last executing test programs: 12.768705237s ago: executing program 4 (id=3674): unshare(0x22020600) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480020009", @ANYBLOB="f7", @ANYRESDEC], 0x0) 11.16055798s ago: executing program 0 (id=3679): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)={0x5c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 10.885667515s ago: executing program 4 (id=3680): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 10.852162827s ago: executing program 0 (id=3681): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x84) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r4, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r5 = syz_open_dev$usbfs(0x0, 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, 0x0, 0x0) 10.668568876s ago: executing program 4 (id=3682): socket$nl_crypto(0x10, 0x3, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x8) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0xfffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r3, 0x1000000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000020000006d0500000200000002c80000", @ANYRES32, @ANYBLOB="000000000000000000000000000000ff0f000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x80000300, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r5, 0x0, 0x0, 0x40, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r6, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2000c010) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x2, 0x49, 0x7, 0x4}, {0x7, 0x9, 0x40, 0x401}, {0x41, 0xf, 0x9, 0x1}, {0xfff, 0x2, 0x7}]}) 9.322679106s ago: executing program 4 (id=3683): syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) 8.770019115s ago: executing program 3 (id=3684): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x84) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r4, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r5 = syz_open_dev$usbfs(0x0, 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, 0x0, 0x0) 7.571106907s ago: executing program 4 (id=3686): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x2, 0x2, {0x0, 0xb}, 0x6, 0x6}) r3 = syz_open_dev$mouse(0x0, 0x0, 0x2042) write$dsp(r3, 0x0, 0x58) socket$nl_route(0x10, 0x3, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c6}, 0x984e45ff733bc95) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_setup(0xa0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0x2fe) 7.347766358s ago: executing program 1 (id=3687): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, r3, 0x1, 0x170bd2c, 0x8000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x20}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40400) 6.808873157s ago: executing program 0 (id=3688): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x14, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 5.748602811s ago: executing program 0 (id=3690): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x84) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r4, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r5 = syz_open_dev$usbfs(0x0, 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, 0x0, 0x0) 5.478784135s ago: executing program 2 (id=3691): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)={0x5c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 5.297971065s ago: executing program 2 (id=3692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4.948556473s ago: executing program 3 (id=3693): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000480)) 4.793286271s ago: executing program 2 (id=3694): socket$inet6_udp(0xa, 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) inotify_init1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x19) r1 = syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x7f3d, 0xc00, 0x6, 0x42f6}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r2, r3, r4, 0x0) io_uring_enter(r1, 0x742f, 0x77ae, 0x1, 0x0, 0x0) 4.399726061s ago: executing program 3 (id=3695): socket$nl_crypto(0x10, 0x3, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x8) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0xfffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r3, 0x1000000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000020000006d0500000200000002c80000", @ANYRES32, @ANYBLOB="000000000000000000000000000000ff0f000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x80000300, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r5, 0x0, 0x0, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) bpf$BPF_GET_MAP_INFO(0x4, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2000c010) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x2, 0x49, 0x7, 0x4}, {0x7, 0x9, 0x40, 0x401}, {0x41, 0xf, 0x9, 0x1}, {0xfff, 0x2, 0x7}]}) 4.164235974s ago: executing program 0 (id=3696): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.963634024s ago: executing program 2 (id=3697): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, 0x0) 3.176760895s ago: executing program 3 (id=3698): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="240012800b00010062726964676500"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) 3.050761471s ago: executing program 2 (id=3699): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.647015552s ago: executing program 1 (id=3700): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x14, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 2.528634898s ago: executing program 3 (id=3701): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r2, 0x5420, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000240)) r4 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0x4}, 'port1\x00', 0x786520dbf34c80fe, 0x20a03, 0x20000004, 0x0, 0x0, 0x4, 0x400, 0x0, 0x7, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(0xffffffffffffffff, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000007fc0)={0x2020}, 0x2020) openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x123482, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f00000021c0)={0x2020}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') 2.320543139s ago: executing program 4 (id=3702): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x48000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = fsopen(&(0x7f0000000200)='binder\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b703000007fffff5850000006900000095"], &(0x7f0000005d80)='GPL\x00', 0xc}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000200)=r8, 0x4) sendmsg$nl_xfrm(r6, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x1090}, 0x40080) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r10, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) close_range(r9, r10, 0x0) 1.947840829s ago: executing program 1 (id=3703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000180)="a40141", 0x3, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x20000, @mcast2, 0x4}, 0x1c) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd700000dcdf250700000005fe018008000700", @ANYBLOB='\b'], 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008a00000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000100), 0x0) setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @private2, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @loopback}}}}}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r9, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r10], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f0000000f40)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011140100000000000000000008004a00000000f107004b"], 0x20}}, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000100)={'batadv0\x00', 0x1000}) 1.392292148s ago: executing program 3 (id=3704): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x19, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000340)=0xa) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000540)=0x1) io_setup(0x8, &(0x7f0000004200)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x2, 0x0, &(0x7f00000000c0)) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000000c0)={0x0, @bt={0x7, 0x5, 0x0, 0x2, 0x1, 0x5e, 0x1, 0x1, 0x2, 0x1, 0x0, 0x38565665, 0x7fc, 0x401, 0x0, 0x0, {0x3, 0x1ff}, 0x2, 0x8}}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_emit_ethernet(0x5e, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbb8aaaaaaaaa2a86dd6000000000283aff000000fafffffffffffffefffffffffffe8000000000000000000000000000aa890090780000000000000000000000000000000000000000007034b875c290295def010000"], 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000180)=@x={0x94, 0x7, "ee1add60fcca"}) r4 = syz_open_dev$sndctrl(0x0, 0x188, 0xc8081) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000004580)=0xffffffff) 911.322232ms ago: executing program 1 (id=3705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 835.655156ms ago: executing program 0 (id=3706): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x84) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r4, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r5 = syz_open_dev$usbfs(0x0, 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, 0x0, 0x0) 603.418888ms ago: executing program 1 (id=3707): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000480)={0x6, 0x0, [{0x7, 0xffffffff, 0x1, 0x2, 0x6, 0x6, 0x2}, {0x1, 0x4, 0x6, 0x8, 0x27, 0x7, 0x5}, {0xb, 0xade2, 0x0, 0x3ff, 0x7ffffdff, 0x8008, 0xffff}, {0x80000019, 0xe5f, 0x1, 0x4, 0x2000df1, 0x6, 0x80000001}, {0x80000000, 0x2bb, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}]}) 367.61703ms ago: executing program 2 (id=3708): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) shutdown(r2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) 0s ago: executing program 1 (id=3709): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xa, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e25f01403767010066de0102030109026800020002000009044a00037d998b07052406000005240000000d"], 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x2024) kernel console output (not intermixed with test programs): 3] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1264.893630][T16472] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1264.906888][T16473] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1264.966522][T16473] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.008575][T16473] usb 5-1: Product: syz [ 1265.047999][T16473] usb 5-1: Manufacturer: syz [ 1265.068793][T16473] usb 5-1: SerialNumber: syz [ 1265.149464][T16472] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1265.346476][T16472] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1265.365979][T16472] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1265.381882][T16473] usb 5-1: config 0 descriptor?? [ 1265.393736][T16472] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1265.413715][T16472] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1265.720366][T16472] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1265.735972][T16472] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1265.752467][T16472] usb 1-1: Product: syz [ 1265.761488][T16472] usb 1-1: Manufacturer: syz [ 1265.778418][T16472] cdc_wdm 1-1:1.0: skipping garbage [ 1265.787668][T16472] cdc_wdm 1-1:1.0: skipping garbage [ 1265.801832][T16472] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1265.826701][T16472] cdc_wdm 1-1:1.0: Unknown control protocol [ 1265.982717][ T3599] usb 1-1: USB disconnect, device number 108 [ 1266.086254][T17923] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3227'. [ 1267.302626][T17945] netlink: 'syz.2.3234': attribute type 1 has an invalid length. [ 1267.524302][T17952] netlink: 'syz.3.3235': attribute type 1 has an invalid length. [ 1267.661816][T17953] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1267.760671][T17953] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1267.898532][T16472] usb 5-1: USB disconnect, device number 124 [ 1267.989581][T13413] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1268.146003][T17974] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3241'. [ 1268.194000][ T3599] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1268.198207][T17974] netlink: 'syz.4.3241': attribute type 75 has an invalid length. [ 1268.210022][T13413] usb 3-1: Using ep0 maxpacket: 32 [ 1268.219298][T13413] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 1268.250046][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3242'. [ 1268.250094][T13413] usb 3-1: config 0 has no interface number 0 [ 1268.276584][T17976] device syzkaller0 entered promiscuous mode [ 1268.296384][T13413] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1268.327216][T13413] usb 3-1: config 0 interface 89 has no altsetting 0 [ 1268.345687][T13413] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1268.374105][ T3599] usb 1-1: device descriptor read/64, error -71 [ 1268.410896][T13413] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.430787][T17979] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 1268.443561][T13413] usb 3-1: Product: syz [ 1268.463062][T13413] usb 3-1: Manufacturer: syz [ 1268.468330][T13413] usb 3-1: SerialNumber: syz [ 1268.496577][T13413] usb 3-1: config 0 descriptor?? [ 1268.512292][T13413] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1268.535840][T13413] em28xx 3-1:0.89: Video interface 89 found: [ 1268.703579][ T3599] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1268.937505][ T3599] usb 1-1: device descriptor read/64, error -71 [ 1269.063939][ T3599] usb usb1-port1: attempt power cycle [ 1269.127625][T13413] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 1269.443646][ T126] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1269.483622][ T3599] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1269.531018][ T3599] usb 1-1: device descriptor read/8, error -71 [ 1269.549681][T13413] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1269.579205][T13413] em28xx 3-1:0.89: board has no eeprom [ 1269.636140][ T126] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1269.648785][ T126] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1269.663541][T13413] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 1269.672108][T13413] em28xx 3-1:0.89: analog set to bulk mode. [ 1269.712791][ T126] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1269.729419][T13413] usb 3-1: USB disconnect, device number 106 [ 1269.737284][T13413] em28xx 3-1:0.89: Disconnecting em28xx [ 1269.743038][ T126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1269.760484][ T126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1269.776321][T16218] em28xx 3-1:0.89: Registering V4L2 extension [ 1269.788968][ T126] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1269.818110][ T126] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1269.832088][ T126] usb 5-1: Product: syz [ 1269.833515][ T3599] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1269.848407][ T126] usb 5-1: Manufacturer: syz [ 1269.883134][ T126] cdc_wdm 5-1:1.0: skipping garbage [ 1269.894280][ T3599] usb 1-1: device descriptor read/8, error -71 [ 1269.900753][ T126] cdc_wdm 5-1:1.0: skipping garbage [ 1269.925996][ T126] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1269.944995][ T126] cdc_wdm 5-1:1.0: Unknown control protocol [ 1270.000820][T16218] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 1270.010820][T16218] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 1270.024043][ T3599] usb usb1-port1: unable to enumerate USB device [ 1270.030636][T16218] em28xx 3-1:0.89: No AC97 audio processor [ 1270.045640][T16218] usb 3-1: Decoder not found [ 1270.061344][T16218] em28xx 3-1:0.89: failed to create media graph [ 1270.088926][ T3599] usb 5-1: USB disconnect, device number 125 [ 1270.103675][T16218] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 1270.145209][T16218] em28xx 3-1:0.89: Registering snapshot button... [ 1270.192541][T16218] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input20 [ 1270.249561][T16218] em28xx 3-1:0.89: Remote control support is not available for this card. [ 1270.289867][T13413] em28xx 3-1:0.89: Closing input extension [ 1270.296431][T13413] em28xx 3-1:0.89: Deregistering snapshot button [ 1270.334352][T13413] em28xx 3-1:0.89: Freeing device [ 1271.533688][T13413] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1271.549192][T18001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3248'. [ 1272.264498][T13413] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 1272.301242][T13413] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1272.356699][T13413] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1272.430411][T13413] usb 5-1: Product: syz [ 1272.456522][T13413] usb 5-1: Manufacturer: syz [ 1272.483084][T13413] usb 5-1: