last executing test programs: 4.41043524s ago: executing program 3 (id=3181): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigsuspend(&(0x7f0000000080), 0x8) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES64], 0x0) syz_usb_control_io(r2, 0x0, 0x0) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r3 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000140)={0x40, 0xb, 0x3, "91646f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.237490265s ago: executing program 2 (id=3187): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = gettid() r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x5) accept(r2, 0x0, 0x0) timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000340)=""/187, 0xbb}], 0x8}, 0x80000000}], 0x4, 0x20, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000240)={{0x77359400}, {r5, r6+10000000}}, &(0x7f00000002c0)) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_adj\x00') pread64(r7, 0x0, 0x0, 0x76) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r7) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) ioctl$KVM_GET_CPUID2(r10, 0xc008ae91, &(0x7f00000000c0)={0x2, 0x0, [{}, {}]}) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.033102296s ago: executing program 0 (id=3188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43afffe800000000000000000000000000010fc02000000000000000000000000000182"], 0x340a) 1.828719623s ago: executing program 0 (id=3191): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fstat(r0, &(0x7f0000000040)) r1 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x1, 0x2, 0x7cbbda779fe004e1, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0) write(r2, &(0x7f0000000140)="df3fa9bef7643c653081a0cf28321c1ef1bd69312f487ece487cf638cc8a996566017c287ea471f4825e702f7b1bb8ee649e687a92373e303339065f76bfe80757800fc391123c276cbbdfaa8e0e27e8119abb2336bb6892372f1585f1eed98c14e455aaaf3da599fb913b461ad3a24ef058781447571234bb87f63ed15d39727ca27de6f60b179bda568b462bb86031fe77b4edc83f8a21763374e9aa45d4350d72f6bead681981ed90f4fbbe9fc58ae786fafad664358f5435f9df26efbf3bb057070ecbc76af5781fb3e4076cfe62f595", 0xd2) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) fstat(r0, &(0x7f0000000040)) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x1, 0x2, 0x7cbbda779fe004e1, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) (async) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0) (async) write(r2, &(0x7f0000000140)="df3fa9bef7643c653081a0cf28321c1ef1bd69312f487ece487cf638cc8a996566017c287ea471f4825e702f7b1bb8ee649e687a92373e303339065f76bfe80757800fc391123c276cbbdfaa8e0e27e8119abb2336bb6892372f1585f1eed98c14e455aaaf3da599fb913b461ad3a24ef058781447571234bb87f63ed15d39727ca27de6f60b179bda568b462bb86031fe77b4edc83f8a21763374e9aa45d4350d72f6bead681981ed90f4fbbe9fc58ae786fafad664358f5435f9df26efbf3bb057070ecbc76af5781fb3e4076cfe62f595", 0xd2) (async) 1.788807314s ago: executing program 1 (id=3192): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="647fd000", @ANYRES16=r1, @ANYBLOB="000428bd7000fedbdf2518000000440030800500020004000000140004007948dee75b473c1681ac2c22ad60edcc24000300dbf10223b6a0b60b2fd7139702fe8d20b38c9824b030f082a931c6c5662c09780c0006000000000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000acbc5840ba0d0030ea26000000010902120001000000000904"], 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) read$FUSE(r2, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x3}, 'syz0\x00', 0x43}) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r4, 0x5501) syz_pidfd_open(r3, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) (async) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}}, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) sendmsg$kcm(r6, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000280)="1a", 0x1}], 0x1}, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000280)="1a", 0x1}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r8) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000018000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x88c4}, 0x44) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004014}, 0x48000) 1.731897979s ago: executing program 0 (id=3193): mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a60e000000f040b067c55a1bc0009003e0006990600000015000500fe800000000000000300014002000c0901ac040098007f6f94007100a007a288747f0189b316277ce06bbace8017cbec", 0x5c}], 0x1, 0x0, 0x0, 0x2663}, 0x4000004) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec970000302c00fe8000000000000000000001000000aaff0200000000000000000000000000012c"], 0xfdef) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x0, 0x0, &(0x7f0000000300), 0x8d0000, 0x0) 1.285426527s ago: executing program 2 (id=3194): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {0x0, 0x7000000}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) 1.269553828s ago: executing program 3 (id=3195): syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @phonet={0x23, 0x9, 0xf7, 0x4}, @in={0x2, 0x4e1f, @multicast2}, @ethernet={0x306, @random="da6aaf115d91"}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x8, 0x71}) (async) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @phonet={0x23, 0x9, 0xf7, 0x4}, @in={0x2, 0x4e1f, @multicast2}, @ethernet={0x306, @random="da6aaf115d91"}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x8, 0x71}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x4b62, 0xfffffffffffffffe) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000100)=0x595a, 0x4) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c81) 1.214417548s ago: executing program 2 (id=3196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000120184"], 0x340a) 1.029447726s ago: executing program 0 (id=3197): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03004800000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 978.051158ms ago: executing program 3 (id=3198): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x160, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x2, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x2000000, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 948.399191ms ago: executing program 2 (id=3199): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'wg1\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0, 0x0, 0x6c}, 0x2, @in6=@empty, 0x3501, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe4) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, &(0x7f0000000900)={0x80}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x7, 0x7, 0x202, 0x8}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r7, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r7, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e", 0x4f9}], 0x2}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="fdff01000200e0eb3cbf667b7cc53ad16271735fb86e74b64c326248a2b3e00a45e9640fb8215e8e96d0d9fff13078d45f2552a5d22b431c22aa342c983f6845e4"], 0xa) 873.334605ms ago: executing program 0 (id=3200): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300500000000802110000010802110000005050505050500000"], 0x3c}}, 0x10) 815.195226ms ago: executing program 3 (id=3201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x18000000, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) 749.082636ms ago: executing program 0 (id=3202): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000c40)="18000000140081044e81f782db44b9042d02200802110000", 0x18}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x40, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) r2 = timerfd_create(0x8, 0x80800) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000680)=0x200) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000000)=""/155, 0x9b}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x28, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r3}, @nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xbf, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0xfffffffffffffffc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f00000000c0)) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0x8, 0x11, {0x11, 0x2, "29243d223e44357d826885ab5ed3d3"}}, &(0x7f0000000040)={0x0, 0x3, 0x2f, @string={0x2f, 0x3, "17b787a2937edc43d4e2e7a6a95ab3c49a9ee67c0af13752203fef259537d329dca9c7be02eb0196a46c46d92e"}}, &(0x7f0000000180)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x9b, 0x6, 0x22, 0x5}, @ptm_cap={0x3}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x18, 0x7, 0x5, "4c8f2888", "7128d008"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x1, 0x3, 0x0, 0x40, 0x2, 0x2}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x0, 0x12, 0x6b, "70265826e3dafbe0f889cb5e593e870b103cf963e201bffae0cda065523cfa54e5be8290b5ceb15d9e034611c65df90ee10d59063efa10acbfd92f14e6efa333b50f990ba3d0a006f4bed704070dcc61721c527c36b0fdfe6e76a823523859d7d91d55d7b72fc029666a7e"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xc2}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0xc0, 0x40, [0xf0f]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000580)={0x40, 0xb, 0x2, "1c53"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000600)={0x40, 0x13, 0x6, @local}, &(0x7f0000000640)={0x40, 0x17, 0x6, @random="e59887f47064"}, &(0x7f0000000680)={0x40, 0x19, 0x2, "cdfd"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0xd6b2}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x2}}) 661.495158ms ago: executing program 3 (id=3203): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x84}}, 0x500000000000000) 489.966395ms ago: executing program 2 (id=3204): socket$kcm(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) read(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000c0802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x10) 441.089079ms ago: executing program 3 (id=3205): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x40, 0x7, 0x0, 0x1, {{0x1f, 0x4, 0x2, 0x2c, 0x7c, 0x65, 0x0, 0x7, 0x2f, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x49, 0x1, 0x4, [{@remote, 0x7}]}, @generic={0x83, 0x8, "c51b8e7d4f9b"}, @ssrr={0x89, 0x2b, 0x72, [@rand_addr=0x64010101, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty, @loopback, @private=0xa010102, @rand_addr=0x64010100, @loopback]}, @timestamp={0x44, 0x10, 0xca, 0x0, 0x6, [0xe, 0x3c000000, 0x8]}, @ra={0x94, 0x4}, @generic={0x44, 0x12, "ad5af6229642871f5cfde5062fd8d900"}]}}}}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000280)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast1, @in=@local, 0x4e20, 0x0, 0x4e20, 0x4, 0x2, 0x30, 0xb0, 0x3b, r1, r2}, {0x9, 0x0, 0x7ff, 0xe, 0x1, 0x4f6, 0x0, 0x2}, {0x9, 0x80000000, 0xcc9, 0x8}, 0xf, 0x6e6bb5, 0x0, 0x0, 0x2, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x4d2, 0x3c}, 0xa, @in=@loopback, 0x0, 0x2, 0x1, 0x6, 0xa, 0x2f719999, 0x9}}, 0xe8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) clock_getres(0xfffffffffffffff1, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f017, 0x1}) sendto$inet6(r0, 0x0, 0x0, 0x2000c850, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000080)={0xe, 0x4, {0x52, 0x9, 0x2, {0xd9, 0x6}, {0xb, 0x6}, @ramp={0xffe, 0xffff, {0x2, 0x5, 0x6, 0x5}}}, {0x54, 0x8510, 0x7, {0x4, 0xf8}, {0x6, 0x1}, @rumble={0x6, 0x9}}}) socketpair(0x22, 0x2, 0x21, &(0x7f0000000000)) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)="ed81", 0x2}, {&(0x7f0000000440)="cfa1aa3c96f9ccf1abbfbf7a413dbf274792d0fdb52881413135681c3f6f1ee9b01548422b1ce58cfdc768bc9ba5ee5bd74a7c8d3f05406a", 0x38}], 0x2}, 0x4000000) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000b5c13240422cf81699090102030109021200010000001089044a0000dda36d00"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x40, 0x7, 0x0, 0x1, {{0x1f, 0x4, 0x2, 0x2c, 0x7c, 0x65, 0x0, 0x7, 0x2f, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x49, 0x1, 0x4, [{@remote, 0x7}]}, @generic={0x83, 0x8, "c51b8e7d4f9b"}, @ssrr={0x89, 0x2b, 0x72, [@rand_addr=0x64010101, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty, @loopback, @private=0xa010102, @rand_addr=0x64010100, @loopback]}, @timestamp={0x44, 0x10, 0xca, 0x0, 0x6, [0xe, 0x3c000000, 0x8]}, @ra={0x94, 0x4}, @generic={0x44, 0x12, "ad5af6229642871f5cfde5062fd8d900"}]}}}}}) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000280)=0xc) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast1, @in=@local, 0x4e20, 0x0, 0x4e20, 0x4, 0x2, 0x30, 0xb0, 0x3b, r1, r2}, {0x9, 0x0, 0x7ff, 0xe, 0x1, 0x4f6, 0x0, 0x2}, {0x9, 0x80000000, 0xcc9, 0x8}, 0xf, 0x6e6bb5, 0x0, 0x0, 0x2, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x4d2, 0x3c}, 0xa, @in=@loopback, 0x0, 0x2, 0x1, 0x6, 0xa, 0x2f719999, 0x9}}, 0xe8) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) socket$igmp(0x2, 0x3, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) (async) clock_getres(0xfffffffffffffff1, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f017, 0x1}) (async) sendto$inet6(r0, 0x0, 0x0, 0x2000c850, 0x0, 0x0) (async) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000080)={0xe, 0x4, {0x52, 0x9, 0x2, {0xd9, 0x6}, {0xb, 0x6}, @ramp={0xffe, 0xffff, {0x2, 0x5, 0x6, 0x5}}}, {0x54, 0x8510, 0x7, {0x4, 0xf8}, {0x6, 0x1}, @rumble={0x6, 0x9}}}) (async) socketpair(0x22, 0x2, 0x21, &(0x7f0000000000)) (async) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)="ed81", 0x2}, {&(0x7f0000000440)="cfa1aa3c96f9ccf1abbfbf7a413dbf274792d0fdb52881413135681c3f6f1ee9b01548422b1ce58cfdc768bc9ba5ee5bd74a7c8d3f05406a", 0x38}], 0x2}, 0x4000000) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000b5c13240422cf81699090102030109021200010000001089044a0000dda36d00"], 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) 337.368534ms ago: executing program 1 (id=3206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000008400004803c0001800a0001006d617463680000002c0002800d000100636f6e6e6d61726b0000000210000300a62a1a4094b2c56d78942e9708000240000000010900020073797a32000000000900010073797a30"], 0x94}}, 0x0) 337.147971ms ago: executing program 2 (id=3207): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r3, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0xf, 0x6, @link_local}, 0x14) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/212, 0xd4}], 0x1, 0x1b, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r7, &(0x7f0000001800)=[{&(0x7f0000000240)="b2dcaee80a", 0x5}], 0x1) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000540)={0x84, &(0x7f00000004c0)={0x0, 0x399aeff3d39f41f5, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, &(0x7f0000000180)={0x14, 0x0, 0x0}, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x0, 0x1b, "55b459477f48015bfe1f9bac7d36860831868671d98c5b580619f7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 268.583ms ago: executing program 1 (id=3208): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x20, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000004c0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x1, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) 167.126597ms ago: executing program 1 (id=3209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000030000000100000008000100", @ANYRES32=r2, @ANYBLOB="4c00088048000080200004000a004e2100000000000000000000000000000000000000010000000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c"], 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x0) 49.331748ms ago: executing program 1 (id=3210): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300500000000802110000010802110000005050505050500000"], 0x3c}}, 0x10) 0s ago: executing program 1 (id=3211): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000fc0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001380)={0x40, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x0, 0x1, 0xba, {0xba, 0xc, "6293883d8f8cc3921586a9ff070df56989022fc4520060320b2bf21425c5dc51ff09b866334cddd3e121228c7784c61d2c27ab7173413f582baa0779721c7ff7832a5422b5af2da5258a95bb02fe1d6cd5cdc01722891351afcc782c397a211da935f6d4066ea6b5af254f187d9519bbe57c070500ffdd371d4308413624695a3c0b9005b23e1fc27076f8986668053ced7f69ee2d7da40f907e1ff546b7768feff372b1b096fa7d6df4707d5d6cca76c659a361fc9104ca"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}}, &(0x7f00000004c0)={0x34, &(0x7f0000000200)={0x0, 0xf, 0xf0, "3a65c52f4c48d335a6da44da492f45353af2fc383db643212feacafae5723a3a7acf2d439b9165f2317a2455c330588d149682f85bb5f9c024c0befacb4bb741fce7470b3bd4037a32e9877a2475dc68802ceabda326010cf6cde3e8425fa8eb979288dfb5b666369bde193cd3fca30ea52c2a394422c2996262859fdccb322c15210712448aa8923f0f112b80f73dc9b8f98ec6797f479b7e7998610ecdddab0a9c689011414881b0086b9e5aea9b5dc3540626eff87e928f9f92e89c919a6db0adcba0414e91c9f0495d086568dbd8ab08a75a36215bd4dcfb17268f2e3b51d58a9855b3d778f156714a77abfa771a"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xb5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f0000000440)={0x40, 0xa0, 0x4, 0x3}, &(0x7f0000000480)={0xc0, 0xa2, 0x2f, "bfb710585e0826dd52d55b24e572527113c35162de6fe9d03fab5cf8d05539e2777a8bf520f7d633449b6e9c0f7583"}}) (async) syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x0, 0x1, 0xba, {0xba, 