last executing test programs: 7.662179986s ago: executing program 2 (id=4716): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="db33c2df", 0x4}, {&(0x7f0000000100)="07a04f", 0x3}], 0x2}, 0x20000005) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x800) r4 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/69, 0x91}], 0x2}, 0x40010040) 7.64068993s ago: executing program 3 (id=4717): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x88) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000000)="8639c74d1b79334265bb32c86463f0040000000000000056585aa950b1a214341400000000000000290000003b000000e0955702", 0x34) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000000)) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9370, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x5}]}}]}, 0x98}}, 0x0) 7.393827667s ago: executing program 3 (id=4718): r0 = timerfd_create(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x400, &(0x7f00000002c0)=ANY=[@ANYBLOB="66643d98bd2bad5f4d822a352fdd13a4e7305317bcb0df18c94b7d5d794c1370fc5497e26d4a2439d0d75d2a0d5bda5037b535a00b5bb167a93536e6debd355fc8c209fdf19d996c76d41dffb463a83781554cbcf257b433c21ed2604004034725a4c7061c81cb2a606678cea3e5a40103a6d7741da08a7be616f01fdac9ef741db5b4175897c66d3fd76c42", @ANYBLOB="659abcd8fc2b88678be57c19a74de64f351dc2144974", @ANYRESDEC=r1, @ANYRES32=r0, @ANYRES16=r1, @ANYRESDEC=0x0, @ANYRES32=r0, @ANYRES8=r0]) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.361147039s ago: executing program 2 (id=4719): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000007c08000200000000000800030000000000040004"], 0x7c}}, 0x0) 7.202981138s ago: executing program 3 (id=4720): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x109000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r1) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/kexec_crash_size', 0x149a82, 0x0) sendfile(r5, r5, 0x0, 0x3) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x4000010}, 0x5) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_DST={0x63, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r7}]}, 0x34}}, 0x40040d0) 7.095005794s ago: executing program 2 (id=4722): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0x6, 0x7}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x20, r10, 0x1, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) memfd_create(0x0, 0x3) 5.512099993s ago: executing program 0 (id=4727): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', 0x0) add_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000200)="8f9aacb7860c1676df30845e279b2f2b85d374c79225b6d1d652846c", 0x1c, r2) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000001000e29a9f2590370410000000ffdbdfc239ce572c0457bbd495f2245f197f5ce06efb42063b142345e3219002e77875238a3c85b4f04452782506e4db58e279ec2107b58a228ce7b0da9b0c5f186917f6", @ANYRES32=r4, @ANYBLOB="8345050001000000180012800b00010067656e65766500000800028004000600"], 0x38}}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x7, 0x7}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x8, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x0, 0x0, 0x1, 0x3bf}}], 0x20}}], 0x1, 0x80) 5.374165873s ago: executing program 4 (id=4728): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r6, 0x407, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="8f", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000000700)}}], 0x2, 0x0) 4.857443238s ago: executing program 2 (id=4730): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) io_setup(0x42, &(0x7f0000000100)=0x0) sendmmsg$alg(r4, &(0x7f00000037c0)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="82", 0x1}, {&(0x7f0000000240)="291e9c133b82e07adfdbcd07db0d9273", 0x10}], 0x2, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x5) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r4, &(0x7f0000000000)='e', 0x3f}]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000280)={0x0, 0x15, &(0x7f00000000c0)={&(0x7f00000005c0)={0x98, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c}, @CTA_TIMEOUT={0x30}, @CTA_NAT_SRC={0x4, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x0, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x0, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x0, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x0, 0x2, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x0, 0x4, @empty}, @CTA_NAT_V6_MAXIP={0x0, 0x5, @empty}, @CTA_NAT_V6_MINIP={0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x25}}, @CTA_NAT_V6_MAXIP={0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x0, 