last executing test programs: 8.010705921s ago: executing program 1 (id=4866): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "6ef189fdf08e1947", "c7ec4b645285c2f437c9f187838e844d685fc984cc9b9affba1e271d74c5db06", "dff0534c", "e0a620eccf9fd807"}, 0x38) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf05", 0x29}], 0x1}, 0x40000) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6", 0x4, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x3fee) 7.733319479s ago: executing program 1 (id=4867): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 6.807506077s ago: executing program 1 (id=4874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0xd) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 6.504026789s ago: executing program 3 (id=4878): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x9a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6a000000006411fffe800000226270d56f037dce000000aafe8000000000000000000000000000aa4e1d4e20"], 0x0) 6.466141729s ago: executing program 1 (id=4889): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "6ef189fdf08e1947", "c7ec4b645285c2f437c9f187838e844d685fc984cc9b9affba1e271d74c5db06", "dff0534c", "e0a620eccf9fd807"}, 0x38) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf05", 0x29}], 0x1}, 0x40000) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6", 0x4, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x3fee) 6.359888402s ago: executing program 3 (id=4881): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001640)=""/4107, 0x100b}], 0x1) 6.307304118s ago: executing program 1 (id=4882): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) 6.179036883s ago: executing program 1 (id=4885): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x0, 0x12, 0x2, "8ed4"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x3, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 6.162732952s ago: executing program 3 (id=4886): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newchain={0x24, 0x64, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xf}, {0x1, 0xfff1}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) 5.948360244s ago: executing program 3 (id=4887): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000440)={r4, 0xdf, 0x20007, 0x6, 0x1, [], [0x7, 0x7, 0x2, 0x3], [0x1, 0x4, 0x6, 0x3abb], [0x7, 0x7, 0x3, 0x2]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000001c0)={r4, 0xff7fffff, 0x1ff, 0x9, 0x3, [], [0x40000c0, 0xe8, 0x7, 0x19], [0x8, 0xa2d, 0x53cc, 0x35], [0x6, 0x8, 0x7, 0x7fff]}) 5.74920556s ago: executing program 3 (id=4890): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0xd) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 5.345465769s ago: executing program 3 (id=4891): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x400017e) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000500)={&(0x7f0000000580)=[{0x1000, 0x200, 0x0, 0x0}, {0x5, 0x1201, 0x0, 0x0}, {0x6, 0x2001, 0x0, 0x0}], 0x3}) 3.267537281s ago: executing program 0 (id=4903): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = eventfd(0x5ef) ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x4000, 0x0, r4}) 2.672284944s ago: executing program 0 (id=4904): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0)="88dc71722f56abaa4fb5", 0xa, 0xfffffffffffffffd) socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000001c0)="b5f3d1895112238d6828378c8b97266b69bacef7e4ea4f3b94fe995917ea94940039b027eaf61160db20ed5f002fc93b19a817b4000896db5aea16e0027ac0be202856f4e5f60bcf55fc8921dca9737a370cba0b48465f0fd2b0ac919bfedf796f40ec81a5ee675181c79c247e2389556da04a167f0259564e190d984c5150d355dfab8e3e3efe4efe256e2d5dee0a8383d30fe4107583e2a1", 0x99, 0xfffffffffffffffa) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@my=0x1, 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000e5e000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000002000010023bd7000000000000a002040000000070000000014000200fe88000000000000000000000000010108000d"], 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r1, 0x400000000000007c) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xe1) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r8, 0x1, 0x9, &(0x7f0000000000)=""/115, &(0x7f0000000080)=0x73) close_range(r0, 0xffffffffffffffff, 0x0) 2.573735959s ago: executing program 0 (id=4905): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "6ef189fdf08e1947", "c7ec4b645285c2f437c9f187838e844d685fc984cc9b9affba1e271d74c5db06", "dff0534c", "e0a620eccf9fd807"}, 0x38) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf05000500", 0x2c}], 0x1}, 0x40000) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6", 0x4, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x3fee) 2.462540112s ago: executing program 0 (id=4907): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x802, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x2, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000001c0)=""/3, 0x3, 0x3, 0xa7b9, 0xfffffffc, 0x0, 0xc04}}, 0x121) readv(r3, &(0x7f0000000140)=[{0x0}], 0x1) socket$netlink(0x10, 0x3, 0x15) r4 = syz_open_dev$vcsu(0x0, 0x8001, 0x88300) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000400)=0x1, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r5], 0x3c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x11) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) 2.167786122s ago: executing program 2 (id=4910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newchain={0x24, 0x64, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xf}, {0x1, 0xfff1}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.979635627s ago: executing program 4 (id=4911): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x8000, 0x0) 1.703932102s ago: executing program 2 (id=4912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) preadv(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x1, 0xd) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.637747335s ago: executing program 4 (id=4913): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="ad931e221093aa4099", 0x9}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000180), 0x400000000000256, 0x40, 0x0) 1.560807272s ago: executing program 4 (id=4914): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = eventfd(0x5ef) ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x4000, 0x0, r4}) 1.517044169s ago: executing program 2 (id=4915): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x2000000, r3}, 0x60) 1.275616759s ago: executing program 2 (id=4916): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pptp(0x18, 0x1, 0x2) socket(0x400000000010, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001800)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r0, @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 780.331312ms ago: executing program 2 (id=4917): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "6ef189fdf08e1947", "c7ec4b645285c2f437c9f187838e844d685fc984cc9b9affba1e271d74c5db06", "dff0534c", "e0a620eccf9fd807"}, 0x38) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf05000500", 0x2c}], 0x1}, 0x40000) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6", 0x4, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x3fee) 620.461835ms ago: executing program 2 (id=4918): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 208.707051ms ago: executing program 4 (id=4919): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x703d28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0x10}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 161.912936ms ago: executing program 0 (id=4920): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) stat(&(0x7f0000000180)='./file0/file1\x00', 0x0) read$FUSE(r0, &(0x7f0000006280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x2d, 0x7, 0x0, 0x46c, 0x2, 0xf, 0x2, 0x0, 0x0, 0x100, 0x80}}, 0x50) syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x2) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0x237, 0x0, {0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0xd, 0x10000, 0x9, 0x2, 0x3, 0x6000, 0x2, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 108.263926ms ago: executing program 4 (id=4921): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[]) 77.907596ms ago: executing program 0 (id=4922): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newchain={0x24, 0x64, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xf}, {0x1, 0xfff1}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) 0s ago: executing program 4 (id=4923): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x8000, 0x0) kernel console output (not intermixed with test programs): 000' [ 556.545805][T15175] netlink: 'syz.0.3402': attribute type 4 has an invalid length. [ 556.799414][T15187] netlink: 'syz.0.3408': attribute type 3 has an invalid length. [ 556.884426][T15191] fuse: Unknown parameter 'user_i00000000000000000000' [ 556.923248][T14729] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 556.932950][ T5824] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 557.052647][T15199] netlink: 'syz.1.3414': attribute type 4 has an invalid length. [ 557.083358][T14729] usb 4-1: Using ep0 maxpacket: 32 [ 557.108485][ T5824] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 557.121554][T15201] tipc: Enabling of bearer rejected, failed to enable media [ 557.140376][T14729] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 557.148621][ T5824] usb 5-1: config 0 has no interface number 0 [ 557.158952][T14729] usb 4-1: config 0 has no interface number 0 [ 557.168180][ T5824] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 557.181528][T14729] usb 4-1: config 0 interface 12 has no altsetting 0 [ 557.195935][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.209017][T14729] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 557.219861][T14729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.234074][ T5824] usb 5-1: config 0 descriptor?? [ 557.244923][T14729] usb 4-1: Product: syz [ 557.253540][T14729] usb 4-1: Manufacturer: syz [ 557.264434][ T5824] usb 5-1: selecting invalid altsetting 1 [ 557.273160][T14729] usb 4-1: SerialNumber: syz [ 557.281325][ T5824] dvb_ttusb_budget: ttusb_init_controller: error [ 557.297167][T14729] usb 4-1: config 0 descriptor?? [ 557.305245][ T5824] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 557.434871][T14546] Bluetooth: hci3: command 0x0c1a tx timeout [ 557.441405][ T5826] Bluetooth: hci5: command 0x0c1a tx timeout [ 557.478319][ T5824] DVB: Unable to find symbol cx22700_attach() [ 557.512963][T14546] Bluetooth: hci1: command 0x0c1a tx timeout [ 557.521589][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 557.625049][ T5824] DVB: Unable to find symbol tda10046_attach() [ 557.654241][ T5824] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 557.685316][ T5824] usb 5-1: USB disconnect, device number 23 [ 558.173750][T15218] fuse: Unknown parameter 'user_i00000000000000000000' [ 558.257369][T15220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3420'. [ 558.689625][T15230] netlink: 'syz.2.3425': attribute type 4 has an invalid length. [ 558.942346][ T5824] IPVS: starting estimator thread 0... [ 558.977859][T15237] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 559.064853][T15238] IPVS: using max 50 ests per chain, 120000 per kthread [ 559.397011][T15244] fuse: Unknown parameter 'user_i00000000000000000000' [ 559.421178][ T10] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 559.488974][T15248] team0: Device gtp0 is of different type [ 559.594825][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 559.603285][ T10] usb 3-1: config 0 has no interface number 0 [ 559.609504][ T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 559.620114][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.633029][ T10] usb 3-1: config 0 descriptor?? [ 559.645591][ T10] usb 3-1: selecting invalid altsetting 1 [ 559.651640][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 559.658215][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 559.663980][ T5889] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 559.747826][ T10] DVB: Unable to find symbol cx22700_attach() [ 559.787984][ T10] DVB: Unable to find symbol tda10046_attach() [ 559.794489][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 559.836109][ T5889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.846879][ T5889] usb 2-1: config 0 has no interfaces? [ 559.852618][ T5889] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 559.852732][ T10] usb 3-1: USB disconnect, device number 23 [ 559.869110][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.895494][ T5889] usb 2-1: config 0 descriptor?? [ 560.110786][ T10] usb 2-1: USB disconnect, device number 31 [ 560.653152][ T5889] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 560.837018][ T5889] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 560.871637][ T5889] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 560.891051][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.915919][ T5889] usb 5-1: Product: syz [ 560.929630][T15265] netlink: 'syz.1.3439': attribute type 4 has an invalid length. [ 560.936542][ T5889] usb 5-1: Manufacturer: syz [ 560.964090][ T5889] usb 5-1: SerialNumber: syz [ 561.001735][ T5889] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 561.423152][T14729] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 561.436737][ T5889] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 561.463111][T14729] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 561.470492][T14729] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 561.501597][ T5889] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 561.520909][ T5889] usb 5-1: media controller created [ 561.527740][T14729] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 561.575400][T14729] usb 4-1: USB disconnect, device number 19 [ 561.600261][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 561.954035][ T10] IPVS: starting estimator thread 0... [ 561.961902][T15279] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 562.052727][ T5889] usb 5-1: USB disconnect, device number 24 [ 562.064130][T15280] IPVS: using max 51 ests per chain, 122400 per kthread [ 562.371078][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3444'. [ 562.389818][T15286] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.398110][T15286] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.686070][T15289] syzkaller0: entered promiscuous mode [ 562.728324][T15289] syzkaller0: entered allmulticast mode [ 562.993285][ T5889] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 563.033049][ T10] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 563.119480][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.128926][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.170993][ T5889] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 563.191530][ T5889] usb 1-1: config 0 has no interface number 0 [ 563.192039][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.209435][ T5889] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 563.245619][ T10] usb 5-1: config 0 has no interfaces? [ 563.252537][ T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 563.262728][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.275070][ T10] usb 5-1: config 0 descriptor?? [ 563.280743][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.358678][ T5889] usb 1-1: config 0 descriptor?? [ 563.392498][ T5889] usb 1-1: selecting invalid altsetting 1 [ 563.412760][ T5889] dvb_ttusb_budget: ttusb_init_controller: error [ 563.427899][T15310] syzkaller0: entered promiscuous mode [ 563.436068][ T5889] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 563.452141][T15310] syzkaller0: entered allmulticast mode [ 563.534629][T14729] usb 5-1: USB disconnect, device number 25 [ 563.662735][ T5889] DVB: Unable to find symbol cx22700_attach() [ 563.827359][ T5889] DVB: Unable to find symbol tda10046_attach() [ 563.849026][ T5889] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 563.887155][ T5889] usb 1-1: USB disconnect, device number 26 [ 564.105089][T15321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3457'. [ 564.544224][T15337] team0: Device gtp0 is of different type [ 564.594321][T15342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3462'. [ 