0xc, "6293883d8f8cc3921586a9ff070df56989022fc4520060320b2bf21425c5dc51ff09b866334cddd3e121228c7784c61d2c27ab7173413f582baa0779721c7ff7832a5422b5af2da5258a95bb02fe1d6cd5cdc01722891351afcc782c397a211da935f6d4066ea6b5af254f187d9519bbe57c070500ffdd371d4308413624695a3c0b9005b23e1fc27076f8986668053ced7f69ee2d7da40f907e1ff546b7768feff372b1b096fa7d6df4707d5d6cca76c659a361fc9104ca"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}}, &(0x7f00000004c0)={0x34, &(0x7f0000000200)={0x0, 0xf, 0xf0, "3a65c52f4c48d335a6da44da492f45353af2fc383db643212feacafae5723a3a7acf2d439b9165f2317a2455c330588d149682f85bb5f9c024c0befacb4bb741fce7470b3bd4037a32e9877a2475dc68802ceabda326010cf6cde3e8425fa8eb979288dfb5b666369bde193cd3fca30ea52c2a394422c2996262859fdccb322c15210712448aa8923f0f112b80f73dc9b8f98ec6797f479b7e7998610ecdddab0a9c689011414881b0086b9e5aea9b5dc3540626eff87e928f9f92e89c919a6db0adcba0414e91c9f0495d086568dbd8ab08a75a36215bd4dcfb17268f2e3b51d58a9855b3d778f156714a77abfa771a"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xb5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f0000000440)={0x40, 0xa0, 0x4, 0x3}, &(0x7f0000000480)={0xc0, 0xa2, 0x2f, "bfb710585e0826dd52d55b24e572527113c35162de6fe9d03fab5cf8d05539e2777a8bf520f7d633449b6e9c0f7583"}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000400)={0x40, 0x27, 0x2, "e6af"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000400)={0x40, 0x27, 0x2, "e6af"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): netdevsim0 [ 368.277870][T12846] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.304978][T12846] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 368.322138][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 368.334211][ T10] usb 1-1: config index 0 descriptor too short (expected 102, got 36) [ 368.352763][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.363314][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 368.378036][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.396202][ T10] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 368.412180][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.420235][ T10] usb 1-1: Product: syz [ 368.441213][ T10] usb 1-1: Manufacturer: syz [ 368.446169][ T10] usb 1-1: SerialNumber: syz [ 368.463134][ T10] usb 1-1: config 0 descriptor?? [ 368.471268][ T10] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 368.701221][ T10] usb 1-1: USB disconnect, device number 106 [ 368.833879][T12872] syz_tun: entered allmulticast mode [ 369.527478][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2503'. [ 369.592717][ T5986] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 369.607876][T12902] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2506'. [ 369.764882][ T5986] usb 1-1: Using ep0 maxpacket: 16 [ 369.796562][ T5986] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.811276][ T5986] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 369.822971][ T5986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 369.835650][ T5986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 369.846540][ T5986] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.866580][ T5986] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 369.879998][ T5986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.888211][ T5986] usb 1-1: Product: syz [ 369.892508][ T5986] usb 1-1: Manufacturer: syz [ 369.897151][ T5986] usb 1-1: SerialNumber: syz [ 369.903163][ T5989] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 369.905138][ T5986] usb 1-1: config 0 descriptor?? [ 369.926279][ T5986] xbox_remote_probe: endpoint_in message size==0? [ 370.062113][ T5989] usb 4-1: Using ep0 maxpacket: 32 [ 370.069548][ T5989] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 370.078357][ T5989] usb 4-1: config 0 has no interface number 0 [ 370.087422][ T5989] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 370.097127][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.105204][ T5989] usb 4-1: Product: syz [ 370.109389][ T5989] usb 4-1: Manufacturer: syz [ 370.114613][ T5989] usb 4-1: SerialNumber: syz [ 370.121382][ T5989] usb 4-1: config 0 descriptor?? [ 370.132860][ T5986] usb 1-1: USB disconnect, device number 107 [ 370.132972][ T5989] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 370.222056][ T10] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 370.336018][ T5989] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 370.349947][ T5989] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 370.359581][ T10] usb 3-1: device descriptor read/64, error -71 [ 370.539897][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 115 [ 370.602158][ T10] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 370.742310][ T10] usb 3-1: device descriptor read/64, error -71 [ 370.753130][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 370.768950][ T5989] usb 4-1: USB disconnect, device number 103 [ 370.788112][ T5989] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 370.812367][ T5989] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 370.826353][ T5989] quatech2 4-1:0.51: device disconnected [ 370.855993][ T10] usb usb3-port1: attempt power cycle [ 371.216579][ T10] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 371.242926][ T10] usb 3-1: device descriptor read/8, error -71 [ 371.442329][ T44] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 371.450110][ T5986] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 371.482123][ T10] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 371.502784][ T10] usb 3-1: device descriptor read/8, error -71 [ 371.532107][ T5989] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 371.612314][ T10] usb usb3-port1: unable to enumerate USB device [ 371.622170][ T5986] usb 2-1: Using ep0 maxpacket: 32 [ 371.628974][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 371.639293][ T44] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 371.649364][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 371.659369][ T5986] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.670593][ T44] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 371.681514][ T5986] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.691732][ T44] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 371.692109][ T5989] usb 4-1: Using ep0 maxpacket: 32 [ 371.701050][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.709497][ T5989] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 371.718943][ T44] usb 1-1: config 0 descriptor?? [ 371.726264][ T5989] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 371.740321][ T5989] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 371.740346][ T5986] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 371.751709][ T5989] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 371.763642][ T5986] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 371.777416][ T5989] usb 4-1: config 0 interface 0 has no altsetting 0 [ 371.797176][ T5986] usb 2-1: Product: syz [ 371.799257][ T5989] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 371.801422][ T5986] usb 2-1: Manufacturer: syz [ 371.811683][ T5986] hub 2-1:4.0: USB hub found [ 371.821167][ T5989] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 371.829821][ T5989] usb 4-1: Product: syz [ 371.834498][ T5989] usb 4-1: Manufacturer: syz [ 371.839127][ T5989] usb 4-1: SerialNumber: syz [ 371.847226][ T5989] usb 4-1: config 0 descriptor?? [ 371.855826][ T5989] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 371.867432][ T5989] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 371.994349][ T44] hdpvr 1-1:0.0: firmware version 0x88 dated _†=&ˆ}‰¡nDT,«²öw#Ñð¸ÀÀúúÙOR»‚îC‰”f( [ 372.006018][ T44] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 372.015931][ T5986] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 372.061449][ T5986] usb 2-1: USB disconnect, device number 87 [ 372.090786][ T5989] usb 4-1: USB disconnect, device number 104 [ 372.094522][T12956] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2526'. [ 372.096970][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 372.137630][ T5989] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 372.415573][ T44] hdpvr 1-1:0.0: Could not setup controls [ 372.424037][ T44] hdpvr 1-1:0.0: registering videodev failed [ 372.440052][ T44] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 372.453994][ T44] usb 1-1: USB disconnect, device number 108 [ 372.512478][ T5986] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 372.675595][ T5986] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 372.683892][ T5986] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.694207][ T5986] usb 2-1: config 0 has no interface number 0 [ 372.700842][ T5986] usb 2-1: too many endpoints for config 0 interface 49 altsetting 50: 56, using maximum allowed: 30 [ 372.712092][ T5986] usb 2-1: config 0 interface 49 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 372.725363][ T5986] usb 2-1: config 0 interface 49 has no altsetting 0 [ 372.732140][ T5986] usb 2-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 372.741195][ T5986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.752737][ T5986] usb 2-1: config 0 descriptor?? [ 372.938264][T12962] FAULT_INJECTION: forcing a failure. [ 372.938264][T12962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.951571][T12962] CPU: 0 UID: 0 PID: 12962 Comm: syz.3.2529 Not tainted syzkaller #0 PREEMPT(full) [ 372.951600][T12962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 372.951623][T12962] Call Trace: [ 372.951633][T12962] [ 372.951642][T12962] dump_stack_lvl+0x189/0x250 [ 372.951670][T12962] ? __pfx____ratelimit+0x10/0x10 [ 372.951700][T12962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.951722][T12962] ? __pfx__printk+0x10/0x10 [ 372.951765][T12962] should_fail_ex+0x414/0x560 [ 372.951800][T12962] _copy_to_user+0x31/0xb0 [ 372.951827][T12962] simple_read_from_buffer+0xe1/0x170 [ 372.951865][T12962] proc_fail_nth_read+0x1b3/0x220 [ 372.951897][T12962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 372.951928][T12962] ? rw_verify_area+0x2a6/0x4d0 [ 372.951959][T12962] ? __lock_acquire+0xab9/0xd20 [ 372.951981][T12962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 372.952009][T12962] vfs_read+0x200/0xa30 [ 372.952037][T12962] ? fdget_pos+0x247/0x320 [ 372.952062][T12962] ? __pfx___mutex_lock+0x10/0x10 [ 372.952083][T12962] ? __pfx_vfs_read+0x10/0x10 [ 372.952113][T12962] ? __fget_files+0x2a/0x420 [ 372.952139][T12962] ? __fget_files+0x3a0/0x420 [ 372.952158][T12962] ? __fget_files+0x2a/0x420 [ 372.952188][T12962] ksys_read+0x145/0x250 [ 372.952221][T12962] ? __pfx_ksys_read+0x10/0x10 [ 372.952254][T12962] ? do_syscall_64+0xbe/0xfa0 [ 372.952278][T12962] do_syscall_64+0xfa/0xfa0 [ 372.952295][T12962] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.952327][T12962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.952354][T12962] ? clear_bhb_loop+0x60/0xb0 [ 372.952381][T12962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.952407][T12962] RIP: 0033:0x7f6ee6b8d63c [ 372.952426][T12962] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 372.952444][T12962] RSP: 002b:00007f6ee7a64030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 372.952466][T12962] RAX: ffffffffffffffda RBX: 00007f6ee6dd5fa0 RCX: 00007f6ee6b8d63c [ 372.952481][T12962] RDX: 000000000000000f RSI: 00007f6ee7a640a0 RDI: 0000000000000004 [ 372.952495][T12962] RBP: 00007f6ee7a64090 R08: 0000000000000000 R09: 0000000000000000 [ 372.952510][T12962] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 372.952523][T12962] R13: 00007f6ee6dd6038 R14: 00007f6ee6dd5fa0 R15: 00007ffd0ce05d98 [ 372.952558][T12962] [ 373.217433][ T5986] usb 2-1: string descriptor 0 read error: -71 [ 373.253243][ T5986] usb 2-1: USB disconnect, device number 88 [ 373.317141][T12971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2532'. [ 373.389612][T12976] ntfs3(loop2): try to read out of volume at offset 0x0 [ 373.809567][T12997] Bluetooth: MGMT ver 1.23 [ 374.322328][ T5876] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 374.422081][ T10] usb 1-1: new low-speed USB device number 109 using dummy_hcd [ 374.472060][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 374.478660][ T5876] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 374.487832][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.502414][ T5876] usb 4-1: config 0 descriptor?? [ 374.562213][ T10] usb 1-1: device descriptor read/64, error -71 [ 374.804769][ T10] usb 1-1: new low-speed USB device number 110 using dummy_hcd [ 374.904188][T13038] netlink: 'syz.2.2562': attribute type 10 has an invalid length. [ 374.933773][ T5876] pantherlord 0003:0E8F:0003.0015: item fetching failed at offset 2/5 [ 374.942087][ T10] usb 1-1: device descriptor read/64, error -71 [ 374.944222][ T5876] pantherlord 0003:0E8F:0003.0015: parse failed [ 374.957355][ T5876] pantherlord 0003:0E8F:0003.0015: probe with driver pantherlord failed with error -22 [ 375.072457][ T10] usb usb1-port1: attempt power cycle [ 375.122302][T13013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.136478][ T5876] usb 4-1: USB disconnect, device number 105 [ 375.193595][T13051] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2567'. [ 375.280097][T13055] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2569'. [ 375.418739][ T10] usb 1-1: new low-speed USB device number 111 using dummy_hcd [ 375.453229][ T10] usb 1-1: device descriptor read/8, error -71 [ 375.702135][ T10] usb 1-1: new low-speed USB device number 112 using dummy_hcd [ 375.746411][ T10] usb 1-1: device descriptor read/8, error -71 [ 375.749240][T13084] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2580'. [ 375.870920][ T10] usb usb1-port1: unable to enumerate USB device [ 376.072379][ T5876] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 376.242040][ T5876] usb 4-1: Using ep0 maxpacket: 16 [ 376.255573][ T5876] usb 4-1: config 0 has an invalid interface number: 201 but max is 0 [ 376.273392][ T5876] usb 4-1: config 0 has no interface number 0 [ 376.288486][ T5876] usb 4-1: config 0 interface 201 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 376.322910][ T5876] usb 4-1: config 0 interface 201 has no altsetting 0 [ 376.333246][ T5876] usb 4-1: New USB device found, idVendor=eb1a, idProduct=5051, bcdDevice=e8.52 [ 376.361411][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.369947][ T5876] usb 4-1: Product: syz [ 376.374507][ T5876] usb 4-1: Manufacturer: syz [ 376.379143][ T5876] usb 4-1: SerialNumber: syz [ 376.397035][ T5876] usb 4-1: config 0 descriptor?? [ 376.406540][T13085] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 376.542122][ T10] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 376.627992][ T5876] em28xx 4-1:0.201: New device syz syz @ 480 Mbps (eb1a:5051, interface 201, class 201) [ 376.647292][ T5876] em28xx 4-1:0.201: Video interface 201 found: bulk [ 376.703165][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 376.710126][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 376.720184][ T10] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 376.722982][ T5876] em28xx 4-1:0.201: unknown em28xx chip ID (0) [ 376.730207][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 376.745635][ T10] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 376.755423][ T10] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 376.763876][ T10] usb 2-1: Product: syz [ 376.768239][ T10] usb 2-1: Manufacturer: syz [ 376.773493][ T10] usb 2-1: SerialNumber: syz [ 376.783067][ T10] usb 2-1: config 0 descriptor?? [ 376.807538][ T5876] em28xx 4-1:0.201: reading from i2c device at 0xa0 failed (error=-5) [ 376.818240][ T5876] em28xx 4-1:0.201: board has no eeprom [ 376.832230][ T5989] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 376.882093][ T5876] em28xx 4-1:0.201: Identified as EM2860/TVP5150 Reference Design (card=29) [ 376.890875][ T5876] em28xx 4-1:0.201: analog set to bulk mode. [ 376.898365][ T5986] em28xx 4-1:0.201: Registering V4L2 extension [ 376.922716][ T5876] usb 4-1: USB disconnect, device number 106 [ 376.930328][ T5876] em28xx 4-1:0.201: Disconnecting em28xx [ 376.969771][ T5986] em28xx 4-1:0.201: Config register raw data: 0xffffffed [ 376.977674][ T5986] em28xx 4-1:0.201: AC97 chip type couldn't be determined [ 376.984205][ T5989] usb 3-1: device descriptor read/64, error -71 [ 377.000415][ T5986] em28xx 4-1:0.201: No AC97 audio processor [ 377.018671][ T5986] usb 4-1: Decoder not found [ 377.023621][ T5986] em28xx 4-1:0.201: failed to create media graph [ 377.030003][ T5986] em28xx 4-1:0.201: V4L2 device video103 deregistered [ 377.043357][ T5986] em28xx 4-1:0.201: Remote control support is not available for this card. [ 377.052256][ T5876] em28xx 4-1:0.201: Closing input extension [ 377.073270][ T5876] em28xx 4-1:0.201: Freeing device [ 377.202724][ T10] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 377.239474][ T5989] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 377.382182][ T5989] usb 3-1: device descriptor read/64, error -71 [ 377.402724][ T10] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 377.416200][ T10] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32 [ 377.492811][ T5989] usb usb3-port1: attempt power cycle [ 377.622175][ T5920] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 