0x5, @mcast2}]}]}, 0x98}}, 0x80) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x0, 0xffff, 0x52424752, 0x0, 0x0, 0x4, 0xb}}) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 4.347570985s ago: executing program 3 (id=4731): mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc000, 0x0, 0x81, 0x4) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000000300)={0x20, 0xd, 0x3a, {0x3a, 0xb, "50cf746aa1eaac3ea00f48a5a5e131c463d01c7e7316bc47a8c171f3bdcafae4ec08dd3709000000390b4f0334934dad38d5a868bc5f0ed9"}}, &(0x7f0000000380)={0x0, 0x3, 0xc9, @string={0xc9, 0x3, "0c2a383a31b0f1af0d0bda476da4533d1d82017aca02d2d1ab4fc990b17b92487990444066ebd8ebfcb0c7cfa14a34fd81a1e76a26b75697f111e2e9793506566dad16fc79bd4f511b95257425449ce38f9fc911ca0724f5221e79a517ce4d3c2236e830cd5808f6b61feb4e35fc723da555f7bb39b53f19db827346c86b46b9ecab433f5cc7f4f2a672a8d6df2856d1551a111955e75e966a0361383e3eb7cd166a1900677a949d4b2607eb32c14f3824f1e01de5beabcdc4990f3660a390252e5e1dc8d06f3a"}}, &(0x7f0000000ac0)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x9, "d22929c7"}, @global=@item_012={0x0, 0x1, 0xb}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfff, 0x0, 0x1, {0x22, 0x816}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000580)={0x40, 0xe, 0x5, "c87b82ea70"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000680)={0x20, 0x1, 0x2b, "dc9d6fedcc007962364601ba17e061bd3fd1b47fa9e9ca135655629edf559fd7145c3f0551b91840b45344"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x9}}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e24, 0x1, @mcast2, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000480)={0x14, &(0x7f0000000c00)={0x40, 0x30, 0xb7, {0xb7, 0x24, "698182fc35ee9ed06b476a0cff77f096820c086c4bc611da95b5fced1683fb11afee684a79031e1183fca26f31cc67d5a132c337938166f629b1780e65100af42f8538ab31ec5b297073e6c6093e55cd25d334dd4fc418055a9009dd5c059f13888f7308f637c8e516fcffa232b57d9a18cf5da826cdbd4830a88bd988e94d9730bd419fc4838daca05ec8ad3ec262f137cfe00f63187e07f514ccf13b910500aee9fb0c1c0e7cd197fc37482fb35a2f1c84a54536"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e00)={0x1c, &(0x7f0000000cc0)={0x0, 0x11, 0xe8, "3fd2c354a2b4ec676055e2469b7a02f279172261ca678be5170e7908dfbdd87712f159bb8a2b0180e98d26c895df1bc38dc93fd073000377a1dabe2ab2f4a76b63b6112cfb0de2ed65280afcfde3308649c918f198479e9a5260dfd24c97f1e4fe5de0e44807ae53b83619f847a7da8ccb0bc5ddac5f9cc99a6a94dc8209c953532e56422e89750469f47f5dc3a7bb7f9959c32992d8461cdb902a872b76ecee65df158c644c29407fd2631df91011da62c14e3d881fb5d64efb5f6ff8c727d2d39ef31f307d02bf0a9006a7c4575da14294b388f88949845f3ca9c6c0d7451d41ac3e24d2b298ff"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x3}}) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x8, "23e3c4", "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"}}, 0x110) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000040)={0x10, 0x14, 0x1, 0x870bd23, 0x25dfdbfb, {0x1, 0x10}, [@INET_DIAG_REQ_BYTECODE={0x23, 0x1, "a70200ded9bacb91ff49fc66e527e25548c7a20033b300000b000000000000"}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r5 = dup3(r3, r4, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_control_io$hid(r0, &(0x7f0000000fc0)={0x24, &(0x7f0000000e40)={0x0, 0x31, 0x92, {0x92, 0x30, "113a2c2528811acc509d9b3d790c9c990b7ebce12e959eaf96bb51e82027494b9cc5af9b625fd550dea5e52ef0fb1f004313a36c8c28c421e70080b61d00cf12ddc663d86f80865f22904edc2626aabf81033d6e9d699efa430b09da3fc2ec461b8bb87964b77205a94196868693a581c0cc1737bf25de76e4ca89e7ceba22af1fb0ebb3132d7d64e88007f7c6442ab8"}}, &(0x7f0000000f00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}, &(0x7f0000000f40)={0x0, 0x22, 0x23, {[@local=@item_012={0x2, 0x2, 0x0, "2cf1"}, @global=@item_012={0x1, 0x1, 0xa, "cd"}, @main=@item_4={0x3, 0x0, 0xc, "c125081a"}, @local=@item_4={0x3, 0x2, 0x0, "e948e2f5"}, @global=@item_4={0x3, 0x1, 0x2, "d22ff0dd"}, @global=@item_4={0x3, 0x1, 0x5, "6c06c543"}, @local=@item_4={0x3, 0x2, 0x2, "f8abc0b3"}, @main=@item_4={0x3, 0x0, 0xb, "ad22b20d"}]}}, &(0x7f0000000f80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x1, 0x1, {0x22, 0xd78}}}}, &(0x7f0000001180)={0x2c, &(0x7f0000001000)={0x20, 0x10, 0x3a, "7449edacfd23fcc4d642628feb28c151970a235668ab4181325f971e8092ff154a74a164377cb2be4d9c220ecd8ef964ee8b840ee5a01b058d5c"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000010c0)={0x20, 0x1, 0x3c, "4eb608bd14e9971839ff38744643a465375b93d00a2b65a157334bff9d8a37c39d8051a3f53bdc7525856630dde6c1f51be38df37d04dbf7cb7382cd"}, &(0x7f0000001140)={0x20, 0x3, 0x1, 0xff}}) ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f0000000180)={0x0, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000740)={0x3, [0x0, 0x0, 0x0]}) syz_usb_control_io$printer(r0, &(0x7f0000000840)={0x14, &(0x7f0000000780)={0x40, 0xa, 0x47, {0x47, 0xa, "8f230cd0678e21fd2100a2fa93a1b5324ad045cf3eb011ee713926e5e96ac705c7cde303fa773353e753df5b5c006ed8f6f1951d362c189ebb4802754b962b9e63c04bda8e"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}}, &(0x7f0000000a80)={0x34, &(0x7f0000000880)={0x60, 0x13, 0x1f, "8cfa60ae923c36aed6a9f4c92148d6a9c61a3001c5c74c47ceaf76f506175a"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000940)={0x20, 0x0, 0x7f, {0x7d, "b97b2d0e0376f5cd517334d2177fb77ebd77bf2ce301f5ef046bdca926968e6b045de50d4d609dda0b54aaa3eb54f83462623709d38650553993a307d1f5e759e5e3187a4817f04d69e00f569e798310d881a766348cfb5962d3df65dfe83d465a327122971804a5becdcb3624b1a4426f18478c7325b2be41a7d5aa4f"}}, &(0x7f0000000a00)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000a40)={0x20, 0x0, 0x1, 0x5}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000000)={0x0, 0x31, 0x71, "cdb19f27c0a9f9e74d105c7e42d3f46558dff62e7a778592626493544ea7c0fade4147cbb4977a37992516008bb4de0000000000000000007630e04c5e0f60a98529f5c10ee68951deedd2a94d77d9a9393b960930fe8d1fe2236041a9a583aadb5d2e80b147fb8055f73d149e5172cb1c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f00000001c0)={0x20, 0x15, 0xb6, "a03bcc05b5532f12d8a0fa612ba909000000cf3d2e8673730eb12846a0218d95d2437d2d9f07a2b4a2c5d4f038dbbd86100763b5dd740e37f8b022899568f65092c45c97e9847b2bb211d71a69379b1e6c676288fd958a56c233b4b09f363ee18a797ce1a759e768b4c496c58e1fd840f619711e07737727a878321b681a12ee3e52c26fafd415641199027a1702b7109696c0bb0caa3cf65da8740a3804422b1d89d8358a34a2974b658726184a3505299c67468a93"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.697580702s ago: executing program 4 (id=4733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001400010000000000000000000000000a58000000060a0b04000000000093f8cc9652a6327d0604802800018007000100637400001c0002800800014000000002080002400000001405000300000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x24004800) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r3, 0xf05, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x82}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1a}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}]]}, 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) 3.65928795s ago: executing program 1 (id=4734): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r0 = open(0x0, 0x80ff, 0x0) r1 = fsopen(&(0x7f0000000180)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x400c000) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={0x0, 0x0, 0x8, r0}, 0x18) socket$inet_smc(0x2b, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}, {0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) shutdown(0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) recvmmsg(r4, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0x400005}], 0x1, 0x42, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendfile(r0, r4, 0x0, 0x400) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x5502000000000000}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf5}, &(0x7f0000000480)=0x9c) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') 3.0196308s ago: executing program 0 (id=4738): r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000001400)=@profile={'stack ', '/proc/sys/fs/binfmt_misc/syz1\x00'}, 0x24) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000001180)={0x1, 0x0, [{0x40000070, 0x0, 0x100000001}]}) read$FUSE(r1, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) open_by_handle_at(r2, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c0000008100"], 0xfeffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r8 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) writev(r8, &(0x7f0000001380)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)="3fbea2fa21a805a4b05cce6e7c27a4834293fe2df2b3ace2508926bd1cc55bc310c934e156b40727eda3380d24", 0x2d}, {&(0x7f0000000100)="030b60e29517f3ef272f2a4be9a2d01af4e5b9fcb3a12bfb84d4ba0e9169", 0x1e}, {&(0x7f0000000140)="75c6c7b409c753b7027e70d3c9d722c47318542a2afb40ad5d6b8139bf0078ae0d597e2c45ea74b26cdffa40d7d4fbe758e123b540b37f4ddc7ba307ba3994d97c11da7c5c86731866c1768dabb958f904163df2b344de177766fa409fccd06dc9cdc73befacbd7d97ab48e634a8933afe8137f92c4111c85d240b16a94c36f09528c8adc15e6dda3a080983d0a5c787101ebb7e293bf5941754257f2584698fc9de97699f484aaa261c3f6c4a578f4b700aac7f11dbb9f65e314a36fe07b0907689b7c0886569853ab7751489f8d1575e0723d21d0411f4a7b015b704a9d21f59eba058f4c5a7", 