SerialNumber: syz [ 1272.503258][T13413] usb 5-1: config 0 descriptor?? [ 1272.536350][T13413] ims_pcu 5-1:0.0: Zero length descriptor [ 1272.597331][T13413] ims_pcu: probe of 5-1:0.0 failed with error -22 [ 1272.698628][T18012] netlink: 'syz.3.3253': attribute type 1 has an invalid length. [ 1272.786717][T18014] netlink: 'syz.1.3252': attribute type 1 has an invalid length. [ 1272.841166][T18017] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1272.852420][T18024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3254'. [ 1272.881516][T18017] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1272.899751][T18019] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3252'. [ 1272.930820][T18019] bond2: (slave bridge1): making interface the new active one [ 1272.953248][T18019] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1273.013368][T18022] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1273.332852][T18030] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3255'. [ 1273.404999][T18031] netlink: 'syz.3.3255': attribute type 75 has an invalid length. [ 1273.943635][T16473] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1274.135144][T16473] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1274.178263][T16473] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1274.236633][T16473] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1274.263562][T16472] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1274.359068][T16473] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1274.410876][T16473] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1274.443589][T16472] usb 4-1: device descriptor read/64, error -71 [ 1274.453167][ T4271] usb 5-1: USB disconnect, device number 126 [ 1274.468003][T16473] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1274.498294][T16473] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1274.523241][T16473] usb 2-1: Product: syz [ 1274.527561][T16473] usb 2-1: Manufacturer: syz [ 1274.554413][T16473] cdc_wdm 2-1:1.0: skipping garbage [ 1274.559749][T16473] cdc_wdm 2-1:1.0: skipping garbage [ 1274.587786][T16473] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1274.613577][T16473] cdc_wdm 2-1:1.0: Unknown control protocol [ 1274.634152][T18039] netlink: 'syz.4.3260': attribute type 1 has an invalid length. [ 1274.713625][T16472] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1274.760096][T13413] usb 2-1: USB disconnect, device number 113 [ 1274.793734][T18041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3260'. [ 1274.857721][T18041] bond2: (slave bridge1): making interface the new active one [ 1274.872521][T18041] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1274.881922][T16472] usb 4-1: device descriptor read/64, error -71 [ 1274.908928][T18039] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 1275.004929][T16472] usb usb4-port1: attempt power cycle [ 1275.183541][ T126] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1275.241583][T18049] hub 9-0:1.0: USB hub found [ 1275.253249][T18049] hub 9-0:1.0: 1 port detected [ 1275.312531][T18049] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3262'. [ 1275.373976][ T126] usb 3-1: Using ep0 maxpacket: 32 [ 1275.387661][ T126] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.413942][T16472] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1275.419853][ T126] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1275.467755][ T126] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1275.478380][T16472] usb 4-1: device descriptor read/8, error -71 [ 1275.491486][ T126] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1275.504695][ T126] usb 3-1: Product: syz [ 1275.509725][ T126] usb 3-1: Manufacturer: syz [ 1275.516474][T18054] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3265'. [ 1275.532194][ T126] hub 3-1:4.0: bad descriptor, ignoring hub [ 1275.539494][ T126] hub: probe of 3-1:4.0 failed with error -5 [ 1275.548690][T18056] netlink: 'syz.0.3266': attribute type 1 has an invalid length. [ 1275.548965][ T126] usbhid 3-1:4.0: couldn't find an input interrupt endpoint [ 1275.622297][T18058] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3266'. [ 1275.743650][T16472] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1275.803719][T16472] usb 4-1: device descriptor read/8, error -71 [ 1275.923873][T16472] usb usb4-port1: unable to enumerate USB device [ 1276.093557][T16472] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1276.283633][T16472] usb 1-1: Using ep0 maxpacket: 32 [ 1276.290663][T16472] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1276.309520][T16472] usb 1-1: config 0 has no interface number 0 [ 1276.319846][T16472] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1276.339551][T16472] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.364222][T16472] usb 1-1: Product: syz [ 1276.368655][T16472] usb 1-1: Manufacturer: syz [ 1276.381778][T16472] usb 1-1: SerialNumber: syz [ 1276.402990][T18068] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3269'. [ 1276.424624][T16472] usb 1-1: config 0 descriptor?? [ 1276.451904][T18068] netlink: 'syz.1.3269': attribute type 75 has an invalid length. [ 1276.474080][T16472] smsc95xx v2.0.0 [ 1276.877257][T16472] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1276.898636][T16472] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1277.109176][T16472] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1277.123144][T16472] smsc95xx: probe of 1-1:0.67 failed with error -61 [ 1277.325950][T18084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3273'. [ 1277.353557][ T4271] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1277.545236][ T4271] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1277.557733][ T4271] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1277.581483][ T4271] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1277.593662][ T4271] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1277.605120][ T4271] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1277.623975][ T4271] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1277.647727][ T4271] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1277.665421][ T4271] usb 5-1: Product: syz [ 1277.672697][ T4271] usb 5-1: Manufacturer: syz [ 1277.695729][ T4271] cdc_wdm 5-1:1.0: skipping garbage [ 1277.705782][ T4271] cdc_wdm 5-1:1.0: skipping garbage [ 1277.712131][ T4271] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1278.153733][ T4271] usb 3-1: USB disconnect, device number 107 [ 1278.405522][T16218] usb 5-1: USB disconnect, device number 127 [ 1278.503750][ T126] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1278.520125][T18100] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3278'. [ 1278.547704][T18102] netlink: 'syz.1.3277': attribute type 1 has an invalid length. [ 1278.620640][T18102] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1278.642361][T18102] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1278.659676][T18104] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3277'. [ 1278.713659][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 1278.719512][ T126] usb 3-1: no configurations [ 1278.750188][ T126] usb 3-1: can't read configurations, error -22 [ 1278.919176][T16472] usb 1-1: USB disconnect, device number 113 [ 1278.923355][ T126] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1278.952599][T18111] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3280'. [ 1279.011367][T18112] netlink: 'syz.1.3280': attribute type 75 has an invalid length. [ 1279.110224][T18114] netlink: 'syz.0.3281': attribute type 1 has an invalid length. [ 1279.123642][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 1279.130154][ T126] usb 3-1: no configurations [ 1279.137129][T18114] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3281'. [ 1279.146854][ T126] usb 3-1: can't read configurations, error -22 [ 1279.171822][ T126] usb usb3-port1: attempt power cycle [ 1279.595998][ T126] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1279.636720][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 1279.649042][ T126] usb 3-1: no configurations [ 1279.660020][ T126] usb 3-1: can't read configurations, error -22 [ 1279.689954][T18123] hub 9-0:1.0: USB hub found [ 1279.696857][T18123] hub 9-0:1.0: 1 port detected [ 1279.736470][T18123] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3283'. [ 1279.803665][T16218] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1279.844047][ T126] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1279.884655][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 1279.899885][ T126] usb 3-1: no configurations [ 1279.928093][ T126] usb 3-1: can't read configurations, error -22 [ 1279.955526][ T126] usb usb3-port1: unable to enumerate USB device [ 1279.964168][T16218] usb 1-1: device descriptor read/64, error -71 [ 1280.249631][T16218] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1280.413906][T16218] usb 1-1: device descriptor read/64, error -71 [ 1280.535077][T16218] usb usb1-port1: attempt power cycle [ 1280.943603][T16218] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1280.985438][T16218] usb 1-1: device descriptor read/8, error -71 [ 1281.023644][T16472] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1281.193823][ T4271] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1281.223767][T16472] usb 4-1: Using ep0 maxpacket: 32 [ 1281.253568][T16218] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1281.262928][T16472] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1281.281728][T16472] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1281.294003][T16472] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1281.354306][T16218] usb 1-1: device descriptor read/8, error -71 [ 1281.369985][T16472] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1281.383523][ T4271] usb 5-1: Using ep0 maxpacket: 32 [ 1281.392435][ T4271] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1281.401196][T16472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.411082][ T4271] usb 5-1: config 0 has no interface number 0 [ 1281.417531][T16472] usb 4-1: Product: syz [ 1281.422073][ T4271] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1281.432857][T16472] usb 4-1: Manufacturer: syz [ 1281.437728][T16472] usb 4-1: SerialNumber: syz [ 1281.443739][ T4271] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1281.459035][T16472] usb 4-1: config 0 descriptor?? [ 1281.475638][ T4271] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1281.493903][T16218] usb usb1-port1: unable to enumerate USB device [ 1281.521644][ T4271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.530556][ T4271] usb 5-1: Product: syz [ 1281.537084][ T4271] usb 5-1: Manufacturer: syz [ 1281.543381][ T4271] usb 5-1: SerialNumber: syz [ 1281.561833][ T4271] usb 5-1: config 0 descriptor?? [ 1281.578362][T18138] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3291'. [ 1281.593959][ T4271] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1281.604043][ T4271] em28xx 5-1:0.89: Video interface 89 found: [ 1281.643740][ T126] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1281.690745][T18130] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3287'. [ 1281.827213][T18140] netlink: 'syz.1.3292': attribute type 1 has an invalid length. [ 1281.853552][ T126] usb 3-1: Using ep0 maxpacket: 32 [ 1281.861199][ T126] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1281.880631][T18140] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1281.891601][ T126] usb 3-1: config 0 has no interface number 0 [ 1281.900692][ T126] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1281.911854][T18140] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1281.919380][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.934470][ T126] usb 3-1: Product: syz [ 1281.940760][ T126] usb 3-1: Manufacturer: syz [ 1281.946108][ T126] usb 3-1: SerialNumber: syz [ 1281.952960][ T126] usb 3-1: config 0 descriptor?? [ 1281.964638][ T126] smsc95xx v2.0.0 [ 1281.972764][T18142] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3292'. [ 1282.183780][ T4271] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1282.368034][ T126] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1282.382277][ T126] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1282.391465][T16218] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1282.597304][ T4271] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1282.616264][T16218] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1282.625629][ T4271] em28xx 5-1:0.89: board has no eeprom [ 1282.661713][T16218] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1282.713113][T16218] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1282.718732][ T4271] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1282.731264][T16218] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1282.748390][ T4271] em28xx 5-1:0.89: analog set to bulk mode. [ 1282.753569][T16218] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1282.776781][T16218] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1282.777106][T16473] em28xx 5-1:0.89: Registering V4L2 extension [ 1282.818106][ T4271] usb 5-1: USB disconnect, device number 2 [ 1282.828200][ T4271] em28xx 5-1:0.89: Disconnecting em28xx [ 1282.873741][T16218] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1282.892168][T16218] usb 2-1: Product: syz [ 1282.900010][T16218] usb 2-1: Manufacturer: syz [ 1282.937071][T16218] cdc_wdm 2-1:1.0: skipping garbage [ 1282.946430][T16218] cdc_wdm 2-1:1.0: skipping garbage [ 1282.965261][T16218] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1283.070213][T16473] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1283.080408][T16473] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1283.119583][T16473] em28xx 5-1:0.89: No AC97 audio processor [ 1283.169067][T16473] usb 5-1: Decoder not found [ 1283.196276][T16473] em28xx 5-1:0.89: failed to create media graph [ 1283.209082][T16473] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1283.230972][T16473] em28xx 5-1:0.89: Registering snapshot button... [ 1283.276605][T16473] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input21 [ 1283.311473][T16473] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1283.371765][ T4271] em28xx 5-1:0.89: Closing input extension [ 1283.378081][ T4271] em28xx 5-1:0.89: Deregistering snapshot button [ 1283.437665][T18153] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3295'. [ 1283.487771][T18153] netlink: 'syz.4.3295': attribute type 75 has an invalid length. [ 1283.488456][ T4271] em28xx 5-1:0.89: Freeing device [ 1283.606092][ T126] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1283.682332][ T126] smsc95xx: probe of 3-1:0.67 failed with error -61 [ 1283.816185][ T126] usb 2-1: USB disconnect, device number 114 [ 1283.850006][ T14] usb 3-1: USB disconnect, device number 112 [ 1284.010355][T16218] usb 4-1: USB disconnect, device number 93 [ 1284.573240][T18172] hub 9-0:1.0: USB hub found [ 1284.590933][T18172] hub 9-0:1.0: 1 port detected [ 1284.617395][T18175] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3303'. [ 1284.660082][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3302'. [ 1284.850303][T18181] hub 9-0:1.0: USB hub found [ 1284.856901][T18163] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3299'. [ 1284.870520][T18181] hub 9-0:1.0: 1 port detected [ 1285.034023][T18181] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3301'. [ 1285.043809][T16218] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1285.297396][T16218] usb 5-1: Using ep0 maxpacket: 16 [ 1285.309761][T16218] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.322773][T16218] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1285.341463][T16218] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1285.362942][T16218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.462099][T16218] usb 5-1: Product: syz [ 1285.498924][T16218] usb 5-1: Manufacturer: syz [ 1285.547514][T16218] usb 5-1: SerialNumber: syz [ 1285.714145][ T4271] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1285.908257][ T4271] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1285.925499][ T4271] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1285.949864][ T4271] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1285.969317][ T4271] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1285.984768][T16218] usb 5-1: 0:2 : does not exist [ 1286.003544][ T4271] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1286.051521][T16218] usb 5-1: USB disconnect, device number 3 [ 1286.086977][ T4271] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1286.113836][ T4271] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1286.170585][ T4271] usb 1-1: Product: syz [ 1286.180741][ T4271] usb 1-1: Manufacturer: syz [ 1286.219253][ T4271] cdc_wdm 1-1:1.0: skipping garbage [ 1286.230725][ T4271] cdc_wdm 1-1:1.0: skipping garbage [ 1286.254606][ T4271] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1286.272228][ T4271] cdc_wdm 1-1:1.0: Unknown control protocol [ 1286.418508][ T4271] usb 1-1: USB disconnect, device number 118 [ 1286.620497][T18193] fuse: Bad value for 'rootmode' [ 1286.713785][T18197] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3309'. [ 1286.785780][T18197] netlink: 'syz.4.3309': attribute type 75 has an invalid length. [ 1287.645899][T18211] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3315'. [ 1287.823673][ T4271] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1288.033652][ T4271] usb 5-1: Using ep0 maxpacket: 32 [ 1288.043150][ T4271] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1288.093716][ T4271] usb 5-1: config 0 has no interface number 0 [ 1288.115749][ T4271] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1288.157889][ T4271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.193084][ T4271] usb 5-1: Product: syz [ 1288.209870][ T4271] usb 5-1: Manufacturer: syz [ 1288.228044][ T4271] usb 5-1: SerialNumber: syz [ 1288.259436][ T4271] usb 5-1: config 0 descriptor?? [ 1288.298419][ T4271] smsc95xx v2.0.0 [ 1288.700775][ T4271] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1288.719560][ T4271] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1289.334044][T18229] hub 9-0:1.0: USB hub found [ 1289.385656][T18224] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3318'. [ 1289.405752][T18229] hub 9-0:1.0: 1 port detected [ 1289.503729][T16473] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1289.703569][T16473] usb 2-1: Using ep0 maxpacket: 16 [ 1289.711233][T16473] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.764032][T16473] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1289.816327][T16473] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1289.856127][T16473] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.928740][T16473] usb 2-1: Product: syz [ 1289.948231][T16473] usb 2-1: Manufacturer: syz [ 1289.953660][ T4271] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1289.964837][T16473] usb 2-1: SerialNumber: syz [ 1289.970075][ T4271] smsc95xx: probe of 5-1:0.67 failed with error -61 [ 1290.158003][T16218] usb 5-1: USB disconnect, device number 4 [ 1290.188978][T16473] usb 2-1: 0:2 : does not exist [ 1290.251117][T16473] usb 2-1: USB disconnect, device number 115 [ 1290.860035][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3320'. [ 1291.806851][T18249] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3323'. [ 1291.859029][T18250] netlink: 'syz.2.3323': attribute type 75 has an invalid length. [ 1292.043593][ T3599] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1292.245512][ T3599] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1292.264814][ T3599] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1292.297897][T18253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3325'. [ 1292.343839][ T3599] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1292.383737][ T3599] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1292.419851][ T3599] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1292.469066][ T3599] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1292.510417][ T3599] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1292.555094][ T3599] usb 2-1: Product: syz [ 1292.577199][ T3599] usb 2-1: Manufacturer: syz [ 1292.607483][ T3599] cdc_wdm 2-1:1.0: skipping garbage [ 1292.614620][T18260] netlink: 'syz.3.3328': attribute type 1 has an invalid length. [ 1292.643916][ T3599] cdc_wdm 2-1:1.0: skipping garbage [ 1292.677639][ T3599] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1292.702662][ T3599] cdc_wdm 2-1:1.0: Unknown control protocol [ 1292.703269][T18264] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1292.730585][T18264] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1292.807614][T16473] usb 2-1: USB disconnect, device number 116 [ 1292.883698][ T3599] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1293.373599][ T3599] usb 5-1: Using ep0 maxpacket: 32 [ 1293.380875][ T3599] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1293.445315][ T3599] usb 5-1: config 0 has no interface number 0 [ 1293.489211][ T3599] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1293.498643][ T3599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.507576][ T3599] usb 5-1: Product: syz [ 1293.512627][ T3599] usb 5-1: Manufacturer: syz [ 1293.517365][ T3599] usb 5-1: SerialNumber: syz [ 1293.524922][ T3599] usb 5-1: config 0 descriptor?? [ 1293.532593][ T3599] smsc95xx v2.0.0 [ 1293.713622][ T14] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1293.902657][T18273] netlink: 'syz.1.3331': attribute type 2 has an invalid length. [ 1293.938630][ T3599] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1293.945351][ T14] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1293.968545][ T3599] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1293.968596][ T14] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1293.998231][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1294.019462][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1294.037871][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1294.064908][ T14] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1294.093582][ T14] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1294.107610][ T14] usb 4-1: Product: syz [ 1294.157121][ T14] usb 4-1: Manufacturer: syz [ 1294.203736][T16218] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1294.214110][ T3599] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1294.220942][ T14] cdc_wdm 4-1:1.0: skipping garbage [ 1294.241454][ T3599] smsc95xx: probe of 5-1:0.67 failed with error -61 [ 1294.242322][ T14] cdc_wdm 4-1:1.0: skipping garbage [ 1294.267089][ T14] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1294.282131][ T14] cdc_wdm 4-1:1.0: Unknown control protocol [ 1294.413527][T16218] usb 3-1: Using ep0 maxpacket: 32 [ 1294.420488][T16218] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1294.443861][T16218] usb 3-1: config 0 has no interface number 0 [ 1294.481804][T16218] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1294.512313][T16218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.526934][T18277] netlink: 'syz.0.3334': attribute type 1 has an invalid length. [ 1294.535962][T16218] usb 3-1: Product: syz [ 1294.536669][T18277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3334'. [ 1294.540196][T16218] usb 3-1: Manufacturer: syz [ 1294.549616][T18277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3334'. [ 1294.569572][T16218] usb 3-1: SerialNumber: syz [ 1294.582779][T16218] usb 3-1: config 0 descriptor?? [ 1294.590063][T16218] smsc95xx v2.0.0 [ 1294.623586][ T126] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1294.843509][ T126] usb 2-1: Using ep0 maxpacket: 16 [ 1294.850812][T18284] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3336'. [ 1294.870606][ T126] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.882490][T18284] netlink: 'syz.0.3336': attribute type 75 has an invalid length. [ 1294.898321][ T126] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1294.932261][ T126] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1294.944881][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.953080][ T126] usb 2-1: Product: syz [ 1294.957642][ T126] usb 2-1: Manufacturer: syz [ 1294.962313][ T126] usb 2-1: SerialNumber: syz [ 1295.014641][T16218] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1295.026244][T16218] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1295.086991][T16473] usb 4-1: USB disconnect, device number 94 [ 1295.188334][ T126] usb 2-1: 0:2 : does not exist [ 1295.234158][ T126] usb 2-1: USB disconnect, device number 117 [ 1295.342514][T18290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3338'. [ 1295.540248][T18288] udevd[18288]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1295.620836][T16473] usb 5-1: USB disconnect, device number 5 [ 1296.153601][T16473] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1296.245254][T16218] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1296.286761][T16218] smsc95xx: probe of 3-1:0.67 failed with error -61 [ 1296.292842][T18309] hub 9-0:1.0: USB hub found [ 1296.318559][T18309] hub 9-0:1.0: 1 port detected [ 1296.386727][T18309] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3344'. [ 1296.456450][ T4271] usb 3-1: USB disconnect, device number 113 [ 1296.463306][T16473] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1296.490375][T16473] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1296.509495][T16473] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1296.525025][T16473] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1296.540501][T16473] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1296.558007][T16473] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1296.567775][T16473] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1296.581427][T16473] usb 5-1: Product: syz [ 1296.586353][T16473] usb 5-1: Manufacturer: syz [ 1296.609787][T16473] cdc_wdm 5-1:1.0: skipping garbage [ 1296.615469][T16473] cdc_wdm 5-1:1.0: skipping garbage [ 1296.635600][T16473] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1296.641855][T16473] cdc_wdm 5-1:1.0: Unknown control protocol [ 1296.775923][T18311] netlink: 'syz.0.3345': attribute type 1 has an invalid length. [ 1296.806856][ T4271] usb 5-1: USB disconnect, device number 6 [ 1296.873552][T18314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3345'. [ 1296.968647][T18314] bond1: (slave bridge1): making interface the new active one [ 1296.999824][T18314] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1297.087043][T18315] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1297.393589][ T4276] Bluetooth: hci5: command 0x0406 tx timeout [ 1297.522109][T18322] fuse: Unknown parameter 'fd0x0000000000000003' [ 1297.615273][T18326] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3348'. [ 1297.672491][T18328] netlink: 'syz.2.3348': attribute type 75 has an invalid length. [ 1298.143638][ T126] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1298.335398][ T126] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.366136][ T126] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1298.385355][ T126] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1298.401665][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1298.420342][ T126] usb 4-1: SerialNumber: syz [ 1298.533561][T13413] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1298.656543][ T126] usb 4-1: cannot find UAC_HEADER [ 1298.679855][ T126] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1298.704256][ T126] usb 4-1: USB disconnect, device number 95 [ 1298.726868][T13413] usb 2-1: Using ep0 maxpacket: 32 [ 1298.753685][ T3599] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1298.758082][T13413] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1298.772851][T13413] usb 2-1: config 0 has no interface number 0 [ 1298.790215][T13413] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1298.800016][T13413] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.811222][T13413] usb 2-1: Product: syz [ 1298.819580][T13413] usb 2-1: Manufacturer: syz [ 1298.832127][T13413] usb 2-1: SerialNumber: syz [ 1298.853173][T13413] usb 2-1: config 0 descriptor?? [ 1298.862392][T13413] smsc95xx v2.0.0 [ 1298.915316][T17862] udevd[17862]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1298.983638][ T3599] usb 1-1: Using ep0 maxpacket: 16 [ 1299.000148][ T3599] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.012361][ T3599] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1299.038113][ T3599] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1299.051768][ T3599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.063668][ T3599] usb 1-1: Product: syz [ 1299.067918][ T3599] usb 1-1: Manufacturer: syz [ 1299.072596][ T3599] usb 1-1: SerialNumber: syz [ 1299.183642][ T4271] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1299.272460][T13413] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1299.284240][T13413] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1299.290854][ T3599] usb 1-1: 0:2 : does not exist [ 1299.309282][ T3599] usb 1-1: USB disconnect, device number 119 [ 1299.313591][ T126] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1299.373805][ T4271] usb 3-1: device descriptor read/64, error -71 [ 1299.495201][T13413] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1299.506616][T13413] smsc95xx: probe of 2-1:0.67 failed with error -61 [ 1299.514842][ T126] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1299.525685][ T126] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1299.536236][ T126] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1299.545463][ T126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1299.556941][T16472] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1299.566106][T17862] udevd[17862]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1299.582051][ T126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1299.602846][ T126] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1299.612529][ T126] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1299.620804][ T126] usb 5-1: Product: syz [ 1299.625388][ T126] usb 5-1: Manufacturer: syz [ 1299.634056][ T126] cdc_wdm 5-1:1.0: skipping garbage [ 1299.639647][ T126] cdc_wdm 5-1:1.0: skipping garbage [ 1299.647457][ T126] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1299.654709][ T126] cdc_wdm 5-1:1.0: Unknown control protocol [ 1299.673649][ T4271] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1299.743565][T16472] usb 4-1: Using ep0 maxpacket: 32 [ 1299.750356][T16472] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1299.759412][T16472] usb 4-1: config 0 has no interface number 0 [ 1299.766304][T16472] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1299.776483][T16472] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1299.785653][T16472] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1299.795415][T16472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.804342][T16472] usb 4-1: Product: syz [ 1299.808589][T16472] usb 4-1: Manufacturer: syz [ 1299.823485][T16472] usb 4-1: SerialNumber: syz [ 1299.830250][T16472] usb 4-1: config 0 descriptor?? [ 1299.835441][ T4271] usb 3-1: device descriptor read/64, error -71 [ 1299.839371][ T126] usb 5-1: USB disconnect, device number 7 [ 1299.855085][T16472] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1299.870523][T16472] em28xx 4-1:0.89: Video interface 89 found: [ 1299.962356][ T4271] usb usb3-port1: attempt power cycle [ 1299.988603][T18357] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3361'. [ 1299.999686][T18357] netlink: 'syz.0.3361': attribute type 75 has an invalid length. [ 1300.209398][T18360] netlink: 'syz.0.3362': attribute type 1 has an invalid length. [ 1300.239596][T18360] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1300.251768][T18360] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 1300.287813][T18362] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3362'. [ 1300.373560][ T4271] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1300.406741][ T4271] usb 3-1: device descriptor read/8, error -71 [ 1300.438241][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.444785][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.457799][T16472] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1300.659976][T18375] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3367'. [ 1300.683590][ T4271] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1300.724289][ T4271] usb 3-1: device descriptor read/8, error -71 [ 1300.795448][T18377] device syzkaller0 entered promiscuous mode [ 1300.844034][ T4271] usb usb3-port1: unable to enumerate USB device [ 1300.877845][T18380] device syzkaller0 entered promiscuous mode [ 1300.889306][T16472] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1300.902959][T16472] em28xx 4-1:0.89: board has no eeprom [ 1301.002765][T16472] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1301.020584][T16472] em28xx 4-1:0.89: analog set to bulk mode. [ 1301.031721][T16472] usb 4-1: USB disconnect, device number 96 [ 1301.043309][T16473] em28xx 4-1:0.89: Registering V4L2 extension [ 1301.050558][T16472] em28xx 4-1:0.89: Disconnecting em28xx [ 