564.610265][T15341] syzkaller0: entered promiscuous mode [ 564.649559][T15341] syzkaller0: entered allmulticast mode [ 564.680594][T15342] trusted_key: encrypted_key: keylen parameter is missing [ 565.984705][T15358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3470'. [ 566.112974][T14729] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 566.267968][T14729] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.279317][T14729] usb 1-1: config 0 has no interfaces? [ 566.285810][T14729] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 566.296589][T14729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.318673][T14729] usb 1-1: config 0 descriptor?? [ 566.423326][ T29] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 566.536469][ T10] usb 1-1: USB disconnect, device number 27 [ 566.574983][ T29] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 566.583739][ T29] usb 4-1: config 0 has no interface number 0 [ 566.599744][ T29] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 566.625691][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.664005][ T29] usb 4-1: config 0 descriptor?? [ 566.685966][ T29] usb 4-1: selecting invalid altsetting 1 [ 566.697767][ T29] dvb_ttusb_budget: ttusb_init_controller: error [ 566.723705][ T29] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 566.858951][ T29] DVB: Unable to find symbol cx22700_attach() [ 566.943371][ T29] DVB: Unable to find symbol tda10046_attach() [ 566.949974][ T29] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 566.985321][ T29] usb 4-1: USB disconnect, device number 20 [ 567.296367][T15372] netlink: 'syz.0.3474': attribute type 2 has an invalid length. [ 567.407146][T15373] netlink: 'syz.0.3474': attribute type 2 has an invalid length. [ 567.427586][T15372] !: entered promiscuous mode [ 567.788432][T15380] team0: Device gtp0 is of different type [ 568.064221][T15388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3481'. [ 568.199002][T15386] syzkaller0: entered promiscuous mode [ 568.219892][T15386] syzkaller0: entered allmulticast mode [ 568.902993][ T5915] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 569.096456][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.114971][ T5915] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 569.140038][ T5915] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 569.154514][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.181060][ T5915] usb 4-1: config 0 descriptor?? [ 569.403108][T15409] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 569.428142][ T5915] usb 4-1: USB disconnect, device number 21 [ 569.777146][T15415] trusted_key: syz.4.3490 sent an empty control message without MSG_MORE. [ 570.371834][T15424] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 570.378594][T15424] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 570.395475][T15424] vhci_hcd vhci_hcd.0: Device attached [ 570.413071][T14729] hid-generic 0003:A7B9:FFFFFFFC.0024: unknown main item tag 0x0 [ 570.447238][T14729] hid-generic 0003:A7B9:FFFFFFFC.0024: unknown main item tag 0x0 [ 570.464105][T14729] hid-generic 0003:A7B9:FFFFFFFC.0024: unknown main item tag 0x0 [ 570.508307][T14729] hid-generic 0003:A7B9:FFFFFFFC.0024: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 570.593491][ T29] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 570.663154][ T29] usb 41-1: new full-speed USB device number 7 using vhci_hcd [ 570.786811][T15425] vhci_hcd: connection reset by peer [ 570.797250][ T3547] vhci_hcd vhci_hcd.4: stop threads [ 570.804812][ T3547] vhci_hcd vhci_hcd.4: release socket [ 570.811548][ T3547] vhci_hcd vhci_hcd.4: disconnect device [ 570.907187][T15427] fido_id[15427]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 571.698893][T15435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3496'. [ 571.967291][T15403] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3486'. [ 571.976616][T15403] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 571.999117][T15422] team0: Device gtp0 is of different type [ 572.070029][T15438] tipc: Enabling of bearer rejected, failed to enable media [ 572.633047][ T1223] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 572.797194][ T1223] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.851634][ T1223] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 572.892669][ T1223] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 572.930316][ T1223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.963770][ T1223] usb 2-1: config 0 descriptor?? [ 573.225456][ T5915] usb 2-1: USB disconnect, device number 32 [ 573.299838][T15470] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 573.306461][T15470] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 573.335657][T15470] vhci_hcd vhci_hcd.0: Device attached [ 573.412956][ T5889] hid-generic 0003:A7B9:FFFFFFFC.0025: unknown main item tag 0x0 [ 573.476112][ T5889] hid-generic 0003:A7B9:FFFFFFFC.0025: unknown main item tag 0x0 [ 573.523761][ T5889] hid-generic 0003:A7B9:FFFFFFFC.0025: unknown main item tag 0x0 [ 573.552984][T14729] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 573.608739][ T5889] hid-generic 0003:A7B9:FFFFFFFC.0025: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 573.643193][T14729] usb 39-1: new full-speed USB device number 6 using vhci_hcd [ 573.746615][T15471] vhci_hcd: connection reset by peer [ 573.776345][ T13] vhci_hcd vhci_hcd.3: stop threads [ 573.781700][ T13] vhci_hcd vhci_hcd.3: release socket [ 573.819848][T15477] fido_id[15477]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 573.840333][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 573.884512][T15479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3508'. [ 573.923156][T15479] erspan0: entered promiscuous mode [ 573.939328][T15479] macvtap1: entered allmulticast mode [ 573.959829][T15479] erspan0: entered allmulticast mode [ 574.147082][T15482] syzkaller0: entered promiscuous mode [ 574.180756][T15482] syzkaller0: entered allmulticast mode [ 574.290418][T15487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3511'. [ 575.768519][ T29] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 575.916019][T15501] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 576.477206][ T10] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 576.653576][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.678107][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 576.695899][ T10] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 576.724152][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.753886][ T10] usb 1-1: config 0 descriptor?? [ 576.981437][ T10] usb 1-1: USB disconnect, device number 28 [ 577.215813][T15492] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3513'. [ 577.253177][T15492] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 577.427359][T15516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3531'. [ 577.642625][T15515] syzkaller0: entered promiscuous mode [ 577.655543][T15515] syzkaller0: entered allmulticast mode [ 577.685980][T15516] vlan2: entered allmulticast mode [ 578.381617][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3527'. [ 578.795071][T14729] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 580.608469][T15537] erspan0: entered promiscuous mode [ 580.618418][T15537] macvtap1: entered allmulticast mode [ 580.653169][T15537] erspan0: entered allmulticast mode [ 580.745950][T15544] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 580.867487][T15548] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3533'. [ 580.903093][T15548] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 580.998368][T15556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3538'. [ 581.022954][ T10] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 581.076039][T15559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3538'. [ 581.201075][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.239191][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 581.255020][ T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 581.281839][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.316715][ T10] usb 5-1: config 0 descriptor?? [ 581.507157][T15568] syzkaller0: entered promiscuous mode [ 581.512747][T15568] syzkaller0: entered allmulticast mode [ 581.538035][ T10] usb 5-1: USB disconnect, device number 26 [ 581.671755][T15578] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 582.072013][T15591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3553'. [ 582.130964][T15593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3553'. [ 584.263260][T15619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3565'. [ 584.318378][T15626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3565'. [ 584.334986][T15621] syzkaller0: entered promiscuous mode [ 584.345951][T15621] syzkaller0: entered allmulticast mode [ 584.526566][ T10] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 584.687380][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.697797][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 584.707063][ T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 584.716723][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.735777][ T10] usb 5-1: config 0 descriptor?? [ 584.957065][ T29] usb 5-1: USB disconnect, device number 27 [ 585.664446][T15653] usb usb8: usbfs: process 15653 (syz.0.3578) did not claim interface 0 before use [ 585.832474][T15659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3580'. [ 585.902261][T15661] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3580'. [ 587.883470][ T29] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 587.903062][ T5824] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 587.933879][T15686] syzkaller0: entered promiscuous mode [ 587.946746][T15686] syzkaller0: entered allmulticast mode [ 588.055292][ T29] usb 3-1: config 0 has an invalid interface number: 111 but max is 0 [ 588.082735][ T29] usb 3-1: config 0 has no interface number 0 [ 588.097049][ T5824] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.116046][ T29] usb 3-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 588.126493][ T5824] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 588.147119][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.157014][ T5824] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 588.176914][ T29] usb 3-1: config 0 descriptor?? [ 588.186828][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.206559][ T29] gspca_main: ov534_9-2.14.0 probing 05a9:8065 [ 588.233128][ T5824] usb 1-1: config 0 descriptor?? [ 588.498538][ T5915] usb 1-1: USB disconnect, device number 29 [ 588.699625][T15695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3594'. [ 588.760966][T15696] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3594'. [ 589.896188][ T29] gspca_ov534_9: reg_w failed -71 [ 590.137856][ T29] gspca_ov534_9: Unknown sensor 0000 [ 590.137927][ T29] ov534_9 3-1:0.111: probe with driver ov534_9 failed with error -22 [ 590.161438][ T29] usb 3-1: USB disconnect, device number 24 [ 591.127286][T15717] tipc: Started in network mode [ 591.132609][T15717] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 591.157803][T15717] tipc: Enabling of bearer rejected, failed to enable media [ 591.569366][T15729] syzkaller1: entered promiscuous mode [ 591.591963][T15729] syzkaller1: entered allmulticast mode [ 591.659658][ T30] audit: type=1800 audit(1770984216.765:359): pid=15729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3604" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 591.770683][ T29] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 591.965078][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.006230][ T29] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 592.037562][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3612'. [ 592.041573][ T29] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 592.088267][T15743] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3612'. [ 592.102896][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.131569][ T29] usb 2-1: config 0 descriptor?? [ 592.150942][ T29] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 592.183670][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 592.221790][ T29] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 592.268429][ T29] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 592.297357][ T29] usb 2-1: media controller created [ 592.322476][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 592.391289][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 592.420649][ T29] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 592.463066][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 592.525817][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 592.558642][ T29] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 592.603801][ T29] usb 2-1: USB disconnect, device number 33 [ 592.707165][ T29] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 592.883696][T15753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3615'. [ 593.371926][T15764] team0: entered promiscuous mode [ 593.393350][T15764] team_slave_0: entered promiscuous mode [ 593.405416][T15764] team_slave_1: entered promiscuous mode [ 593.425207][T15764] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 593.464066][T15764] team0: left promiscuous mode [ 593.476541][T15764] team_slave_0: left promiscuous mode [ 593.489291][T15764] team_slave_1: left promiscuous mode [ 593.533690][T15767] tipc: Enabling of bearer rejected, failed to enable media [ 593.603368][ T5915] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 593.679103][T15773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3623'. [ 593.750737][T15773] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3623'. [ 593.783403][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 593.794363][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 593.829644][ T5915] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 593.862255][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.874810][ T5915] usb 2-1: config 0 descriptor?? [ 593.887564][ T5915] hub 2-1:0.0: bad descriptor, ignoring hub [ 593.898317][ T5915] hub 2-1:0.0: probe with driver hub failed with error -5 [ 593.929399][ T5915] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 594.222991][ T5889] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 594.265969][T15795] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 594.455050][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.490872][ T5889] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 594.509336][ T5915] usb 2-1: USB disconnect, device number 34 [ 594.535003][ T5889] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 594.575489][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.614387][ T5889] usb 1-1: config 0 descriptor?? [ 594.649152][ T5889] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 594.672060][ T5889] dvb-usb: bulk message failed: -22 (3/0) [ 594.777279][ T5889] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 594.797714][ T5889] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 594.818826][ T5889] usb 1-1: media controller created [ 594.856670][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 594.906246][T15802] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 594.913094][T15802] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 594.937400][ T5889] dvb-usb: bulk message failed: -22 (6/0) [ 594.950139][ T5889] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 594.961057][T15802] vhci_hcd vhci_hcd.0: Device attached [ 595.004591][ T29] hid-generic 0003:A7B9:FFFFFFFC.0026: unknown main item tag 0x0 [ 595.019470][ T5889] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 595.124711][ T29] hid-generic 0003:A7B9:FFFFFFFC.0026: unknown main item tag 0x0 [ 595.189187][ T5889] dvb-usb: schedule remote query interval to 150 msecs. [ 595.197717][ T29] hid-generic 0003:A7B9:FFFFFFFC.0026: unknown main item tag 0x0 [ 595.240521][ T5889] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 595.261894][ T29] hid-generic 0003:A7B9:FFFFFFFC.0026: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 595.275300][ T5824] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 595.343139][ T5889] usb 1-1: USB disconnect, device number 30 [ 595.385859][ T5824] usb 39-1: new full-speed USB device number 7 using vhci_hcd [ 595.491011][T15811] fido_id[15811]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 595.529050][T15803] vhci_hcd: connection closed [ 595.558664][ T1004] vhci_hcd vhci_hcd.3: stop threads [ 595.599174][ T1004] vhci_hcd vhci_hcd.3: release socket [ 595.624768][ T1004] vhci_hcd vhci_hcd.3: disconnect device [ 595.658228][ T5889] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 595.897518][T15815] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3636'. [ 596.282917][ T5889] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 596.484472][ T5889] usb 1-1: device descriptor read/64, error -71 [ 596.825199][T15822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3639'. [ 596.855399][T15822] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3639'. [ 596.865419][ T5889] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 597.102922][ T5889] usb 1-1: device descriptor read/64, error -71 [ 597.257539][ T5889] usb usb1-port1: attempt power cycle [ 597.621895][T15837] tipc: Started in network mode [ 597.631314][T15837] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 597.643054][ T5889] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 597.655582][T15837] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 597.667589][ T5889] usb 1-1: device descriptor read/8, error -71 [ 597.700755][T15837] tipc: Enabled bearer , priority 10 [ 597.962936][ T5889] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 598.031938][ T5889] usb 1-1: device descriptor read/8, error -71 [ 598.163377][ T5889] usb usb1-port1: unable to enumerate USB device [ 598.318100][T15848] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 598.324919][T15848] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 598.377341][T15848] vhci_hcd vhci_hcd.0: Device attached [ 598.474253][ T29] hid-generic 0003:A7B9:FFFFFFFC.0027: unknown main item tag 0x0 [ 598.482415][ T29] hid-generic 0003:A7B9:FFFFFFFC.0027: unknown main item tag 0x0 [ 598.537048][ T29] hid-generic 0003:A7B9:FFFFFFFC.0027: unknown main item tag 0x0 [ 598.603027][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 598.628147][ T29] hid-generic 0003:A7B9:FFFFFFFC.0027: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 598.676415][ T10] usb 37-1: new full-speed USB device number 8 using vhci_hcd [ 598.739224][T15849] vhci_hcd: connection reset by peer [ 598.803886][ T5915] tipc: Node number set to 1 [ 598.822862][ T13] vhci_hcd vhci_hcd.2: stop threads [ 598.833084][ T13] vhci_hcd vhci_hcd.2: release socket [ 598.839952][T15856] fido_id[15856]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 598.874138][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 598.907325][T15862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3652'. [ 598.961099][T15864] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3652'. [ 599.480051][T15879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3659'. [ 599.790177][T15887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3663'. [ 599.852260][T15890] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3663'. [ 599.885411][T15890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3663'. [ 600.463399][ T1223] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 600.623114][ T5824] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 600.632790][ T1223] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 600.655067][ T1223] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 600.677008][ T1223] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 600.703841][ T1223] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 600.734902][ T1223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 600.761852][ T1223] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 600.803722][ T1223] usb 3-1: string descriptor 0 read error: -22 [ 600.818976][ T1223] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 600.844807][ T1223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.879397][ T1223] usb 3-1: config 0 descriptor?? [ 600.904076][T15903] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 600.933296][ T1223] hub 3-1:0.0: bad descriptor, ignoring hub [ 600.952044][ T1223] hub 3-1:0.0: probe with driver hub failed with error -5 [ 600.999231][ T1223] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input18 [ 601.062015][ C0] usb_acecad 3-1:0.0: can't resubmit intr, dummy_hcd.2-1/input0, status -1 [ 601.118004][T15918] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 601.223630][T15918] random: crng reseeded on system resumption [ 601.412940][ T1223] usb 3-1: USB disconnect, device number 25 [ 602.999705][T15946] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 603.006368][T15946] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 603.045700][T15946] vhci_hcd vhci_hcd.0: Device attached [ 603.135875][ T29] hid-generic 0003:A7B9:FFFFFFFC.0028: unknown main item tag 0x0 [ 603.219567][ T29] hid-generic 0003:A7B9:FFFFFFFC.0028: unknown main item tag 0x0 [ 603.244960][ T29] hid-generic 0003:A7B9:FFFFFFFC.0028: unknown main item tag 0x0 [ 603.315063][ T29] hid-generic 0003:A7B9:FFFFFFFC.0028: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 603.468139][T15947] vhci_hcd: connection closed [ 603.468621][ T12] vhci_hcd vhci_hcd.2: stop threads [ 603.491242][ T12] vhci_hcd vhci_hcd.2: release socket [ 603.520527][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 603.553896][T15957] fido_id[15957]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 603.822968][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 605.161948][T15977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3693'. [ 605.182162][T15977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3693'. [ 605.652698][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3700'. [ 605.679248][T15992] batadv0: entered promiscuous mode [ 605.690175][T15992] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 605.701549][T15992] batadv0: left promiscuous mode [ 606.069245][T16002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3704'. [ 606.135872][T16002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3704'. [ 606.833340][T16022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3709'. [ 606.952770][T16023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.977554][T16023] batadv_slave_0: entered promiscuous mode [ 606.992317][T16023] batadv_slave_0: entered allmulticast mode [ 607.285291][T16030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3714'. [ 607.350883][T16030] erspan0: entered promiscuous mode [ 607.377580][T16030] erspan0: left promiscuous mode [ 607.860370][T16044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3717'. [ 608.124140][T16043] vlan3: entered promiscuous mode [ 608.138326][T16043] dummy0: entered promiscuous mode [ 608.392951][ T1223] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 608.611725][ T1223] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.726461][ T1223] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 608.772596][ T1223] usb 4-1: string descriptor 0 read error: -22 [ 608.779933][ T1223] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 608.830563][ T1223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.978916][ T1223] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 609.016558][ T1223] usb 4-1: MIDIStreaming interface descriptor not found [ 609.329994][T16072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3729'. [ 609.374322][ T12] veth3: left allmulticast mode [ 609.380185][ T1223] usb 4-1: USB disconnect, device number 22 [ 609.410541][ T12] veth3: left promiscuous mode [ 609.433163][ T12] bridge1: port 1(veth3) entered disabled state [ 609.557504][ T12] vlan5: left promiscuous mode [ 609.594257][ T12] bridge4: port 1(vlan5) entered disabled state [ 609.808483][ T12] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 609.879023][ T12] team0: Port device gtp2 removed [ 609.917248][ T12] team0: Port device gtp1 removed [ 609.933158][ T12] team0: Port device gtp0 removed [ 610.041420][T16080] loop2: detected capacity change from 0 to 7 [ 610.051530][T16080] Dev loop2: unable to read RDB block 7 [ 610.057715][T16080] loop2: unable to read partition table [ 610.063891][T16080] loop2: partition table beyond EOD, truncated [ 610.070101][T16080] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 610.532973][ T12] bond0 (unregistering): Released all slaves [ 610.556667][ T12] bond1 (unregistering): Released all slaves [ 610.591008][ T12] bond2 (unregistering): Released all slaves [ 610.611559][ T12] bond3 (unregistering): Released all slaves [ 610.631372][ T12] bond4 (unregistering): Released all slaves [ 610.816980][ T12] tipc: Left network mode [ 610.915530][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3744'. [ 611.358860][ T12] hsr_slave_0: left promiscuous mode [ 611.384349][ T12] hsr_slave_1: left promiscuous mode [ 611.468192][ T12] pimreg3 (unregistering): left allmulticast mode [ 611.571509][T16116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3748'. [ 612.183216][ T5889] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 612.367791][T16130] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 0 [ 612.412925][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 612.461897][ T5889] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 612.483222][ T5915] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 612.501138][ T5889] usb 2-1: config 0 has no interface number 0 [ 612.559864][ T5889] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 612.621182][ T5889] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 612.674509][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 612.686135][ T5915] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 612.711773][ T5889] usb 2-1: config 0 interface 85 has no altsetting 0 [ 612.724507][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 612.736095][ T5889] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 612.766501][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.768259][ T5915] usb 1-1: Product: syz [ 612.786330][ T5915] usb 1-1: Manufacturer: syz [ 612.792544][ T5915] usb 1-1: SerialNumber: syz [ 612.800600][ T5889] usb 2-1: Product: syz [ 612.823060][ T5889] usb 2-1: Manufacturer: syz [ 612.827724][ T5889] usb 2-1: SerialNumber: syz [ 612.830048][ T5915] usb 1-1: config 0 descriptor?? [ 612.834007][T16138] bond0: entered promiscuous mode [ 612.851267][T16138] bond_slave_0: entered promiscuous mode [ 612.866408][ T5889] usb 2-1: config 0 descriptor?? [ 612.878032][T16138] bond_slave_1: entered promiscuous mode [ 612.900765][T16138] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 612.945968][T16138] bond0: left promiscuous mode [ 612.961927][T16138] bond_slave_0: left promiscuous mode [ 612.976116][T16138] bond_slave_1: left promiscuous mode [ 613.112542][ T5889] appletouch 2-1:0.85: Failed to read mode from device. [ 613.119330][ T5915] usb 1-1: USB disconnect, device number 35 [ 613.199529][ T5889] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 613.256887][T15281] udevd[15281]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 613.308363][ T5889] usb 2-1: USB disconnect, device number 35 [ 613.958260][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3765'. [ 615.206250][T16197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3782'. [ 615.933617][T16224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3794'. [ 618.808641][T16308] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3827'. [ 619.230698][T16318] netlink: 'syz.1.3832': attribute type 39 has an invalid length. [ 619.873618][T16336] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3839'. [ 620.381751][T16349] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3842'. [ 622.589730][T16369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3851'. [ 623.895296][T16390] bond0: entered promiscuous mode [ 623.905297][T16390] bond_slave_0: entered promiscuous mode [ 623.911246][T16390] bond_slave_1: entered promiscuous mode [ 623.967025][T16390] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 623.996810][T16390] bond0: left promiscuous mode [ 624.016082][T16390] bond_slave_0: left promiscuous mode [ 624.041956][T16390] bond_slave_1: left promiscuous mode [ 624.301353][T16398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3864'. [ 624.557128][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.566775][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.092153][T16423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3875'. [ 625.631819][T16441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3883'. [ 625.642636][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3882'. [ 626.018165][T16450] vlan0: entered allmulticast mode [ 626.045148][T16451] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3886'. [ 626.063996][T16450] bond0: entered allmulticast mode [ 626.078584][T16450] bond_slave_0: entered allmulticast mode [ 626.096460][T16453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3887'. [ 626.102374][T16450] bond_slave_1: entered allmulticast mode [ 626.212055][T16451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.305352][T16451] bond_slave_0: left allmulticast mode [ 626.404222][T16451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.534513][T16451] bond_slave_1: left allmulticast mode [ 626.558671][T16451] bond0 (unregistering): Released all slaves [ 627.892065][T16484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3896'. [ 628.433249][T16492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3898'. [ 629.182918][ T5824] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 629.206968][T16490] fuse: Invalid rootmode [ 629.322915][ T5824] usb 3-1: device descriptor read/64, error -71 [ 629.418246][T16512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.431875][T16512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.468602][T16512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.595455][ T5824] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 629.743039][ T5824] usb 3-1: device descriptor read/64, error -71 [ 629.871185][ T5824] usb usb3-port1: attempt power cycle [ 630.210550][T16523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3909'. [ 630.233131][ T5824] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 630.263918][ T5824] usb 3-1: device descriptor read/8, error -71 [ 630.534381][ T5824] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 630.554102][ T5824] usb 3-1: device descriptor read/8, error -71 [ 630.646414][T16537] tipc: Enabling of bearer rejected, failed to enable media [ 630.673517][ T5824] usb usb3-port1: unable to enumerate USB device [ 631.303297][T16548] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 631.309872][T16548] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 631.375959][ T5889] hid-generic 0003:A7B9:FFFFFFFC.0029: unknown main item tag 0x0 [ 631.431411][T16548] vhci_hcd vhci_hcd.0: Device attached [ 631.447953][ T5889] hid-generic 0003:A7B9:FFFFFFFC.0029: unknown main item tag 0x0 [ 631.464839][ T5889] hid-generic 0003:A7B9:FFFFFFFC.0029: unknown main item tag 0x0 [ 631.489061][T16555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3920'. [ 631.513506][ T5889] hid-generic 0003:A7B9:FFFFFFFC.0029: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 631.623087][ T5824] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 631.683036][ T5824] usb 39-1: new full-speed USB device number 8 using vhci_hcd [ 631.798322][T16549] vhci_hcd: connection reset by peer [ 631.805339][ T1004] vhci_hcd vhci_hcd.3: stop threads [ 631.857645][ T1004] vhci_hcd vhci_hcd.3: release socket [ 631.876488][ T1004] vhci_hcd vhci_hcd.3: disconnect device [ 631.975387][T16563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3923'. [ 632.689174][T16576] tipc: Enabling of bearer rejected, failed to enable media [ 633.075114][T16592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3932'. [ 634.477605][T16589] bond2: entered promiscuous mode [ 634.496381][T16589] 8021q: adding VLAN 0 to HW filter on device bond2 [ 635.039452][T16631] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 635.046240][T16631] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 