377.782842][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 377.789899][ T5920] usb 1-1: unable to get BOS descriptor or descriptor too short [ 377.801197][ T5920] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 377.810543][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.820006][ T5920] usb 1-1: Product: syz [ 377.824552][ T5920] usb 1-1: Manufacturer: syz [ 377.829195][ T5920] usb 1-1: SerialNumber: syz [ 377.842977][ T5989] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 377.875206][ T5989] usb 3-1: device descriptor read/8, error -71 [ 378.043318][ T5920] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 378.051435][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 378.085105][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 378.095513][ T5920] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 378.104003][ T5920] usb 1-1: media controller created [ 378.124679][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 378.133207][ T5989] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 378.163027][ T5989] usb 3-1: device descriptor read/8, error -71 [ 378.181099][ T5920] DVB: Unable to find symbol mt352_attach() [ 378.187213][ T5920] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 378.197665][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 378.222093][ T5876] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 378.222246][ T5920] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 378.245615][ T5920] usb 1-1: USB disconnect, device number 113 [ 378.270539][ T5920] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 378.282413][ T5989] usb usb3-port1: unable to enumerate USB device [ 378.392205][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 378.399233][ T5876] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 137 [ 378.408228][ T5876] usb 4-1: can't read configurations, error -22 [ 378.542160][ T5876] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 378.694152][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 378.702060][ T5876] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 137 [ 378.721308][ T5876] usb 4-1: can't read configurations, error -22 [ 378.734422][ T5876] usb usb4-port1: attempt power cycle [ 379.033709][ T5869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 379.057440][ T5869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 379.066097][ T5869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 379.076768][ T5869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 379.084072][ T5876] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 379.088745][ T5869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 379.114643][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 379.124691][ T5876] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 137 [ 379.134020][ T5876] usb 4-1: can't read configurations, error -22 [ 379.151672][T13139] wlan1 speed is unknown, defaulting to 1000 [ 379.159234][T13139] lo speed is unknown, defaulting to 1000 [ 379.262098][ T5876] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 379.282753][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 379.289770][ T5876] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 137 [ 379.298965][ T5876] usb 4-1: can't read configurations, error -22 [ 379.306136][ T5876] usb usb4-port1: unable to enumerate USB device [ 379.334583][T13139] chnl_net:caif_netlink_parms(): no params data found [ 379.336137][ T5876] usb 2-1: USB disconnect, device number 89 [ 379.416476][T13146] netlink: 'syz.1.2603': attribute type 10 has an invalid length. [ 379.484722][T13139] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.495865][T13139] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.503428][T13139] bridge_slave_0: entered allmulticast mode [ 379.511113][T13139] bridge_slave_0: entered promiscuous mode [ 379.519317][T13139] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.526894][T13139] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.534300][T13139] bridge_slave_1: entered allmulticast mode [ 379.541662][T13139] bridge_slave_1: entered promiscuous mode [ 379.586322][T13139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.600001][T13139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.644933][T13139] team0: Port device team_slave_0 added [ 379.654444][T13139] team0: Port device team_slave_1 added [ 379.701338][T13139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.708691][T13139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.735963][T13139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.749416][T13139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.756558][T13139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.782559][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.789523][T13139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.792646][ T5876] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 379.841928][T13139] hsr_slave_0: entered promiscuous mode [ 379.848873][T13139] hsr_slave_1: entered promiscuous mode [ 379.855554][T13139] debugfs: 'hsr0' already exists in 'hsr' [ 379.861330][T13139] Cannot create hsr debugfs directory [ 379.952410][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 379.959731][ T5876] usb 2-1: unable to get BOS descriptor or descriptor too short [ 379.970769][ T5876] usb 2-1: config 56 has an invalid interface number: 31 but max is 0 [ 379.980546][ T5876] usb 2-1: config 56 has no interface number 0 [ 379.987300][ T5876] usb 2-1: config 56 interface 31 has no altsetting 0 [ 379.998201][ T5876] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice=e7.f3 [ 380.010291][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.018392][ T5876] usb 2-1: Product: syz [ 380.026545][ T5876] usb 2-1: Manufacturer: syz [ 380.031200][ T5876] usb 2-1: SerialNumber: syz [ 380.037983][T13139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.044459][T13152] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 380.082231][ T5920] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 380.117029][T13139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.200971][T13139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.233633][ T5920] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.243912][ T5920] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 380.257248][ T5920] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 380.286228][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 380.295102][ T5920] usb 3-1: SerialNumber: syz [ 380.313858][ T5876] usb 2-1: USB disconnect, device number 90 [ 380.320302][T13139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.461874][T13139] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 380.475581][T13139] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 380.487536][T13139] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 380.499343][T13139] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 380.527208][ T5920] usb 3-1: 0:2 : does not exist [ 380.533227][ T5920] usb 3-1: unit 5: unexpected type 0x0c [ 380.563049][ T5920] usb 3-1: USB disconnect, device number 2 [ 380.615892][ T5870] udevd[5870]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 380.646213][T13139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.669460][T13139] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.685618][ T2892] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.692881][ T2892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.709277][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.716480][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.924736][T13139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.997742][T13139] veth0_vlan: entered promiscuous mode [ 381.018420][T13139] veth1_vlan: entered promiscuous mode [ 381.080948][T13139] veth0_macvtap: entered promiscuous mode [ 381.096865][T13139] veth1_macvtap: entered promiscuous mode [ 381.131920][T13139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.153106][ T5869] Bluetooth: hci3: command tx timeout [ 381.178288][T13139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.207872][ T2892] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.243336][ T2892] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.252967][ T2892] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.261758][ T2892] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.282081][ T44] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 381.357682][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.370406][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.395955][T13178] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2612'. [ 381.406585][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.415928][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.444171][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 381.457688][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 381.466058][ T24] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 381.483543][ T44] usb 2-1: config 4 interface 0 has no altsetting 0 [ 381.497805][ T44] usb 2-1: string descriptor 0 read error: -22 [ 381.507855][ T44] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 381.517878][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.549385][ T44] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 381.578742][ T44] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 381.589967][ T44] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 381.598050][ T44] usb 2-1: media controller created [ 381.619950][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 381.628536][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 381.636161][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 381.646525][ T24] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 381.666946][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 381.678599][ T24] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 381.687952][ T24] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 381.696227][ T24] usb 4-1: Product: syz [ 381.700438][ T24] usb 4-1: Manufacturer: syz [ 381.705239][ T24] usb 4-1: SerialNumber: syz [ 381.714173][ T24] usb 4-1: config 0 descriptor?? [ 381.722138][ T5920] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 381.872535][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 381.881017][ T5920] usb 3-1: config 3 has an invalid interface number: 45 but max is 0 [ 381.889370][ T5920] usb 3-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 381.898429][ T5920] usb 3-1: config 3 has no interface number 0 [ 381.905020][ T5920] usb 3-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.919444][ T5920] usb 3-1: config 3 interface 45 has no altsetting 0 [ 381.929219][ T5920] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 381.938490][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.946664][ T5920] usb 3-1: Product: syz [ 381.950921][ T5920] usb 3-1: Manufacturer: syz [ 381.956837][ T5920] usb 3-1: SerialNumber: syz [ 382.145311][ T24] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 382.291139][T13185] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 382.298731][T13185] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 382.305816][T13185] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 382.312596][T13185] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 382.319199][T13185] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 382.328427][T13185] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 382.336764][T13185] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 382.345353][T13185] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 382.357079][ T24] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 382.357100][T13185] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 382.372202][ T24] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -32 [ 382.383562][T13185] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 382.390218][T13185] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 382.398212][T13185] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 382.406670][T13185] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 382.415126][T13185] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 382.436856][T13185] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 382.452980][T13185] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 382.461062][T13185] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 382.469011][T13185] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 382.478820][T13185] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 382.487277][T13185] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 382.624138][ T5920] usb 3-1: USB disconnect, device number 3 [ 382.655021][ T5870] udevd[5870]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.753810][ T44] zl10353_read_register: readreg error (reg=127, ret==0) [ 382.793250][ T44] usb 2-1: USB disconnect, device number 91 [ 383.236208][ T5869] Bluetooth: hci3: command tx timeout [ 383.586845][T13196] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 383.643367][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 383.655953][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 383.664769][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 383.676866][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 383.685150][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 383.748479][T13198] wlan1 speed is unknown, defaulting to 1000 [ 383.759848][T13198] lo speed is unknown, defaulting to 1000 [ 383.932087][ T5876] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 383.963610][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.970009][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.989776][T13198] chnl_net:caif_netlink_parms(): no params data found [ 384.072443][ T5876] usb 2-1: device descriptor read/64, error -71 [ 384.087526][T13198] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.087538][T13215] syz.0.2622 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 384.105462][T13198] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.113261][T13198] bridge_slave_0: entered allmulticast mode [ 384.121024][T13198] bridge_slave_0: entered promiscuous mode [ 384.131069][T13198] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.138484][T13198] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.147431][T13198] bridge_slave_1: entered allmulticast mode [ 384.155525][T13198] bridge_slave_1: entered promiscuous mode [ 384.207745][T13198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.221089][T13198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.252783][ T5989] usb 4-1: USB disconnect, device number 111 [ 384.325259][ T5876] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 384.339378][T13222] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2625'. [ 384.413184][T13198] team0: Port device team_slave_0 added [ 384.423355][T13198] team0: Port device team_slave_1 added [ 384.462155][ T5876] usb 2-1: device descriptor read/64, error -71 [ 384.511586][T13198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.529458][T13198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.565396][T13198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.580957][ T5876] usb usb2-port1: attempt power cycle [ 384.587389][T13229] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2627'. [ 384.602853][T13198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.620112][T13198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.653402][T13198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.710817][T13198] hsr_slave_0: entered promiscuous mode [ 384.717790][T13198] hsr_slave_1: entered promiscuous mode [ 384.724637][T13198] debugfs: 'hsr0' already exists in 'hsr' [ 384.730477][T13198] Cannot create hsr debugfs directory [ 384.852576][ T5989] usb 4-1: new low-speed USB device number 112 using dummy_hcd [ 384.886978][T13198] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.942091][ T5876] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 384.972725][ T5876] usb 2-1: device descriptor read/8, error -71 [ 384.973968][T13198] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.014204][ T5989] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 385.022655][ T5989] usb 4-1: config 0 has no interface number 0 [ 385.029397][ T5989] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=dd.b8 [ 385.038708][ T5989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.053036][ T5989] usb 4-1: config 0 descriptor?? [ 385.068272][ T5989] lan78xx 4-1:0.168 (unnamed net_device) (uninitialized): USB bus speed not supported [ 385.071134][T13198] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.089073][ T5989] lan78xx 4-1:0.168: probe with driver lan78xx failed with error -5 [ 385.150797][T13198] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 385.161243][T13198] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.213449][ T5876] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 385.252760][ T5876] usb 2-1: device descriptor read/8, error -71 [ 385.273478][T13231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2629'. [ 385.298398][T13231] 9pnet_fd: Insufficient