0xe7}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="0976d1395a93b90f4edb28473283bd0f81508cab30429a330ca6b079d3d7e7affdf48c7322f7ee38f92605f21ef8eed1be58312de1f231d57485e04ee139f8b31d4b78766520af392e573bdc", 0x4c}, {&(0x7f00000012c0)="93b1061574538d76b911b4bb5ddae17c02faefa4aaa26ca1192ab72f9853d9a1deadd4ef0259ce23488825eeb05d16a0d0ad6e21f99ce8217923353377b6b473094113949f288ccc737cb0134381ee9a1e7cdadc71a47418794b8cab5dc703df42a021cd15979da69830e0bd2faa3e64fceb929bfa1943459b921bd3c1c1f680edcc4f7661e717589fa66616b2c9e47515eaa065197ab448d8a024e942f9213c51ed", 0xa2}], 0x7) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) clock_settime(0x100000000000000, &(0x7f0000000000)={0x8000000000000001, 0x3}) 2.894058938s ago: executing program 4 (id=4739): socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x7, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) (async) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000000)={0x7b77, 0x2, [{}, {0x4, 0x1}]}) syz_io_uring_submit(0x0, 0x0, 0x0) (async) socket$inet6(0xa, 0x5, 0x4) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.616351656s ago: executing program 4 (id=4740): syz_usb_connect(0x5, 0x285, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001000390400"/20, @ANYRES32, @ANYBLOB="0198060000000000e00016809c0001800c00030072f2ffff0000000d1000060002000000010000000200000014000a000300000000000000030000000000000014000a00ff01000000000000996000000000000014000b00010000000000000001000000000000000c000500018000000c0000000c00030008000000255900002800010085070000aaaaaaaaaaaa0000000000000000000000000000000000000000000000000000100001800c00070005000000090000003000018010000200b1f100008e0c0000295771520c000300dbf0ffff0700000010000600000100000d0000000100008008000a00", @ANYRES32, @ANYBLOB="08001300", @ANYRES32, @ANYBLOB="0a000200aaaaaaaaaa430000050010000100000008001300", @ANYRES32, @ANYBLOB='\b\x00.'], 0x154}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000140)=',,\x00') mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, &(0x7f0000000380)='cache=mmap') ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"]) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="76a0000000000000", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x0}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f00000001c0)) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1.961094605s ago: executing program 0 (id=4741): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x109000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r1) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/kexec_crash_size', 0x149a82, 0x0) sendfile(r5, r5, 0x0, 0x3) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x4000010}, 0x5) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_DST={0x63, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r7}]}, 0x34}}, 0x40040d0) 1.657993823s ago: executing program 1 (id=4742): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x2) r3 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) close(r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b719000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.450615644s ago: executing program 1 (id=4743): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4140aecd, &(0x7f0000000000)) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r5 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x2, 0x28b}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) (async) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x4, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fsopen(0x0, 0x0) (async) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.173403611s ago: executing program 2 (id=4744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xbc, 0xc5, 0xf4, 0x8, 0x17cc, 0x1010, 0x79c0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa6, 0x0, 0x0, 0x3c, 0x83, 0x45}}]}}]}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xe0, 0x2, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x27, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010102}}}]}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_TUPLE={0x34, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x9f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000000) (async, rerun: 64) socket$packet(0x11, 0xa, 0x300) (async) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) (async) socket(0x1d, 0x2, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) (rerun: 32) ioctl$MON_IOCX_GETX(r3, 0x80089203, 