635.089478][T16631] vhci_hcd vhci_hcd.0: Device attached [ 635.157537][ T5889] hid-generic 0003:A7B9:FFFFFFFC.002A: unknown main item tag 0x0 [ 635.240500][ T5889] hid-generic 0003:A7B9:FFFFFFFC.002A: unknown main item tag 0x0 [ 635.252975][ T1223] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 635.275112][ T5889] hid-generic 0003:A7B9:FFFFFFFC.002A: unknown main item tag 0x0 [ 635.312883][T16639] syzkaller0: entered promiscuous mode [ 635.321983][ T5889] hid-generic 0003:A7B9:FFFFFFFC.002A: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 635.341612][T16639] syzkaller0: entered allmulticast mode [ 635.342993][ T1223] usb 41-1: new full-speed USB device number 8 using vhci_hcd [ 635.469879][T16632] vhci_hcd: connection reset by peer [ 635.489065][ T13] vhci_hcd vhci_hcd.4: stop threads [ 635.527213][ T13] vhci_hcd vhci_hcd.4: release socket [ 635.541750][T16649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3953'. [ 635.590937][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 635.636476][T16643] fido_id[16643]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 636.154468][T16649] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.180084][T16649] bridge_slave_1 (unregistering): left allmulticast mode [ 636.187453][T16649] bridge_slave_1 (unregistering): left promiscuous mode [ 636.205511][T16649] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.740544][ T5915] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 636.863153][ T5824] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 636.905703][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 636.946628][ T5915] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 636.967626][ T5915] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 636.982566][ T5915] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 637.007217][ T5915] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 637.019788][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.028550][ T5915] usb 3-1: Product: syz [ 637.034759][ T5915] usb 3-1: Manufacturer: syz [ 637.039514][ T5915] usb 3-1: SerialNumber: syz [ 637.175776][T16689] syzkaller0: entered promiscuous mode [ 637.333004][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 637.372159][T14546] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 637.454109][T16698] netlink: 'syz.0.3974': attribute type 3 has an invalid length. [ 637.471168][T16698] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3974'. [ 637.488422][T16701] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 637.494995][T16701] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 637.514742][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 637.523239][ T5915] usb 3-1: 0:2 : does not exist [ 637.541365][ T10] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 637.559417][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.571512][T16701] vhci_hcd vhci_hcd.0: Device attached [ 637.590491][ T10] usb 5-1: config 0 descriptor?? [ 637.591542][ T5946] hid-generic 0003:A7B9:FFFFFFFC.002B: unknown main item tag 0x0 [ 637.646088][ T10] as10x_usb: device has been detected [ 637.660759][ T5946] hid-generic 0003:A7B9:FFFFFFFC.002B: unknown main item tag 0x0 [ 637.664189][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 637.705286][ T10] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 637.706893][ T5946] hid-generic 0003:A7B9:FFFFFFFC.002B: unknown main item tag 0x0 [ 637.768592][ T5946] hid-generic 0003:A7B9:FFFFFFFC.002B: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 637.808827][T16702] vhci_hcd: connection closed [ 637.811858][ T1004] vhci_hcd vhci_hcd.3: stop threads [ 637.822217][ T5824] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 637.861755][ T1004] vhci_hcd vhci_hcd.3: release socket [ 637.878754][ T10] as10x_usb: error during firmware upload part1 [ 637.897639][ T5824] usb 39-1: device descriptor read/64, error -110 [ 637.899629][ T10] Registered device nBox DVB-T Dongle [ 637.912920][ T1004] vhci_hcd vhci_hcd.3: disconnect device [ 637.925579][ T10] usb 5-1: USB disconnect, device number 28 [ 637.980880][T16710] bond0: entered promiscuous mode [ 637.996730][T16710] bond_slave_0: entered promiscuous mode [ 638.021561][T16710] bond_slave_1: entered promiscuous mode [ 638.031900][ T10] Unregistered device nBox DVB-T Dongle [ 638.033895][ T10] as10x_usb: device has been disconnected [ 638.047090][T16710] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 638.060224][T16710] bond0: left promiscuous mode [ 638.066450][T16710] bond_slave_0: left promiscuous mode [ 638.074623][T16710] bond_slave_1: left promiscuous mode [ 638.101057][T16708] fido_id[16708]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 638.133633][ T5824] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 638.548559][ T5915] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 638.743875][ T5915] usb 3-1: USB disconnect, device number 30 [ 638.817829][T15050] udevd[15050]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 639.293542][T16749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3994'. [ 639.563869][T16758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3998'. [ 640.181174][T16768] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 640.187754][T16768] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 640.248556][T16768] vhci_hcd vhci_hcd.0: Device attached [ 640.267937][ T5946] hid-generic 0003:A7B9:FFFFFFFC.002C: unknown main item tag 0x0 [ 640.317645][ T5946] hid-generic 0003:A7B9:FFFFFFFC.002C: unknown main item tag 0x0 [ 640.341293][ T5946] hid-generic 0003:A7B9:FFFFFFFC.002C: unknown main item tag 0x0 [ 640.397464][ T5946] hid-generic 0003:A7B9:FFFFFFFC.002C: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 640.453291][ T794] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 640.542923][ T794] usb 37-1: new full-speed USB device number 9 using vhci_hcd [ 640.550798][ T1223] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 640.685015][T16769] vhci_hcd: connection reset by peer [ 640.707384][ T1004] vhci_hcd vhci_hcd.2: stop threads [ 640.721928][ T1004] vhci_hcd vhci_hcd.2: release socket [ 640.747994][ T1004] vhci_hcd vhci_hcd.2: disconnect device [ 641.635546][T16794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4011'. [ 641.980603][T16805] netlink: 392 bytes leftover after parsing attributes in process `syz.2.4014'. [ 642.398107][T16814] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 642.750417][T16820] syzkaller0: entered promiscuous mode [ 642.769608][T16820] syzkaller0: entered allmulticast mode [ 643.225671][T16829] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 643.232291][T16829] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 643.255496][T16829] vhci_hcd vhci_hcd.0: Device attached [ 643.288466][ T5824] hid-generic 0003:A7B9:FFFFFFFC.002D: unknown main item tag 0x0 [ 643.320132][ T5824] hid-generic 0003:A7B9:FFFFFFFC.002D: unknown main item tag 0x0 [ 643.338335][ T5824] hid-generic 0003:A7B9:FFFFFFFC.002D: unknown main item tag 0x0 [ 643.375904][ T5824] hid-generic 0003:A7B9:FFFFFFFC.002D: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 643.443414][ T1223] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 643.504109][ T1223] usb 41-1: new full-speed USB device number 9 using vhci_hcd [ 643.642708][T16835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4023'. [ 643.664627][T16830] vhci_hcd: connection reset by peer [ 643.685301][ T49] vhci_hcd vhci_hcd.4: stop threads [ 643.692646][ T49] vhci_hcd vhci_hcd.4: release socket [ 643.704042][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 643.806922][T16837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4024'. [ 644.240562][T16846] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 644.244697][T16848] netlink: 'syz.1.4029': attribute type 1 has an invalid length. [ 644.308562][T16848] 8021q: adding VLAN 0 to HW filter on device bond1 [ 644.466405][T16848] bond1: (slave gretap1): making interface the new active one [ 644.478732][T16848] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 644.521164][T16848] syz.1.4029 (16848) used greatest stack depth: 18048 bytes left [ 644.749639][T16862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4034'. [ 644.801684][T16868] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4034'. [ 644.959637][T16869] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4032'. [ 645.662988][ T794] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 646.058587][T16888] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 646.065205][T16888] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 646.076771][T16888] vhci_hcd vhci_hcd.0: Device attached [ 646.140010][ T5915] hid-generic 0003:A7B9:FFFFFFFC.002E: unknown main item tag 0x0 [ 646.149989][ T5915] hid-generic 0003:A7B9:FFFFFFFC.002E: unknown main item tag 0x0 [ 646.186521][ T5915] hid-generic 0003:A7B9:FFFFFFFC.002E: unknown main item tag 0x0 [ 646.235068][ T5915] hid-generic 0003:A7B9:FFFFFFFC.002E: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 646.256224][T14507] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 646.323499][T14507] usb 35-1: new full-speed USB device number 9 using vhci_hcd [ 646.345731][T16891] vhci_hcd: connection reset by peer [ 646.351291][ T13] vhci_hcd vhci_hcd.1: stop threads [ 646.356932][ T13] vhci_hcd vhci_hcd.1: release socket [ 646.366676][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 646.398236][T16896] fido_id[16896]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 646.682220][T16902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4048'. [ 646.737908][T16902] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4048'. [ 647.265450][T16913] netlink: 'syz.4.4053': attribute type 39 has an invalid length. [ 647.785745][T16931] syzkaller0: entered promiscuous mode [ 647.791307][T16931] syzkaller0: entered allmulticast mode [ 647.817683][T16928] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 647.892996][ T794] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 648.492440][T16937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4060'. [ 648.574014][T16939] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4060'. [ 648.659665][ T1223] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 649.202477][T16951] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 649.307033][T16953] netlink: 'syz.1.4067': attribute type 39 has an invalid length. [ 649.368060][T16955] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4068'. [ 649.377209][ T794] usb 3-1: Using ep0 maxpacket: 8 [ 649.397087][ T794] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 649.450727][T16955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4068'. [ 649.483018][ T794] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 649.505402][T16955] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4068'. [ 649.527513][ T794] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 649.585157][ T794] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 649.663721][ T794] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 649.744304][ T794] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 649.772405][T16968] vlan3: entered promiscuous mode [ 649.784460][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.803566][T16968] dummy0: entered promiscuous mode [ 650.164197][ T794] usb 3-1: GET_CAPABILITIES returned 0 [ 650.169837][ T794] usbtmc 3-1:16.0: can't read capabilities [ 650.969524][T16990] netlink: 'syz.3.4082': attribute type 39 has an invalid length. [ 651.423999][T14507] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 651.519223][ T5824] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 651.668080][T17006] team0: entered promiscuous mode [ 651.684950][T17006] team_slave_0: entered promiscuous mode [ 651.686151][ T5824] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 651.690950][T17006] team_slave_1: entered promiscuous mode [ 651.715229][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.723221][T17006] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 651.726146][ T5824] usb 5-1: Product: syz [ 651.731597][T17006] team0: left promiscuous mode [ 651.741037][ T5916] usb 3-1: USB disconnect, device number 31 [ 651.741124][ T5824] usb 5-1: Manufacturer: syz [ 651.752129][T17006] team_slave_0: left promiscuous mode [ 651.773292][ T5824] usb 5-1: SerialNumber: syz [ 651.786105][T17006] team_slave_1: left promiscuous mode [ 652.146901][T17018] netlink: 'syz.3.4094': attribute type 39 has an invalid length. [ 652.171778][T17016] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4093'. [ 652.842441][ T5824] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 652.869512][ T5824] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 653.503720][ T5824] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 653.664586][ T5824] usb 5-1: USB disconnect, device number 29 [ 653.741515][ T5824] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 654.183725][T17044] netlink: 'syz.1.4106': attribute type 39 has an invalid length. [ 654.248874][T17049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4108'. [ 654.396061][T17054] F2FS-fs: Conflicting test_dummy_encryption options [ 654.673002][ T5824] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 654.761191][T17068] nfs: Unknown parameter '' [ 654.971417][ T5824] usb 4-1: config 0 has an invalid descriptor of length 121, skipping remainder of the config [ 654.983523][ T5824] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 655.032546][T17076] netlink: 'syz.2.4116': attribute type 3 has an invalid length. [ 655.043530][ T5824] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 655.072506][T17074] tipc: Enabled bearer , priority 10 [ 655.083710][T17076] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4116'. [ 655.095963][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.167798][ T5824] usb 4-1: config 0 descriptor?? [ 655.224213][ T5824] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 655.324672][T17083] netlink: 'syz.4.4119': attribute type 39 has an invalid length. [ 655.356851][T17074] tipc: Enabled bearer , priority 0 [ 655.498876][T17085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4120'. [ 656.389564][T17100] nfs: Unknown parameter '' [ 656.463066][ T5824] tipc: Node number set to 1 [ 656.896140][ T5824] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 657.023047][T17110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4130'. [ 657.065426][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.091107][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.129703][T17112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4131'. [ 657.160115][ T5824] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 657.182874][ T5824] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 657.194294][ T5916] usb 4-1: USB disconnect, device number 23 [ 657.207873][ T5824] usb 5-1: Manufacturer: syz [ 657.235684][ T5824] usb 5-1: config 0 descriptor?? [ 657.612905][ T5916] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 657.805998][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 657.846216][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.872618][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 657.889817][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 657.900818][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 657.903786][ T5916] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 657.909841][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 657.927330][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 657.930363][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.936111][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 657.950685][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 657.958311][ T5824] uclogic 0003:256C:006D.002F: interface is invalid, ignoring [ 657.976192][ T5916] usb 2-1: config 0 descriptor?? [ 658.000862][ T5824] usb 5-1: USB disconnect, device number 30 [ 658.112042][T17136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4143'. [ 658.195584][T17138] bond0: entered promiscuous mode [ 658.201052][T17138] bond_slave_0: entered promiscuous mode [ 658.207500][T17138] bond_slave_1: entered promiscuous mode [ 