options for proto=fd [ 385.313641][ T52] Bluetooth: hci3: command tx timeout [ 385.319996][ T5920] usb 4-1: USB disconnect, device number 112 [ 385.330513][T13198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 385.345389][T13198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 385.358973][T13198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 385.369654][T13198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 385.372832][ T5876] usb usb2-port1: unable to enumerate USB device [ 385.462381][T13198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.485674][T13198] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.500479][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.507725][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.524481][T12571] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.531730][T12571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.740913][T13198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.792875][T13198] veth0_vlan: entered promiscuous mode [ 385.792878][ T52] Bluetooth: hci1: command tx timeout [ 385.821185][T13198] veth1_vlan: entered promiscuous mode [ 385.874502][T13198] veth0_macvtap: entered promiscuous mode [ 385.888665][T13198] veth1_macvtap: entered promiscuous mode [ 385.925799][T13198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.938464][T13198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.966489][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.979400][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.989954][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.015316][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.111399][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.125843][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.181812][T12571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.190444][T12571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.392252][ T24] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 386.506389][T13266] bridge0: port 3(batadv0) entered blocking state [ 386.517557][T13266] bridge0: port 3(batadv0) entered disabled state [ 386.525707][T13266] batadv0: entered allmulticast mode [ 386.534667][T13266] batadv0: entered promiscuous mode [ 386.540990][T13266] bridge0: port 3(batadv0) entered blocking state [ 386.548019][T13266] bridge0: port 3(batadv0) entered forwarding state [ 386.554579][ T37] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 386.561155][T13266] batadv0: left allmulticast mode [ 386.564240][ T37] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 386.569766][T13266] batadv0: left promiscuous mode [ 386.584433][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 386.598018][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 386.622278][ T24] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 386.625247][T13266] bridge0: port 3(batadv0) entered disabled state [ 386.649313][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 386.650570][T13268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2640'. [ 386.699568][ T24] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 386.714899][ T24] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 386.725208][ T24] usb 4-1: Product: syz [ 386.729496][ T24] usb 4-1: Manufacturer: syz [ 386.734582][ T24] usb 4-1: SerialNumber: syz [ 386.760648][ T24] usb 4-1: config 0 descriptor?? [ 386.819500][T13272] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2641'. [ 387.102122][ T44] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 387.194928][ T24] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 387.202068][ T10] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 387.283758][ T44] usb 2-1: not running at top speed; connect to a high speed hub [ 387.293848][ T44] usb 2-1: config 2 has an invalid interface number: 240 but max is 0 [ 387.303162][ T44] usb 2-1: config 2 has no interface number 0 [ 387.309325][ T44] usb 2-1: config 2 interface 240 has no altsetting 0 [ 387.335433][ T44] usb 2-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=2c.d4 [ 387.352034][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.354135][ T10] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 387.360178][ T44] usb 2-1: Product: syz [ 387.380030][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.382815][ T44] usb 2-1: Manufacturer: syz [ 387.396951][ T52] Bluetooth: hci3: command tx timeout [ 387.401855][ T10] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 387.405163][ T24] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 387.411881][ T10] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 387.430554][ T44] usb 2-1: SerialNumber: syz [ 387.436312][ T24] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -32 [ 387.438297][ T10] usb 1-1: Manufacturer: syz [ 387.464157][ T10] usb 1-1: config 0 descriptor?? [ 387.562292][ T10] rc_core: IR keymap rc-hauppauge not found [ 387.568290][ T10] Registered IR keymap rc-empty [ 387.575055][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 387.588197][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input37 [ 387.682464][ T44] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 387.693197][ T44] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 387.705081][ T44] pac7311 2-1:2.240: probe with driver pac7311 failed with error -71 [ 387.706004][T13278] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2644'. [ 387.725500][ T44] usb 2-1: USB disconnect, device number 96 [ 387.762537][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 387.770459][ T10] usb 1-1: USB disconnect, device number 114 [ 387.872364][ T52] Bluetooth: hci1: command tx timeout [ 388.572078][ T44] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 388.722107][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 388.728895][ T44] usb 1-1: config 0 has no interfaces? [ 388.735582][ T44] usb 1-1: config 0 has no interfaces? [ 388.742499][ T44] usb 1-1: config 0 has no interfaces? [ 388.758467][ T44] usb 1-1: string descriptor 0 read error: -71 [ 388.766421][ T44] usb 1-1: New USB device found, idVendor=0403, idProduct=e80c, bcdDevice=fb.ba [ 388.776299][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.792754][ T44] usb 1-1: config 0 descriptor?? [ 388.798086][ T44] usb 1-1: can't set config #0, error -71 [ 388.806580][ T44] usb 1-1: USB disconnect, device number 115 [ 389.054912][T13292] netlink: 'syz.2.2649': attribute type 10 has an invalid length. [ 389.077181][T13292] team0: Port device macvlan1 added [ 389.199531][ T5989] usb 4-1: USB disconnect, device number 113 [ 389.580533][T13319] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2662'. [ 389.589977][T13319] NCSI netlink: No device for ifindex 0 [ 389.608062][ T24] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 389.682099][ T5989] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 389.782086][ T983] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 389.783179][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 389.801064][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.812323][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.822488][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 389.835325][ T5989] usb 4-1: Using ep0 maxpacket: 32 [ 389.838189][ T5989] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 389.840695][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 389.859950][ T5989] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 389.871281][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.874085][ T5989] usb 4-1: config 0 interface 0 has no altsetting 0 [ 389.888880][ T5989] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 389.904819][ T24] usb 1-1: config 0 descriptor?? [ 389.905781][ T5989] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 389.918367][ T5989] usb 4-1: Product: syz [ 389.922877][ T5989] usb 4-1: Manufacturer: syz [ 389.927500][ T5989] usb 4-1: SerialNumber: syz [ 389.941288][ T5989] usb 4-1: config 0 descriptor?? [ 389.946469][ T983] usb 2-1: Using ep0 maxpacket: 32 [ 389.954892][ T52] Bluetooth: hci1: command tx timeout [ 389.965769][ T983] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 389.976127][ T983] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 389.988342][ T983] usb 2-1: config 0 interface 0 has no altsetting 0 [ 389.999415][ T983] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 390.016141][ T983] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 390.025165][ T983] usb 2-1: Product: syz [ 390.030214][ T983] usb 2-1: Manufacturer: syz [ 390.039375][ T983] usb 2-1: SerialNumber: syz [ 390.048029][ T983] usb 2-1: config 0 descriptor?? [ 390.148408][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 390.168969][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 390.180721][ T24] usb 1-1: USB disconnect, device number 116 [ 390.372213][ T5989] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 390.470108][ T983] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 390.559471][ T3609] IPVS: starting estimator thread 0... [ 390.624840][T13349] netlink: 'syz.2.2674': attribute type 31 has an invalid length. [ 390.632786][T13349] netlink: 'syz.2.2674': attribute type 1 has an invalid length. [ 390.640639][T13349] bridge0: port 1(bridge_slave_0) entered learning state [ 390.648111][T13348] netlink: 'syz.2.2674': attribute type 31 has an invalid length. [ 390.656289][T13348] netlink: 'syz.2.2674': attribute type 1 has an invalid length. [ 390.656455][T13350] IPVS: using max 26 ests per chain, 62400 per kthread [ 390.674427][T13348] bridge0: port 1(bridge_slave_0) entered learning state [ 390.681880][ T983] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 390.690896][ T983] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32 [ 390.781126][ T5989] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 390.808958][ T5989] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 390.839482][ T5989] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 390.859626][ T5989] usb 4-1: USB disconnect, device number 114 [ 391.182063][ T983] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 391.333393][ T983] usb 1-1: Using ep0 maxpacket: 8 [ 391.344444][ T983] usb 1-1: config 12 has an invalid interface number: 84 but max is 1 [ 391.355905][ T983] usb 1-1: config 12 has an invalid interface number: 110 but max is 1 [ 391.364422][ T983] usb 1-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 391.374825][ T983] usb 1-1: config 12 has no interface number 0 [ 391.381083][ T983] usb 1-1: config 12 has no interface number 1 [ 391.387583][ T983] usb 1-1: config 12 interface 110 altsetting 223 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.402070][ T983] usb 1-1: config 12 interface 84 has no altsetting 0 [ 391.411162][ T983] usb 1-1: config 12 interface 110 has no altsetting 0 [ 391.422654][ T983] usb 1-1: string descriptor 0 read error: -22 [ 391.437944][ T983] usb 1-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=f6.1b [ 391.447270][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.494677][ T983] belkin_sa 1-1:12.84: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 391.507510][ T983] usb 1-1: bcdDevice: f61b, bfc: 0 [ 391.514707][ T983] usb 1-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 391.535227][ T983] cdc_ether 1-1:12.110: skipping garbage [ 391.544914][ T983] cdc_ether 1-1:12.110: skipping garbage [ 391.550843][T13372] netlink: 'syz.2.2683': attribute type 12 has an invalid length. [ 391.550868][ T983] usb 1-1: bad CDC descriptors [ 391.567262][ T983] belkin_sa 1-1:12.110: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 391.579088][ T983] usb 1-1: bcdDevice: f61b, bfc: 0 [ 391.604531][ T983] usb 1-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB1 [ 391.674566][T13365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.697271][T13365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.710074][T13365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.715429][T13377] mkiss: ax0: crc mode is auto. [ 391.733949][T13365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.745892][T13365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.758219][T13365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.767916][T13365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.779032][T13365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.788339][T13365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.804533][T13365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.823792][ T983] usb 1-1: USB disconnect, device number 117 [ 391.834088][ T983] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 391.849681][ T983] belkin_sa 1-1:12.84: device disconnected [ 391.867995][T13379] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2686'. [ 391.874263][ T983] belkin ttyUSB1: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB1 [ 391.889837][ T983] belkin_sa 1-1:12.110: device disconnected [ 392.032279][ T52] Bluetooth: hci1: command tx timeout [ 392.057388][ T52] Bluetooth: hci0: Invalid connection link type handle 0x00c8 [ 392.302094][ T5989] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 392.432198][ T5989] usb 4-1: device descriptor read/64, error -71 [ 392.557883][ T3609] usb 2-1: USB disconnect, device number 97 [ 392.672267][ T5989] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 392.742137][ T983] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 392.814700][ T5989] usb 4-1: device descriptor read/64, error -71 [ 392.856774][T13416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.873184][T13416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.902056][ T983] usb 1-1: Using ep0 maxpacket: 8 [ 392.909267][ T983] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 392.920908][ T983] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 392.935338][ T5989] usb usb4-port1: attempt power cycle [ 392.962217][ T983] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 392.978405][ T983] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 392.989601][ T983] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.004505][ T983] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 393.013820][ T983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.245810][ T983] usb 1-1: GET_CAPABILITIES returned 0 [ 393.251573][ T983] usbtmc 1-1:16.0: can't read capabilities [ 393.292131][ T5989] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 393.299924][ T10] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 393.323403][ T5989] usb 4-1: device descriptor read/8, error -71 [ 393.452091][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 393.459190][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 393.469533][ T10] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 393.479917][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 393.492572][ T10] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 393.503239][ T10] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 393.509127][T13393] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 393.511477][ T10] usb 2-1: Product: syz [ 393.511497][ T10] usb 2-1: Manufacturer: syz [ 393.511514][ T10] usb 2-1: SerialNumber: syz [ 393.517141][ T10] usb 2-1: config 0 descriptor?? [ 393.523835][ T24] usb 1-1: USB disconnect, device number 118 [ 393.562134][ T5989] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 393.594563][ T5989] usb 4-1: device descriptor read/8, error -71 [ 393.671462][T13436] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2709'. [ 393.702431][ T5989] usb usb4-port1: unable to enumerate USB device [ 393.741736][T13438] sp0: Synchronizing with TNC [ 393.946747][ T10] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 394.014559][T13444] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2713'. [ 394.147560][ T10] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 394.159142][ T10] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32 [ 394.205053][T13451] sctp: [Deprecated]: syz.2.2715 (pid 13451) Use of struct sctp_assoc_value in delayed_ack socket option. [ 394.205053][T13451] Use struct sctp_sack_info instead [ 394.562129][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 394.722786][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 394.729514][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 394.739401][ T10] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 394.749430][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 394.758403][ T10] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 394.767538][ T10] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 394.775954][ T10] usb 3-1: Product: syz [ 394.780166][ T10] usb 3-1: Manufacturer: syz [ 394.784857][ T10] usb 3-1: SerialNumber: syz [ 394.791799][ T10] usb 3-1: config 0 descriptor?? [ 394.852196][ T5989] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 395.005101][ T5989] usb 1-1: unable to get BOS descriptor or descriptor too short [ 395.013386][ T5989] usb 1-1: not running at top speed; connect to a high speed hub [ 395.021169][ T5989] usb 1-1: too many configurations: 229, using maximum allowed: 8 [ 395.032705][ T5989] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 