1301.149222][T16473] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 1301.157072][T16473] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1301.169760][T16473] em28xx 4-1:0.89: No AC97 audio processor [ 1301.178784][T16473] usb 4-1: Decoder not found [ 1301.187584][T16473] em28xx 4-1:0.89: failed to create media graph [ 1301.194599][T16473] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1301.202622][T16473] em28xx 4-1:0.89: Registering snapshot button... [ 1301.213149][T16473] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input22 [ 1301.226676][T16473] em28xx 4-1:0.89: Remote control support is not available for this card. [ 1301.251862][T16472] em28xx 4-1:0.89: Closing input extension [ 1301.260228][T16472] em28xx 4-1:0.89: Deregistering snapshot button [ 1301.302276][T16472] em28xx 4-1:0.89: Freeing device [ 1301.414082][T13413] usb 2-1: USB disconnect, device number 118 [ 1301.670882][T18397] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3373'. [ 1301.706992][T18397] netlink: 'syz.3.3373': attribute type 75 has an invalid length. [ 1301.823576][T16473] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1302.013532][T16473] usb 1-1: Using ep0 maxpacket: 16 [ 1302.020644][T16473] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.045728][T18401] netlink: 'syz.2.3374': attribute type 1 has an invalid length. [ 1302.066820][T16124] Bluetooth: hci4: unexpected event 0x22 length: 763 > 260 [ 1302.069882][T16473] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1302.145310][T16473] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1302.178794][T16473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.192268][T16473] usb 1-1: Product: syz [ 1302.193922][T18403] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1302.196612][T16473] usb 1-1: Manufacturer: syz [ 1302.211784][T16473] usb 1-1: SerialNumber: syz [ 1302.310411][T18403] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1302.391747][T18405] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3374'. [ 1302.445776][T16473] usb 1-1: 0:2 : does not exist [ 1302.483494][T16473] usb 1-1: USB disconnect, device number 120 [ 1302.823512][T13413] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1302.923840][T18415] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3378'. [ 1303.045371][T13413] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1303.062074][T13413] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1303.085703][T13413] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1303.101969][T13413] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1303.124870][T13413] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1303.175042][T13413] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1303.197103][T13413] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1303.229953][T13413] usb 4-1: Product: syz [ 1303.256004][T13413] usb 4-1: Manufacturer: syz [ 1303.291233][T13413] cdc_wdm 4-1:1.0: skipping garbage [ 1303.312229][T13413] cdc_wdm 4-1:1.0: skipping garbage [ 1303.358170][T13413] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1303.371973][T13413] cdc_wdm 4-1:1.0: Unknown control protocol [ 1303.425636][T18420] device syzkaller0 entered promiscuous mode [ 1303.497645][T13413] usb 4-1: USB disconnect, device number 97 [ 1303.973569][T16473] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1304.113580][T13413] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1304.164094][T16473] usb 1-1: Using ep0 maxpacket: 32 [ 1304.178888][T16473] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1304.209651][T16473] usb 1-1: config 0 has no interface number 0 [ 1304.235694][T16473] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1304.255288][T18438] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3386'. [ 1304.269940][T16473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.298862][T18438] netlink: 'syz.3.3386': attribute type 75 has an invalid length. [ 1304.320777][T16473] usb 1-1: Product: syz [ 1304.332617][T16473] usb 1-1: Manufacturer: syz [ 1304.351823][T16473] usb 1-1: SerialNumber: syz [ 1304.363620][T13413] usb 3-1: Using ep0 maxpacket: 32 [ 1304.390168][T13413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1304.391984][T16473] usb 1-1: config 0 descriptor?? [ 1304.450605][T16473] smsc95xx v2.0.0 [ 1304.509098][T13413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1304.567905][T13413] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1304.703281][T18441] hub 9-0:1.0: USB hub found [ 1304.736689][T13413] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1304.783592][T16472] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1304.791831][T13413] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.825906][T13413] usb 3-1: Product: syz [ 1304.843921][T18441] hub 9-0:1.0: 1 port detected [ 1304.857958][T13413] usb 3-1: Manufacturer: syz [ 1304.864242][T16473] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1304.889402][T13413] usb 3-1: SerialNumber: syz [ 1304.893922][T16473] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1304.957996][T13413] usb 3-1: config 0 descriptor?? [ 1304.963595][T16472] usb 5-1: device descriptor read/64, error -71 [ 1304.995826][T18440] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3385'. [ 1305.146447][T16473] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1305.203054][T16473] smsc95xx: probe of 1-1:0.67 failed with error -61 [ 1305.237242][T16472] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1305.338818][T18428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3382'. [ 1305.413599][T16472] usb 5-1: device descriptor read/64, error -71 [ 1305.503074][T18447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3387'. [ 1305.533783][T16472] usb usb5-port1: attempt power cycle [ 1305.956890][T16472] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1305.996877][T16472] usb 5-1: device descriptor read/8, error -71 [ 1306.276275][T16472] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1306.316121][T16472] usb 5-1: device descriptor read/8, error -71 [ 1306.454583][T16472] usb usb5-port1: unable to enumerate USB device [ 1306.482645][T18454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3388'. [ 1306.740657][T13413] usb 1-1: USB disconnect, device number 121 [ 1307.451403][T18463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3390'. [ 1307.617439][T13413] usb 3-1: USB disconnect, device number 118 [ 1307.785785][T18466] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3391'. [ 1308.444218][T18474] device syzkaller0 entered promiscuous mode [ 1308.477711][T18472] hub 9-0:1.0: USB hub found [ 1308.503094][T18472] hub 9-0:1.0: 1 port detected [ 1308.558026][T18475] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3392'. [ 1309.417404][T18484] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3397'. [ 1309.523582][ T3599] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1309.529077][T18484] netlink: 'syz.3.3397': attribute type 75 has an invalid length. [ 1309.727563][ T3599] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1309.760050][ T3599] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1309.799539][ T3599] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1309.833050][ T3599] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1309.883560][ T3599] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1309.937174][ T3599] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1309.989320][ T3599] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1310.032550][T18487] device syzkaller0 entered promiscuous mode [ 1310.055597][ T3599] usb 5-1: Product: syz [ 1310.070654][ T3599] usb 5-1: Manufacturer: syz [ 1310.115083][ T3599] cdc_wdm 5-1:1.0: skipping garbage [ 1310.160447][ T3599] cdc_wdm 5-1:1.0: skipping garbage [ 1310.218816][ T3599] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1310.241495][ T3599] cdc_wdm 5-1:1.0: Unknown control protocol [ 1310.332124][ T3599] usb 5-1: USB disconnect, device number 12 [ 1310.443604][T16218] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1310.646509][T16218] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 1310.685526][T16218] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1310.729499][T16218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1310.767013][T16218] usb 4-1: Product: syz [ 1310.794910][T16218] usb 4-1: Manufacturer: syz [ 1310.852798][T16218] usb 4-1: SerialNumber: syz [ 1310.890603][T16218] usb 4-1: config 0 descriptor?? [ 1310.906968][T16218] ims_pcu 4-1:0.0: Zero length descriptor [ 1310.912800][T16218] ims_pcu: probe of 4-1:0.0 failed with error -22 [ 1311.037139][T13413] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1311.078735][T18495] netlink: 'syz.4.3401': attribute type 1 has an invalid length. [ 1311.147263][T18496] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3402'. [ 1311.233569][T13413] usb 2-1: Using ep0 maxpacket: 32 [ 1311.241775][T13413] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1311.244778][T18498] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1311.250197][T13413] usb 2-1: config 0 has no interface number 0 [ 1311.269111][T16473] usb 4-1: USB disconnect, device number 98 [ 1311.277583][T13413] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1311.286963][T13413] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.298252][T13413] usb 2-1: Product: syz [ 1311.307919][T13413] usb 2-1: Manufacturer: syz [ 1311.312739][T13413] usb 2-1: SerialNumber: syz [ 1311.325061][T13413] usb 2-1: config 0 descriptor?? [ 1311.335463][T18498] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1311.344588][T13413] smsc95xx v2.0.0 [ 1311.417038][T18495] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3401'. [ 1311.745050][T13413] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1311.764336][T13413] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1312.016131][T13413] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1312.035935][T13413] smsc95xx: probe of 2-1:0.67 failed with error -61 [ 1312.043727][T18513] netlink: 'syz.0.3405': attribute type 1 has an invalid length. [ 1312.090484][T18513] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1312.098736][T18514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3405'. [ 1312.294317][T18526] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3409'. [ 1312.363983][T18526] netlink: 'syz.0.3409': attribute type 75 has an invalid length. [ 1312.389642][T16472] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1312.427167][T18521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3407'. [ 1312.563805][T16472] usb 5-1: device descriptor read/64, error -71 [ 1312.843758][T16472] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1313.014458][T16472] usb 5-1: device descriptor read/64, error -71 [ 1313.137946][T16472] usb usb5-port1: attempt power cycle [ 1313.553708][T16472] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1313.594148][T16472] usb 5-1: device descriptor read/8, error -71 [ 1313.682290][T18544] netlink: 'syz.2.3415': attribute type 1 has an invalid length. [ 1313.697273][T13413] usb 2-1: USB disconnect, device number 119 [ 1313.740236][T18544] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1313.767940][T18544] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1313.813690][T18546] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3415'. [ 1313.863500][T16472] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1313.914205][T16472] usb 5-1: device descriptor read/8, error -71 [ 1313.999123][T18550] netlink: 'syz.2.3417': attribute type 1 has an invalid length. [ 1314.033904][T16472] usb usb5-port1: unable to enumerate USB device [ 1314.221963][T18555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3417'. [ 1314.296789][T18555] bond5: (slave bridge1): making interface the new active one [ 1314.340335][T18561] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3421'. [ 1314.350495][T18555] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 1314.503854][ T3599] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1314.623150][T18565] hub 9-0:1.0: USB hub found [ 1314.630015][T18565] hub 9-0:1.0: 1 port detected [ 1314.718488][ T3599] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 1314.728362][T18570] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3420'. [ 1314.748702][ T3599] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1314.779424][ T3599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1314.807112][ T3599] usb 2-1: Product: syz [ 1314.811578][ T3599] usb 2-1: Manufacturer: syz [ 1314.816866][ T3599] usb 2-1: SerialNumber: syz [ 1314.831983][ T3599] usb 2-1: config 0 descriptor?? [ 1314.844322][ T3599] ims_pcu 2-1:0.0: Zero length descriptor [ 1314.850894][ T3599] ims_pcu: probe of 2-1:0.0 failed with error -22 [ 1314.983502][T16473] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1315.176755][T16473] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1315.236790][T16473] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1315.293384][T16473] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1315.329877][T16473] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1315.373389][T16473] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1315.410100][T16473] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1315.434080][T16473] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1315.454127][T16473] usb 4-1: Product: syz [ 1315.462518][T16473] usb 4-1: Manufacturer: syz [ 1315.494127][T16473] cdc_wdm 4-1:1.0: skipping garbage [ 1315.507014][T16473] cdc_wdm 4-1:1.0: skipping garbage [ 1315.551644][T16473] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1315.606551][T16473] cdc_wdm 4-1:1.0: Unknown control protocol [ 1315.644776][ T3599] usb 2-1: USB disconnect, device number 120 [ 1316.073549][ T3599] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1316.263850][ T3599] usb 2-1: Using ep0 maxpacket: 32 [ 1316.274562][ T3599] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1316.319638][ T3599] usb 2-1: config 0 has no interface number 0 [ 1316.373629][ T3599] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1316.443112][ T3599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.464382][ T3599] usb 2-1: Product: syz [ 1316.468609][ T3599] usb 2-1: Manufacturer: syz [ 1316.473269][ T3599] usb 2-1: SerialNumber: syz [ 1316.537372][ T3599] usb 2-1: config 0 descriptor?? [ 1316.565862][ T3599] smsc95xx v2.0.0 [ 1316.902872][T18587] netlink: 'syz.2.3428': attribute type 1 has an invalid length. [ 1316.959607][ T3599] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1317.063197][ T3599] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1317.124798][T18589] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1317.251042][T18589] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 1317.307146][ T3599] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1317.340982][ T3599] smsc95xx: probe of 2-1:0.67 failed with error -61 [ 1317.427101][T18590] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3428'. [ 1317.622266][T18598] netlink: 'syz.0.3431': attribute type 1 has an invalid length. [ 1317.669024][T18600] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3432'. [ 1317.693625][T18602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3431'. [ 1317.704735][T18604] netlink: 'syz.2.3433': attribute type 1 has an invalid length. [ 1317.741547][T18598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3431'. [ 1317.759137][T18598] bond4: (slave bridge2): making interface the new active one [ 1317.768727][T18598] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 1317.781370][T18604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3433'. [ 1317.862135][T18609] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3433'. [ 1317.958034][T18609] bond7: (slave bridge2): making interface the new active one [ 1318.006118][T18614] fuse: Bad value for 'group_id' [ 1318.015550][T18609] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 1318.205675][T18610] hub 9-0:1.0: USB hub found [ 1318.273355][T18610] hub 9-0:1.0: 1 port detected [ 1318.717366][T18627] hub 9-0:1.0: USB hub found [ 1318.732818][T18627] hub 9-0:1.0: 1 port detected [ 1318.881691][T16218] usb 2-1: USB disconnect, device number 121 [ 1319.082549][T18634] __nla_validate_parse: 2 callbacks suppressed [ 1319.082564][T18634] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3440'. [ 1319.483689][T13413] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1319.695302][T13413] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 1320.031937][T13413] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1320.062720][T13413] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1320.131631][T13413] usb 