658.216421][T17138] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 658.229580][T17138] bond0: left promiscuous mode [ 658.243360][T17138] bond_slave_0: left promiscuous mode [ 658.253834][T17138] bond_slave_1: left promiscuous mode [ 658.458200][ T5916] plantronics 0003:047F:FFFF.0030: unbalanced collection at end of report description [ 658.470632][ T5916] plantronics 0003:047F:FFFF.0030: parse failed [ 658.483805][ T5916] plantronics 0003:047F:FFFF.0030: probe with driver plantronics failed with error -22 [ 658.656482][ T29] usb 2-1: USB disconnect, device number 36 [ 659.956147][T17161] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4149'. [ 660.333169][ T29] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 660.423023][T17178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4155'. [ 660.482510][T17179] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4155'. [ 660.519075][ T29] usb 1-1: config 0 has an invalid interface number: 238 but max is 0 [ 660.561491][ T29] usb 1-1: config 0 has no interface number 0 [ 660.589573][ T29] usb 1-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 660.663168][ T29] usb 1-1: config 0 interface 238 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 660.678023][ T29] usb 1-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 660.731639][ T29] usb 1-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 660.792418][ T29] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 660.838152][ T29] usb 1-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 660.881773][ T29] usb 1-1: Product: syz [ 660.905852][ T29] usb 1-1: Manufacturer: syz [ 660.956778][ T29] usb 1-1: SerialNumber: syz [ 661.001019][ T29] usb 1-1: config 0 descriptor?? [ 661.081387][ T29] ni6501 1-1:0.238: driver 'ni6501' failed to auto-configure device. [ 661.283882][ T794] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 661.453140][ T794] usb 3-1: Using ep0 maxpacket: 32 [ 661.475985][ T794] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 661.506091][ T794] usb 3-1: config 0 has no interface number 0 [ 661.548912][ T794] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 661.601462][ T794] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 661.637690][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.670257][ T794] usb 3-1: Product: syz [ 661.703148][ T794] usb 3-1: Manufacturer: syz [ 661.729206][ T794] usb 3-1: SerialNumber: syz [ 661.757292][ T794] usb 3-1: config 0 descriptor?? [ 661.821478][ T794] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 661.830614][T17192] fuse: root generation should be zero [ 661.876333][ T794] em28xx 3-1:0.132: Video interface 132 found: [ 661.997835][T17157] ======================================================= [ 661.997835][T17157] WARNING: The mand mount option has been deprecated and [ 661.997835][T17157] and is ignored by this kernel. Remove the mand [ 661.997835][T17157] option from the mount to silence this warning. [ 661.997835][T17157] ======================================================= [ 662.131684][T17199] netlink: 'syz.1.4163': attribute type 39 has an invalid length. [ 662.191853][ T794] em28xx 3-1:0.132: unknown em28xx chip ID (39) [ 662.801309][ T794] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 662.845224][ T794] em28xx 3-1:0.132: board has no eeprom [ 662.942856][ T794] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 662.967304][ T794] em28xx 3-1:0.132: analog set to bulk mode. [ 662.990222][ T5916] em28xx 3-1:0.132: Registering V4L2 extension [ 663.204479][ T794] usb 3-1: USB disconnect, device number 32 [ 663.219638][ T5916] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 663.243904][ T794] em28xx 3-1:0.132: Disconnecting em28xx [ 663.309130][T14507] usb 1-1: USB disconnect, device number 36 [ 663.559440][ T5916] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 663.603943][T17233] netlink: 'syz.0.4176': attribute type 39 has an invalid length. [ 663.630305][ T5916] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 663.653934][ T5916] em28xx 3-1:0.132: No AC97 audio processor [ 663.698956][ T5916] usb 3-1: Decoder not found [ 663.715311][ T5916] em28xx 3-1:0.132: failed to create media graph [ 663.736685][ T5916] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 663.788102][ T5916] em28xx 3-1:0.132: Remote control support is not available for this card. [ 663.837831][ T794] em28xx 3-1:0.132: Closing input extension [ 664.023123][ T794] em28xx 3-1:0.132: Freeing device [ 664.575133][T17262] netlink: 'syz.1.4190': attribute type 39 has an invalid length. [ 664.583196][ T5824] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 664.622012][T17264] netlink: 'syz.3.4188': attribute type 3 has an invalid length. [ 664.635703][T17264] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4188'. [ 664.685560][T17266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4191'. [ 664.751967][ T5824] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 664.764896][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.776190][ T5824] usb 1-1: Product: syz [ 664.780525][ T5824] usb 1-1: Manufacturer: syz [ 664.786228][ T5824] usb 1-1: SerialNumber: syz [ 664.796414][ T5824] usb 1-1: config 0 descriptor?? [ 664.824403][ T5824] hub 1-1:0.0: bad descriptor, ignoring hub [ 664.849902][ T5824] hub 1-1:0.0: probe with driver hub failed with error -5 [ 665.030030][ T5824] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 665.083119][ T5824] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 665.133827][ T5824] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 665.166149][ T5824] usb 1-1: media controller created [ 665.230673][ T5824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 665.394403][T17291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4200'. [ 665.460665][ T5824] DVB: Unable to find symbol dib7000p_attach() [ 665.474162][ T5824] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 665.714297][ T5824] rc_core: IR keymap rc-dib0700-rc5 not found [ 665.732084][ T5824] Registered IR keymap rc-empty [ 665.785514][ T5824] dvb-usb: could not initialize remote control. [ 665.802545][ T5824] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 665.954253][T17304] netlink: 'syz.4.4204': attribute type 3 has an invalid length. [ 665.986415][T17304] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4204'. [ 665.986993][T17305] netlink: 'syz.1.4203': attribute type 39 has an invalid length. [ 666.294746][ T794] usb 1-1: USB disconnect, device number 37 [ 666.378725][T17314] bond0: entered promiscuous mode [ 666.384450][T17314] bond_slave_0: entered promiscuous mode [ 666.390751][T17314] bond_slave_1: entered promiscuous mode [ 666.412680][T17314] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 666.413975][T17314] bond0: left promiscuous mode [ 666.413991][T17314] bond_slave_0: left promiscuous mode [ 666.414111][T17314] bond_slave_1: left promiscuous mode [ 666.441237][ T794] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 666.594759][ T29] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 666.763267][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 666.781734][ T29] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 666.806318][ T29] usb 5-1: config 0 has no interface number 0 [ 666.825950][ T29] usb 5-1: config 0 interface 230 has no altsetting 0 [ 666.853300][ T29] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 666.899993][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.929754][ T29] usb 5-1: Product: syz [ 666.940081][ T29] usb 5-1: Manufacturer: syz [ 666.964557][ T29] usb 5-1: SerialNumber: syz [ 667.009292][T17325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4212'. [ 667.019000][ T29] usb 5-1: config 0 descriptor?? [ 667.041509][ T29] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 667.097103][ T29] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 667.962650][T17354] netlink: 'syz.3.4221': attribute type 39 has an invalid length. [ 668.877361][T17367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4226'. [ 669.347963][ T29] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 669.357270][T17388] netlink: 'syz.1.4232': attribute type 39 has an invalid length. [ 669.506085][ T29] usb 5-1: USB disconnect, device number 31 [ 670.738860][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4234'. [ 671.617560][T17420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4243'. [ 672.552518][T17435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4250'. [ 672.831184][T17446] netlink: 'syz.3.4256': attribute type 3 has an invalid length. [ 672.839799][T17446] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4256'. [ 672.898573][T17448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4255'. [ 673.177687][T17464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4263'. [ 673.772916][ T29] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 673.789817][T17481] netlink: 'syz.1.4268': attribute type 3 has an invalid length. [ 673.817050][T17481] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4268'. [ 673.982931][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 674.112707][T17483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4269'. [ 674.548190][ T29] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 674.661757][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.779862][ T29] usb 1-1: Product: syz [ 674.829858][ T29] usb 1-1: Manufacturer: syz [ 674.844888][T17499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4277'. [ 674.855542][T17499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4277'. [ 674.882143][ T29] usb 1-1: SerialNumber: syz [ 675.004119][T17503] netlink: 'syz.1.4279': attribute type 3 has an invalid length. [ 675.037551][ T29] usb 1-1: config 0 descriptor?? [ 675.345049][ T29] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 676.315162][ T29] gspca_sunplus: reg_w_riv err -110 [ 676.360277][ T29] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 678.018656][ T5946] usb 1-1: USB disconnect, device number 38 [ 678.163184][ T794] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 678.248587][T17591] netlink: 'syz.1.4319': attribute type 3 has an invalid length. [ 678.257251][T17591] __nla_validate_parse: 3 callbacks suppressed [ 678.257461][T17591] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4319'. [ 678.326676][ T794] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.352608][ T794] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 678.378110][ T794] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 678.401299][ T794] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 678.424233][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.460410][T17579] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 678.503880][ T794] hub 4-1:1.0: bad descriptor, ignoring hub [ 678.505339][ T5946] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 678.509854][ T794] hub 4-1:1.0: probe with driver hub failed with error -5 [ 678.510378][ T794] cdc_wdm 4-1:1.0: skipping garbage [ 678.606278][ T794] cdc_wdm 4-1:1.0: skipping garbage [ 678.650542][ T794] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 678.668102][ T794] cdc_wdm 4-1:1.0: Unknown control protocol [ 678.742947][ T5946] usb 1-1: Using ep0 maxpacket: 32 [ 678.799875][ T5946] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 678.823137][ T5946] usb 1-1: config 0 has no interface number 0 [ 678.827769][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 678.836107][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 678.843670][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 678.850300][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 678.856596][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 678.863275][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 678.869532][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 678.876117][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 678.882379][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 678.888964][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 678.895220][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 678.901806][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 678.908055][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 678.914664][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 678.921022][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 678.927671][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 678.934414][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 678.941219][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 678.947657][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 678.954293][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 678.999109][ T5946] usb 1-1: config 0 interface 12 has no altsetting 0 [ 679.072192][ T5946] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 679.114203][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.161931][ T5824] usb 4-1: USB disconnect, device number 24 [ 679.172285][ T5946] usb 1-1: Product: syz [ 679.240870][ T5946] usb 1-1: Manufacturer: syz [ 679.285055][ T5946] usb 1-1: SerialNumber: syz [ 679.416958][ T5946] usb 1-1: config 0 descriptor?? [ 679.427804][T17611] netlink: 'syz.4.4324': attribute type 10 has an invalid length. [ 679.451116][T17609] macsec0: entered promiscuous mode [ 679.457599][T17609] macsec0: entered allmulticast mode [ 679.463869][T17609] veth1_macvtap: entered allmulticast mode [ 679.749290][T17618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4329'. [ 679.836720][T17621] netlink: 'syz.1.4331': attribute type 3 has an invalid length. [ 679.855817][T17621] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4331'. [ 680.502226][T17634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4336'. [ 680.536592][T17634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4336'. [ 680.563037][T17634] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4336'. [ 681.219251][T17647] netlink: 'syz.1.4342': attribute type 3 has an invalid length. [ 681.237325][T17647] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4342'. [ 681.367085][ T30] audit: type=1326 audit(1770984306.465:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17644 comm="syz.3.4341" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f45f6c code=0x0 [ 681.529051][T17653] No memory to map [ 681.983303][T17661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4347'. [ 682.018637][T17661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4347'. [ 682.051430][T17661] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4347'. [ 682.783176][ T5824] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 682.942313][T17680] netlink: 'syz.4.4353': attribute type 3 has an invalid length. [ 682.972957][ T5824] usb 3-1: Using ep0 maxpacket: 8 [ 682.987495][ T5824] usb 3-1: unable to get BOS descriptor or descriptor too short [ 683.009927][ T5824] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 683.027273][ T5824] usb 3-1: config 0 has no interface number 0 [ 683.057189][ T5824] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 683.095783][ T5824] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 683.136682][ T5824] usb 3-1: config 0 interface 88 has no altsetting 0 [ 683.181653][ T5824] usb 3-1: string descriptor 0 read error: -22 [ 683.207548][ T5824] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 683.252119][ T5946] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 683.261363][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 683.295463][ T5946] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 683.319464][ T5824] usb 3-1: config 0 descriptor?? [ 683.326703][ T5946] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 683.364748][ T5946] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 683.383645][ T5824] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input22 [ 683.416735][ T5946] usb 1-1: USB disconnect, device number 39 [ 683.627042][T15281] udevd[15281]: Error opening device "/dev/input/event4": Input/output error [ 683.647727][T15281] udevd[15281]: Unable to EVIOCGABS device "/dev/input/event4" [ 683.677494][T15281] udevd[15281]: Unable to EVIOCGABS device "/dev/input/event4" [ 683.834078][T17694] __nla_validate_parse: 1 callbacks suppressed [ 