395.040326][ T5989] usb 1-1: can't read configurations, error -61 [ 395.172534][ T5989] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 395.203450][ T10] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 395.334679][ T5989] usb 1-1: unable to get BOS descriptor or descriptor too short [ 395.343364][ T5989] usb 1-1: not running at top speed; connect to a high speed hub [ 395.351215][ T5989] usb 1-1: too many configurations: 229, using maximum allowed: 8 [ 395.360859][ T5989] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 395.368574][ T5989] usb 1-1: can't read configurations, error -61 [ 395.375739][ T5989] usb usb1-port1: attempt power cycle [ 395.475024][ T5920] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 395.611523][ T10] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 395.620851][ T10] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 395.630905][ T10] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 395.643153][ T5920] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 395.655021][ T5920] usb 4-1: config 0 has no interface number 0 [ 395.664993][ T5920] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 395.674852][ T10] usb 3-1: USB disconnect, device number 4 [ 395.682072][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.690196][ T5920] usb 4-1: Product: syz [ 395.698462][ T5920] usb 4-1: Manufacturer: syz [ 395.703201][ T5920] usb 4-1: SerialNumber: syz [ 395.710090][ T5920] usb 4-1: config 0 descriptor?? [ 395.732334][ T5989] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 395.764688][ T5989] usb 1-1: unable to get BOS descriptor or descriptor too short [ 395.773193][ T5989] usb 1-1: not running at top speed; connect to a high speed hub [ 395.781120][ T5989] usb 1-1: too many configurations: 229, using maximum allowed: 8 [ 395.791136][ T5989] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 395.799696][ T5989] usb 1-1: can't read configurations, error -61 [ 395.932086][ T5989] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 395.933872][T13463] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2720'. [ 395.965192][ T5989] usb 1-1: unable to get BOS descriptor or descriptor too short [ 395.973803][ T5989] usb 1-1: not running at top speed; connect to a high speed hub [ 395.981900][ T5989] usb 1-1: too many configurations: 229, using maximum allowed: 8 [ 396.004023][ T5989] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 396.011899][ T5989] usb 1-1: can't read configurations, error -61 [ 396.016754][ T24] usb 2-1: USB disconnect, device number 98 [ 396.019028][ T5989] usb usb1-port1: unable to enumerate USB device [ 396.184548][T13467] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2723'. [ 396.253347][ T5920] usb 4-1: Firmware version (0.0) predates our first public release. [ 396.262627][ T5920] usb 4-1: Please update to version 0.2 or newer [ 396.304682][ T5920] usb 4-1: USB disconnect, device number 119 [ 396.344336][T13475] Invalid/unusable pipe [ 396.482149][ T24] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 396.652145][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 396.661897][ T24] usb 2-1: config 1 has an invalid interface number: 4 but max is 2 [ 396.671263][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.688049][ T24] usb 2-1: config 1 has no interface number 1 [ 396.694583][ T24] usb 2-1: too many endpoints for config 1 interface 4 altsetting 0: 102, using maximum allowed: 30 [ 396.705792][ T24] usb 2-1: config 1 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 102 [ 396.721453][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.53 [ 396.731063][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.740167][ T24] usb 2-1: Product: syz [ 396.744707][ T24] usb 2-1: Manufacturer: syz [ 396.749554][ T24] usb 2-1: SerialNumber: syz [ 396.982193][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 397.072041][ T24] usb 2-1: USB disconnect, device number 99 [ 397.098830][ T5870] udevd[5870]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.142090][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 397.148925][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 397.160801][ T10] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 397.173345][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 397.184335][ T10] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 397.193554][ T10] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 397.201808][ T10] usb 3-1: Product: syz [ 397.206796][ T10] usb 3-1: Manufacturer: syz [ 397.211411][ T10] usb 3-1: SerialNumber: syz [ 397.219564][ T10] usb 3-1: config 0 descriptor?? [ 397.570622][T13492] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2733'. [ 397.631896][ T10] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 397.721278][T13501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2735'. [ 397.832690][ T10] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 397.845029][ T10] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -32 [ 397.942294][ T24] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 397.991725][T13513] netlink: 'syz.1.2740': attribute type 10 has an invalid length. [ 398.075545][T13521] FAULT_INJECTION: forcing a failure. [ 398.075545][T13521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.088889][T13521] CPU: 1 UID: 0 PID: 13521 Comm: syz.1.2742 Not tainted syzkaller #0 PREEMPT(full) [ 398.088918][T13521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 398.088933][T13521] Call Trace: [ 398.088942][T13521] [ 398.088950][T13521] dump_stack_lvl+0x189/0x250 [ 398.088970][T13521] ? __pfx____ratelimit+0x10/0x10 [ 398.088993][T13521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.089008][T13521] ? __pfx__printk+0x10/0x10 [ 398.089038][T13521] should_fail_ex+0x414/0x560 [ 398.089063][T13521] _copy_to_user+0x31/0xb0 [ 398.089082][T13521] simple_read_from_buffer+0xe1/0x170 [ 398.089110][T13521] proc_fail_nth_read+0x1b3/0x220 [ 398.089136][T13521] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.089157][T13521] ? rw_verify_area+0x2a6/0x4d0 [ 398.089176][T13521] ? __lock_acquire+0xab9/0xd20 [ 398.089192][T13521] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.089212][T13521] vfs_read+0x200/0xa30 [ 398.089233][T13521] ? fdget_pos+0x247/0x320 [ 398.089250][T13521] ? __pfx___mutex_lock+0x10/0x10 [ 398.089266][T13521] ? __pfx_vfs_read+0x10/0x10 [ 398.089287][T13521] ? __fget_files+0x2a/0x420 [ 398.089305][T13521] ? __fget_files+0x3a0/0x420 [ 398.089318][T13521] ? __fget_files+0x2a/0x420 [ 398.089339][T13521] ksys_read+0x145/0x250 [ 398.089361][T13521] ? __pfx_ksys_read+0x10/0x10 [ 398.089385][T13521] ? do_syscall_64+0xbe/0xfa0 [ 398.089401][T13521] do_syscall_64+0xfa/0xfa0 [ 398.089413][T13521] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.089435][T13521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.089450][T13521] ? clear_bhb_loop+0x60/0xb0 [ 398.089468][T13521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.089483][T13521] RIP: 0033:0x7f1defd8d63c [ 398.089497][T13521] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 398.089510][T13521] RSP: 002b:00007f1df0b81030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 398.089526][T13521] RAX: ffffffffffffffda RBX: 00007f1deffd5fa0 RCX: 00007f1defd8d63c [ 398.089537][T13521] RDX: 000000000000000f RSI: 00007f1df0b810a0 RDI: 0000000000000004 [ 398.089546][T13521] RBP: 00007f1df0b81090 R08: 0000000000000000 R09: 0000000000000000 [ 398.089556][T13521] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 398.089566][T13521] R13: 00007f1deffd6038 R14: 00007f1deffd5fa0 R15: 00007ffcb3a1f098 [ 398.089590][T13521] [ 398.325066][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.368573][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 398.377304][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.389263][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.401108][ T24] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 398.410474][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.420731][ T24] usb 1-1: config 0 descriptor?? [ 398.703201][T13531] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2745'. [ 398.835414][T13500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.847660][T13500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.870269][ T24] hid-led 0003:27B8:01ED.0016: item fetching failed at offset 0/2 [ 398.906447][ T24] hid-led 0003:27B8:01ED.0016: probe with driver hid-led failed with error -22 [ 399.065202][ T10] usb 1-1: USB disconnect, device number 123 [ 399.139474][T13540] netlink: 'syz.1.2749': attribute type 2 has an invalid length. [ 399.540919][T13553] delete_channel: no stack [ 399.547736][T13553] delete_channel: no stack [ 399.772074][ T24] usb 3-1: USB disconnect, device number 5 [ 400.162622][T13576] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2763'. [ 400.292151][ T983] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 400.351537][T13584] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 400.358113][T13584] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 400.372143][T13584] vhci_hcd vhci_hcd.0: Device attached [ 400.379764][T13582] 8021q: VLANs not supported on lo [ 400.388624][T13582] vxcan1: MTU too low for tipc bearer [ 400.388657][T13585] vhci_hcd: connection closed [ 400.394646][T13582] tipc: Enabling of bearer rejected, failed to enable media [ 400.397217][ T12] vhci_hcd: stop threads [ 400.430151][ T12] vhci_hcd: release socket [ 400.462454][ T983] usb 1-1: Using ep0 maxpacket: 16 [ 400.465042][ T12] vhci_hcd: disconnect device [ 400.473038][ T983] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 400.490494][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.507226][ T983] usb 1-1: Product: syz [ 400.511462][ T983] usb 1-1: Manufacturer: syz [ 400.521570][ T983] usb 1-1: SerialNumber: syz [ 400.533118][ T983] usb 1-1: config 0 descriptor?? [ 400.594353][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.747250][T13570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.756885][T13570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.968715][ T983] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 400.972389][T13605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2777'. [ 400.984752][ T983] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 400.997340][ T983] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 401.008255][ T983] usb 1-1: media controller created [ 401.037522][ T983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 401.171250][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2761'. [ 401.213681][ T5920] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 401.275420][ T983] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 401.291460][ T983] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 401.371712][T13617] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2781'. [ 401.381003][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 401.388231][ T5920] usb 4-1: config 0 has an invalid interface number: 97 but max is 0 [ 401.397006][ T5920] usb 4-1: config 0 has no interface number 0 [ 401.403855][ T5920] usb 4-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 401.415963][ T5920] usb 4-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 401.459330][ T5920] usb 4-1: config 0 interface 97 has no altsetting 0 [ 401.479235][ T5920] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 401.495416][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.509495][T13570] dtv5100: wlen = 0, aborting. [ 401.510296][ T5920] usb 4-1: Product: syz [ 401.519114][ T3609] usb 1-1: USB disconnect, device number 124 [ 401.522077][ T5920] usb 4-1: Manufacturer: syz [ 401.530830][ T5920] usb 4-1: SerialNumber: syz [ 401.562811][ T5920] usb 4-1: config 0 descriptor?? [ 401.615979][ T3609] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 401.667743][T13625] netlink: 'syz.1.2785': attribute type 17 has an invalid length. [ 401.845488][T13631] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2788'. [ 401.869131][ T5920] usb 4-1: USB disconnect, device number 120 [ 401.931541][T13633] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2789'. [ 402.013569][T13641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 402.029280][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2792'. [ 402.137360][ T52] Bluetooth: hci1: SCO packet for unknown connection handle 456 [ 402.239061][T13647] wlan1 speed is unknown, defaulting to 1000 [ 402.317361][T13647] lo speed is unknown, defaulting to 1000 [ 402.977951][T13681] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2799'. [ 403.299944][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2804'. [ 403.372461][ T3609] usb 4-1: new low-speed USB device number 121 using dummy_hcd [ 403.474954][T13701] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2806'. [ 403.542521][ T3609] usb 4-1: Invalid ep0 maxpacket: 16 [ 403.683248][ T3609] usb 4-1: new low-speed USB device number 122 using dummy_hcd [ 403.835895][T13719] netlink: 'syz.1.2810': attribute type 10 has an invalid length. [ 403.843935][ T3609] usb 4-1: Invalid ep0 maxpacket: 16 [ 403.859153][ T3609] usb usb4-port1: attempt power cycle [ 404.043842][T13733] netlink: 'syz.0.2809': attribute type 10 has an invalid length. [ 404.225174][ T3609] usb 4-1: new low-speed USB device number 123 using dummy_hcd [ 404.252752][ T3609] usb 4-1: Invalid ep0 maxpacket: 16 [ 404.392311][ T3609] usb 4-1: new low-speed USB device number 124 using dummy_hcd [ 404.422828][ T3609] usb 4-1: Invalid ep0 maxpacket: 16 [ 404.430611][ T3609] usb usb4-port1: unable to enumerate USB device [ 404.692209][ T5920] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 404.862100][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 404.869208][ T5920] usb 1-1: config 0 has an invalid descriptor of length 245, skipping remainder of the config [ 404.879718][ T5920] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 404.892855][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 404.901380][ T5920] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 404.910529][ T5920] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 404.919742][ T5920] usb 1-1: Product: syz [ 404.924043][ T5920] usb 1-1: Manufacturer: syz [ 404.928658][ T5920] usb 1-1: SerialNumber: syz [ 404.939829][ T5920] usb 1-1: config 0 descriptor?? [ 404.952064][ T3609] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 405.052199][ T24] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 405.104126][ T3609] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 405.114398][ T3609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.125233][ T3609] usb 2-1: config 0 descriptor?? [ 405.223970][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.234399][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 405.248006][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 405.257214][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.266441][ T24] usb 3-1: Product: syz [ 405.270693][ T24] usb 3-1: Manufacturer: syz [ 405.275722][ T24] usb 3-1: SerialNumber: syz [ 405.284728][T13769] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 405.294114][ T5920] gs_usb 1-1:0.0: Required endpoints not found [ 405.309178][ T5920] usb 1-1: USB disconnect, device number 125 [ 405.740241][ T3609] ath6kl: mismatched byte count 0 vs. expected 12 [ 405.747610][ T3609] ath6kl: Failed to init ath6kl core: -22 [ 405.754383][ T3609] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 405.943223][T13764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.953333][T13778] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2826'. [ 405.962548][T13764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.969479][ T5920] usb 2-1: USB disconnect, device number 100 [ 406.034757][T13780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2827'. [ 406.095332][T13782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2828'. [ 406.321075][ T24] cdc_ncm 3-1:1.0: bind() failure [ 406.347114][ T24] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 406.371199][ T24] usb 3-1: USB disconnect, device number 6 [ 406.975334][ T3609] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 407.040211][T13837] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2850'. [ 407.134340][ T3609] usb 4-1: Using ep0 maxpacket: 8 [ 407.146749][ T3609] usb 4-1: config 162 has an invalid interface number: 76 but max is 1 [ 407.168272][ T3609] usb 4-1: config 162 has an invalid interface number: 238 but max is 1 [ 407.187163][ T3609] usb 4-1: config 162 has no interface number 0 [ 407.197272][ T3609] usb 4-1: config 162 has no interface number 1 [ 407.211702][ T3609] usb 4-1: config 162 interface 238 has no altsetting 0 [ 407.221432][ T3609] usb 4-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=f2.78 [ 407.231995][ T3609] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.240087][ T3609] usb 4-1: Product: syz [ 407.252090][ T3609] usb 4-1: Manufacturer: syz [ 407.256752][ T3609] usb 4-1: SerialNumber: syz [ 407.393825][ T10] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 407.416104][T13856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2859'. [ 