3-1: Product: syz [ 1320.167389][T13413] usb 3-1: Manufacturer: syz [ 1320.199636][T13413] usb 3-1: SerialNumber: syz [ 1320.252987][T13413] usb 3-1: config 0 descriptor?? [ 1320.306300][T13413] ims_pcu 3-1:0.0: Zero length descriptor [ 1320.331378][T13413] ims_pcu: probe of 3-1:0.0 failed with error -22 [ 1322.440520][T18650] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3445'. [ 1322.897153][T18659] fuse: Bad value for 'group_id' [ 1323.317947][T18673] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3452'. [ 1323.377292][T18674] netlink: 'syz.3.3452': attribute type 75 has an invalid length. [ 1323.534893][T16473] usb 3-1: USB disconnect, device number 119 [ 1324.179622][T18688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.283818][T18688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.537360][T18683] hub 9-0:1.0: USB hub found [ 1324.570960][T18691] device syzkaller0 entered promiscuous mode [ 1324.594303][T18683] hub 9-0:1.0: 1 port detected [ 1324.649841][T18687] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3455'. [ 1325.109423][T18695] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3459'. [ 1325.856460][T18702] fuse: Bad value for 'group_id' [ 1326.127754][T18704] device syzkaller0 entered promiscuous mode [ 1326.672249][T18721] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3468'. [ 1326.759805][T18724] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3470'. [ 1326.770859][T18721] netlink: 'syz.4.3468': attribute type 75 has an invalid length. [ 1326.771185][ T126] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1326.796660][T18728] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3471'. [ 1327.005625][ T126] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1327.043960][ T126] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1327.085217][ T126] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1327.116746][ T126] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1327.161339][ T126] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1327.219332][ T126] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1327.258839][T18737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.281077][T18737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.332173][ T126] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1327.364038][T13413] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1327.391699][ T126] usb 2-1: Product: syz [ 1327.422329][ T126] usb 2-1: Manufacturer: syz [ 1327.432154][T18737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3472'. [ 1327.545579][ T126] cdc_wdm 2-1:1.0: skipping garbage [ 1327.603965][ T126] cdc_wdm 2-1:1.0: skipping garbage [ 1327.733627][T13413] usb 1-1: device descriptor read/64, error -71 [ 1327.741654][ T126] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 1327.760787][ T126] cdc_wdm 2-1:1.0: Unknown control protocol [ 1327.765493][T18740] hub 9-0:1.0: USB hub found [ 1327.826456][T18740] hub 9-0:1.0: 1 port detected [ 1327.845697][ T126] usb 2-1: USB disconnect, device number 122 [ 1328.033833][T13413] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1328.243519][T13413] usb 1-1: device descriptor read/64, error -71 [ 1328.343644][T16473] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1328.364101][T13413] usb usb1-port1: attempt power cycle [ 1328.533504][T16473] usb 5-1: Using ep0 maxpacket: 32 [ 1328.540720][T16473] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1328.571527][T16473] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1328.613194][T16473] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1328.639848][T16473] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1328.660035][T16473] usb 5-1: Product: syz [ 1328.670695][T16473] usb 5-1: Manufacturer: syz [ 1328.683862][T16473] usb 5-1: SerialNumber: syz [ 1328.708380][T16473] usb 5-1: config 0 descriptor?? [ 1328.773576][T13413] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1328.824387][T13413] usb 1-1: device descriptor read/8, error -71 [ 1328.998743][T16472] usb 5-1: USB disconnect, device number 17 [ 1329.143548][T13413] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1329.189826][T13413] usb 1-1: device descriptor read/8, error -71 [ 1329.324100][T13413] usb usb1-port1: unable to enumerate USB device [ 1329.458162][T18758] netlink: 'syz.1.3477': attribute type 1 has an invalid length. [ 1329.608467][T18758] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1329.663582][ T3599] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1329.853515][ T3599] usb 3-1: Using ep0 maxpacket: 32 [ 1329.861616][ T3599] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1329.911241][ T3599] usb 3-1: config 0 has no interface number 0 [ 1329.956337][ T3599] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1329.979839][ T3599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.060850][ T3599] usb 3-1: Product: syz [ 1330.092855][ T3599] usb 3-1: Manufacturer: syz [ 1330.110620][ T3599] usb 3-1: SerialNumber: syz [ 1330.139710][ T3599] usb 3-1: config 0 descriptor?? [ 1330.159903][ T3599] smsc95xx v2.0.0 [ 1330.565089][ T3599] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1330.606902][ T3599] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1330.822195][T18770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3481'. [ 1331.313806][T13413] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1331.452808][ T3599] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1331.513532][T13413] usb 1-1: Using ep0 maxpacket: 16 [ 1331.520601][T13413] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.531231][ T3599] smsc95xx: probe of 3-1:0.67 failed with error -32 [ 1331.560423][T18774] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3484'. [ 1331.584072][T13413] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1331.623366][T13413] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1331.661166][T13413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.671525][T13413] usb 1-1: Product: syz [ 1331.693600][T13413] usb 1-1: Manufacturer: syz [ 1331.699539][T13413] usb 1-1: SerialNumber: syz [ 1331.951699][T13413] usb 1-1: 0:2 : does not exist [ 1332.021165][T13413] usb 1-1: USB disconnect, device number 126 [ 1332.317126][T17862] udevd[17862]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1332.622403][T16472] usb 3-1: USB disconnect, device number 120 [ 1332.843562][T13413] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1333.056802][T13413] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 1333.158477][T13413] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1333.185197][T13413] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1333.273274][T13413] usb 5-1: Product: syz [ 1333.290726][T13413] usb 5-1: Manufacturer: syz [ 1333.302294][T18800] hub 9-0:1.0: USB hub found [ 1333.312161][T18800] hub 9-0:1.0: 1 port detected [ 1333.332288][T13413] usb 5-1: SerialNumber: syz [ 1333.369929][T13413] usb 5-1: config 0 descriptor?? [ 1333.436359][T13413] ims_pcu 5-1:0.0: Zero length descriptor [ 1333.465602][T13413] ims_pcu: probe of 5-1:0.0 failed with error -22 [ 1333.502833][T18801] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3490'. [ 1333.533761][ T3599] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1333.767761][ T3599] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 1333.860524][T18807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.937995][T18807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.411378][ T3599] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1334.446562][ T3599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1334.503149][ T3599] usb 1-1: Product: syz [ 1334.538276][ T3599] usb 1-1: Manufacturer: syz [ 1334.549787][ T3599] usb 1-1: SerialNumber: syz [ 1334.574797][ T3599] usb 1-1: config 0 descriptor?? [ 1334.598934][ T3599] ims_pcu 1-1:0.0: Zero length descriptor [ 1334.612258][ T3599] ims_pcu: probe of 1-1:0.0 failed with error -22 [ 1335.676114][T18814] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3494'. [ 1337.084483][T18817] device syzkaller0 entered promiscuous mode [ 1337.367458][T16473] usb 5-1: USB disconnect, device number 18 [ 1337.683326][ T3599] usb 1-1: USB disconnect, device number 127 [ 1337.933584][T16473] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1337.951740][T18822] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3497'. [ 1338.146529][T16473] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1338.165952][T16473] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1338.213527][T16473] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1338.262383][T16473] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1338.347231][T16473] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1338.360973][T16473] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1338.380357][T16473] usb 5-1: Product: syz [ 1338.387382][T16473] usb 5-1: Manufacturer: syz [ 1338.439770][T16473] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1338.556952][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1338.693547][T16475] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1338.751264][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 1338.758531][ T14] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1338.772269][ T14] usb 1-1: config 0 has no interface number 0 [ 1338.782612][ T14] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1338.795751][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.811082][ T14] usb 1-1: Product: syz [ 1338.815713][ T14] usb 1-1: Manufacturer: syz [ 1338.820720][ T14] usb 1-1: SerialNumber: syz [ 1338.832819][ T14] usb 1-1: config 0 descriptor?? [ 1338.855402][ T14] smsc95xx v2.0.0 [ 1338.883558][T16475] usb 3-1: Using ep0 maxpacket: 16 [ 1338.900423][T16475] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.921313][T16475] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1338.944300][T16475] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1338.960676][T16475] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.969768][T16475] usb 3-1: Product: syz [ 1338.981462][T16475] usb 3-1: Manufacturer: syz [ 1338.986287][T16475] usb 3-1: SerialNumber: syz [ 1339.169885][T13413] usb 5-1: USB disconnect, device number 19 [ 1339.213698][T18835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.239779][T18835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.243574][T16475] usb 3-1: 0:2 : does not exist [ 1339.262867][ T14] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1339.273673][T16475] usb 3-1: USB disconnect, device number 121 [ 1339.298768][ T14] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1339.500072][T18288] udevd[18288]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1339.723687][T13413] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1339.913594][T13413] usb 5-1: Using ep0 maxpacket: 8 [ 1339.921253][T13413] usb 5-1: config 0 has no interfaces? [ 1339.927590][T13413] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1339.950358][T13413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.992899][T13413] usb 5-1: config 0 descriptor?? [ 1340.154776][ T14] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1340.173836][ T14] smsc95xx: probe of 1-1:0.67 failed with error -32 [ 1340.334802][T16475] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1340.531510][T16475] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 1340.869250][T16475] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1340.886827][T16475] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1340.902561][T16475] usb 3-1: Product: syz [ 1340.908959][T16475] usb 3-1: Manufacturer: syz [ 1340.916815][T16475] usb 3-1: SerialNumber: syz [ 1340.937388][T16475] usb 3-1: config 0 descriptor?? [ 1340.969658][T16475] ims_pcu 3-1:0.0: Zero length descriptor [ 1340.975905][T16475] ims_pcu: probe of 3-1:0.0 failed with error -22 [ 1341.344692][ T14] usb 1-1: USB disconnect, device number 2 [ 1341.774796][T18854] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3507'. [ 1342.176088][T18858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3508'. [ 1342.638879][T16475] usb 5-1: USB disconnect, device number 20 [ 1342.799307][T18864] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3510'. [ 1343.211292][ T14] usb 3-1: USB disconnect, device number 122 [ 1343.414584][T13413] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1343.588893][T18876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3514'. [ 1343.639176][T13413] usb 2-1: config 0 has an invalid interface number: 74 but max is 1 [ 1343.657990][T13413] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.715937][T13413] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1343.751515][T13413] usb 2-1: config 0 has no interface number 0 [ 1343.803186][T13413] usb 2-1: config 0 interface 74 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1343.970362][T13413] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 1344.000365][T13413] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.055540][T13413] usb 2-1: Product: syz [ 1344.065413][T18888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3516'. [ 1344.075816][T13413] usb 2-1: Manufacturer: syz [ 1344.090675][T13413] usb 2-1: SerialNumber: syz [ 1344.130877][T13413] usb 2-1: config 0 descriptor?? [ 1347.583514][T16473] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1347.793670][T16473] usb 5-1: Using ep0 maxpacket: 32 [ 1347.884554][T16473] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1347.972893][T16473] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1348.058728][T16473] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1348.106787][T16473] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1348.155790][T16473] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.160939][T13413] cypress_m8 2-1:0.74: HID->COM RS232 Adapter converter detected [ 1348.183605][T16473] usb 5-1: Product: syz [ 1348.200685][T16473] usb 5-1: Manufacturer: syz [ 1348.244105][T16473] usb 5-1: SerialNumber: syz [ 1348.250846][T13413] cyphidcom ttyUSB0: required endpoint is missing [ 1348.252530][T16473] usb 5-1: config 0 descriptor?? [ 1348.310464][T13413] usb 2-1: USB disconnect, device number 123 [ 1348.383523][T13413] cypress_m8 2-1:0.74: device disconnected [ 1348.525196][T18907] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3523'. [ 1348.668420][T18909] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3524'. [ 1349.058234][T18903] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3521'. [ 1349.157708][T18916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.203251][T18916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.412042][T18921] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3528'. [ 1349.470711][T18921] netlink: 'syz.2.3528': attribute type 75 has an invalid length. [ 1350.563980][T18937] netlink: 'syz.2.3534': attribute type 1 has an invalid length. [ 1350.711700][T18939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3534'. [ 1350.743621][T13413] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1350.830330][T18939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3534'. [ 1350.946043][T13413] usb 1-1: config 0 has an invalid interface number: 74 but max is 1 [ 1350.987643][T13413] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.052849][T13413] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1351.087952][T18937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3534'. [ 1351.158825][T13413] usb 1-1: config 0 has no interface number 0 [ 1351.177930][T18937] bond8: (slave bridge3): making interface the new active one [ 1351.193633][T13413] usb 1-1: config 0 interface 74 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1351.250051][T18937] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 1351.598292][T16475] usb 5-1: USB disconnect, device number 21 [ 1351.617172][T18944] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3535'. [ 1351.630551][T13413] usb 1-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 1351.668054][T13413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.705762][T13413] usb 1-1: Product: syz [ 1351.709997][T13413] usb 1-1: Manufacturer: syz [ 1351.752151][T13413] usb 1-1: SerialNumber: syz [ 1351.791171][T13413] usb 1-1: config 0 descriptor?? [ 1352.873565][ T14] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1352.961896][T18956] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3538'. [ 1353.104199][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 1353.133346][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1353.269989][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1353.373710][ T14] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1353.558870][ T14] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1353.569116][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.577578][T18962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.581851][ T14] usb 2-1: Product: syz [ 1353.593601][T16473] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1353.606841][ T14] usb 2-1: Manufacturer: syz [ 1353.611548][ T14] usb 2-1: SerialNumber: syz [ 1353.631636][T18962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.633318][ T14] usb 2-1: config 0 descriptor?? [ 1353.713635][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 1353.795457][T16473] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1353.880644][T16473] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 1353.941524][T16473] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1353.965756][T16473] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1354.029455][T16473] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1354.079381][T16473] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1354.110365][T16473] usb 3-1: Product: syz [ 1354.122742][T16473] usb 3-1: Manufacturer: syz [ 1354.148232][T18968] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3543'. [ 1354.230819][T16473] cdc_wdm 3-1:1.0: skipping garbage [ 1354.252533][T18968] netlink: 'syz.4.3543': attribute type 75 has an invalid length. [ 1354.277177][T16473] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1354.336555][T18954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3536'. [ 1355.030534][ T14] usb 3-1: USB disconnect, device number 123 [ 1355.575422][T18980] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3548'. [ 1355.764714][T13413] cypress_m8 1-1:0.74: HID->COM RS232 Adapter converter detected [ 1355.820096][T13413] cyphidcom ttyUSB0: required endpoint is missing [ 1355.901411][T13413] usb 1-1: USB disconnect, device number 3 [ 1355.927246][T13413] cypress_m8 1-1:0.74: device disconnected [ 1355.952967][T18978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3545'. [ 1356.106940][T18986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3547'. [ 1357.007030][ T4276] Bluetooth: hci1: unexpected event 0x22 length: 763 > 260 [ 1357.075913][T16473] usb 2-1: USB disconnect, device number 124 [ 1357.733595][T16473] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1357.923546][T16473] usb 2-1: Using ep0 maxpacket: 8 [ 1357.932277][T16473] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.953659][ T126] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1358.019690][T16473] usb 2-1: config 0 has no interfaces? [ 1358.053611][T16473] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1358.106167][T16473] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.123712][ T126] usb 1-1: device descriptor read/64, error -71 [ 1358.157683][T16473] usb 2-1: config 0 descriptor?? [ 1358.393535][ T126] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1358.554022][ T126] usb 1-1: device descriptor read/64, error -71 [ 1358.646096][T16475] usb 2-1: USB disconnect, device number 125 [ 1358.703833][ T126] usb usb1-port1: attempt power cycle [ 1358.738139][T19008] fuse: Unknown parameter 'grou00000000000000000000' [ 1359.070547][T19015] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3557'. [ 1359.125002][ T126] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1359.131397][T19015] netlink: 'syz.2.3557': attribute type 75 has an invalid length. [ 1359.184269][ T126] usb 1-1: device descriptor read/8, error -71 [ 1359.453494][ T126] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1359.486807][T19019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.504225][ T126] usb 1-1: device descriptor read/8, error -71 [ 1359.519348][T19019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.648458][ T126] usb usb1-port1: unable to enumerate USB device [ 1359.976784][T19032] device syzkaller0 entered promiscuous mode [ 1359.987652][T19036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3562'. [ 1360.163797][T16475] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1360.510494][T16475] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 1360.661626][T19044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3565'. [ 1360.800140][T16475] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1360.883928][T16475] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1361.017335][T16475] usb 3-1: Product: syz [ 1361.057097][T16475] usb 3-1: Manufacturer: syz [ 1361.104722][T16475] usb 3-1: SerialNumber: syz [ 1361.128625][T19049] netlink: 'syz.0.3567': attribute type 1 has an invalid length. [ 1361.172172][T16475] usb 3-1: config 0 descriptor?? [ 1361.190078][T19051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3567'. [ 1361.236877][T16475] ims_pcu 3-1:0.0: Zero length descriptor [ 1361.278201][T16475] ims_pcu: probe of 3-1:0.0 failed with error -22 [ 1361.306847][T19051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3567'. [ 1361.436506][T19049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3567'. [ 1361.552578][T19049] bond5: (slave bridge3): making interface the new active one [ 1361.592983][T19049] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 1361.879306][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.886942][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.163355][T19056] fuse: Unknown parameter 'grou00000000000000000000' [ 1363.793632][T16475] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1364.013562][T16475] usb 1-1: Using ep0 maxpacket: 16 [ 1364.020946][T16475] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.092783][T16475] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1364.130093][T16475] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1364.180215][T16475] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.213501][T16475] usb 1-1: Product: syz [ 1364.217864][T16475] usb 1-1: Manufacturer: syz [ 1364.389574][T16475] usb 1-1: SerialNumber: syz [ 1364.409378][ T4271] usb 3-1: USB disconnect, device number 124 [ 1364.547321][T19069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3572'. [ 1364.614458][T16475] usb 1-1: 0:2 : does not exist [ 1364.664364][T16475] usb 1-1: USB disconnect, device number 8 [ 1364.891746][T19073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3574'. [ 1364.974789][T17862] udevd[17862]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1365.073757][ T4271] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1365.093491][ T3599] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1365.273655][ T3599] usb 5-1: device descriptor read/64, error -71 [ 1365.281824][ T4271] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1365.322085][ T4271] usb 3-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 1365.376490][ T4271] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1365.409514][ T4271] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1365.434612][T19084] hub 9-0:1.0: USB hub found [ 1365.443013][T19084] hub 9-0:1.0: 1 port detected [ 1365.497284][ T4271] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1365.519959][ T4271] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1365.546319][ T4271] usb 3-1: Product: syz [ 1365.554618][ T4271] usb 3-1: Manufacturer: syz [ 1365.563974][ T3599] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1365.606126][ T4271] cdc_wdm 3-1:1.0: skipping garbage [ 1365.611980][ T4271] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1365.684477][T19084] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3577'. [ 1365.743637][ T3599] usb 5-1: device descriptor read/64, error -71 [ 1365.801231][T19086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1365.865918][ T3599] usb usb5-port1: attempt power cycle [ 1365.882253][T19086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.303701][ T3599] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1366.347682][ T3599] usb 5-1: device descriptor read/8, error -71 [ 1366.380459][ T4271] usb 3-1: USB disconnect, device number 125 [ 1366.633861][ T3599] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1366.680046][ T3599] usb 5-1: device descriptor read/8, error -71 [ 1366.817302][ T3599] usb usb5-port1: unable to enumerate USB device [ 1366.903677][ T4271] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1367.103804][ T4271] usb 3-1: Using ep0 maxpacket: 8 [ 1367.118285][ T4271] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.162875][ T4271] usb 3-1: config 0 has no interfaces? [ 1367.186095][ T4271] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1367.222578][ T4271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.268366][ T4271] usb 3-1: config 0 descriptor?? [ 1367.721628][ T3599] usb 3-1: USB disconnect, device number 126 [ 1368.439485][T19104] device syzkaller0 entered promiscuous mode [ 1369.062865][T19114] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3586'. [ 1369.233605][T16473] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1369.453022][T16473] usb 3-1: config 0 has an invalid interface number: 74 but max is 1 [ 1369.479952][T16473] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.584153][T16473] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1369.671805][T16473] usb 3-1: config 0 has no interface number 0 [ 1369.696506][T16473] usb 3-1: config 0 interface 74 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1369.750666][T16473] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 1369.785336][T16473] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.832801][T16473] usb 3-1: Product: syz [ 1369.864788][T16473] usb 3-1: Manufacturer: syz [ 1369.882634][T16473] usb 3-1: SerialNumber: syz [ 1369.919058][T16473] usb 3-1: config 0 descriptor?? [ 1370.712437][T19122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.867078][T19122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.976309][T19129] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3591'. [ 1372.123609][ T126] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1372.356431][ T126] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1372.411550][ T126] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.454739][T19134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.483467][ T126] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1372.512907][ T126] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1372.537727][ T126] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1372.557761][T19134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.576722][ T126] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1372.594681][ T126] usb 1-1: Product: syz [ 1372.609240][ T126] usb 1-1: Manufacturer: syz [ 1372.638959][ T126] cdc_wdm 1-1:1.0: skipping garbage [ 1372.660368][ T126] cdc_wdm 1-1:1.0: skipping garbage [ 1372.708632][ T126] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1372.993589][T16475] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1373.126834][T19143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3594'. [ 1373.153604][T16475] usb 2-1: device descriptor read/64, error -71 [ 1373.205224][T16473] cypress_m8 3-1:0.74: HID->COM RS232 Adapter converter detected [ 1373.239144][T16473] cyphidcom ttyUSB0: required endpoint is missing [ 1373.318839][T16473] usb 3-1: USB disconnect, device number 127 [ 1373.360482][T16473] cypress_m8 3-1:0.74: device disconnected [ 1373.423508][T16475] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1373.447330][T16472] usb 1-1: USB disconnect, device number 9 [ 1373.603579][T16475] usb 2-1: device descriptor read/64, error -71 [ 1373.733666][T16475] usb usb2-port1: attempt power cycle [ 1373.917373][T19150] hub 9-0:1.0: USB hub found [ 1374.009381][T19150] hub 9-0:1.0: 1 port detected [ 1374.143575][T16475] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1374.184622][T19150] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3595'. [ 1374.199521][T16475] usb 2-1: device descriptor read/8, error -71 [ 1374.474030][T16475] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1374.493517][T16472] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1374.524506][T16475] usb 2-1: device descriptor read/8, error -71 [ 1374.657311][T16475] usb usb2-port1: unable to enumerate USB device [ 1374.698417][T16472] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1374.712311][T16472] usb 1-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 1374.727494][T16472] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1374.737600][T16472] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1374.757403][T16472] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1374.769957][T16472] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1374.780282][T16472] usb 1-1: Product: syz [ 1374.788309][T16472] usb 1-1: Manufacturer: syz [ 1374.818615][T16472] cdc_wdm 1-1:1.0: skipping garbage [ 1374.826884][T16472] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1375.621389][T13413] usb 1-1: USB disconnect, device number 10 [ 1376.243579][T16475] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1376.473665][T16475] usb 1-1: Using ep0 maxpacket: 16 [ 1376.485222][T16475] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.572742][T19169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3601'. [ 1376.630030][T19172] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3604'. [ 1376.644429][T16475] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1376.692155][T16475] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1376.730608][T16475] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.760452][T16475] usb 1-1: Product: syz [ 1376.781517][T16475] usb 1-1: Manufacturer: syz [ 1376.795419][T16475] usb 1-1: SerialNumber: syz [ 1376.903498][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1377.023017][T16475] usb 1-1: 0:2 : does not exist [ 1377.037176][T16475] usb 1-1: unit 6 not found! [ 1377.103469][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 1377.115405][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1377.130496][T16475] usb 1-1: USB disconnect, device number 11 [ 1377.190135][T17862] udevd[17862]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1377.213536][ T14] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1377.277261][ T14] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1377.333200][ T14] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1377.392620][ T14] usb 2-1: Product: syz [ 1377.412953][ T14] usb 2-1: Manufacturer: syz [ 1377.448370][ T14] usb 2-1: SerialNumber: syz [ 1377.453719][T16472] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1377.501624][ T14] usb 2-1: config 0 descriptor?? [ 1377.695867][T16472] usb 3-1: config 0 has an invalid interface number: 74 but max is 1 [ 1377.736678][T16218] usb 2-1: USB disconnect, device number 4 [ 1377.744104][T16472] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.801438][T16472] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1377.859236][T16472] usb 3-1: config 0 has no interface number 0 [ 1377.871957][T16472] usb 3-1: config 0 interface 74 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1377.919277][T16472] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 1377.956627][T16472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.973493][ T14] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1377.983238][T16472] usb 3-1: Product: syz [ 1377.997279][T16472] usb 3-1: Manufacturer: syz [ 1378.007672][T16472] usb 3-1: SerialNumber: syz [ 1378.031161][T16472] usb 3-1: config 0 descriptor?? [ 1378.223465][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 1378.231416][ T14] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1378.260321][ T14] usb 1-1: config 0 has no interface number 0 [ 1378.320577][ T14] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1378.360725][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.403221][ T14] usb 1-1: Product: syz [ 1378.437722][ T14] usb 1-1: Manufacturer: syz [ 1378.468934][ T14] usb 1-1: SerialNumber: syz [ 1378.496349][ T14] usb 1-1: config 0 descriptor?? [ 1378.530847][ T14] smsc95xx v2.0.0 [ 1378.935337][ T14] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1378.952916][ T14] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1379.782064][ T14] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1379.822259][ T14] smsc95xx: probe of 1-1:0.67 failed with error -61 [ 1380.213528][T16473] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1380.373789][T16473] usb 2-1: device descriptor read/64, error -71 [ 1380.653526][T16473] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1380.784161][T16472] cypress_m8 3-1:0.74: HID->COM RS232 Adapter converter detected [ 1380.792738][T16472] cyphidcom ttyUSB0: required endpoint