683.834094][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4359'. [ 683.854957][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4359'. [ 683.874460][T17694] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4359'. [ 684.292887][ T5946] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 684.473168][ T5946] usb 2-1: Using ep0 maxpacket: 32 [ 684.495862][ T5946] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 684.520386][T17712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4364'. [ 684.531133][ T5946] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 684.567856][ T5946] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 684.595311][ T5946] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 684.628994][ T5946] usb 2-1: config 0 interface 0 has no altsetting 0 [ 684.656899][ T5946] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 684.679752][ T5946] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 684.710943][ T5946] usb 2-1: Product: syz [ 684.726601][ T5946] usb 2-1: Manufacturer: syz [ 684.743029][ T5946] usb 2-1: SerialNumber: syz [ 684.768535][ T5946] usb 2-1: config 0 descriptor?? [ 684.797094][ T5946] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 684.834688][ T5946] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 685.411895][ T5916] usb 3-1: USB disconnect, device number 33 [ 685.481065][T17715] netlink: 'syz.3.4365': attribute type 3 has an invalid length. [ 685.560848][T17715] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4365'. [ 685.945501][T17701] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 685.953795][ T5916] usb 2-1: USB disconnect, device number 37 [ 685.953810][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 686.023667][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.030019][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.163202][T17718] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 686.177058][ T5916] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 687.243800][ T5916] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 687.415714][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.455344][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.496032][ T5916] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 687.517229][T17748] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 687.523804][T17748] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 687.546263][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.586036][ T5916] usb 5-1: config 0 descriptor?? [ 687.593410][T17748] vhci_hcd vhci_hcd.0: Device attached [ 687.607315][ T29] hid-generic 0003:A7B9:FFFFFFFC.0031: unknown main item tag 0x0 [ 687.701068][ T29] hid-generic 0003:A7B9:FFFFFFFC.0031: unknown main item tag 0x0 [ 687.710984][ T29] hid-generic 0003:A7B9:FFFFFFFC.0031: unknown main item tag 0x0 [ 687.730661][ T29] hid-generic 0003:A7B9:FFFFFFFC.0031: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 687.773389][ T794] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 687.828223][T17756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4380'. [ 687.862366][ T794] usb 37-1: new full-speed USB device number 10 using vhci_hcd [ 687.904381][T17756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4380'. [ 688.021285][ T5916] cp2112 0003:10C4:EA90.0032: unknown main item tag 0x0 [ 688.075077][T17749] vhci_hcd: connection reset by peer [ 688.075553][ T5916] cp2112 0003:10C4:EA90.0032: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 688.093594][ T13] vhci_hcd vhci_hcd.2: stop threads [ 688.098962][ T13] vhci_hcd vhci_hcd.2: release socket [ 688.143703][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 688.260419][ T5916] cp2112 0003:10C4:EA90.0032: Part Number: 0x82 Device Version: 0xFE [ 688.862672][T17742] cp2112 0003:10C4:EA90.0032: Multi-message I2C transactions not supported [ 688.895623][ T5916] cp2112 0003:10C4:EA90.0032: error reading lock byte: -71 [ 688.951345][ T5916] usb 5-1: USB disconnect, device number 32 [ 690.137536][T17795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4394'. [ 690.199184][T17796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4394'. [ 690.250528][T17795] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4394'. [ 690.373032][ T5915] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 690.572969][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 690.619668][ T5915] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 690.673192][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.719525][ T5915] usb 5-1: Product: syz [ 690.742173][ T5915] usb 5-1: Manufacturer: syz [ 690.787416][ T5915] usb 5-1: SerialNumber: syz [ 690.860518][ T5915] usb 5-1: config 0 descriptor?? [ 690.966446][T17809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4400'. [ 691.659245][T17821] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 691.665826][T17821] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 691.692653][T17821] vhci_hcd vhci_hcd.0: Device attached [ 691.729197][ T29] hid-generic 0003:A7B9:FFFFFFFC.0033: unknown main item tag 0x0 [ 691.775246][ T29] hid-generic 0003:A7B9:FFFFFFFC.0033: unknown main item tag 0x0 [ 691.787257][ T29] hid-generic 0003:A7B9:FFFFFFFC.0033: unknown main item tag 0x0 [ 691.802041][ T29] hid-generic 0003:A7B9:FFFFFFFC.0033: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 691.843186][ T5946] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 691.883020][ T5824] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 691.943991][ T5824] usb 35-1: new full-speed USB device number 10 using vhci_hcd [ 691.965599][T17822] vhci_hcd: connection closed [ 691.966025][ T60] vhci_hcd vhci_hcd.1: stop threads [ 691.985327][ T60] vhci_hcd vhci_hcd.1: release socket [ 692.003974][ T5946] usb 4-1: Using ep0 maxpacket: 32 [ 692.011264][ T60] vhci_hcd vhci_hcd.1: disconnect device [ 692.026367][ T5946] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 692.042066][T17827] fido_id[17827]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 692.064225][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.072492][ T5946] usb 4-1: Product: syz [ 692.084784][T17832] netlink: 'syz.0.4406': attribute type 1 has an invalid length. [ 692.092745][ T5946] usb 4-1: Manufacturer: syz [ 692.106638][ T5946] usb 4-1: SerialNumber: syz [ 692.124439][ T5946] usb 4-1: config 0 descriptor?? [ 692.160626][ T5946] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 692.178356][ T5946] dvb-usb: bulk message failed: -22 (2/0) [ 692.191125][ T5946] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 692.202492][ T5946] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 692.212002][ T5946] usb 4-1: media controller created [ 692.234712][ T5946] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 692.260444][ T5946] usb 4-1: selecting invalid altsetting 7 [ 692.266670][ T5946] cxusb: set interface failed [ 692.271527][ T5946] dvb-usb: bulk message failed: -22 (1/0) [ 692.341132][ T5946] DVB: Unable to find symbol lgdt330x_attach() [ 692.347601][ T5946] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 692.373030][T17817] dvb-usb: bulk message failed: -22 (4/0) [ 692.389145][T17817] cxusb: i2c read failed [ 692.623077][ T5946] rc_core: IR keymap rc-dvico-portable not found [ 692.672965][ T5946] Registered IR keymap rc-empty [ 692.769367][ T5946] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 692.938471][ T5946] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input23 [ 693.011683][ T5946] dvb-usb: schedule remote query interval to 100 msecs. [ 693.043415][ T794] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 693.061620][ T5915] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 693.080431][ T5915] gspca_sunplus: reg_w_riv err -71 [ 693.082944][ T5946] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 693.112499][ T5915] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 693.126509][ T5915] usb 5-1: USB disconnect, device number 33 [ 693.194751][ T5889] dvb-usb: bulk message failed: -22 (1/0) [ 693.214578][ T5946] usb 4-1: USB disconnect, device number 25 [ 693.237338][T17845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4408'. [ 693.278079][T17845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4408'. [ 693.310387][T17833] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 693.358309][T17849] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4408'. [ 693.373841][T17833] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 693.421903][ T5946] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 693.585264][T17839] bond1: (slave gretap1): making interface the new active one [ 693.623735][T17839] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 694.280457][T17866] bond0: entered promiscuous mode [ 694.287185][T17871] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4419'. [ 694.296441][T17866] bond_slave_0: entered promiscuous mode [ 694.302356][T17866] bond_slave_1: entered promiscuous mode [ 694.314113][T17866] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 694.337845][T17866] bond0: left promiscuous mode [ 694.351929][T17866] bond_slave_0: left promiscuous mode [ 694.368465][T17866] bond_slave_1: left promiscuous mode [ 694.523993][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4421'. [ 694.866050][T17885] netlink: 'syz.4.4424': attribute type 39 has an invalid length. [ 694.887678][T17839] syz.0.4406 (17839) used greatest stack depth: 18016 bytes left [ 695.482020][T17900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4431'. [ 695.539410][T17900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4431'. [ 695.584583][T17900] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4431'. [ 695.736498][T17905] bond0: entered promiscuous mode [ 695.746279][T17905] bond_slave_0: entered promiscuous mode [ 695.760183][T17905] bond_slave_1: entered promiscuous mode [ 695.779470][T17905] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 695.790880][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4434'. [ 695.800776][T17905] bond0: left promiscuous mode [ 695.807336][T17905] bond_slave_0: left promiscuous mode [ 695.818198][T17905] bond_slave_1: left promiscuous mode [ 696.310651][T17916] netlink: 'syz.1.4436': attribute type 39 has an invalid length. [ 696.823607][ T3547] team0: Port device gtp5 removed [ 696.869575][ T3547] team0: Port device gtp4 removed [ 696.897768][ T3547] team0: Port device gtp3 removed [ 696.973706][ T3547] team0: Port device gtp2 removed [ 697.007641][ T3547] team0: Port device gtp1 removed [ 697.026434][ T3547] team0: Port device gtp0 removed [ 697.075770][T17933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4445'. [ 697.125223][ T5824] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 697.186662][ T3547] bond0 (unregistering): Released all slaves [ 697.341846][ T3547] tipc: Disabling bearer [ 697.358033][ T3547] tipc: Left network mode [ 697.740891][ T3547] hsr_slave_0: left promiscuous mode [ 697.784430][ T3547] hsr_slave_1: left promiscuous mode [ 697.848768][ T3547] veth1_macvtap: left promiscuous mode [ 697.867734][ T3547] veth0_macvtap: left promiscuous mode [ 697.893391][ T3547] veth1_vlan: left promiscuous mode [ 697.911719][ T3547] veth0_vlan: left promiscuous mode [ 697.920992][T17959] netlink: 'syz.2.4455': attribute type 3 has an invalid length. [ 697.949575][T17959] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4455'. [ 698.201605][T17964] netlink: 'syz.2.4458': attribute type 39 has an invalid length. [ 698.223309][ T3547] pimreg (unregistering): left allmulticast mode [ 698.817766][T17977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4464'. [ 699.212949][ T794] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 699.300713][T17994] syzkaller0: entered promiscuous mode [ 699.310796][T17994] syzkaller0: entered allmulticast mode [ 699.362945][ T5824] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 699.381138][ T794] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 699.396370][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.410657][T17998] netlink: 'syz.4.4474': attribute type 3 has an invalid length. [ 699.413740][ T794] usb 4-1: Product: syz [ 699.418881][T17998] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4474'. [ 699.432058][ T794] usb 4-1: Manufacturer: syz [ 699.432081][ T794] usb 4-1: SerialNumber: syz [ 699.446280][ T794] usb 4-1: config 0 descriptor?? [ 699.470740][ T794] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 699.529965][ T5824] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 699.546605][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.561266][ T5824] usb 2-1: Product: syz [ 699.566201][ T5824] usb 2-1: Manufacturer: syz [ 699.571143][ T5824] usb 2-1: SerialNumber: syz [ 699.581888][ T5824] usb 2-1: config 0 descriptor?? [ 699.591635][ T5824] hub 2-1:0.0: bad descriptor, ignoring hub [ 699.600713][ T5824] hub 2-1:0.0: probe with driver hub failed with error -5 [ 699.804957][ T5824] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 699.829157][ T5824] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 699.856652][ T5824] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 699.894214][ T5824] usb 2-1: media controller created [ 699.943518][ T5824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 700.051340][T18013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4479'. [ 700.061039][ T5824] DVB: Unable to find symbol dib7000p_attach() [ 700.067312][ T5824] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 700.202944][ T5824] rc_core: IR keymap rc-dib0700-rc5 not found [ 700.215403][ T5824] Registered IR keymap rc-empty [ 700.227339][ T5824] dvb-usb: could not initialize remote control. [ 700.235907][T18018] netlink: 'syz.0.4480': attribute type 39 has an invalid length. [ 700.246358][ T5824] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 700.548166][ T5824] usb 4-1: USB disconnect, device number 26 [ 700.570403][T18028] netlink: 'syz.0.4485': attribute type 3 has an invalid length. [ 700.593259][T18028] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4485'. [ 700.735538][T18033] syzkaller0: entered promiscuous mode [ 700.741175][T18033] syzkaller0: entered allmulticast mode [ 700.846348][T18039] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4490'. [ 700.870820][T18037] bond0: entered promiscuous mode [ 700.876616][T18037] bond_slave_0: entered promiscuous mode [ 700.882403][T18037] bond_slave_1: entered promiscuous mode [ 700.889720][T18037] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 700.899186][T18037] bond0: left promiscuous mode [ 700.904140][T18037] bond_slave_0: left promiscuous mode [ 700.910046][T18037] bond_slave_1: left promiscuous mode [ 701.055166][T18043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4491'. [ 701.183725][T18045] binder: BINDER_SET_CONTEXT_MGR already set [ 701.196081][T18045] binder: 18044:18045 ioctl 4018620d 800002c0 returned -16 [ 701.277294][T18052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4496'. [ 701.461354][T18059] netlink: 'syz.4.4499': attribute type 3 has an invalid length. [ 701.488776][T18059] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4499'. [ 701.708240][T18066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4501'. [ 701.799380][T18068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4502'. [ 701.904929][T18072] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4504'. [ 702.131274][T18080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4508'. [ 702.154233][ T5824] usb 2-1: USB disconnect, device number 38 [ 702.257391][ T5824] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 702.369485][T18085] netlink: 'syz.1.4510': attribute type 3 has an invalid length. [ 702.392099][T18085] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4510'. [ 702.633932][T18099] binder: BINDER_SET_CONTEXT_MGR already set [ 702.640122][T18099] binder: 18098:18099 ioctl 4018620d 800002c0 returned -16 [ 702.919308][T18117] bond0: entered promiscuous mode [ 702.932586][T18117] bond_slave_0: entered promiscuous mode [ 702.939654][T18117] bond_slave_1: entered promiscuous mode [ 702.962372][T18117] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 702.984561][T18117] bond0: left promiscuous mode [ 702.989604][T18117] bond_slave_0: left promiscuous mode [ 703.005042][T18117] bond_slave_1: left promiscuous mode [ 704.049493][T18159] binder: BINDER_SET_CONTEXT_MGR already set [ 704.056374][T18159] binder: 18158:18159 ioctl 4018620d 800002c0 returned -16 [ 705.701390][T18223] __nla_validate_parse: 23 callbacks suppressed [ 705.701406][T18223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4573'. [ 705.775179][T18223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4573'. [ 705.813338][T18226] binder: 18225:18226 ioctl c0306201 0 returned -14 [ 706.208759][T18238] netlink: 'syz.2.4580': attribute type 1 has an invalid length. [ 706.225332][T18238] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4580'. [ 706.253899][T14507] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 706.452889][T14507] usb 2-1: Using ep0 maxpacket: 32 [ 706.466465][T14507] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 706.479913][T14507] usb 2-1: config 0 has no interface number 0 [ 706.486357][T14507] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 706.507231][T14507] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 706.517541][T14507] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.525904][T14507] usb 2-1: Product: syz [ 706.532992][T14507] usb 2-1: Manufacturer: syz [ 706.542896][T14507] usb 2-1: SerialNumber: syz [ 706.565428][T14507] usb 2-1: config 0 descriptor?? [ 706.597388][T14507] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 706.626875][T14507] em28xx 2-1:0.132: Video interface 132 found: [ 707.010837][T14507] em28xx 2-1:0.132: unknown em28xx chip ID (39) [ 707.411762][T18273] fuse: Bad value for 'group_id' [ 707.417080][T18273] fuse: Bad value for 'group_id' [ 707.614787][T14507] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 707.662593][T14507] em28xx 2-1:0.132: board has no eeprom [ 707.714296][T18281] binder: 18280:18281 ioctl c0306201 0 returned -14 [ 707.782920][T14507] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 707.809782][T14507] em28xx 2-1:0.132: analog set to bulk mode. [ 707.828731][ T794] em28xx 2-1:0.132: Registering V4L2 extension [ 707.930553][T14507] usb 2-1: USB disconnect, device number 39 [ 707.955432][ T794] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 707.966509][T14507] em28xx 2-1:0.132: Disconnecting em28xx [ 708.143068][ T794] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 708.150623][ T794] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 708.160732][ T794] em28xx 2-1:0.132: No AC97 audio processor [ 708.176523][ T794] usb 2-1: Decoder not found [ 708.181300][ T794] em28xx 2-1:0.132: failed to create media graph [ 708.189045][ T794] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 708.218952][ T794] em28xx 2-1:0.132: Remote control support is not available for this card. [ 708.239404][T14507] em28xx 2-1:0.132: Closing input extension [ 708.268494][T14507] em28xx 2-1:0.132: Freeing device [ 709.354962][T18331] netlink: 'syz.3.4617': attribute type 1 has an invalid length. [ 709.376600][T18331] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4617'. [ 709.502911][ T794] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 709.613797][T18337] binder: 18336:18337 ioctl c0306201 0 returned -14 [ 709.673157][ T794] usb 1-1: Using ep0 maxpacket: 32 [ 709.697378][ T794] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 709.731296][ T794] usb 1-1: config 0 has no interface number 0 [ 709.765251][ T794] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 709.791830][ T794] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 709.808983][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.828863][ T794] usb 1-1: Product: syz [ 709.844730][ T794] usb 1-1: Manufacturer: syz [ 709.859117][ T794] usb 1-1: SerialNumber: syz [ 709.874802][ T794] usb 1-1: config 0 descriptor?? [ 709.898396][ T794] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 709.921916][ T794] em28xx 1-1:0.132: Video interface 132 found: [ 710.144509][T18351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4628'. [ 710.322960][ T794] em28xx 1-1:0.132: unknown em28xx chip ID (39) [ 710.461541][T18360] bridge0: entered promiscuous mode [ 710.469705][T18360] bridge0: left promiscuous mode [ 710.920217][ T794] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 710.940657][ T794] em28xx 1-1:0.132: board has no eeprom [ 711.023303][ T794] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 711.046988][ T794] em28xx 1-1:0.132: analog set to bulk mode. [ 711.066020][ T5915] em28xx 1-1:0.132: Registering V4L2 extension [ 711.110437][T18387] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4645'. [ 711.174206][ T794] usb 1-1: USB disconnect, device number 40 [ 711.211606][ T794] em28xx 1-1:0.132: Disconnecting em28xx [ 711.536267][ T5915] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 711.558127][ T5915] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 711.575155][ T5915] em28xx 1-1:0.132: No AC97 audio processor [ 711.604697][ T5915] usb 1-1: Decoder not found [ 711.621206][ T5915] em28xx 1-1:0.132: failed to create media graph [ 711.650541][ T5915] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 711.651263][T18401] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4651'. [ 711.698296][ T5915] em28xx 1-1:0.132: Remote control support is not available for this card. [ 711.744227][ T794] em28xx 1-1:0.132: Closing input extension [ 711.804968][ T794] em28xx 1-1:0.132: Freeing device [ 711.858418][T18407] nfs: Unknown parameter '' [ 712.115590][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4657'. [ 712.129726][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4657'. [ 712.141492][T18415] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4657'. [ 712.411091][T18425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4661'. [ 712.538758][T18433] nfs: Unknown parameter '' [ 712.668456][T18441] netlink: 'syz.1.4669': attribute type 1 has an invalid length. [ 712.680146][T18441] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4669'. [ 712.765019][T18443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4670'. [ 713.150665][T18459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4676'. [ 713.407943][T18465] nfs: Unknown parameter '' [ 713.520972][T18469] netlink: 'syz.0.4681': attribute type 1 has an invalid length. [ 713.539518][T18469] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4681'. [ 713.698011][T18473] bond0: entered promiscuous mode [ 713.741098][T18473] bond_slave_0: entered promiscuous mode [ 713.765380][T18473] bond_slave_1: entered promiscuous mode [ 713.792406][T18473] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 713.818173][T18473] bond0: left promiscuous mode [ 713.830904][T18473] bond_slave_0: left promiscuous mode [ 713.845851][T18473] bond_slave_1: left promiscuous mode [ 714.123389][T18482] trusted_key: encrypted_key: master key parameter 'user' is invalid [ 714.562157][T18501] netlink: 'syz.0.4694': attribute type 1 has an invalid length. [ 714.975941][T18511] bond0: entered promiscuous mode [ 714.989360][T18511] bond_slave_0: entered promiscuous mode [ 715.024583][T18511] bond_slave_1: entered promiscuous mode [ 715.054597][T18511] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 715.066905][T18511] bond0: left promiscuous mode [ 715.072072][T18511] bond_slave_0: left promiscuous mode [ 715.090185][T18511] bond_slave_1: left promiscuous mode [ 715.571242][T18525] netlink: 'syz.1.4705': attribute type 1 has an invalid length. [ 715.588326][T18527] fuse: Unknown parameter 'grou00000000000000000000' [ 716.359399][T18540] __nla_validate_parse: 8 callbacks suppressed [ 716.359422][T18540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4710'. [ 716.655532][T18546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4713'. [ 716.729556][T18547] netlink: 'syz.0.4712': attribute type 72 has an invalid length. [ 716.828977][T18547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4712'. [ 717.191587][T18559] netlink: 'syz.0.4717': attribute type 1 has an invalid length. [ 717.208075][T18560] fuse: Unknown parameter 'grou00000000000000000000' [ 717.221044][T18559] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4717'. [ 717.404324][T18564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4719'. [ 717.420214][T18564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4719'. [ 717.434294][T18564] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4719'. [ 717.445917][T18566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4721'. [ 717.465132][T18566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4721'. [ 717.513746][T18566] batadv0: entered promiscuous mode [ 717.528088][T18566] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 717.981717][T18580] syzkaller0: entered promiscuous mode [ 717.995218][T18580] syzkaller0: entered allmulticast mode [ 718.170345][T18585] netlink: 'syz.4.4728': attribute type 72 has an invalid length. [ 718.195567][T18585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4728'. [ 718.876555][T18599] nfs: Unknown parameter '' [ 719.043025][ T5824] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 719.082888][ T5889] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 719.245645][ T5824] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.281184][ T5824] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 719.313073][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 719.326712][ T5824] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 719.372191][ T5824] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 719.395739][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.425571][T18596] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 719.460629][ T5824] hub 3-1:1.0: bad descriptor, ignoring hub [ 719.479557][ T5824] hub 3-1:1.0: probe with driver hub failed with error -5 [ 719.492688][ T5889] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 719.506310][ T5824] cdc_wdm 3-1:1.0: skipping garbage [ 719.529924][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.539072][ T5824] cdc_wdm 3-1:1.0: skipping garbage [ 719.562203][ T5824] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 719.571237][ T5889] usb 5-1: Product: syz [ 719.582066][ T5889] usb 5-1: Manufacturer: syz [ 719.590722][ T5824] cdc_wdm 3-1:1.0: Unknown control protocol [ 719.601000][ T5889] usb 5-1: SerialNumber: syz [ 719.639206][ T5889] usb 5-1: config 0 descriptor?? [ 719.966877][ T5889] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 720.044244][ T5824] usb 3-1: USB disconnect, device number 34 [ 720.380379][T18620] syzkaller0: entered promiscuous mode [ 720.404409][T18620] syzkaller0: entered allmulticast mode [ 720.568725][T18626] nfs: Unknown parameter '' [ 720.906397][ T5889] gspca_sunplus: reg_w_riv err -110 [ 720.912364][ T5889] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 721.500808][T18648] fuse: Unknown parameter 'group_i00000000000000000000' [ 721.785304][T18652] __nla_validate_parse: 4 callbacks suppressed [ 721.785325][T18652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4754'. [ 721.827703][ T5915] usb 5-1: USB disconnect, device number 34 [ 722.010965][T18657] nfs: Unknown parameter '' [ 722.304480][T18667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4762'. [ 722.324999][T18667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4762'. [ 722.339357][T18667] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4762'. [ 722.445770][T18677] fuse: Unknown parameter 'group_id00000000000000000000' [ 722.483392][ T5824] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 722.675407][ T5824] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 722.687393][ T5824] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 722.696917][ T5824] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 722.709013][ T5824] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 722.718656][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.743938][T18665] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 722.774898][ T5824] hub 5-1:1.0: bad descriptor, ignoring hub [ 722.786699][ T5824] hub 5-1:1.0: probe with driver hub failed with error -5 [ 722.805769][ T5824] cdc_wdm 5-1:1.0: skipping garbage [ 722.819125][ T5824] cdc_wdm 5-1:1.0: skipping garbage [ 722.832304][T18691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4771'. [ 722.844877][ T5824] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 722.850840][ T5824] cdc_wdm 5-1:1.0: Unknown control protocol [ 723.022213][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4772'. [ 723.153351][ T794] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 723.278950][ T5915] usb 5-1: USB disconnect, device number 35 [ 723.343965][ T794] usb 4-1: Using ep0 maxpacket: 8 [ 723.430650][ T794] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 723.486113][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.517103][ T794] usb 4-1: Product: syz [ 723.534239][ T794] usb 4-1: Manufacturer: syz [ 723.545344][T18711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4778'. [ 723.562504][ T794] usb 4-1: SerialNumber: syz [ 723.589377][T18711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4778'. [ 723.611236][ T794] usb 4-1: config 0 descriptor?? [ 723.632053][T18711] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4778'. [ 723.822263][T18714] fuse: Unknown parameter 'group_id00000000000000000000' [ 723.915503][ T794] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 724.336261][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4784'. [ 724.739698][T18729] batadv0: entered promiscuous mode [ 724.762068][T18729] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 724.893161][ T794] gspca_sunplus: reg_w_riv err -110 [ 724.908701][ T794] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 725.809416][T18759] trusted_key: encrypted_key: master key parameter 'user' is invalid [ 726.210421][T18773] veth0_vlan: entered allmulticast mode [ 726.283879][ T5824] usb 4-1: USB disconnect, device number 27 [ 727.048501][T18791] __nla_validate_parse: 14 callbacks suppressed [ 727.048519][T18791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4811'. [ 727.208635][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4812'. [ 727.252611][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4812'. [ 727.266848][T18796] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4812'. [ 728.035072][T18814] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 728.041837][T18814] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 728.053071][T18814] vhci_hcd vhci_hcd.0: Device attached [ 728.074739][T18818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4819'. [ 728.106189][T18818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4819'. [ 728.119561][ T29] hid-generic 0003:A7B9:FFFFFFFC.0034: unknown main item tag 0x0 [ 728.164434][ T29] hid-generic 0003:A7B9:FFFFFFFC.0034: unknown main item tag 0x0 [ 728.189126][T18820] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4819'. [ 728.223744][ T29] hid-generic 0003:A7B9:FFFFFFFC.0034: unknown main item tag 0x0 [ 728.263724][ T5915] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 728.343416][ T29] hid-generic 0003:A7B9:FFFFFFFC.0034: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 728.353457][ T5915] usb 35-1: new full-speed USB device number 11 using vhci_hcd [ 728.475147][T18815] vhci_hcd: connection reset by peer [ 728.488458][ T1004] vhci_hcd vhci_hcd.1: stop threads [ 728.515824][ T1004] vhci_hcd vhci_hcd.1: release socket [ 728.539750][ T1004] vhci_hcd vhci_hcd.1: disconnect device [ 728.635080][T18823] fido_id[18823]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 730.402564][T18871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4838'. [ 730.427160][T18872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4830'. [ 730.443890][T18872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4830'. [ 730.583135][ T794] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 730.752957][ T794] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 730.772513][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.792615][ T794] usb 4-1: Product: syz [ 730.817849][ T794] usb 4-1: Manufacturer: syz [ 730.834723][ T794] usb 4-1: SerialNumber: syz [ 730.861771][ T794] usb 4-1: config 0 descriptor?? [ 730.876845][ T794] hub 4-1:0.0: bad descriptor, ignoring