407.465214][T13858] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2860'. [ 407.493741][ T3609] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 407.515428][ T2342] usb 4-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 407.528017][ T2342] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 407.538731][ T3609] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 407.546474][ T44] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 407.559970][ T3609] usb 4-1: selecting invalid altsetting 0 [ 407.562807][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 407.576969][ T3609] usb 4-1: USB disconnect, device number 125 [ 407.591770][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 407.607184][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 407.625832][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.635413][ T10] usb 1-1: Product: syz [ 407.639662][ T10] usb 1-1: Manufacturer: syz [ 407.645250][ T10] usb 1-1: SerialNumber: syz [ 407.655349][ T10] usb 1-1: config 0 descriptor?? [ 407.664492][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 407.674795][ T10] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 407.742116][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 407.750131][ T44] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 407.760180][ T44] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 407.770165][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 407.780496][ T44] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 407.790008][ T44] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 407.799109][ T44] usb 2-1: Product: syz [ 407.803385][ T44] usb 2-1: Manufacturer: syz [ 407.808100][ T44] usb 2-1: SerialNumber: syz [ 407.815608][ T44] usb 2-1: config 0 descriptor?? [ 407.865400][T13843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.877626][T13843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.888337][ T30] audit: type=1326 audit(1758327846.565:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13842 comm="syz.0.2853" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce6e38ec29 code=0x0 [ 407.940282][T13867] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2853'. [ 407.960081][T13867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.972995][T13867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.073890][T13871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2865'. [ 408.165539][T13877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.175978][T13877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.243013][ T44] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 408.412138][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 408.447563][T13849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.456727][T13849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.572158][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 408.579522][ T24] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 408.588699][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.599951][ T24] usb 3-1: config 0 descriptor?? [ 408.614579][ T24] gspca_main: sunplus-2.14.0 probing 041e:400b [ 408.667707][ T44] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 408.678740][ T44] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 408.688651][ T44] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 408.707808][ T44] usb 2-1: USB disconnect, device number 101 [ 408.812437][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 408.876683][ T10] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 408.884945][ T10] em28xx 1-1:0.0: board has no eeprom [ 408.952380][ T10] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 408.960291][ T10] em28xx 1-1:0.0: dvb set to bulk mode. [ 408.967879][ T5920] em28xx 1-1:0.0: Binding DVB extension [ 409.013437][T13877] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.2867'. [ 409.030406][ T5920] em28xx 1-1:0.0: Registering input extension [ 409.037187][T13877] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 409.060048][T13877] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2867'. [ 409.327859][ T24] gspca_sunplus: reg_r err -71 [ 409.342106][ T24] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 409.355370][ T24] usb 3-1: USB disconnect, device number 7 [ 409.386382][T13892] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2872'. [ 409.475899][T13896] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2874'. [ 409.749439][T13907] netlink: 'syz.1.2879': attribute type 10 has an invalid length. [ 409.839753][T13912] netlink: 'syz.1.2881': attribute type 10 has an invalid length. [ 409.865868][T13912] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.162272][ T10] usb 1-1: USB disconnect, device number 126 [ 410.172393][ T10] em28xx 1-1:0.0: Disconnecting em28xx [ 410.180677][ T10] em28xx 1-1:0.0: Closing input extension [ 410.221181][ T10] em28xx 1-1:0.0: Freeing device [ 410.332382][ T24] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 410.502159][ T24] usb 2-1: device descriptor read/64, error -71 [ 410.508766][T13942] input: syz1 as /devices/virtual/input/input40 [ 410.742509][ T24] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 410.872325][ T24] usb 2-1: device descriptor read/64, error -71 [ 410.942048][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 410.983302][ T24] usb usb2-port1: attempt power cycle [ 411.094196][ T10] usb 3-1: too many configurations: 14, using maximum allowed: 8 [ 411.105216][ T10] usb 3-1: config index 0 descriptor too short (expected 118, got 9) [ 411.113413][ T10] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 411.123631][ T10] usb 3-1: config index 1 descriptor too short (expected 118, got 9) [ 411.131800][ T10] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 411.142127][ T10] usb 3-1: config index 2 descriptor too short (expected 118, got 9) [ 411.150273][ T10] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 411.160611][ T10] usb 3-1: config index 3 descriptor too short (expected 118, got 9) [ 411.168873][ T10] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 411.179249][ T10] usb 3-1: config index 4 descriptor too short (expected 118, got 9) [ 411.187505][ T10] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 411.200324][ T10] usb 3-1: config index 5 descriptor too short (expected 118, got 9) [ 411.208611][ T10] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 411.218927][ T10] usb 3-1: config index 6 descriptor too short (expected 118, got 9) [ 411.227151][ T10] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 411.237596][ T10] usb 3-1: config index 7 descriptor too short (expected 118, got 9) [ 411.245951][ T10] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 411.257297][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 411.266608][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.274875][ T10] usb 3-1: Product: syz [ 411.279058][ T10] usb 3-1: Manufacturer: syz [ 411.283759][ T10] usb 3-1: SerialNumber: syz [ 411.332187][ T24] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 411.352947][ T24] usb 2-1: device descriptor read/8, error -71 [ 411.593753][ T24] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 411.624852][ T24] usb 2-1: device descriptor read/8, error -71 [ 411.644306][T13968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2903'. [ 411.742524][ T24] usb usb2-port1: unable to enumerate USB device [ 411.823891][T13972] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2905'. [ 412.114390][T13979] wlan1 speed is unknown, defaulting to 1000 [ 412.126929][T13979] lo speed is unknown, defaulting to 1000 [ 412.358222][T13980] wlan1 speed is unknown, defaulting to 1000 [ 412.366177][T13980] lo speed is unknown, defaulting to 1000 [ 413.106162][T13996] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 413.264349][ T30] audit: type=1400 audit(1758327851.945:11): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14001 comm="syz.0.2917" [ 413.443277][T14010] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2921'. [ 413.716216][T13886] usb 3-1: USB disconnect, device number 8 [ 413.767185][T14020] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2926'. [ 413.807491][T14022] netlink: 'syz.1.2927': attribute type 10 has an invalid length. [ 413.912316][ T10] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 413.931068][T14031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2931'. [ 414.063783][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.076530][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 414.088949][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.102290][ T10] usb 1-1: config 0 descriptor?? [ 414.115419][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 414.119034][T14037] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2934'. [ 414.192274][ T5920] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 414.363249][ T5920] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 414.384352][ T5920] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 414.393609][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 414.401921][ T5920] usb 2-1: Product: syz [ 414.406203][ T5920] usb 2-1: Manufacturer: syz [ 414.410881][ T5920] usb 2-1: SerialNumber: syz [ 414.418615][ T5920] usb 2-1: config 0 descriptor?? [ 414.527698][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 414.543425][ T44] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 414.633763][ T5920] ims_pcu 2-1:0.0: Zero length descriptor [ 414.639642][ T5920] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 414.650818][ T5920] usb 2-1: USB disconnect, device number 106 [ 414.685431][ T44] usb 3-1: device descriptor read/64, error -71 [ 414.794496][ T10] pwc: recv_control_msg error -71 req 02 val 2c00 [ 414.801545][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 414.808596][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 414.815627][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 414.823019][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 414.829821][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 414.837245][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 414.844228][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 414.850990][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 414.858177][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 414.865202][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 414.872351][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 414.879292][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 414.888073][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 414.896202][ T10] pwc: Registered as video103. [ 414.903963][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input41 [ 414.928107][ T10] usb 1-1: USB disconnect, device number 127 [ 414.942099][ T44] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 415.092632][ T44] usb 3-1: device descriptor read/64, error -71 [ 415.099461][T14052] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2938'. [ 415.215535][ T44] usb usb3-port1: attempt power cycle [ 415.424859][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2943'. [ 415.463206][T14068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2943'. [ 415.592059][ T44] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 415.625282][ T44] usb 3-1: device descriptor read/8, error -71 [ 415.752773][T14084] netlink: 'syz.3.2947': attribute type 10 has an invalid length. [ 415.892137][ T44] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 415.912881][ T44] usb 3-1: device descriptor read/8, error -71 [ 415.934912][T13886] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 415.996642][T14098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2953'. [ 416.039790][ T44] usb usb3-port1: unable to enumerate USB device [ 416.092404][T13886] usb 1-1: Using ep0 maxpacket: 32 [ 416.100616][T13886] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 416.112316][T13886] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 416.124009][T13886] usb 1-1: config 0 interface 0 has no altsetting 0 [ 416.134407][T13886] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 416.152104][T13886] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 416.160466][T13886] usb 1-1: Product: syz [ 416.165229][T13886] usb 1-1: Manufacturer: syz [ 416.171146][T13886] usb 1-1: SerialNumber: syz [ 416.188653][T13886] usb 1-1: config 0 descriptor?? [ 416.269858][T14109] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2958'. [ 416.602193][T13886] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 416.722114][ T10] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 416.809358][T13886] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 416.818432][T13886] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 416.882071][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 416.890020][ T10] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 416.898794][ T10] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 416.907877][ T10] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 416.918330][ T10] usb 2-1: config 3 has no interface number 0 [ 416.925764][ T10] usb 2-1: config 3 interface 45 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 416.941830][ T10] usb 2-1: config 3 interface 45 has no altsetting 0 [ 416.951231][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 416.960811][ T10] usb 2-1: New USB device strings: Mfr=2, Product=67, SerialNumber=3 [ 416.969331][ T10] usb 2-1: Product: syz [ 416.973997][ T10] usb 2-1: Manufacturer: syz [ 416.978636][ T10] usb 2-1: SerialNumber: syz [ 417.243576][ T10] usb 2-1: USB disconnect, device number 107 [ 417.274223][ T6200] udevd[6200]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.667565][ T5920] usb 1-1: USB disconnect, device number 2 [ 419.073391][ T5920] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 419.244536][ T5920] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 419.255739][ T5920] usb 1-1: config 0 has no interface number 0 [ 419.264611][ T5920] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 419.274319][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.286327][ T5920] usb 1-1: Product: syz [ 419.293848][ T5920] usb 1-1: Manufacturer: syz [ 419.298485][ T5920] usb 1-1: SerialNumber: syz [ 419.308195][ T5920] usb 1-1: config 0 descriptor?? [ 419.352146][ T5949] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 419.502328][ T5949] usb 3-1: Using ep0 maxpacket: 32 [ 419.509269][ T5949] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 419.519267][ T5949] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 419.529152][ T5949] usb 3-1: config 0 interface 0 has no altsetting 0 [ 419.536700][ T5920] uvcvideo 1-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 419.540732][ T5949] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 419.547004][ T5920] uvcvideo 1-1:0.64: No valid video chain found. [ 419.555714][ T5949] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 419.567350][ T5920] usb 1-1: USB disconnect, device number 3 [ 419.572049][ T5949] usb 3-1: Product: syz [ 419.578561][ T5949] usb 3-1: Manufacturer: syz [ 419.584662][ T5949] usb 3-1: SerialNumber: syz [ 419.600267][ T5949] usb 3-1: config 0 descriptor?? [ 420.015357][ T5949] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 420.202372][ T5920] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 420.215952][ T5949] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 420.225017][ T5949] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 420.279904][T14172] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2985'. [ 420.372112][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 420.379496][ T5920] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 420.390580][ T5920] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 420.401168][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 420.411625][ T5920] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 420.429681][ T5920] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 420.439259][ T5920] usb 2-1: Product: syz [ 420.443644][ T5920] usb 2-1: Manufacturer: syz [ 420.448269][ T5920] usb 2-1: SerialNumber: syz [ 420.455588][ T5920] usb 2-1: config 0 descriptor?? [ 420.628771][T14180] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2989'. [ 420.868221][ T5920] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 421.088261][ T5920] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 421.106325][ T5920] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 421.122103][ T5920] usb 2-1: USB disconnect, device number 108 [ 421.582061][ T5920] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 421.743918][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.756566][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 421.769522][ T5920] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 421.778658][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.789693][ T5920] usb 2-1: config 0 descriptor?? [ 421.902140][T13886] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 422.063981][T13886] usb 1-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 