694][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7904'. [ 2628.113710][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7904'. [ 2628.153067][ T6343] netlink: 'syz.4.7904': attribute type 1 has an invalid length. [ 2629.065288][T28112] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2629.226509][T28112] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2629.237718][T28112] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2629.256994][T28112] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2629.272903][T28112] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2629.282291][T28112] usb 3-1: Product: syz [ 2629.286821][T28112] usb 3-1: Manufacturer: syz [ 2629.291597][T28112] usb 3-1: SerialNumber: syz [ 2629.303076][T28112] cdc_mbim 3-1:1.0: skipping garbage [ 2629.510295][ T6357] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2629.720864][ T5881] usb 4-1: USB disconnect, device number 16 [ 2630.131381][ T6357] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2630.148142][T28112] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2630.166538][T28112] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 2630.359725][T28112] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 2630.378183][T28112] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 2630.436792][T28112] wwan wwan0: port wwan0mbim0 attached [ 2630.451696][T28112] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 02:f7:a6:b6:cd:1f [ 2630.468953][ T6392] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7920'. [ 2630.665758][ T5881] usb 3-1: USB disconnect, device number 15 [ 2630.678327][ T5881] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 2630.776975][ T5881] wwan wwan0: port wwan0mbim0 disconnected [ 2631.190179][ T6408] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7925'. [ 2632.472482][ T6435] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7933'. [ 2632.803684][ T6448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7936'. [ 2633.673978][ T6460] netlink: 'syz.3.7940': attribute type 1 has an invalid length. [ 2633.846302][ T6460] gretap2: entered allmulticast mode [ 2633.854494][ T6460] bond7: (slave gretap2): making interface the new active one [ 2633.936277][ T6460] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 2634.113507][ T6482] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7944'. [ 2634.129923][ T6487] binder: 6485:6487 ioctl c0306201 0 returned -14 [ 2634.520361][ T6497] gtp1: entered promiscuous mode [ 2635.060921][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7955'. [ 2635.167173][ T6514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7956'. [ 2635.213353][ T6515] netlink: 7 bytes leftover after parsing attributes in process `syz.4.7957'. [ 2635.245202][ T6514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7956'. [ 2636.172114][ T6537] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7962'. [ 2636.247154][ T6544] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7964'. [ 2638.089032][ T6569] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7971'. [ 2639.467946][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7978'. [ 2639.491513][ T6582] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7978'. [ 2639.520959][ T6582] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7978'. [ 2640.372285][ T6604] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7985'. [ 2640.843791][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7988'. [ 2642.629246][ T6645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8000'. [ 2642.917996][ T29] audit: type=1326 audit(1770979534.916:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.0.8003" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f97f6c code=0x0 [ 2643.103270][ T6662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8006'. [ 2644.209059][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031cc7c00: rx timeout, send abort [ 2644.717370][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031cc7c00: abort rx timeout. Force session deactivation [ 2644.745098][ T6719] fuse: root generation should be zero [ 2644.803995][ T6728] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8031'. [ 2645.355201][ T5881] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 2645.549627][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2645.568740][ T5881] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 2645.596774][ T5881] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 2645.612565][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2645.624242][ T5881] usb 1-1: config 0 descriptor?? [ 2645.630760][ T6737] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2645.678866][ T6747] syzkaller0: left promiscuous mode [ 2645.871065][ T5881] usbhid 1-1:0.0: can't add hid device: -71 [ 2645.879975][ T5881] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2645.892042][ T5881] usb 1-1: USB disconnect, device number 6 [ 2645.912215][ T5974] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 2646.228529][ T5974] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2646.236857][ T5974] usb 3-1: not running at top speed; connect to a high speed hub [ 2646.245982][ T5974] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2646.256504][ T5974] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2646.294625][ T5974] usb 3-1: string descriptor 0 read error: -22 [ 2646.301092][ T5974] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2646.318541][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2646.348240][ T5974] usb 3-1: 0:2 : does not exist [ 2646.395122][ T5881] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2646.567464][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 2646.575459][ T5881] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 2646.595899][ T5881] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 2646.612022][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2646.650165][ T5881] usb 1-1: config 0 descriptor?? [ 2646.921547][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8049'. [ 2647.078146][ T5881] hid-multitouch 0003:0EEF:72C4.0095: unknown main item tag 0x0 [ 2647.088609][ T5881] hid-multitouch 0003:0EEF:72C4.0095: unknown main item tag 0x0 [ 2647.101471][ T5881] hid-multitouch 0003:0EEF:72C4.0095: unknown main item tag 0x0 [ 2647.132626][ T5881] hid-multitouch 0003:0EEF:72C4.0095: unknown main item tag 0x0 [ 2647.152022][ T5881] hid-multitouch 0003:0EEF:72C4.0095: unknown main item tag 0x0 [ 2647.182822][ T5881] hid-multitouch 0003:0EEF:72C4.0095: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0 [ 2647.353344][T28112] usb 1-1: USB disconnect, device number 7 [ 2647.383463][ T6778] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8050'. [ 2647.457205][ T6777] fido_id[6777]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2647.515323][ T5881] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 2647.678985][ T5881] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2647.688335][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2647.696923][ T5881] usb 4-1: Product: syz [ 2647.701104][ T5881] usb 4-1: Manufacturer: syz [ 2647.717695][ T5881] usb 4-1: SerialNumber: syz [ 2647.731763][ T5881] usb 4-1: config 0 descriptor?? [ 2648.072414][ T5974] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2648.112186][ T5974] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 2648.210107][ T5881] airspy 4-1:0.0: Board ID: 00 [ 2648.225134][ T5881] airspy 4-1:0.0: Firmware version: [ 2648.263372][ T5974] usb 3-1: USB disconnect, device number 16 [ 2649.178175][ T6815] KVM: debugfs: duplicate directory 6815-4 [ 2649.325964][ T5881] airspy 4-1:0.0: usb_control_msg() failed -71 request 10 [ 2649.345761][ T5881] airspy 4-1:0.0: Registered as swradio24 [ 2649.400138][ T5881] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2649.474960][ T5881] usb 4-1: USB disconnect, device number 17 [ 2650.000894][ T6836] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8070'. [ 2650.335082][ T5881] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2650.792016][ T5881] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2650.803533][ T5881] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2650.814322][ T5881] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2650.824016][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2650.847147][ T6840] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2650.860363][ T5881] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2651.143945][ T5881] usb 4-1: USB disconnect, device number 18 [ 2651.244399][ T6852] syz_tun: entered allmulticast mode [ 2651.270688][ T6851] syz_tun: left allmulticast mode [ 2651.837579][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.845156][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.972626][ T6882] syzkaller1: entered promiscuous mode [ 2652.997273][ T6882] syzkaller1: entered allmulticast mode [ 2653.222764][ T6895] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8092'. [ 2653.552790][ T6905] netlink: 27 bytes leftover after parsing attributes in process `syz.2.8096'. [ 2653.627208][ T29] audit: type=1326 audit(1770979545.626:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.0.8097" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f97f6c code=0x0 [ 2654.344984][ T5881] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2654.496580][ T5881] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2654.514830][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2654.535330][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2654.545587][ T5881] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2654.565032][ T5881] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2654.574093][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2654.597815][ T5881] usb 4-1: config 0 descriptor?? [ 2655.045544][ T5881] plantronics 0003:047F:FFFF.0096: ignoring exceeding usage max [ 2655.149442][ T5881] plantronics 0003:047F:FFFF.0096: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2655.207016][ T29] audit: type=1800 audit(1770979547.206:2239): pid=6946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8112" name=14 dev="tmpfs" ino=8660 res=0 errno=0 [ 2656.121892][ T5881] usb 4-1: USB disconnect, device number 19 [ 2656.293430][ T29] audit: type=1326 audit(1770979548.286:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.2.8115" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f84f6c code=0x0 [ 2656.637702][ T6967] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8117'. [ 2657.130928][ T3493] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2657.185983][T31305] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2657.346467][T31305] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2657.356753][T31305] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2657.383256][T31305] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2657.401199][T31305] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2657.465486][ T6978] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8122'. [ 2657.799086][ T3493] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2657.943316][ T3493] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2658.216708][ T3493] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2658.633989][ T6981] chnl_net:caif_netlink_parms(): no params data found [ 2658.876104][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8129'. [ 2658.969445][ T3493] veth0_to_bond: left allmulticast mode [ 2658.969520][ T3493] veth0_to_bond: left promiscuous mode [ 2658.971747][ T3493] bridge16: port 2(veth0_to_bond) entered disabled state [ 2658.975443][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8130'. [ 2658.981512][ T3493] veth3: left allmulticast mode [ 2658.981535][ T3493] veth3: left promiscuous mode [ 2658.981720][ T3493] bridge16: port 1(veth3) entered disabled state [ 2659.408684][ T7023] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8134'. [ 2659.455575][T31305] Bluetooth: hci4: command tx timeout [ 2659.566271][ T3493] bond3 (unregistering): (slave gretap2): Releasing active interface [ 2660.388472][ T3493] bond1 (unregistering): Released all slaves [ 2660.400800][ T3493] bond0 (unregistering): Released all slaves [ 2660.412691][ T3493] bond2 (unregistering): Released all slaves [ 2660.429965][ T3493] bond3 (unregistering): Released all slaves [ 2660.441971][ T3493] bond4 (unregistering): Released all slaves [ 2660.501816][ T6981] bridge0: port 1(bridge_slave_0) entered blocking state [ 2660.525000][ T6981] bridge0: port 1(bridge_slave_0) entered disabled state [ 2660.554552][ T6981] bridge_slave_0: entered allmulticast mode [ 2660.587863][ T6981] bridge_slave_0: entered promiscuous mode [ 2660.629545][ T6981] bridge0: port 2(bridge_slave_1) entered blocking state [ 2660.647561][ T6981] bridge0: port 2(bridge_slave_1) entered disabled state [ 2660.655035][ T6981] bridge_slave_1: entered allmulticast mode [ 2660.672965][ T6981] bridge_slave_1: entered promiscuous mode [ 2660.732453][ T3493] tipc: Disabling bearer [ 2660.872687][ T3493] tipc: Disabling bearer [ 2660.896282][ T7039] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8139'. [ 2660.953727][ T3493] tipc: Left network mode [ 2661.058948][ T6981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2661.083878][ T6981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2661.266315][ T6981] team0: Port device team_slave_0 added [ 2661.316841][ T6981] team0: Port device team_slave_1 added [ 2661.515093][T31305] Bluetooth: hci4: command tx timeout [ 2661.620869][ T6981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2661.648872][ T6981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2661.707372][ T6981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2661.768133][ T6981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2661.797779][ T6981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2661.890924][ T6981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2662.050616][ T6981] hsr_slave_0: entered promiscuous mode [ 2662.061792][ T6981] hsr_slave_1: entered promiscuous mode [ 2662.074601][ T6981] debugfs: 'hsr0' already exists in 'hsr' [ 2662.103150][ T6981] Cannot create hsr debugfs directory [ 2662.127552][ T3493] hsr_slave_0: left promiscuous mode [ 2662.148876][ T3493] hsr_slave_1: left promiscuous mode [ 2662.165533][ T5974] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2662.368518][ T5974] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2662.388753][ T5974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2662.421414][ T3493] team0 (unregistering): Port device team_slave_1 removed [ 2662.436392][ T5974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2662.465114][ T5974] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2662.486895][ T3493] team0 (unregistering): Port device team_slave_0 removed [ 2662.508899][ T5974] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2662.529347][ T5974] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2662.555041][ T5974] usb 4-1: Manufacturer: syz [ 2662.582594][ T7077] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8147'. [ 2662.602723][ T5974] usb 4-1: config 0 descriptor?? [ 2662.777894][ T7081] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8148'. [ 2663.032263][ T5974] appleir 0003:05AC:8243.0097: unknown main item tag 0x0 [ 2663.045838][ T5974] appleir 0003:05AC:8243.0097: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 2663.595394][T31305] Bluetooth: hci4: command tx timeout [ 2663.802598][ T6981] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2663.849928][T28112] usb 4-1: USB disconnect, device number 20 [ 2663.851467][ T3493] IPVS: stop unused estimator thread 0... [ 2663.866409][ T6981] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2663.962039][ T6981] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2664.006883][ T6981] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2664.132393][ T6981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2664.188115][ T6981] 8021q: adding VLAN 0 to HW filter on device team0 [ 2664.223738][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 2664.230966][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2664.277370][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 2664.284550][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2664.421581][ T6981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2664.532170][ T6981] veth0_vlan: entered promiscuous mode [ 2664.563933][ T6981] veth1_vlan: entered promiscuous mode [ 2664.603104][ T6981] veth0_macvtap: entered promiscuous mode [ 2664.614062][ T6981] veth1_macvtap: entered promiscuous mode [ 2664.640429][ T6981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2664.656117][ T6981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2664.673241][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2664.693281][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2664.716248][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2664.734205][ T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2664.806285][T28112] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2664.860946][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2664.886871][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2664.914961][ T7133] input: syz0 as /devices/virtual/input/input140 [ 2664.961937][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2664.976046][T28112] usb 1-1: Using ep0 maxpacket: 8 [ 2664.986053][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2664.987002][T28112] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2665.016770][T28112] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2665.028356][T28112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2665.044197][T28112] usb 1-1: config 0 descriptor?? [ 2665.288159][T28112] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2665.676272][T31305] Bluetooth: hci4: command tx timeout [ 2665.750985][T28112] usb 1-1: USB disconnect, device number 8 [ 2665.825352][ T7157] kvm: vcpu 260: requested lapic timer restore with starting count register 0x390=3 (24 ns) > initial count (8 ns). Using initial count to start timer. [ 2665.878601][ T7157] kvm: vcpu 260: requested lapic timer restore with starting count register 0x390=3045449589 (48727193424 ns) > initial count (41231103376 ns). Using initial count to start timer. [ 2666.215867][ T7172] loop4: detected capacity change from 0 to 7 [ 2666.251312][T17021] Dev loop4: unable to read RDB block 7 [ 2666.257642][T17021] loop4: unable to read partition table [ 2666.263622][T17021] loop4: partition table beyond EOD, truncated [ 2666.282517][ T7172] Dev loop4: unable to read RDB block 7 [ 2666.290186][ T7172] loop4: unable to read partition table [ 2666.297826][ T7172] loop4: partition table beyond EOD, truncated [ 2666.304354][ T7172] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2666.433778][ T7182] sctp: [Deprecated]: syz.4.8170 (pid 7182) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2666.433778][ T7182] Use struct sctp_sack_info instead [ 2666.450675][T31853] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2666.482689][ T7182] sctp: [Deprecated]: syz.4.8170 (pid 7182) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2666.482689][ T7182] Use struct sctp_sack_info instead [ 2666.584455][ T7184] kvm: user requested TSC rate below hardware speed [ 2666.616434][T31853] usb 3-1: Using ep0 maxpacket: 32 [ 2666.626836][T31853] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 2666.653681][T31853] usb 3-1: config 0 has no interface number 0 [ 2666.674572][T31853] usb 3-1: config 0 interface 89 has no altsetting 0 [ 2666.707023][T31853] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 2666.724854][T31853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2666.754977][T31853] usb 3-1: Product: syz [ 2666.759326][T31853] usb 3-1: Manufacturer: syz [ 2666.796178][T31853] usb 3-1: SerialNumber: syz [ 2666.816054][T31853] usb 3-1: config 0 descriptor?? [ 2666.848662][T31853] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2666.874556][T31853] em28xx 3-1:0.89: Video interface 89 found: bulk [ 2667.472338][T31853] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 2668.407842][T31853] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 2668.427157][T31853] em28xx 3-1:0.89: board has no eeprom [ 2668.505171][T31853] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 2668.512676][T31853] em28xx 3-1:0.89: analog set to bulk mode. [ 2668.521265][ T5822] em28xx 3-1:0.89: Registering V4L2 extension [ 2668.609335][T31853] usb 3-1: USB disconnect, device number 17 [ 2668.647288][T31853] em28xx 3-1:0.89: Disconnecting em28xx [ 2668.653069][ T5822] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 2668.685001][ T5822] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 2668.693515][ T5822] em28xx 3-1:0.89: No AC97 audio processor [ 2668.718724][ T5822] usb 3-1: Decoder not found [ 2668.723357][ T5822] em28xx 3-1:0.89: failed to create media graph [ 2668.765796][ T5822] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 2668.786014][ T5822] em28xx 3-1:0.89: Registering snapshot button... [ 2668.805025][ T5822] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input141 [ 2668.828169][ T5822] em28xx 3-1:0.89: Remote control support is not available for this card. [ 2668.878415][T31853] em28xx 3-1:0.89: Closing input extension [ 2668.884267][T31853] em28xx 3-1:0.89: Deregistering snapshot button [ 2668.998095][T31853] em28xx 3-1:0.89: Freeing device [ 2669.018807][ T7239] netlink: 'syz.4.8183': attribute type 4 has an invalid length. [ 2669.276275][ T7250] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8188'. [ 2669.493365][ T7256] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8186'. [ 2669.565331][T31853] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2669.774923][T31853] usb 4-1: Using ep0 maxpacket: 32 [ 2669.781937][T31853] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2669.792304][T31853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2669.821859][T31853] usb 4-1: config 0 descriptor?? [ 2669.839250][T31853] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2670.837128][ T7278] netlink: 'syz.4.8197': attribute type 4 has an invalid length. [ 2670.851343][ T7278] netlink: 'syz.4.8197': attribute type 4 has an invalid length. [ 2670.934813][ T5822] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2671.094915][ T5822] usb 6-1: Using ep0 maxpacket: 16 [ 2671.102193][ T5822] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2671.114132][ T5822] usb 6-1: config 1 has no interface number 1 [ 2671.122010][ T5822] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2671.133487][ T5822] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2671.156203][ T5822] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2671.170956][ T5822] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2671.181514][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2671.191791][ T5822] usb 6-1: Product: syz [ 2671.198497][ T5822] usb 6-1: Manufacturer: syz [ 2671.203413][ T5822] usb 6-1: SerialNumber: syz [ 2671.244985][T17576] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2671.419933][T17576] usb 5-1: Using ep0 maxpacket: 32 [ 2671.428192][T17576] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 2671.436889][T17576] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2671.475072][T17576] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2671.486770][T31853] gspca_sunplus: reg_w_riv err -71 [ 2671.492151][T31853] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 2671.492289][T17576] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2671.516060][T17576] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2671.517855][T31853] usb 4-1: USB disconnect, device number 21 [ 2671.531259][T17576] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2671.581550][T17576] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2671.607207][T17576] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2671.624540][T17576] usb 5-1: config 0 descriptor?? [ 2671.650664][ T5822] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 2671.679185][ T7284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8200'. [ 2671.848397][T17576] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2672.095916][ T7295] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8204'. [ 2672.257305][T27990] usb 5-1: USB disconnect, device number 52 [ 2672.307213][T27990] usblp0: removed [ 2672.463179][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8205'. [ 2672.948568][ T7315] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8207'. [ 2672.963843][ T5822] usb 6-1: USB disconnect, device number 2 [ 2673.044537][T24569] udevd[24569]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2673.940063][ T7337] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8217'. [ 2674.944938][ T5822] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2674.958490][ T7346] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2675.040642][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8223'. [ 2675.085142][ T7351] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2675.119726][ T7351] macvlan1: entered promiscuous mode [ 2675.148593][ T5822] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2675.157827][ T5822] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2675.171504][ T7351] macvlan1: entered allmulticast mode [ 2675.187518][ T5822] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2675.214277][ T7351] bond4: entered promiscuous mode [ 2675.220007][ T5822] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2675.245754][ T7351] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 2675.253170][ T5822] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2675.266712][ T5822] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2675.289804][ T7351] bond4: left promiscuous mode [ 2675.295230][T17576] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2675.299509][ T5822] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2675.463969][ T7366] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8227'. [ 2675.486941][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2675.507810][ T5822] usb 5-1: Product: syz [ 2675.513379][ T5822] usb 5-1: Manufacturer: syz [ 2675.513518][T17576] usb 6-1: Using ep0 maxpacket: 8 [ 2675.527263][ T7341] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2675.563644][T17576] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2675.587677][ T5822] cdc_wdm 5-1:1.0: skipping garbage [ 2675.597247][ T5822] cdc_wdm 5-1:1.0: skipping garbage [ 2675.597314][T17576] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2675.628155][ T5822] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2675.638314][T17576] usb 6-1: Product: syz [ 2675.638998][ T5822] cdc_wdm 5-1:1.0: Unknown control protocol [ 2675.668908][T17576] usb 6-1: Manufacturer: syz [ 2675.678022][T17576] usb 6-1: SerialNumber: syz [ 2675.718947][T17576] usb 6-1: config 0 descriptor?? [ 2675.831109][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2675.837766][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2675.844631][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2675.851259][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2675.857558][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2675.864193][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2675.870905][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2675.877608][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2675.883996][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2675.890638][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2675.897300][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2675.903928][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2675.910366][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2675.917004][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2675.923823][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2675.930620][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2675.937427][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2675.944045][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2675.950320][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2675.956925][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2675.969388][T17576] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2676.186420][ T5881] usb 5-1: USB disconnect, device number 53 [ 2676.186569][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2676.417538][ T7375] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 2676.444407][ T7375] kvm: apic: phys broadcast and lowest prio [ 2676.798169][ T7384] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8230'. [ 2677.035554][T17576] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2677.126909][ T7393] tipc: Resetting bearer [ 2677.175013][ T7394] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8234'. [ 2677.308061][T17576] usb 6-1: USB disconnect, device number 3 [ 2677.924369][ T7402] netlink: 'syz.3.8237': attribute type 4 has an invalid length. [ 2679.172753][ T7439] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8246'. [ 2679.615074][T17576] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2679.805845][ T5881] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 2679.817411][T17576] usb 6-1: Using ep0 maxpacket: 8 [ 2679.831398][T17576] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2679.860264][T17576] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2679.895312][T17576] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2679.925213][T17576] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2679.960789][T17576] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2679.971644][ T5881] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2679.991234][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2680.002899][T17576] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2680.073403][ T5881] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2680.111699][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2680.159193][ T5881] usb 4-1: config 0 descriptor?? [ 2680.169526][ T7445] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2680.213264][ T5881] hub 4-1:0.0: USB hub found [ 2680.318538][T17576] usb 6-1: GET_CAPABILITIES returned 0 [ 2680.324138][T17576] usbtmc 6-1:16.0: can't read capabilities [ 2680.407069][ T5881] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2680.544815][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2680.709875][T17576] usb 6-1: USB disconnect, device number 4 [ 2680.812042][ T5881] usbhid 4-1:0.0: can't add hid device: -71 [ 2680.822623][ T5881] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2680.865859][ T5881] usb 4-1: USB disconnect, device number 22 [ 2713.277130][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.283723][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2774.717455][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.723776][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2781.924763][T31305] Bluetooth: hci4: command 0x0406 tx timeout [ 2836.158259][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.164581][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2897.606994][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.613671][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.036988][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.043305][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2975.275240][T26811] ------------[ cut here ]------------ [ 2975.281381][T26811] time_after(jiffies, timeout) [ 2975.281407][T26811] WARNING: io_uring/io_uring.c:2341 at io_ring_exit_work+0x4a3/0x960, CPU#1: kworker/u8:1/26811 [ 2975.296681][T26811] Modules linked in: [ 2975.301173][T26811] CPU: 1 UID: 0 PID: 26811 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2975.312757][T26811] Tainted: [L]=SOFTLOCKUP [ 2975.317219][T26811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2975.327311][T26811] Workqueue: iou_exit io_ring_exit_work [ 2975.332871][T26811] RIP: 0010:io_ring_exit_work+0x4a3/0x960 [ 2975.338857][T26811] Code: c6 05 2d dc cf 0e 01 48 c7 c7 20 43 26 8c be 25 00 00 00 48 c7 c2 e0 3e 26 8c e8 c8 b1 75 00 e9 88 fe ff ff e8 0e 45 99 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9f c7 84 24 b0 00 00 00 [ 2975.358821][T26811] RSP: 0018:ffffc9000512f960 EFLAGS: 00010293 [ 2975.365340][T26811] RAX: ffffffff812afe12 RBX: 0000000100041458 RCX: ffff888052efdac0 [ 2975.373306][T26811] RDX: 0000000000000000 RSI: fffffffffffffffb RDI: 0000000000000000 [ 2975.381328][T26811] RBP: ffffc9000512faf0 R08: ffffc9000512f8e7 R09: 1ffff92000a25f1c [ 2975.389392][T26811] R10: dffffc0000000000 R11: fffff52000a25f1d R12: dffffc0000000000 [ 2975.397639][T26811] R13: 