hub [ 730.899009][ T794] hub 4-1:0.0: probe with driver hub failed with error -5 [ 731.097369][ T794] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 731.119888][T18880] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 731.126555][T18880] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 731.134520][T18880] vhci_hcd vhci_hcd.0: Device attached [ 731.171362][ T794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 731.191262][ T794] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 731.193683][ T5824] hid-generic 0003:A7B9:FFFFFFFC.0035: unknown main item tag 0x0 [ 731.218080][ T794] usb 4-1: media controller created [ 731.256676][ T794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 731.276590][ T5824] hid-generic 0003:A7B9:FFFFFFFC.0035: unknown main item tag 0x0 [ 731.326455][ T5824] hid-generic 0003:A7B9:FFFFFFFC.0035: unknown main item tag 0x0 [ 731.342933][T14507] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 731.409725][ T5824] hid-generic 0003:A7B9:FFFFFFFC.0035: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 731.411267][ T794] DVB: Unable to find symbol dib7000p_attach() [ 731.429545][T14507] usb 37-1: new full-speed USB device number 11 using vhci_hcd [ 731.471586][T18881] vhci_hcd: connection reset by peer [ 731.479749][ T1004] vhci_hcd vhci_hcd.2: stop threads [ 731.485757][ T1004] vhci_hcd vhci_hcd.2: release socket [ 731.517279][T18884] fido_id[18884]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 731.553711][ T794] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 731.592575][ T1004] vhci_hcd vhci_hcd.2: disconnect device [ 731.702913][ T794] rc_core: IR keymap rc-dib0700-rc5 not found [ 731.829259][ T794] Registered IR keymap rc-empty [ 732.788246][T18902] binder: 18901:18902 ioctl c0306201 0 returned -14 [ 733.523104][ T5915] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 733.577503][T18922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4856'. [ 734.166077][T18933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4861'. [ 734.821186][T18944] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 734.827963][T18944] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 734.902182][ T5824] hid-generic 0003:A7B9:FFFFFFFC.0036: unknown main item tag 0x0 [ 734.923929][T18944] vhci_hcd vhci_hcd.0: Device attached [ 734.941012][ T5824] hid-generic 0003:A7B9:FFFFFFFC.0036: unknown main item tag 0x0 [ 734.962039][T18949] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4865'. [ 734.986666][ T5824] hid-generic 0003:A7B9:FFFFFFFC.0036: unknown main item tag 0x0 [ 735.022063][ T5824] hid-generic 0003:A7B9:FFFFFFFC.0036: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 735.123668][ T29] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 735.189079][T18945] vhci_hcd: connection closed [ 735.189451][T12633] vhci_hcd vhci_hcd.4: stop threads [ 735.225942][ T29] usb 41-1: new full-speed USB device number 10 using vhci_hcd [ 735.239703][T12633] vhci_hcd vhci_hcd.4: release socket [ 735.301155][T12633] vhci_hcd vhci_hcd.4: disconnect device [ 735.312271][T18950] fido_id[18950]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 735.468665][T18954] binder: 18953:18954 ioctl c0306201 0 returned -14 [ 736.328328][ T794] dvb-usb: could not initialize remote control. [ 736.356109][ T794] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 736.384110][ T794] usb 4-1: USB disconnect, device number 28 [ 736.469196][ T794] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 736.542942][T14507] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 736.590623][T18973] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4876'. [ 737.008570][T18994] binder: 18993:18994 ioctl c0306201 0 returned -14 [ 737.302991][ T794] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 737.411073][T19002] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 737.417645][T19002] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 737.442450][T19002] vhci_hcd vhci_hcd.0: Device attached [ 737.477299][ T794] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 737.497288][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.514339][ T5824] hid-generic 0003:A7B9:FFFFFFFC.0037: unknown main item tag 0x0 [ 737.542238][ T5824] hid-generic 0003:A7B9:FFFFFFFC.0037: unknown main item tag 0x0 [ 737.542266][ T794] usb 2-1: Product: syz [ 737.542297][ T794] usb 2-1: Manufacturer: syz [ 737.584412][ T794] usb 2-1: SerialNumber: syz [ 737.590023][ T5824] hid-generic 0003:A7B9:FFFFFFFC.0037: unknown main item tag 0x0 [ 737.607491][ T794] usb 2-1: config 0 descriptor?? [ 737.641838][ T5824] hid-generic 0003:A7B9:FFFFFFFC.0037: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 737.667302][ T794] hub 2-1:0.0: bad descriptor, ignoring hub [ 737.686727][ T794] hub 2-1:0.0: probe with driver hub failed with error -5 [ 737.866465][ T794] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 737.898015][T19008] fido_id[19008]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 737.933840][ T794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 737.947831][T19003] vhci_hcd: connection reset by peer [ 737.964539][ T1004] vhci_hcd vhci_hcd.4: stop threads [ 737.973541][ T1004] vhci_hcd vhci_hcd.4: release socket [ 737.988445][ T794] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 738.000104][ T1004] vhci_hcd vhci_hcd.4: disconnect device [ 738.034582][ T794] usb 2-1: media controller created [ 738.103201][ T5824] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 738.136798][ T794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 738.265063][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.357271][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.389164][ T5824] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 738.402988][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.522636][ T5824] usb 4-1: config 0 descriptor?? [ 738.552528][ T794] DVB: Unable to find symbol dib7000p_attach() [ 738.580354][ T794] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 738.625128][T19025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4893'. [ 738.669021][T19025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4893'. [ 738.792890][ T794] rc_core: IR keymap rc-dib0700-rc5 not found [ 738.812351][ T794] Registered IR keymap rc-empty [ 739.035907][ T5824] cp2112 0003:10C4:EA90.0038: unknown main item tag 0x0 [ 739.070586][ T5824] cp2112 0003:10C4:EA90.0038: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 739.268659][ T5824] cp2112 0003:10C4:EA90.0038: Part Number: 0x82 Device Version: 0xFE [ 739.749411][T19039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4900'. [ 740.384030][ T29] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 740.483260][T19046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4904'. [ 740.494177][T19046] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4904'. [ 741.623482][T19068] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 741.630065][T19068] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 741.680912][T19068] vhci_hcd vhci_hcd.0: Device attached [ 741.721316][ T29] hid-generic 0003:A7B9:FFFFFFFC.0039: unknown main item tag 0x0 [ 741.736565][ T29] hid-generic 0003:A7B9:FFFFFFFC.0039: unknown main item tag 0x0 [ 741.745340][ T29] hid-generic 0003:A7B9:FFFFFFFC.0039: unknown main item tag 0x0 [ 741.823104][ T29] hid-generic 0003:A7B9:FFFFFFFC.0039: hidraw1: USB HID v0.00 Device [syz1] on syz0 [ 741.853134][ T5915] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 741.953724][ T5915] usb 33-1: new full-speed USB device number 7 using vhci_hcd [ 742.032425][T19078] fido_id[19078]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 742.063958][T19069] vhci_hcd: connection reset by peer [ 742.071435][T19080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4916'. [ 742.089101][T12633] vhci_hcd vhci_hcd.0: stop threads [ 742.095063][T12633] vhci_hcd vhci_hcd.0: release socket [ 742.103034][T12633] vhci_hcd vhci_hcd.0: disconnect device [ 742.155613][T19080] team0: entered promiscuous mode [ 742.185792][T19080] team_slave_0: entered promiscuous mode [ 742.208518][T19080] team_slave_1: entered promiscuous mode [ 742.231918][T19080] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 743.124213][ T794] dvb-usb: could not initialize remote control. [ 743.124911][T19010] ------------[ cut here ]------------ [ 743.130521][ T794] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 743.145766][T19010] usb 2-1: BOGUS control dir, pipe 80002880 doesn't match bRequestType c0 [ 743.154349][T19010] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x1052/0x18b0, CPU#1: syz.3.4891/19010 [ 743.165040][T19010] Modules linked in: [ 743.169352][T19010] CPU: 1 UID: 0 PID: 19010 Comm: syz.3.4891 Tainted: G L syzkaller #0 PREEMPT(full) [ 743.180521][T19010] Tainted: [L]=SOFTLOCKUP [ 743.185822][T19010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 743.196400][T19010] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 743.202098][T19010] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 743.222080][T19010] RSP: 0000:ffffc90003d7f768 EFLAGS: 00010246 [ 743.228355][T19010] RAX: 0000000000000000 RBX: ffff88802d9a6b00 RCX: 0000000080002880 [ 743.236865][T19010] RDX: ffff888030dcefa0 RSI: ffffffff8c7ed420 RDI: ffffffff901e2a50 [ 743.245104][T19010] RBP: 1ffff1100415dde4 R08: 00000000000000c0 R09: 0000000000000000 [ 743.253184][T19010] R10: ffffc90003d7f860 R11: fffff520007aff18 R12: ffff88802af48100 [ 743.261217][T19010] R13: ffff888020aeef20 R14: 0000000080002880 R15: ffff888030dcefa0 [ 743.269513][T19010] FS: 0000000000000000(0000) GS:ffff8881255a0000(0063) knlGS:00000000f5406b40 [ 743.278747][T19010] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 743.285664][T19010] CR2: 0000000030d22ff8 CR3: 0000000060886000 CR4: 00000000003526f0 [ 743.293831][T19010] DR0: 000000000000000a DR1: fffffffffffffffa DR2: 0000000000004020 [ 743.301872][T19010] DR3: 0000000000000003 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 743.309975][T19010] Call Trace: [ 743.313388][T19010] [ 743.316390][T19010] ? __init_swait_queue_head+0xa9/0x150 [ 743.322009][T19010] usb_start_wait_urb+0x12b/0x510 [ 743.327158][T19010] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 743.332817][T19010] usb_control_msg+0x232/0x3e0 [ 743.337723][T19010] dib0700_i2c_xfer+0xbb2/0xf80 [ 743.342686][T19010] __i2c_transfer+0x79a/0x1ee0 [ 743.347725][T19010] ? i2c_transfer+0xc8/0x2d0 [ 743.352653][T19010] i2c_transfer+0x1cc/0x2d0 [ 743.357360][T19010] i2cdev_ioctl_rdwr+0x460/0x740 [ 743.362942][T19010] compat_i2cdev_ioctl+0x59f/0x5c0 [ 743.368127][T19010] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 743.373924][T19010] ? __fget_files+0x3a0/0x420 [ 743.378654][T19010] ? __fget_files+0x2a/0x420 [ 743.383362][T19010] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 743.388966][T19010] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 743.394665][T19010] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 743.400727][T19010] ? kmem_cache_free+0x180/0x610 [ 743.405786][T19010] ? __se_sys_futex_time32+0x3ab/0x440 [ 743.411475][T19010] ? rcu_is_watching+0x15/0xb0 [ 743.416439][T19010] __do_fast_syscall_32+0x20d/0x640 [ 743.421772][T19010] ? do_fast_syscall_32+0x33/0x70 [ 743.426885][T19010] ? asm_int80_emulation+0x1a/0x20 [ 743.432075][T19010] ? do_int80_emulation+0x274/0x4d0 [ 743.437494][T19010] do_fast_syscall_32+0x33/0x70 [ 743.442913][T19010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 743.449330][T19010] RIP: 0023:0xf7f45f6c [ 743.453572][T19010] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 743.473302][T19010] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 743.481802][T19010] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000707 [ 743.489938][T19010] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 743.498027][T19010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 743.506227][T19010] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 743.514692][T19010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 743.522946][T19010] [ 743.526049][T19010] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 743.533376][T19010] CPU: 1 UID: 0 PID: 19010 Comm: syz.3.4891 Tainted: G L syzkaller #0 PREEMPT(full) [ 743.544802][T19010] Tainted: [L]=SOFTLOCKUP [ 743.549161][T19010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 743.559359][T19010] Call Trace: [ 743.562840][T19010] [ 743.565901][T19010] vpanic+0x56c/0xa60 [ 743.570168][T19010] ? __pfx__printk+0x10/0x10 [ 743.574767][T19010] ? __pfx_vpanic+0x10/0x10 [ 743.579275][T19010] ? is_bpf_text_address+0x292/0x2b0 [ 743.584568][T19010] ? is_bpf_text_address+0x26/0x2b0 [ 743.589803][T19010] panic+0xc5/0xd0 [ 743.593540][T19010] ? __pfx_panic+0x10/0x10 [ 743.598079][T19010] __warn+0x315/0x4a0 [ 743.602159][T19010] ? usb_submit_urb+0x1052/0x18b0 [ 743.607329][T19010] ? usb_submit_urb+0x1052/0x18b0 [ 743.612375][T19010] __report_bug+0x29a/0x540 [ 743.616999][T19010] ? usb_submit_urb+0x1052/0x18b0 [ 743.622160][T19010] ? __pfx___report_bug+0x10/0x10 [ 743.627302][T19010] ? lockdep_hardirqs_on+0x7a/0x110 [ 743.632510][T19010] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 743.638329][T19010] report_bug_entry+0x19a/0x290 [ 743.643291][T19010] ? usb_submit_urb+0x1114/0x18b0 [ 743.648419][T19010] ? usb_submit_urb+0x1119/0x18b0 [ 743.653458][T19010] handle_bug+0xca/0x200 [ 743.657808][T19010] exc_invalid_op+0x1a/0x50 [ 743.662316][T19010] asm_exc_invalid_op+0x1a/0x20 [ 743.667194][T19010] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 743.672855][T19010] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 743.692990][T19010] RSP: 0000:ffffc90003d7f768 EFLAGS: 00010246 [ 743.699071][T19010] RAX: 0000000000000000 RBX: ffff88802d9a6b00 RCX: 0000000080002880 [ 743.707307][T19010] RDX: ffff888030dcefa0 RSI: ffffffff8c7ed420 RDI: ffffffff901e2a50 [ 743.715302][T19010] RBP: 1ffff1100415dde4 R08: 00000000000000c0 R09: 0000000000000000 [ 743.723319][T19010] R10: ffffc90003d7f860 R11: fffff520007aff18 R12: ffff88802af48100 [ 743.731305][T19010] R13: ffff888020aeef20 R14: 0000000080002880 R15: ffff888030dcefa0 [ 743.739324][T19010] ? usb_submit_urb+0x10a3/0x18b0 [ 743.744432][T19010] ? __init_swait_queue_head+0xa9/0x150 [ 743.750002][T19010] usb_start_wait_urb+0x12b/0x510 [ 743.755044][T19010] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 743.760712][T19010] usb_control_msg+0x232/0x3e0 [ 743.765576][T19010] dib0700_i2c_xfer+0xbb2/0xf80 [ 743.770462][T19010] __i2c_transfer+0x79a/0x1ee0 [ 743.775420][T19010] ? i2c_transfer+0xc8/0x2d0 [ 743.780019][T19010] i2c_transfer+0x1cc/0x2d0 [ 743.784552][T19010] i2cdev_ioctl_rdwr+0x460/0x740 [ 743.789502][T19010] compat_i2cdev_ioctl+0x59f/0x5c0 [ 743.794975][T19010] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 743.800725][T19010] ? __fget_files+0x3a0/0x420 [ 743.805445][T19010] ? __fget_files+0x2a/0x420 [ 743.810114][T19010] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 743.815687][T19010] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 743.821185][T19010] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 743.827276][T19010] ? kmem_cache_free+0x180/0x610 [ 743.832341][T19010] ? __se_sys_futex_time32+0x3ab/0x440 [ 743.837817][T19010] ? rcu_is_watching+0x15/0xb0 [ 743.842723][T19010] __do_fast_syscall_32+0x20d/0x640 [ 743.848147][T19010] ? do_fast_syscall_32+0x33/0x70 [ 743.853178][T19010] ? asm_int80_emulation+0x1a/0x20 [ 743.858379][T19010] ? do_int80_emulation+0x274/0x4d0 [ 743.863600][T19010] do_fast_syscall_32+0x33/0x70 [ 743.868493][T19010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 743.874916][T19010] RIP: 0023:0xf7f45f6c [ 743.878995][T19010] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 743.898781][T19010] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 743.907294][T19010] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000707 [ 743.915370][T19010] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 743.923348][T19010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 743.931360][T19010] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 743.939569][T19010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 743.947657][T19010] [ 743.950850][T19010] Kernel Offset: disabled [ 743.955188][T19010] Rebooting in 86400 seconds..