0x0) (async, rerun: 64) splice(0xffffffffffffffff, &(0x7f0000000140)=0xff, r2, &(0x7f00000001c0)=0x4, 0x4, 0x0) (async, rerun: 64) r4 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000"], 0xa0}}, 0x4000000) (async) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) socket(0x10, 0x80002, 0x2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) (async) ioctl$TCSETSW2(0xffffffffffffffff, 0x80047456, 0x0) socket$inet6(0xa, 0x0, 0x7f1) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000100)={'ip6gre0\x00', {0x2, 0x0, @multicast2}}) fsopen(&(0x7f0000000200)='vxfs\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000001840)='environ\x00') (async) socket$packet(0x11, 0x2, 0x300) 714.046996ms ago: executing program 4 (id=4745): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffff60000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r3, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{0x0}], 0x1) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000480)="ad42d72b3517daeec53b4cdb0237b7566e124611af3e4361c7659e10fc2c36af5935493a996611d3b5f9190b1f101f959f8e95f4ffa065d093232ff212b5e7960de352b10d4033e6410ad7bee96ba1a9d65fc6326cbbf6a980b54fcb7ec9ca91e693c6f41e787ae7064ed57a435fee585565f72ef3f613dc9cad9a3ca1be14741ec1ee999d4f419dfdc0ac5bea8d19d28b9155bbaa4b028039dfbeb36222da7364bc2f0e487793d634d2a6ca8985451ff94119757ce428530ff34eedd719158f3f1a75", 0xc3}], 0x1) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 674.342406ms ago: executing program 1 (id=4746): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002, 0x1000}, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) 523.990178ms ago: executing program 1 (id=4747): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000200630138000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b00}, 0x94) 385.990246ms ago: executing program 3 (id=4748): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x400c000) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={0x0, 0x0, 0x8, r0}, 0x18) socket$inet_smc(0x2b, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}, {0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) shutdown(0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) recvmmsg(r4, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0x400005}], 0x1, 0x42, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendfile(r0, r4, 0x0, 0x400) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x5502000000000000}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf5}, &(0x7f0000000480)=0x9c) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') 262.767974ms ago: executing program 1 (id=4749): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xf9}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x1, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x1000000000000, 0x0, 0x20000040}, 0x4000c00) 234.096097ms ago: executing program 3 (id=4750): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0x2d59, 0x2, 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) (async) fcntl$lock(r5, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) (async, rerun: 32) r6 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) (async, rerun: 64) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) (async, rerun: 64) syz_open_dev$sg(0x0, 0x0, 0x101a02) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (rerun: 64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) (async) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r9, 0x0, 0x0) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.376478ms ago: executing program 2 (id=4751): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = io_uring_setup(0x17ba, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e44751170", 0x30}], 0x2) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f00000007c0)={{r1}, "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"}) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000000c0)) read$char_usb(r1, &(0x7f0000000280)=""/239, 0xef) 0s ago: executing program 0 (id=4752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0xa8, 0x4, 0x4c7, 0x80000001, 0x9, 0x5]}, &(0x7f0000000080)=0x78) fgetxattr(r0, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000000)=""/7, 0x7) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x5, r3, 0x0, &(0x7f0000000440)="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", 0x800}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r3}) kernel console output (not intermixed with test programs): g to 1024 [ 1087.090867][T21952] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4332'. [ 