422.073367][T13886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.085169][T13886] usb 1-1: config 0 descriptor?? [ 422.095554][T13886] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 422.136037][ T24] usb 3-1: USB disconnect, device number 13 [ 422.213311][ T5920] lenovo 0003:17EF:60A3.0017: item fetching failed at offset 5/7 [ 422.222789][ T5920] lenovo 0003:17EF:60A3.0017: hid_parse failed [ 422.229100][ T5920] lenovo 0003:17EF:60A3.0017: probe with driver lenovo failed with error -22 [ 422.344546][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2999'. [ 422.697532][T13886] pwc: recv_control_msg error -32 req 02 val 2b00 [ 422.705459][T13886] pwc: recv_control_msg error -32 req 02 val 2700 [ 422.913530][T13886] pwc: recv_control_msg error -71 req 02 val 2c00 [ 422.922211][T13886] pwc: recv_control_msg error -71 req 04 val 1000 [ 422.929063][T13886] pwc: recv_control_msg error -71 req 04 val 1300 [ 422.936069][T13886] pwc: recv_control_msg error -71 req 04 val 1400 [ 422.943083][T13886] pwc: recv_control_msg error -71 req 02 val 2000 [ 422.950439][T13886] pwc: recv_control_msg error -71 req 02 val 2100 [ 422.957581][T13886] pwc: recv_control_msg error -71 req 06 val 0600 [ 422.964527][T13886] pwc: recv_control_msg error -71 req 04 val 1500 [ 422.971375][T13886] pwc: recv_control_msg error -71 req 02 val 2500 [ 422.979101][T13886] pwc: recv_control_msg error -71 req 02 val 2400 [ 422.986195][T13886] pwc: recv_control_msg error -71 req 02 val 2600 [ 422.993250][T13886] pwc: recv_control_msg error -71 req 02 val 2900 [ 423.000094][T13886] pwc: recv_control_msg error -71 req 02 val 2800 [ 423.007122][T13886] pwc: recv_control_msg error -71 req 04 val 1100 [ 423.013931][T13886] pwc: recv_control_msg error -71 req 04 val 1200 [ 423.021871][T13886] pwc: Registered as video103. [ 423.032235][T13886] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input42 [ 423.060832][T13886] usb 1-1: USB disconnect, device number 4 [ 423.456185][T14221] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3006'. [ 424.282729][ T44] usb 2-1: USB disconnect, device number 109 [ 424.722070][ T44] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 424.873799][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.884972][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.895416][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 424.909268][ T44] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 424.921137][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.940533][ T44] usb 2-1: config 0 descriptor?? [ 424.962074][ T5949] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 425.092291][ T5949] usb 3-1: device descriptor read/64, error -71 [ 425.275359][T14273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3030'. [ 425.332158][ T5949] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 425.334551][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3031'. [ 425.372169][ T44] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 425.472779][ T5949] usb 3-1: device descriptor read/64, error -71 [ 425.602953][ T5949] usb usb3-port1: attempt power cycle [ 425.953336][ T5949] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 425.975126][ T5949] usb 3-1: device descriptor read/8, error -71 [ 426.212135][ T5949] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 426.243157][ T5949] usb 3-1: device descriptor read/8, error -71 [ 426.323049][ T983] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 426.362632][ T5949] usb usb3-port1: unable to enumerate USB device [ 426.474506][ T983] usb 1-1: unable to get BOS descriptor or descriptor too short [ 426.483000][ T983] usb 1-1: not running at top speed; connect to a high speed hub [ 426.492396][ T983] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 426.505023][ T983] usb 1-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=74.1b [ 426.514389][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.522674][ T983] usb 1-1: Product: syz [ 426.526916][ T983] usb 1-1: Manufacturer: syz [ 426.531536][ T983] usb 1-1: SerialNumber: syz [ 426.760596][ T983] usb 1-1: USB disconnect, device number 5 [ 427.416152][ T5949] usb 2-1: USB disconnect, device number 110 [ 427.782211][ T5949] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 427.962215][ T5949] usb 2-1: Using ep0 maxpacket: 32 [ 427.974498][ T5949] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 427.991997][ T5949] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 428.001833][ T5949] usb 2-1: config 0 interface 0 has no altsetting 0 [ 428.011599][ T5949] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 428.021208][ T5949] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 428.029812][ T5949] usb 2-1: Product: syz [ 428.035480][ T5949] usb 2-1: Manufacturer: syz [ 428.040209][ T5949] usb 2-1: SerialNumber: syz [ 428.053853][ T5949] usb 2-1: config 0 descriptor?? [ 428.102097][ T5920] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 428.252096][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 428.260111][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 428.272620][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 428.284226][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 428.295842][ T5920] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 428.307223][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.318644][ T5920] usb 3-1: config 0 descriptor?? [ 428.332723][T14311] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 428.342627][ T5920] hub 3-1:0.0: USB hub found [ 428.469354][ T5949] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 428.564546][ T5920] hub 3-1:0.0: 8 ports detected [ 428.570083][ T5920] hub 3-1:0.0: insufficient power available to use all downstream ports [ 428.670615][ T5949] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 428.694530][ T5949] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 428.785943][ T5920] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 428.802132][ T5920] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 428.821418][ T5920] usbhid 3-1:0.0: can't add hid device: -71 [ 428.830202][ T5920] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 428.862961][ T5920] usb 3-1: USB disconnect, device number 18 [ 428.957065][T14325] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3049'. [ 429.402855][ T5920] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 429.542099][ T5920] usb 1-1: device descriptor read/64, error -71 [ 429.782986][ T5920] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 429.842142][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 429.912071][ T5920] usb 1-1: device descriptor read/64, error -71 [ 429.994585][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.005760][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.015931][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 430.025521][ T5920] usb usb1-port1: attempt power cycle [ 430.033867][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.047994][ T10] usb 3-1: config 0 descriptor?? [ 430.382076][ T5920] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 430.402800][ T5920] usb 1-1: device descriptor read/8, error -71 [ 430.471796][ T10] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 430.473193][ T24] usb 2-1: USB disconnect, device number 111 [ 430.503968][ T10] cp2112 0003:10C4:EA90.0019: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 430.534322][T14341] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3056'. [ 430.652146][ T5920] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 430.665681][ T10] cp2112 0003:10C4:EA90.0019: Part Number: 0x82 Device Version: 0xFE [ 430.683246][ T5920] usb 1-1: device descriptor read/8, error -71 [ 430.792395][ T5920] usb usb1-port1: unable to enumerate USB device [ 430.876077][T14339] netlink: 'syz.2.3055': attribute type 11 has an invalid length. [ 431.505059][ T10] usb 3-1: USB disconnect, device number 19 [ 431.620610][T14371] block nbd0: Attempted send on invalid socket [ 431.627369][T14371] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 432.502903][T14400] wlan1 speed is unknown, defaulting to 1000 [ 432.513611][T14400] lo speed is unknown, defaulting to 1000 [ 432.642210][ T5920] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 432.672617][ T983] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 432.716340][T14400] program syz.0.3081 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.811226][ T5920] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 432.833316][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.841391][ T5920] usb 3-1: Product: syz [ 432.845893][ T5920] usb 3-1: Manufacturer: syz [ 432.850612][ T5920] usb 3-1: SerialNumber: syz [ 432.856953][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.871371][ T5920] usb 3-1: config 0 descriptor?? [ 432.880846][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.904477][ T5920] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 432.912872][ T983] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 432.923241][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.940664][ T983] usb 2-1: config 0 descriptor?? [ 433.112074][T13886] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 433.262077][T13886] usb 1-1: Using ep0 maxpacket: 32 [ 433.272573][T13886] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 433.281675][T13886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.289812][T13886] usb 1-1: Product: syz [ 433.294099][T13886] usb 1-1: Manufacturer: syz [ 433.298723][T13886] usb 1-1: SerialNumber: syz [ 433.307896][T13886] usb 1-1: config 0 descriptor?? [ 433.308315][T14394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.325764][T14394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.335468][T13886] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 433.358501][ T983] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 433.368931][ T983] cp2112 0003:10C4:EA90.001A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 433.530794][T14407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.540120][T14407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.555254][ T983] cp2112 0003:10C4:EA90.001A: Part Number: 0x82 Device Version: 0xFE [ 433.564926][T13886] gspca_stk1135: reg_w 0x2 err -71 [ 433.571110][T13886] gspca_stk1135: serial bus timeout: status=0x00 [ 433.578287][T13886] gspca_stk1135: Sensor write failed [ 433.584449][T13886] gspca_stk1135: serial bus timeout: status=0x00 [ 433.590823][T13886] gspca_stk1135: Sensor write failed [ 433.596231][T13886] gspca_stk1135: serial bus timeout: status=0x00 [ 433.604274][T13886] gspca_stk1135: Sensor read failed [ 433.609524][T13886] gspca_stk1135: serial bus timeout: status=0x00 [ 433.616031][T13886] gspca_stk1135: Sensor read failed [ 433.621258][T13886] gspca_stk1135: Detected sensor type unknown (0x0) [ 433.628858][T13886] gspca_stk1135: serial bus timeout: status=0x00 [ 433.636109][T13886] gspca_stk1135: Sensor read failed [ 433.641371][T13886] gspca_stk1135: serial bus timeout: status=0x00 [ 433.648400][T13886] gspca_stk1135: Sensor read failed [ 433.653828][T13886] gspca_stk1135: serial bus timeout: status=0x00 [ 433.660194][T13886] gspca_stk1135: Sensor write failed [ 433.665587][T13886] gspca_stk1135: serial bus timeout: status=0x00 [ 433.672009][T13886] gspca_stk1135: Sensor write failed [ 433.677398][T13886] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 433.687739][T13886] usb 1-1: USB disconnect, device number 10 [ 433.755217][T14396] netlink: 'syz.1.3080': attribute type 11 has an invalid length. [ 433.943555][ T5920] gspca_sunplus: reg_r err -71 [ 433.948689][ T5920] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 433.960172][ T5920] usb 3-1: USB disconnect, device number 20 [ 434.169823][ T983] cp2112 0003:10C4:EA90.001A: error reading lock byte: -71 [ 434.185558][ T983] usb 2-1: USB disconnect, device number 112 [ 434.324221][T14416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3087'. [ 434.396798][T14418] block nbd0: Attempted send on invalid socket [ 434.403247][T14418] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 434.451452][T14420] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3089'. [ 434.503308][T14422] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3090'. [ 434.838176][T14444] IPVS: set_ctl: invalid protocol: 8 10.1.1.2:20001 [ 434.838350][ T24] IPVS: starting estimator thread 0... [ 434.849103][T14444] IPVS: nq: FWM 3 0x00000003 - no destination available [ 434.942139][T14445] IPVS: using max 27 ests per chain, 64800 per kthread [ 435.696200][ T5920] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 435.855008][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.884400][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.900841][ T5920] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 435.910541][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.926876][ T5920] usb 3-1: config 0 descriptor?? [ 435.986383][T14488] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3116'. [ 436.147330][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3118'. [ 436.349646][T14504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3122'. [ 436.364081][ T5920] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 436.393928][ T5920] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 436.416016][T14507] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3123'. [ 436.562234][ T5920] cp2112 0003:10C4:EA90.001B: Part Number: 0x82 Device Version: 0xFE [ 436.763265][T14465] netlink: 'syz.2.3108': attribute type 11 has an invalid length. [ 436.902033][ T983] usb 2-1: new low-speed USB device number 113 using dummy_hcd [ 437.054225][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 437.065343][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.076614][ T983] usb 2-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 437.086037][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.097377][ T983] usb 2-1: config 0 descriptor?? [ 437.176685][ T5920] cp2112 0003:10C4:EA90.001B: error reading lock byte: -71 [ 437.188352][ T5920] usb 3-1: USB disconnect, device number 21 [ 437.502044][ T44] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 437.522620][ T983] usbhid 2-1:0.0: can't add hid device: -71 [ 437.528675][ T983] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 437.543258][ T983] usb 2-1: USB disconnect, device number 113 [ 437.673791][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.684999][ T44] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 437.694449][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.706849][ T44] usb 1-1: config 0 descriptor?? [ 438.152991][ T5949] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 438.315335][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.326646][ T5949] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 438.339324][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.355178][ T5949] usb 3-1: config 0 descriptor?? [ 438.363499][T14519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.387818][T14528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.396375][T14519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.397497][T14528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.784921][ T5949] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 438.812483][ T5949] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001C/input/input43 [ 438.963066][ T5949] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 439.119475][T14555] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3141'. [ 439.344409][T14527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.365484][T14527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.429231][T14563] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3144'. [ 440.309663][ T44] usbhid 1-1:0.0: can't add hid device: -71 [ 440.322300][ T44] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 440.339819][T14595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3153'. [ 440.372586][ T44] usb 1-1: USB disconnect, device number 11 [ 440.832692][ T5920] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 440.890925][ T44] usb 3-1: USB disconnect, device number 22 [ 440.992524][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 441.004405][ T5920] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 441.022225][ T5920] usb 1-1: config 0 has no interface number 0 [ 441.035069][ T5920] usb 1-1: config 0 interface 172 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.104389][ T5920] usb 1-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 441.135023][ T5920] usb 1-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 441.174784][ T5920] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 441.197680][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.217962][ T5920] usb 1-1: Product: syz [ 441.228074][ T5920] usb 1-1: Manufacturer: syz [ 441.254389][ T5920] usb 1-1: SerialNumber: syz [ 441.276194][ T5920] usb 1-1: config 0 descriptor?? [ 441.292864][ T5920] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 441.379408][T14625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3159'. [ 