0000000100041453 R14: 0000000000002000 R15: ffff888077f62000 [ 2975.405636][T26811] FS: 0000000000000000(0000) GS:ffff8881255a0000(0000) knlGS:0000000000000000 [ 2975.414650][T26811] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2975.421254][T26811] CR2: 000055d67020c168 CR3: 000000000e54a000 CR4: 00000000003526f0 [ 2975.429376][T26811] Call Trace: [ 2975.432639][T26811] [ 2975.435610][T26811] ? __pfx_io_ring_exit_work+0x10/0x10 [ 2975.441083][T26811] ? process_scheduled_works+0xa0f/0x17a0 [ 2975.446838][T26811] ? process_scheduled_works+0xa0f/0x17a0 [ 2975.452560][T26811] process_scheduled_works+0xaec/0x17a0 [ 2975.458379][T26811] ? __pfx_process_scheduled_works+0x10/0x10 [ 2975.464353][T26811] ? assign_work+0x3d5/0x5e0 [ 2975.468993][T26811] worker_thread+0xa50/0xfc0 [ 2975.473594][T26811] kthread+0x388/0x470 [ 2975.477715][T26811] ? __pfx_worker_thread+0x10/0x10 [ 2975.482830][T26811] ? __pfx_kthread+0x10/0x10 [ 2975.487680][T26811] ret_from_fork+0x51e/0xb90 [ 2975.492263][T26811] ? __pfx_ret_from_fork+0x10/0x10 [ 2975.497414][T26811] ? __switch_to+0xc7d/0x1400 [ 2975.502100][T26811] ? __pfx_kthread+0x10/0x10 [ 2975.506728][T26811] ret_from_fork_asm+0x1a/0x30 [ 2975.511505][T26811] [ 2975.514521][T26811] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2975.521788][T26811] CPU: 1 UID: 0 PID: 26811 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2975.532898][T26811] Tainted: [L]=SOFTLOCKUP [ 2975.537212][T26811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2975.547262][T26811] Workqueue: iou_exit io_ring_exit_work [ 2975.552819][T26811] Call Trace: [ 2975.556085][T26811] [ 2975.559003][T26811] vpanic+0x56c/0xa60 [ 2975.562976][T26811] ? __pfx__printk+0x10/0x10 [ 2975.567548][T26811] ? __pfx_vpanic+0x10/0x10 [ 2975.572038][T26811] ? is_bpf_text_address+0x292/0x2b0 [ 2975.577308][T26811] ? is_bpf_text_address+0x26/0x2b0 [ 2975.582498][T26811] panic+0xc5/0xd0 [ 2975.586217][T26811] ? __pfx_panic+0x10/0x10 [ 2975.590648][T26811] ? ret_from_fork_asm+0x1a/0x30 [ 2975.595597][T26811] __warn+0x315/0x4a0 [ 2975.599582][T26811] ? io_ring_exit_work+0x4a3/0x960 [ 2975.604746][T26811] ? io_ring_exit_work+0x4a3/0x960 [ 2975.609847][T26811] __report_bug+0x29a/0x540 [ 2975.614416][T26811] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2975.620304][T26811] ? io_ring_exit_work+0x4a3/0x960 [ 2975.625412][T26811] ? __pfx___report_bug+0x10/0x10 [ 2975.630421][T26811] ? trace_contention_end+0x39/0x100 [ 2975.635696][T26811] ? __mutex_lock+0x319/0x1300 [ 2975.640512][T26811] ? io_ring_exit_work+0x41b/0x960 [ 2975.645621][T26811] ? io_ring_exit_work+0x4a3/0x960 [ 2975.650724][T26811] report_bug+0x16a/0x220 [ 2975.655128][T26811] ? io_ring_exit_work+0x4a3/0x960 [ 2975.660224][T26811] ? io_ring_exit_work+0x4a5/0x960 [ 2975.665471][T26811] handle_bug+0x98/0x200 [ 2975.669722][T26811] exc_invalid_op+0x1a/0x50 [ 2975.674227][T26811] asm_exc_invalid_op+0x1a/0x20 [ 2975.679079][T26811] RIP: 0010:io_ring_exit_work+0x4a3/0x960 [ 2975.684787][T26811] Code: c6 05 2d dc cf 0e 01 48 c7 c7 20 43 26 8c be 25 00 00 00 48 c7 c2 e0 3e 26 8c e8 c8 b1 75 00 e9 88 fe ff ff e8 0e 45 99 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9f c7 84 24 b0 00 00 00 [ 2975.704466][T26811] RSP: 0018:ffffc9000512f960 EFLAGS: 00010293 [ 2975.710521][T26811] RAX: ffffffff812afe12 RBX: 0000000100041458 RCX: ffff888052efdac0 [ 2975.718502][T26811] RDX: 0000000000000000 RSI: fffffffffffffffb RDI: 0000000000000000 [ 2975.726465][T26811] RBP: ffffc9000512faf0 R08: ffffc9000512f8e7 R09: 1ffff92000a25f1c [ 2975.734424][T26811] R10: dffffc0000000000 R11: fffff52000a25f1d R12: dffffc0000000000 [ 2975.742640][T26811] R13: 0000000100041453 R14: 0000000000002000 R15: ffff888077f62000 [ 2975.750612][T26811] ? io_ring_exit_work+0x4a2/0x960 [ 2975.755733][T26811] ? __pfx_io_ring_exit_work+0x10/0x10 [ 2975.761242][T26811] ? process_scheduled_works+0xa0f/0x17a0 [ 2975.767061][T26811] ? process_scheduled_works+0xa0f/0x17a0 [ 2975.773058][T26811] process_scheduled_works+0xaec/0x17a0 [ 2975.778609][T26811] ? __pfx_process_scheduled_works+0x10/0x10 [ 2975.784583][T26811] ? assign_work+0x3d5/0x5e0 [ 2975.789164][T26811] worker_thread+0xa50/0xfc0 [ 2975.793758][T26811] kthread+0x388/0x470 [ 2975.797815][T26811] ? __pfx_worker_thread+0x10/0x10 [ 2975.802909][T26811] ? __pfx_kthread+0x10/0x10 [ 2975.807490][T26811] ret_from_fork+0x51e/0xb90 [ 2975.812086][T26811] ? __pfx_ret_from_fork+0x10/0x10 [ 2975.817185][T26811] ? __switch_to+0xc7d/0x1400 [ 2975.821851][T26811] ? __pfx_kthread+0x10/0x10 [ 2975.826520][T26811] ret_from_fork_asm+0x1a/0x30 [ 2975.831387][T26811] [ 2975.834785][T26811] Kernel Offset: disabled [ 2975.839100][T26811] Rebooting in 86400 seconds..