is missing [ 1380.823514][ T3599] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1380.831475][T16473] usb 2-1: device descriptor read/64, error -71 [ 1380.841600][T16472] usb 3-1: USB disconnect, device number 2 [ 1380.862459][T16472] cypress_m8 3-1:0.74: device disconnected [ 1380.959547][T16473] usb usb2-port1: attempt power cycle [ 1381.013585][ T3599] usb 5-1: Using ep0 maxpacket: 32 [ 1381.021436][ T3599] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1381.040314][ T3599] usb 5-1: config 0 has no interface number 0 [ 1381.047339][ T14] usb 1-1: USB disconnect, device number 12 [ 1381.055968][ T3599] usb 5-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1381.090499][ T3599] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1381.121228][ T3599] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1381.151056][ T3599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.195129][ T3599] usb 5-1: Product: syz [ 1381.199360][ T3599] usb 5-1: Manufacturer: syz [ 1381.233594][ T3599] usb 5-1: SerialNumber: syz [ 1381.245040][ T3599] usb 5-1: config 0 descriptor?? [ 1381.373548][T16473] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1381.414466][T16473] usb 2-1: device descriptor read/8, error -71 [ 1381.604662][T19205] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3615'. [ 1381.683560][T16473] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1381.724174][T16473] usb 2-1: device descriptor read/8, error -71 [ 1381.853688][T16473] usb usb2-port1: unable to enumerate USB device [ 1382.761726][T19216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3617'. [ 1383.943583][ T14] usb 5-1: USB disconnect, device number 26 [ 1384.363893][T16473] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1384.598324][T16473] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 1384.633946][ T14] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1384.696183][T16473] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1384.719533][T16473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1384.798401][T16473] usb 1-1: Product: syz [ 1384.835005][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 1384.850592][T16473] usb 1-1: Manufacturer: syz [ 1384.856897][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.908367][ T14] usb 2-1: config 0 has no interfaces? [ 1384.917660][T16473] usb 1-1: SerialNumber: syz [ 1384.949367][T16473] usb 1-1: config 0 descriptor?? [ 1384.964311][ T14] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1385.007224][T16473] ims_pcu 1-1:0.0: Zero length descriptor [ 1385.017169][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.020315][T16473] ims_pcu: probe of 1-1:0.0 failed with error -22 [ 1385.097206][ T14] usb 2-1: config 0 descriptor?? [ 1385.533580][T16473] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1385.564356][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1385.595511][ T126] usb 2-1: USB disconnect, device number 9 [ 1385.753513][T16473] usb 5-1: Using ep0 maxpacket: 32 [ 1385.766712][ T14] usb 3-1: config 0 has an invalid interface number: 74 but max is 1 [ 1385.767830][T16473] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1385.790419][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1385.823066][ T14] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1385.823089][T16473] usb 5-1: config 0 has no interface number 0 [ 1385.846189][T16473] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1385.889445][ T14] usb 3-1: config 0 has no interface number 0 [ 1385.926207][T16473] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.940431][T16473] usb 5-1: Product: syz [ 1385.957396][T16473] usb 5-1: Manufacturer: syz [ 1385.967967][ T14] usb 3-1: config 0 interface 74 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1385.988311][T16473] usb 5-1: SerialNumber: syz [ 1386.010822][T16473] usb 5-1: config 0 descriptor?? [ 1386.028738][T16473] smsc95xx v2.0.0 [ 1386.073124][ T14] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 1386.119143][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.201207][ T14] usb 3-1: Product: syz [ 1386.223142][ T14] usb 3-1: Manufacturer: syz [ 1386.231254][T19246] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3626'. [ 1386.279964][ T14] usb 3-1: SerialNumber: syz [ 1386.347526][ T14] usb 3-1: config 0 descriptor?? [ 1386.430834][T16473] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1386.520570][T16473] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1386.830995][T19252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.851457][T19252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.916632][T19252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3627'. [ 1387.253682][T16472] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1387.390806][T16473] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1387.413573][T16472] usb 2-1: device descriptor read/64, error -71 [ 1387.454208][T16473] smsc95xx: probe of 5-1:0.67 failed with error -61 [ 1387.693543][T16472] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1387.883498][T16472] usb 2-1: device descriptor read/64, error -71 [ 1388.014578][T16472] usb usb2-port1: attempt power cycle [ 1388.066582][T16473] usb 1-1: USB disconnect, device number 13 [ 1388.423483][T16472] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1388.464111][T16472] usb 2-1: device descriptor read/8, error -71 [ 1388.576442][T19261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3629'. [ 1388.734127][T16472] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1388.757230][T13413] usb 5-1: USB disconnect, device number 27 [ 1388.784356][T16472] usb 2-1: device descriptor read/8, error -71 [ 1388.923762][T16472] usb usb2-port1: unable to enumerate USB device [ 1389.051583][ T14] cypress_m8 3-1:0.74: HID->COM RS232 Adapter converter detected [ 1389.087852][ T14] cyphidcom ttyUSB0: required endpoint is missing [ 1389.172677][ T14] usb 3-1: USB disconnect, device number 3 [ 1389.256580][ T14] cypress_m8 3-1:0.74: device disconnected [ 1389.412246][T19270] device syzkaller0 entered promiscuous mode [ 1390.865826][T19282] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3633'. [ 1390.955397][T19282] netlink: 'syz.1.3633': attribute type 75 has an invalid length. [ 1391.809121][T19291] netlink: 'syz.1.3636': attribute type 1 has an invalid length. [ 1391.924151][T19291] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1392.059463][T19295] hub 9-0:1.0: USB hub found [ 1392.203101][T19297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3638'. [ 1392.217042][T19295] hub 9-0:1.0: 1 port detected [ 1392.487589][T19295] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3635'. [ 1392.633627][T16473] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1392.875273][T16473] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1392.900730][T16473] usb 2-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 1392.933203][T16473] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1392.992207][T16473] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1393.043453][T16473] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1393.052596][T16473] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1393.181334][T16473] usb 2-1: Product: syz [ 1393.220147][T16473] usb 2-1: Manufacturer: syz [ 1393.294707][T16473] cdc_wdm 2-1:1.0: skipping garbage [ 1393.365544][T16473] cdc_wdm 2-1:1.0: skipping garbage [ 1393.401180][T16473] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1393.680687][T19316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1393.755101][T19316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.056075][T16473] usb 2-1: USB disconnect, device number 14 [ 1394.564485][T19325] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3643'. [ 1394.574140][T13413] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1394.753734][T13413] usb 2-1: device descriptor read/64, error -71 [ 1395.023545][T13413] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1395.195573][T13413] usb 2-1: device descriptor read/64, error -71 [ 1395.344109][T13413] usb usb2-port1: attempt power cycle [ 1395.753568][T13413] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1395.805605][T13413] usb 2-1: device descriptor read/8, error -71 [ 1396.113602][T13413] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1396.155285][T13413] usb 2-1: device descriptor read/8, error -71 [ 1396.274014][T13413] usb usb2-port1: unable to enumerate USB device [ 1396.622049][T19337] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3647'. [ 1396.681125][T19337] netlink: 'syz.4.3647': attribute type 75 has an invalid length. [ 1398.496496][T16472] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1398.795316][T16472] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1398.885403][T16472] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1398.923257][T16472] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1398.933691][T16472] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1398.941947][T16472] usb 2-1: SerialNumber: syz [ 1399.171322][T16472] usb 2-1: 0:2 : does not exist [ 1399.233445][T16472] usb 2-1: USB disconnect, device number 19 [ 1399.565085][T17862] udevd[17862]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1399.713532][T13413] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1399.913527][T13413] usb 5-1: Using ep0 maxpacket: 32 [ 1399.921372][T13413] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1399.962541][T13413] usb 5-1: config 0 has no interface number 0 [ 1400.000986][T13413] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1400.033713][T13413] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.041800][T13413] usb 5-1: Product: syz [ 1400.073956][T13413] usb 5-1: Manufacturer: syz [ 1400.078736][T13413] usb 5-1: SerialNumber: syz [ 1400.157352][T13413] usb 5-1: config 0 descriptor?? [ 1400.178195][T13413] smsc95xx v2.0.0 [ 1400.573588][T13413] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1400.608616][T13413] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1401.163521][T16472] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1401.286541][T19374] device syzkaller0 entered promiscuous mode [ 1401.382805][T16472] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1401.400925][T16472] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1401.412364][T16472] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1401.442801][T13413] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1401.455171][T16472] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1401.464415][T13413] smsc95xx: probe of 5-1:0.67 failed with error -61 [ 1401.498928][T16472] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1401.518381][T16472] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1401.527753][T16472] usb 2-1: Product: syz [ 1401.532156][T16472] usb 2-1: Manufacturer: syz [ 1401.566058][T16472] cdc_wdm 2-1:1.0: skipping garbage [ 1401.571445][T16472] cdc_wdm 2-1:1.0: skipping garbage [ 1401.594471][T16472] cdc_wdm 2-1:1.0: skipping garbage [ 1401.599835][T16472] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1401.786307][T19383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.800952][T19383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1401.826230][T19383] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3660'. [ 1402.287223][T16472] usb 2-1: USB disconnect, device number 20 [ 1403.063332][T13413] usb 5-1: USB disconnect, device number 28 [ 1403.383574][ T126] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1403.602124][ T126] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 1404.080612][ T126] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1404.106738][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1404.135582][ T126] usb 2-1: Product: syz [ 1404.156690][ T126] usb 2-1: Manufacturer: syz [ 1404.170175][ T126] usb 2-1: SerialNumber: syz [ 1404.193137][ T126] usb 2-1: config 0 descriptor?? [ 1404.223218][ T126] ims_pcu 2-1:0.0: Zero length descriptor [ 1404.249353][ T126] ims_pcu: probe of 2-1:0.0 failed with error -22 [ 1404.933653][T16472] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1405.185632][T16472] usb 5-1: config 0 has an invalid interface number: 74 but max is 1 [ 1405.228833][T16472] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.308856][T16472] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1405.328336][T16472] usb 5-1: config 0 has no interface number 0 [ 1405.335664][T16472] usb 5-1: config 0 interface 74 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1405.366171][T16472] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 1405.409046][T16472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.445220][T16472] usb 5-1: Product: syz [ 1405.461300][T16472] usb 5-1: Manufacturer: syz [ 1405.490660][T16472] usb 5-1: SerialNumber: syz [ 1405.532978][T16472] usb 5-1: config 0 descriptor?? [ 1405.733499][ T126] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1405.935322][ T126] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1405.970660][ T126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.981613][ T126] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1405.999643][ T126] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1406.026297][ T126] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1406.059738][ T126] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1406.088298][T19418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.100816][ T126] usb 3-1: Product: syz [ 1406.109216][ T126] usb 3-1: Manufacturer: syz [ 1406.120215][T19418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.155542][ T126] cdc_wdm 3-1:1.0: skipping garbage [ 1406.169073][ T126] cdc_wdm 3-1:1.0: skipping garbage [ 1406.182620][ T126] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1406.950824][T13413] usb 3-1: USB disconnect, device number 4 [ 1407.675909][T19427] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3673'. [ 1408.565737][T16472] cypress_m8 5-1:0.74: HID->COM RS232 Adapter converter detected [ 1408.595851][T16472] cyphidcom ttyUSB0: required endpoint is missing [ 1408.626398][T16472] usb 5-1: USB disconnect, device number 29 [ 1408.655516][T16472] cypress_m8 5-1:0.74: device disconnected [ 1408.982713][ T126] usb 2-1: USB disconnect, device number 21 [ 1409.133627][T16472] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1409.332266][T16472] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1409.357039][T16472] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1409.403625][T16472] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1409.459702][T16472] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1409.527157][T16472] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1409.557382][T16472] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1409.565906][T16472] usb 5-1: Product: syz [ 1409.600685][T16472] usb 5-1: Manufacturer: syz [ 1409.650305][T16472] cdc_wdm 5-1:1.0: skipping garbage [ 1409.663598][T16472] cdc_wdm 5-1:1.0: skipping garbage [ 1409.683555][T16472] cdc_wdm 5-1:1.0: skipping garbage [ 1409.688985][T16472] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1410.247621][T19443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3678'. [ 1410.399270][T16472] usb 5-1: USB disconnect, device number 30 [ 1412.493514][T16473] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1412.695473][T16473] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1412.732125][T16473] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.789942][T16473] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1412.799660][T16473] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1412.821438][T16473] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1412.848619][T16473] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1412.873068][T16473] usb 5-1: Product: syz [ 1412.884561][T16473] usb 5-1: Manufacturer: syz [ 1412.916618][T16473] cdc_wdm 5-1:1.0: skipping garbage [ 1412.932160][T16473] cdc_wdm 5-1:1.0: skipping garbage [ 1412.951231][T16473] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1413.119414][T16473] usb 5-1: USB disconnect, device number 31 [ 1415.548810][T19485] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3689'. [ 1416.183817][T19488] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3690'. [ 1418.323584][ T126] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1418.454897][T19513] netlink: 'syz.3.3698': attribute type 1 has an invalid length. [ 1418.514445][T19516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3698'. [ 1418.543616][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 1418.551143][ T126] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1418.559696][ T126] usb 1-1: config 0 has no interface number 0 [ 1418.566975][T19513] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3698'. [ 1418.576310][ T126] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1418.586573][ T126] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1418.596366][ T126] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1418.601346][T19513] bond4: (slave bridge1): making interface the new active one [ 1418.605663][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.621280][ T126] usb 1-1: Product: syz [ 1418.625606][ T126] usb 1-1: Manufacturer: syz [ 1418.630331][ T126] usb 1-1: SerialNumber: syz [ 1418.648600][ T126] usb 1-1: config 0 descriptor?? [ 1418.655113][T19513] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 1418.668599][ T126] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1418.693890][ T126] em28xx 1-1:0.89: Video interface 89 found: [ 1418.743573][ T14] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1418.933613][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 1418.941134][ T14] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 1418.972887][ T14] usb 3-1: config 0 has no interface number 0 [ 1418.992334][ T14] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1419.019516][ T14] usb 3-1: config 0 interface 89 has no altsetting 0 [ 1419.054090][ T14] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1419.064349][T19521] binder: BINDER_SET_CONTEXT_MGR already set [ 1419.075555][T19521] binder: 19520:19521 ioctl 4018620d 200000000040 returned -16 [ 1419.085825][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.103998][ T14] usb 3-1: Product: syz [ 1419.115374][ T14] usb 3-1: Manufacturer: syz [ 1419.131092][ T14] usb 3-1: SerialNumber: syz [ 1419.152852][ T14] usb 3-1: config 0 descriptor?? [ 1419.167707][ T14] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1419.177922][ T14] em28xx 3-1:0.89: Video interface 89 found: [ 1419.297602][ T126] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1419.612472][T19530] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3703'. [ 1419.631790][T19530] netlink: 'syz.1.3703': attribute type 75 has an invalid length. [ 1419.724104][ T126] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1419.747672][ T126] em28xx 1-1:0.89: board has no eeprom [ 1419.774883][ T14] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 1419.853484][ T126] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1419.863616][ T126] em28xx 1-1:0.89: analog set to bulk mode. [ 1419.939591][ T126] usb 1-1: USB disconnect, device number 14 [ 1419.997286][ T126] em28xx 1-1:0.89: Disconnecting em28xx [ 1420.037385][T13413] em28xx 1-1:0.89: Registering V4L2 extension [ 1420.198186][ T14] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1420.223568][ T14] em28xx 3-1:0.89: board has no eeprom [ 1420.303644][ T14] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 1420.321689][T13413] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1420.335800][ T14] em28xx 3-1:0.89: analog set to bulk mode. [ 1420.345541][T13413] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1420.405935][T13413] em28xx 1-1:0.89: No AC97 audio processor [ 1420.419438][ T14] usb 3-1: USB disconnect, device number 5 [ 1420.479069][T13413] usb 1-1: Decoder not found [ 1420.505768][ T14] em28xx 3-1:0.89: Disconnecting em28xx [ 1420.527845][T13413] em28xx 1-1:0.89: failed to create media graph [ 1420.562488][T13413] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1420.588529][T13413] em28xx 1-1:0.89: Registering snapshot button... [ 1420.625906][T13413] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input23 [ 1420.667962][T13413] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1420.714849][ T126] em28xx 1-1:0.89: Closing input extension [ 1420.720860][ T126] em28xx 1-1:0.89: Deregistering snapshot button [ 1420.833683][T13413] em28xx 3-1:0.89: Registering V4L2 extension [ 1420.843267][ T126] em28xx 1-1:0.89: Freeing device [ 1421.296053][T13413] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 1421.309658][T13413] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 1421.350426][T13413] em28xx 3-1:0.89: No AC97 audio processor [ 1421.409992][T13413] usb 3-1: Decoder not found [ 1421.434464][T13413] em28xx 3-1:0.89: failed to create media graph [ 1421.461859][T13413] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 1421.508880][T19544] ================================================================== [ 1421.517348][T19544] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430 [ 1421.524324][T19544] Read of size 8 at addr ffff88807de8c738 by task v4l_id/19544 [ 1421.531910][T19544] [ 1421.534267][T19544] CPU: 0 PID: 19544 Comm: v4l_id Not tainted syzkaller #0 [ 1421.541517][T19544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1421.551648][T19544] Call Trace: [ 1421.555134][T19544] [ 1421.558094][T19544] dump_stack_lvl+0x188/0x24e [ 1421.562988][T19544] ? __lock_acquire+0x7d10/0x7d10 [ 1421.568049][T19544] ? show_regs_print_info+0x12/0x12 [ 1421.573294][T19544] ? load_image+0x400/0x400 [ 1421.577831][T19544] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1421.583340][T19544] ? __virt_addr_valid+0x188/0x540 [ 1421.588530][T19544] ? __virt_addr_valid+0x465/0x540 [ 1421.593670][T19544] ? v4l2_fh_open+0xc6/0x430 [ 1421.598277][T19544] print_report+0xa8/0x210 [ 1421.602758][T19544] kasan_report+0x10b/0x140 [ 1421.607308][T19544] ? v4l2_fh_open+0xc6/0x430 [ 1421.612031][T19544] v4l2_fh_open+0xc6/0x430 [ 1421.616512][T19544] em28xx_v4l2_open+0x152/0x990 [ 1421.621423][T19544] ? __lock_acquire+0x7d10/0x7d10 [ 1421.626485][T19544] v4l2_open+0x20b/0x360 [ 1421.630812][T19544] chrdev_open+0x5c5/0x6a0 [ 1421.635369][T19544] ? cd_forget+0x160/0x160 [ 1421.639896][T19544] ? fsnotify_perm+0x39b/0x550 [ 1421.644734][T19544] ? cd_forget+0x160/0x160 [ 1421.649188][T19544] do_dentry_open+0x7e9/0x10d0 [ 1421.654169][T19544] path_openat+0x2635/0x2ee0 [ 1421.658929][T19544] ? verify_lock_unused+0x140/0x140 [ 1421.664172][T19544] ? do_syscall_64+0x4c/0xa0 [ 1421.668810][T19544] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1421.674903][T19544] ? do_filp_open+0x430/0x430 [ 1421.679781][T19544] do_filp_open+0x1f1/0x430 [ 1421.684304][T19544] ? vfs_tmpfile+0x480/0x480 [ 1421.689021][T19544] ? _raw_spin_unlock+0x24/0x40 [ 1421.693925][T19544] ? alloc_fd+0x58f/0x630 [ 1421.698296][T19544] do_sys_openat2+0x150/0x4b0 [ 1421.703030][T19544] ? up_read+0x20/0x20 [ 1421.707225][T19544] ? do_sys_open+0xe0/0xe0 [ 1421.711689][T19544] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1421.717703][T19544] ? lock_chain_count+0x20/0x20 [ 1421.722594][T19544] __x64_sys_openat+0x135/0x160 [ 1421.727564][T19544] do_syscall_64+0x4c/0xa0 [ 1421.732074][T19544] ? clear_bhb_loop+0x60/0xb0 [ 1421.736794][T19544] ? clear_bhb_loop+0x60/0xb0 [ 1421.741493][T19544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1421.747408][T19544] RIP: 0033:0x7fae79ca7407 [ 1421.751842][T19544] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1421.771557][T19544] RSP: 002b:00007fffe80748b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1421.779983][T19544] RAX: ffffffffffffffda RBX: 00007fae7a464880 RCX: 00007fae79ca7407 [ 1421.787963][T19544] RDX: 0000000000000000 RSI: 00007fffe8075f1b RDI: ffffffffffffff9c [ 1421.795942][T19544] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1421.803931][T19544] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1421.811907][T19544] R13: 00007fffe8074b00 R14: 00007fae7a5c3000 R15: 0000557b4a5f74d8 [ 1421.819980][T19544] [ 1421.823005][T19544] [ 1421.825349][T19544] Allocated by task 13413: [ 1421.829779][T19544] kasan_set_track+0x4b/0x70 [ 1421.834542][T19544] __kasan_kmalloc+0x8e/0xa0 [ 1421.839243][T19544] em28xx_v4l2_init+0x107/0x2e70 [ 1421.844276][T19544] em28xx_init_extension+0x118/0x1b0 [ 1421.849580][T19544] process_one_work+0x8a2/0x1160 [ 1421.854537][T19544] worker_thread+0xd83/0x1270 [ 1421.859221][T19544] kthread+0x29d/0x330 [ 1421.863401][T19544] ret_from_fork+0x1f/0x30 [ 1421.867834][T19544] [ 1421.870165][T19544] Freed by task 13413: [ 1421.874319][T19544] kasan_set_track+0x4b/0x70 [ 1421.878932][T19544] kasan_save_free_info+0x2d/0x50 [ 1421.883969][T19544] ____kasan_slab_free+0x126/0x1e0 [ 1421.889094][T19544] slab_free_freelist_hook+0x131/0x1a0 [ 1421.894566][T19544] __kmem_cache_free+0xb6/0x1f0 [ 1421.899528][T19544] em28xx_v4l2_init+0x166c/0x2e70 [ 1421.904562][T19544] em28xx_init_extension+0x118/0x1b0 [ 1421.909852][T19544] process_one_work+0x8a2/0x1160 [ 1421.914796][T19544] worker_thread+0xd83/0x1270 [ 1421.919479][T19544] kthread+0x29d/0x330 [ 1421.923563][T19544] ret_from_fork+0x1f/0x30 [ 1421.927988][T19544] [ 1421.930328][T19544] The buggy address belongs to the object at ffff88807de8c000 [ 1421.930328][T19544] which belongs to the cache kmalloc-8k of size 8192 [ 1421.944405][T19544] The buggy address is located 1848 bytes inside of [ 1421.944405][T19544] 8192-byte region [ffff88807de8c000, ffff88807de8e000) [ 1421.957874][T19544] [ 1421.960211][T19544] The buggy address belongs to the physical page: [ 1421.966625][T19544] page:ffffea0001f7a200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7de88 [ 1421.976781][T19544] head:ffffea0001f7a200 order:3 compound_mapcount:0 compound_pincount:0 [ 1421.985459][T19544] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1421.993511][T19544] raw: 00fff00000010200 ffffea0001612200 dead000000000005 ffff888017442280 [ 1422.002113][T19544] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 1422.010791][T19544] page dumped because: kasan: bad access detected [ 1422.017209][T19544] page_owner tracks the page as allocated [ 1422.022925][T19544] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 17793, tgid 17792 (syz.2.3204), ts 1247723158982, free_ts 1246875051407 [ 1422.046225][T19544] post_alloc_hook+0x173/0x1a0 [ 1422.051376][T19544] get_page_from_freelist+0x1a1e/0x1ab0 [ 1422.056946][T19544] __alloc_pages+0x1ec/0x4f0 [ 1422.061567][T19544] alloc_slab_page+0x5d/0x160 [ 1422.066253][T19544] new_slab+0x87/0x2c0 [ 1422.070329][T19544] ___slab_alloc+0xbc6/0x1240 [ 1422.075033][T19544] __kmem_cache_alloc_node+0x1a0/0x260 [ 1422.080695][T19544] __kmalloc_node+0xa0/0x240 [ 1422.085301][T19544] kvmalloc_node+0x6c/0x180 [ 1422.089842][T19544] pfifo_fast_init+0x109/0x6a0 [ 1422.094617][T19544] qdisc_create_dflt+0x11a/0x4b0 [ 1422.099567][T19544] mq_init+0x2de/0x680 [ 1422.103645][T19544] qdisc_create_dflt+0x11a/0x4b0 [ 1422.108684][T19544] dev_activate+0x1cc/0x11a0 [ 1422.113295][T19544] __dev_open+0x343/0x430 [ 1422.117643][T19544] __dev_change_flags+0x20d/0x6a0 [ 1422.122780][T19544] page last free stack trace: [ 1422.127458][T19544] free_unref_page_prepare+0x8b4/0x9a0 [ 1422.132928][T19544] free_unref_page+0x2e/0x3f0 [ 1422.137618][T19544] __unfreeze_partials+0x1a5/0x200 [ 1422.142858][T19544] put_cpu_partial+0x17c/0x250 [ 1422.147765][T19544] qlist_free_all+0x76/0xe0 [ 1422.152291][T19544] kasan_quarantine_reduce+0x144/0x160 [ 1422.157769][T19544] __kasan_slab_alloc+0x1e/0x80 [ 1422.162640][T19544] slab_post_alloc_hook+0x4b/0x480 [ 1422.167787][T19544] kmem_cache_alloc_node+0x14d/0x320 [ 1422.173088][T19544] __alloc_skb+0xfc/0x7e0 [ 1422.177436][T19544] rtmsg_ifa+0xf9/0x1f0 [ 1422.181608][T19544] __inet_del_ifa+0x865/0x1020 [ 1422.186388][T19544] inetdev_event+0x5b6/0x1400 [ 1422.191089][T19544] raw_notifier_call_chain+0xcb/0x160 [ 1422.196581][T19544] unregister_netdevice_many_notify+0x10ac/0x19c0 [ 1422.203152][T19544] default_device_exit_batch+0x9ea/0xa80 [ 1422.208815][T19544] [ 1422.211180][T19544] Memory state around the buggy address: [ 1422.216816][T19544] ffff88807de8c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1422.225941][T19544] ffff88807de8c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1422.234023][T19544] >ffff88807de8c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1422.242263][T19544] ^ [ 1422.248243][T19544] ffff88807de8c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1422.256314][T19544] ffff88807de8c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1422.264464][T19544] ================================================================== [ 1422.328065][T13413] em28xx 3-1:0.89: Registering snapshot button... [ 1422.363571][T13413] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input24 [ 1422.409983][T13413] em28xx 3-1:0.89: Remote control support is not available for this card. [ 1422.432454][ T14] em28xx 3-1:0.89: Closing input extension [ 1422.441734][ T14] em28xx 3-1:0.89: Deregistering snapshot button [ 1422.507497][T19539] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3706'. [ 1422.843645][ T126] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1423.053036][ T126] usb 2-1: config 0 has an invalid interface number: 74 but max is 1 [ 1423.078318][ T126] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.178453][ T126] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1423.243706][ T126] usb 2-1: config 0 has no interface number 0 [ 1423.289505][ T126] usb 2-1: config 0 interface 74 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1423.328744][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.337288][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.434619][ T126] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 1423.509290][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.644288][ T126] usb 2-1: Product: syz [ 1423.692767][ T126] usb 2-1: Manufacturer: syz [ 1423.737522][ T126] usb 2-1: SerialNumber: syz [ 1423.757849][T19544] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1423.765102][T19544] CPU: 1 PID: 19544 Comm: v4l_id Not tainted syzkaller #0 [ 1423.772205][T19544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1423.782299][T19544] Call Trace: [ 1423.785597][T19544] [ 1423.788527][T19544] dump_stack_lvl+0x188/0x24e [ 1423.793297][T19544] ? memcpy+0x3c/0x60 [ 1423.797276][T19544] ? show_regs_print_info+0x12/0x12 [ 1423.802474][T19544] ? load_image+0x400/0x400 [ 1423.806974][T19544] panic+0x2e5/0x730 [ 1423.810863][T19544] ? asm_common_interrupt+0x22/0x40 [ 1423.816077][T19544] ? bpf_jit_dump+0xd0/0xd0 [ 1423.820621][T19544] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1423.826708][T19544] ? _raw_spin_unlock+0x40/0x40 [ 1423.831656][T19544] check_panic_on_warn+0x80/0xa0 [ 1423.836631][T19544] ? v4l2_fh_open+0xc6/0x430 [ 1423.841233][T19544] end_report+0x66/0x110 [ 1423.845485][T19544] kasan_report+0x118/0x140 [ 1423.849993][T19544] ? v4l2_fh_open+0xc6/0x430 [ 1423.854582][T19544] v4l2_fh_open+0xc6/0x430 [ 1423.858996][T19544] em28xx_v4l2_open+0x152/0x990 [ 1423.863847][T19544] ? __lock_acquire+0x7d10/0x7d10 [ 1423.868873][T19544] v4l2_open+0x20b/0x360 [ 1423.873146][T19544] chrdev_open+0x5c5/0x6a0 [ 1423.877567][T19544] ? cd_forget+0x160/0x160 [ 1423.881989][T19544] ? fsnotify_perm+0x39b/0x550 [ 1423.886756][T19544] ? cd_forget+0x160/0x160 [ 1423.891181][T19544] do_dentry_open+0x7e9/0x10d0 [ 1423.896123][T19544] path_openat+0x2635/0x2ee0 [ 1423.900815][T19544] ? verify_lock_unused+0x140/0x140 [ 1423.906018][T19544] ? do_syscall_64+0x4c/0xa0 [ 1423.910623][T19544] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1423.916691][T19544] ? do_filp_open+0x430/0x430 [ 1423.921369][T19544] do_filp_open+0x1f1/0x430 [ 1423.925891][T19544] ? vfs_tmpfile+0x480/0x480 [ 1423.930615][T19544] ? _raw_spin_unlock+0x24/0x40 [ 1423.935554][T19544] ? alloc_fd+0x58f/0x630 [ 1423.939888][T19544] do_sys_openat2+0x150/0x4b0 [ 1423.944565][T19544] ? up_read+0x20/0x20 [ 1423.948721][T19544] ? do_sys_open+0xe0/0xe0 [ 1423.953135][T19544] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1423.959119][T19544] ? lock_chain_count+0x20/0x20 [ 1423.964163][T19544] __x64_sys_openat+0x135/0x160 [ 1423.969058][T19544] do_syscall_64+0x4c/0xa0 [ 1423.973611][T19544] ? clear_bhb_loop+0x60/0xb0 [ 1423.978404][T19544] ? clear_bhb_loop+0x60/0xb0 [ 1423.983179][T19544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1423.989176][T19544] RIP: 0033:0x7fae79ca7407 [ 1423.993692][T19544] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1424.013403][T19544] RSP: 002b:00007fffe80748b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1424.021844][T19544] RAX: ffffffffffffffda RBX: 00007fae7a464880 RCX: 00007fae79ca7407 [ 1424.029834][T19544] RDX: 0000000000000000 RSI: 00007fffe8075f1b RDI: ffffffffffffff9c [ 1424.037909][T19544] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1424.045896][T19544] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1424.053886][T19544] R13: 00007fffe8074b00 R14: 00007fae7a5c3000 R15: 0000557b4a5f74d8 [ 1424.061951][T19544] [ 1424.065394][T19544] Kernel Offset: disabled [ 1424.069828][T19544] Rebooting in 86400 seconds..