441.688573][T14640] comedi comedi3: pcl812: I/O port conflict (0x4f29,16) [ 441.862038][ T44] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 441.909187][ T5920] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input44 [ 442.042605][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 442.060713][ T44] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 442.077988][ T44] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 442.096510][ T44] usb 2-1: config 3 has no interface number 0 [ 442.115271][ T24] usb 1-1: USB disconnect, device number 12 [ 442.137500][ T44] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.178627][ T44] usb 2-1: config 3 interface 45 has no altsetting 0 [ 442.202626][ T44] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 442.213421][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.221613][ T44] usb 2-1: Product: syz [ 442.229428][ T44] usb 2-1: Manufacturer: syz [ 442.239858][ T44] usb 2-1: SerialNumber: syz [ 442.474002][ T44] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 442.533353][ T44] usb 2-1: USB disconnect, device number 114 [ 442.659238][ T6037] udevd[6037]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 442.916397][T14669] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3167'. [ 443.632181][ T24] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 443.801705][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 443.814165][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 443.826017][T14708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3179'. [ 443.831432][ T24] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 443.874786][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 443.894181][ T24] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 443.914096][ T24] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 443.932554][ T24] usb 2-1: Product: syz [ 443.936956][ T24] usb 2-1: Manufacturer: syz [ 443.950406][ T24] usb 2-1: SerialNumber: syz [ 443.962351][ T24] usb 2-1: config 0 descriptor?? [ 444.389547][ T24] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 444.596686][ T24] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 444.614621][ T24] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 444.770456][ T5913] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 444.900279][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 444.921634][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 444.928628][ T5913] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 444.938534][ T5913] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 444.948333][ T5913] usb 1-1: config 0 interface 0 has no altsetting 0 [ 444.957080][ T5913] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 444.966315][ T5913] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 444.974579][ T5913] usb 1-1: Product: syz [ 444.978744][ T5913] usb 1-1: Manufacturer: syz [ 444.983411][ T5913] usb 1-1: SerialNumber: syz [ 444.992622][ T5913] usb 1-1: config 0 descriptor?? [ 445.060108][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 445.067196][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 445.079064][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.094154][ T24] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 445.103391][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.111516][ T24] usb 3-1: Product: syz [ 445.115721][ T24] usb 3-1: Manufacturer: syz [ 445.120515][ T24] usb 3-1: SerialNumber: syz [ 445.128075][ T24] usb 3-1: config 0 descriptor?? [ 445.135799][ T24] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected [ 445.143610][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 445.153326][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 445.162283][ T24] keyspan 3-1:0.0: unsupported endpoint type 0 [ 445.168553][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 445.176248][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 445.184101][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 445.192990][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 445.202413][ T24] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 445.256027][T14723] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 445.256190][T14729] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 445.339537][ T24] usb 3-1: USB disconnect, device number 23 [ 445.350079][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 445.360156][ T24] keyspan 3-1:0.0: device disconnected [ 445.395321][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.406281][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.482282][ T5913] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 445.684032][T14723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.692886][T14723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.706073][T14723] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3183'. [ 445.772652][ T5913] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 445.782303][ T5913] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 445.795482][ T5913] usb 1-1: USB disconnect, device number 13 [ 446.389536][ T5989] usb 2-1: USB disconnect, device number 115 [ 446.517291][T14751] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3191'. [ 446.518934][T14751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3191'. [ 446.848903][ T24] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 447.009774][ T24] usb 2-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 447.029789][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.060379][ T24] usb 2-1: config 0 descriptor?? [ 447.086486][ T24] usb 2-1: Invalid firmware size=18. [ 447.289834][T14756] input: syz0 as /devices/virtual/input/input45 [ 447.396546][ T44] usb 2-1: USB disconnect, device number 116 [ 447.516792][T14776] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3199'. [ 447.748016][T14783] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3203'. [ 447.910546][ T44] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 447.968342][T14787] delete_channel: no stack [ 447.976586][T14787] delete_channel: no stack [ 448.092123][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.114824][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.135096][ T44] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 448.154724][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.187993][ T44] usb 1-1: config 0 descriptor?? [ 448.279862][ T5949] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 448.497008][ T5949] usb 3-1: Using ep0 maxpacket: 32 [ 448.521066][ T5231] udevd[5231]: could not touch /run/udev/queue: Read-only file system [ 448.574912][ T44] usbhid 1-1:0.0: can't add hid device: -71 [ 448.606098][ T44] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 Connection to 10.128.1.200 closed by remote host. [ 448.625030][ T44] usb 1-1: USB disconnect, device number 14 [ 448.631205][T13886] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 448.653000][ T5949] usb 3-1: device descriptor read/all, error -71 [ 449.494642][ T3019] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.709044][ T3019] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.905343][ T3019] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.066428][ T3019] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.294408][ T3019] bridge_slave_1: left allmulticast mode [ 450.300492][ T3019] bridge_slave_1: left promiscuous mode [ 450.316305][ T3019] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.343447][ T3019] bridge_slave_0: left allmulticast mode [ 450.354515][ T3019] bridge_slave_0: left promiscuous mode [ 450.360375][ T3019] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.750222][ T3019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.762190][ T3019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.773147][ T3019] bond0 (unregistering): Released all slaves [ 450.806132][T14798] syz_tun (unregistering): left allmulticast mode [ 451.002596][ T2342] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 451.012649][ T2342] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 451.024958][ T2342] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-73xxx-01.fw [ 451.036584][ T2342] pvrusb2: Failure uploading firmware1 [ 451.042147][ T2342] pvrusb2: Device initialization was not successful. [ 451.049162][ T2342] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 451.059268][ T3609] pvrusb2: Device being rendered inoperable [ 451.059840][ T2342] usb 4-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 451.082357][ T2342] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 451.091635][ T2342] ------------[ cut here ]------------ [ 451.097630][ T2342] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x746/0x9b0, CPU#0: pvrusb2-context/2342 [ 451.110607][ T2342] Modules linked in: [ 451.115007][ T2342] CPU: 0 UID: 0 PID: 2342 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(full) [ 451.125554][ T2342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 451.136394][ T2342] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 451.142795][ T2342] Code: ab fb e9 5d fc ff ff e8 88 ae ab fb c6 05 9c 68 ba 09 01 48 c7 c7 80 21 2c 8c e8 95 3a 13 fb e9 85 fc ff ff e8 6b ae ab fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 60 22 2c 8c 4c 89 e2 e8 25 7d 18 fb e9 [ 451.163782][ T2342] RSP: 0018:ffffc90004a4f5b0 EFLAGS: 00010293 [ 451.169899][ T2342] RAX: ffffffff86146ab5 RBX: dffffc0000000000 RCX: ffff88802a615ac0 [ 451.178258][ T2342] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 451.186394][ T2342] RBP: 0000000000000001 R08: ffffffff8fe4db77 R09: 1ffffffff1fc9b6e [ 451.194475][ T2342] R10: dffffc0000000000 R11: fffffbfff1fc9b6f R12: ffffffff8c83ed00 [ 451.202496][ T2342] R13: 0000000000001770 R14: ffff88807d3cd0b0 R15: 00000000fffffff5 [ 451.210526][ T2342] FS: 0000000000000000(0000) GS:ffff8881257a2000(0000) knlGS:0000000000000000 [ 451.219554][ T2342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 451.226316][ T2342] CR2: 0000555566b215c8 CR3: 0000000032d6a000 CR4: 00000000003526f0 [ 451.234924][ T2342] Call Trace: [ 451.238230][ T2342] [ 451.241171][ T2342] ? kmem_cache_free+0x19b/0x690 [ 451.246900][ T2342] ? _request_firmware+0x6be/0x15b0 [ 451.252412][ T2342] _request_firmware+0xf83/0x15b0 [ 451.257494][ T2342] ? __lock_acquire+0xab9/0xd20 [ 451.262393][ T2342] ? __pfx__request_firmware+0x10/0x10 [ 451.267901][ T2342] ? rcu_is_watching+0x15/0xb0 [ 451.272674][ T2342] ? trace_contention_end+0x39/0x120 [ 451.278007][ T2342] ? __mutex_lock+0x335/0x1350 [ 451.282795][ T2342] request_firmware+0x36/0x50 [ 451.287535][ T2342] pvr2_locate_firmware+0xb3/0x500 [ 451.292668][ T2342] pvr2_upload_firmware1+0x1b4/0x900 [ 451.298004][ T2342] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 451.304121][ T2342] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 451.309943][ T2342] pvr2_hdw_initialize+0x3df/0x3ac0 [ 451.315231][ T2342] ? __lock_acquire+0xab9/0xd20 [ 451.320115][ T2342] ? __mutex_trylock_common+0x153/0x260 [ 451.325721][ T2342] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 451.331929][ T2342] ? rcu_is_watching+0x15/0xb0 [ 451.337357][ T2342] ? trace_contention_end+0x39/0x120 [ 451.342695][ T2342] ? pvr2_context_thread_func+0x263/0xaf0 [ 451.348610][ T2342] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 451.354444][ T2342] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 451.360473][ T2342] ? schedule+0x91/0x360 [ 451.364819][ T2342] ? schedule+0x16f/0x360 [ 451.369160][ T2342] pvr2_context_thread_func+0x487/0xaf0 [ 451.374765][ T2342] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 451.380840][ T2342] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 451.386911][ T2342] ? __pfx_autoremove_wake_function+0x10/0x10 [ 451.393037][ T2342] ? __kthread_parkme+0x7b/0x200 [ 451.398274][ T2342] ? __kthread_parkme+0x1a1/0x200 [ 451.403395][ T2342] kthread+0x711/0x8a0 [ 451.407480][ T2342] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 451.413624][ T2342] ? __pfx_kthread+0x10/0x10 [ 451.418223][ T2342] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.423479][ T2342] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.428684][ T2342] ? __pfx_kthread+0x10/0x10 [ 451.433829][ T2342] ret_from_fork+0x4bc/0x870 [ 451.438431][ T2342] ? __pfx_ret_from_fork+0x10/0x10 [ 451.444404][ T2342] ? __switch_to_asm+0x39/0x70 [ 451.449221][ T2342] ? __switch_to_asm+0x33/0x70 [ 451.454060][ T2342] ? __pfx_kthread+0x10/0x10 [ 451.458684][ T2342] ret_from_fork_asm+0x1a/0x30 [ 451.463619][ T2342] [ 451.466701][ T2342] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 451.474000][ T2342] CPU: 0 UID: 0 PID: 2342 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(full) [ 451.483725][ T2342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 451.493787][ T2342] Call Trace: [ 451.497071][ T2342] [ 451.500013][ T2342] dump_stack_lvl+0x99/0x250 [ 451.504640][ T2342] ? __asan_memcpy+0x40/0x70 [ 451.509262][ T2342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.514488][ T2342] ? __pfx__printk+0x10/0x10 [ 451.519111][ T2342] vpanic+0x237/0x6d0 [ 451.523118][ T2342] ? __pfx_vpanic+0x10/0x10 [ 451.527645][ T2342] ? is_bpf_text_address+0x26/0x2b0 [ 451.532862][ T2342] panic+0xb9/0xc0 [ 451.536608][ T2342] ? __pfx_panic+0x10/0x10 [ 451.541055][ T2342] __warn+0x334/0x4c0 [ 451.545045][ T2342] ? firmware_fallback_sysfs+0x746/0x9b0 [ 451.550698][ T2342] ? firmware_fallback_sysfs+0x746/0x9b0 [ 451.556339][ T2342] report_bug+0x2be/0x4f0 [ 451.560681][ T2342] ? firmware_fallback_sysfs+0x746/0x9b0 [ 451.566323][ T2342] ? firmware_fallback_sysfs+0x746/0x9b0 [ 451.571963][ T2342] ? firmware_fallback_sysfs+0x748/0x9b0 [ 451.577608][ T2342] handle_bug+0x84/0x160 [ 451.581860][ T2342] exc_invalid_op+0x1a/0x50 [ 451.586385][ T2342] asm_exc_invalid_op+0x1a/0x20 [ 451.591262][ T2342] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 451.597521][ T2342] Code: ab fb e9 5d fc ff ff e8 88 ae ab fb c6 05 9c 68 ba 09 01 48 c7 c7 80 21 2c 8c e8 95 3a 13 fb e9 85 fc ff ff e8 6b ae ab fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 60 22 2c 8c 4c 89 e2 e8 25 7d 18 fb e9 [ 451.617226][ T2342] RSP: 0018:ffffc90004a4f5b0 EFLAGS: 00010293 [ 451.623343][ T2342] RAX: ffffffff86146ab5 RBX: dffffc0000000000 RCX: ffff88802a615ac0 [ 451.631427][ T2342] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 451.639415][ T2342] RBP: 0000000000000001 R08: ffffffff8fe4db77 R09: 1ffffffff1fc9b6e [ 451.647435][ T2342] R10: dffffc0000000000 R11: fffffbfff1fc9b6f R12: ffffffff8c83ed00 [ 451.655422][ T2342] R13: 0000000000001770 R14: ffff88807d3cd0b0 R15: 00000000fffffff5 [ 451.663414][ T2342] ? firmware_fallback_sysfs+0x745/0x9b0 [ 451.669076][ T2342] ? kmem_cache_free+0x19b/0x690 [ 451.674027][ T2342] ? _request_firmware+0x6be/0x15b0 [ 451.679235][ T2342] _request_firmware+0xf83/0x15b0 [ 451.684277][ T2342] ? __lock_acquire+0xab9/0xd20 [ 451.689154][ T2342] ? __pfx__request_firmware+0x10/0x10 [ 451.694624][ T2342] ? rcu_is_watching+0x15/0xb0 [ 451.699411][ T2342] ? trace_contention_end+0x39/0x120 [ 451.704838][ T2342] ? __mutex_lock+0x335/0x1350 [ 451.709642][ T2342] request_firmware+0x36/0x50 [ 451.714344][ T2342] pvr2_locate_firmware+0xb3/0x500 [ 451.719485][ T2342] pvr2_upload_firmware1+0x1b4/0x900 [ 451.724882][ T2342] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 451.730875][ T2342] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 451.736702][ T2342] pvr2_hdw_initialize+0x3df/0x3ac0 [ 451.741908][ T2342] ? __lock_acquire+0xab9/0xd20 [ 451.746781][ T2342] ? __mutex_trylock_common+0x153/0x260 [ 451.752354][ T2342] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 451.757998][ T2342] ? rcu_is_watching+0x15/0xb0 [ 451.762773][ T2342] ? trace_contention_end+0x39/0x120 [ 451.768080][ T2342] ? pvr2_context_thread_func+0x263/0xaf0 [ 451.773809][ T2342] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 451.779454][ T2342] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 451.785442][ T2342] ? schedule+0x91/0x360 [ 451.789702][ T2342] ? schedule+0x16f/0x360 [ 451.794044][ T2342] pvr2_context_thread_func+0x487/0xaf0 [ 451.799600][ T2342] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 451.805669][ T2342] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 451.811587][ T2342] ? __pfx_autoremove_wake_function+0x10/0x10 [ 451.817673][ T2342] ? __kthread_parkme+0x7b/0x200 [ 451.822625][ T2342] ? __kthread_parkme+0x1a1/0x200 [ 451.827769][ T2342] kthread+0x711/0x8a0 [ 451.831896][ T2342] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 451.837988][ T2342] ? __pfx_kthread+0x10/0x10 [ 451.842699][ T2342] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.847932][ T2342] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.853151][ T2342] ? __pfx_kthread+0x10/0x10 [ 451.857760][ T2342] ret_from_fork+0x4bc/0x870 [ 451.862396][ T2342] ? __pfx_ret_from_fork+0x10/0x10 [ 451.867528][ T2342] ? __switch_to_asm+0x39/0x70 [ 451.872304][ T2342] ? __switch_to_asm+0x33/0x70 [ 451.877267][ T2342] ? __pfx_kthread+0x10/0x10 [ 451.881877][ T2342] ret_from_fork_asm+0x1a/0x30 [ 451.886695][ T2342] [ 451.890123][ T2342] Kernel Offset: disabled [ 451.894452][ T2342] Rebooting in 86400 seconds..