1087.145010][ T43] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1087.175047][ T43] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1087.225895][ T43] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1087.244257][ T43] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1087.295058][ T43] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1087.345450][ T43] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1087.384993][ T43] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 1087.405044][ T5902] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 1087.405794][ T956] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1087.422937][ T43] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1087.444769][ T43] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1087.474992][ T43] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1087.506800][ T43] usb 2-1: string descriptor 0 read error: -22 [ 1087.525223][ T43] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1087.535149][ T5841] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1087.544526][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.567109][ T5902] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1087.575493][ T5902] usb 3-1: not running at top speed; connect to a high speed hub [ 1087.610166][ T43] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1087.613805][ T956] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1087.625531][ T5902] usb 3-1: config 0 has an invalid interface number: 93 but max is 0 [ 1087.646523][ T5902] usb 3-1: config 0 has no interface number 0 [ 1087.657755][ T956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.665062][ T5902] usb 3-1: config 0 interface 93 has no altsetting 0 [ 1087.677981][ T5902] usb 3-1: New USB device found, idVendor=2040, idProduct=721e, bcdDevice=5e.2b [ 1087.685257][ T5841] usb 4-1: device descriptor read/64, error -71 [ 1087.698468][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.704210][ T956] usb 1-1: Product: syz [ 1087.713842][ T956] usb 1-1: Manufacturer: syz [ 1087.714986][ T5902] usb 3-1: Product: syz [ 1087.722355][ T956] usb 1-1: SerialNumber: syz [ 1087.733218][ T5902] usb 3-1: Manufacturer: syz [ 1087.740262][ T956] usb 1-1: config 0 descriptor?? [ 1087.756212][ T5902] usb 3-1: SerialNumber: syz [ 1087.764675][ T5902] usb 3-1: config 0 descriptor?? [ 1087.950305][ T5841] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1088.014658][ T956] usb 1-1: USB disconnect, device number 56 [ 1088.021088][ T5902] usb 3-1: unknown interface protocol 0x1a, assuming v1 [ 1088.035094][ T10] usb 5-1: new low-speed USB device number 69 using dummy_hcd [ 1088.068719][ T5902] usb 3-1: cannot find UAC_HEADER [ 1088.125256][ T5841] usb 4-1: device descriptor read/64, error -71 [ 1088.140969][ T5902] snd-usb-audio 3-1:0.93: probe with driver snd-usb-audio failed with error -22 [ 1088.192460][ T5902] usb 3-1: USB disconnect, device number 89 [ 1088.224325][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1088.238342][ T10] usb 5-1: config 8 has an invalid interface number: 78 but max is 0 [ 1088.247920][ T5841] usb usb4-port1: attempt power cycle [ 1088.256524][ T10] usb 5-1: config 8 has no interface number 0 [ 1088.269627][ T10] usb 5-1: config 8 interface 78 has no altsetting 0 [ 1088.269884][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.93/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1088.288250][ T10] usb 5-1: string descriptor 0 read error: -22 [ 1088.301642][ T10] usb 5-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice=ab.f5 [ 1088.334093][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.371325][ T10] mos7720 5-1:8.78: required endpoints missing [ 1088.595134][ T5841] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1088.625763][ T5841] usb 4-1: device descriptor read/8, error -71 [ 1088.865095][ T5841] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1088.885758][ T5841] usb 4-1: device descriptor read/8, error -71 [ 1088.995508][ T5841] usb usb4-port1: unable to enumerate USB device [ 1089.114991][ T5902] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1089.295050][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 1089.307206][ T5902] usb 3-1: config 0 has an invalid interface number: 53 but max is 0 [ 1089.316202][ T5902] usb 3-1: config 0 has no interface number 0 [ 1089.326432][ T5902] usb 3-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 1089.350809][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.366542][ T5902] usb 3-1: Product: syz [ 1089.370979][ T5902] usb 3-1: Manufacturer: syz [ 1089.376263][ T5902] usb 3-1: SerialNumber: syz [ 1089.389912][ T5902] usb 3-1: config 0 descriptor?? [ 1089.618767][ T5902] usb 3-1: USB disconnect, device number 90 [ 1089.745103][ T5841] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1089.875259][ T5841] usb 1-1: device descriptor read/64, error -71 [ 1090.115067][ T5841] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1090.245151][ T5841] usb 1-1: device descriptor read/64, error -71 [ 1090.359085][ T5841] usb usb1-port1: attempt power cycle [ 1090.405815][ T5902] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1090.444499][ T43] usb 2-1: USB disconnect, device number 92 [ 1090.605637][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 1090.616932][ T5902] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1090.625374][ T5902] usb 3-1: config 0 has no interface number 0 [ 1090.631566][ T5902] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1090.642767][ T5902] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1090.654709][ T5902] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1090.665909][ T5902] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1090.679350][ T5902] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1090.688620][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.702609][ T5902] usb 3-1: config 0 descriptor?? [ 1090.705152][ T5841] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1090.724645][ T5902] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1090.736874][ T5841] usb 1-1: device descriptor read/8, error -71 [ 1090.789319][ T10] usb 5-1: USB disconnect, device number 69 [ 1090.989053][ T5841] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1091.037772][ T5841] usb 1-1: device descriptor read/8, error -71 [ 1091.174485][ T5841] usb usb1-port1: unable to enumerate USB device [ 1091.500872][T21990] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4345'. [ 1091.765090][ T5841] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1091.937344][ T5841] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1091.956187][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.004551][ T10] usb 3-1: USB disconnect, device number 91 [ 1092.013002][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1092.023666][ T5841] usb 2-1: config 0 descriptor?? [ 1092.271209][ T5841] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1092.719740][ T5841] [drm:udl_init] *ERROR* Selecting channel failed [ 1092.793117][ T5841] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1092.821021][ T5841] [drm] Initialized udl on minor 2 [ 1092.947025][ T5841] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1093.083378][ T5841] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1093.097547][ T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1093.109115][ T5841] usb 2-1: USB disconnect, device number 93 [ 1093.119923][ T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1093.136058][T22010] syzkaller0: entered promiscuous mode [ 1093.210468][T22010] syzkaller0: entered allmulticast mode [ 1093.667179][T22020] netlink: 'syz.4.4353': attribute type 4 has an invalid length. [ 1093.704068][T22021] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4352'. [ 1094.046354][ T5902] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1094.216199][ T5902] usb 1-1: device descriptor read/64, error -71 [ 1094.476112][ T5902] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1094.510440][T22041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4358'. [ 1094.519598][T22041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4358'. [ 1094.560768][T16647] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1094.576052][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1094.615268][ T5902] usb 1-1: device descriptor read/64, error -71 [ 1094.627860][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1094.759722][ T5902] usb usb1-port1: attempt power cycle [ 1094.775204][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1094.875286][ T5841] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1095.232902][T22043] netlink: 'syz.1.4359': attribute type 13 has an invalid length. [ 1095.241510][ T5902] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1095.265384][ T5841] usb 5-1: device descriptor read/64, error -71 [ 1095.297491][ T5902] usb 1-1: device descriptor read/8, error -71 [ 1095.381859][T22045] loop9: detected capacity change from 0 to 7 [ 1095.396108][T22045] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1095.401494][T22045] loop9: partition table partially beyond EOD, truncated [ 1095.431996][T22045] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 1095.505536][ T5841] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1095.575950][ T5902] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1095.645210][ T5841] usb 5-1: device descriptor read/64, error -71 [ 1095.714402][T22054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4362'. [ 1095.723731][T22054] netlink: 'syz.2.4362': attribute type 2 has an invalid length. [ 1095.731879][T22054] netlink: 'syz.2.4362': attribute type 1 has an invalid length. [ 1095.739752][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4362'. [ 1095.764362][ T5902] usb 1-1: device descriptor read/8, error -71 [ 1095.766868][ T5841] usb usb5-port1: attempt power cycle [ 1095.807910][ T5934] udevd[5934]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1095.886699][ T5902] usb usb1-port1: unable to enumerate USB device [ 1096.155221][ T5841] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1096.187433][ T5841] usb 5-1: device descriptor read/8, error -71 [ 1096.585938][ T5841] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1096.599688][T22057] netlink: 'syz.3.4363': attribute type 4 has an invalid length. [ 1096.610628][ T5841] usb 5-1: device descriptor read/8, error -71 [ 1096.725283][ T5841] usb usb5-port1: unable to enumerate USB device [ 1097.445158][ T5902] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1097.514509][T22072] netlink: 'syz.4.4369': attribute type 4 has an invalid length. [ 1097.615629][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 1097.627370][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.654153][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.692149][ T5902] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1097.707300][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.707517][T22079] loop9: detected capacity change from 0 to 7 [ 1097.761623][ T5902] usb 2-1: config 0 descriptor?? [ 1097.816132][T22079] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1097.822298][T22079] loop9: partition table partially beyond EOD, truncated [ 1097.859943][T22082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4371'. [ 1097.869199][T22082] bridge_slave_1: left allmulticast mode [ 1097.875431][T22082] bridge_slave_1: left promiscuous mode [ 1097.882119][T22082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.925775][T22079] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 1097.939663][T22083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4371'. [ 1098.052293][ T5934] udevd[5934]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1098.221747][ T5902] ft260 0003:0403:6030.0036: unknown main item tag 0x7 [ 1098.421732][ T5902] ft260 0003:0403:6030.0036: chip code: 6424 8183 [ 1098.622445][ T5902] ft260 0003:0403:6030.0036: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 1098.623973][T22090] netlink: 'syz.2.4373': attribute type 5 has an invalid length. [ 1098.669483][T22090] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.4373'. [ 1098.822939][ T5902] ft260 0003:0403:6030.0036: failed to retrieve status: -32, no wakeup [ 1099.237308][T22064] ft260 0003:0403:6030.0036: unsupported smbus transaction size 7 [ 1099.247402][T22064] i2c i2c-1: adapter quirk: msg too long (addr 0x0000, size 27, write) [ 1099.258171][T22064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.277694][T22064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.415779][ T5902] usb 2-1: reset high-speed USB device number 94 using dummy_hcd [ 1099.896446][T22105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4377'. [ 1099.943132][T22105] 8021q: VLANs not supported on sit0 [ 1099.969719][T22105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1100.144254][T12871] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1100.237348][ T43] usb 2-1: USB disconnect, device number 94 [ 1100.369405][T12871] usb 1-1: config 128 has an invalid interface number: 148 but max is 0 [ 1100.401440][T12871] usb 1-1: config 128 has no interface number 0 [ 1100.415638][T12871] usb 1-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1100.426929][T12871] usb 1-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 1100.439342][T12871] usb 1-1: config 128 interface 148 has no altsetting 0 [ 1100.571948][T12871] usb 1-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 1100.581314][T12871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.591385][T12871] usb 1-1: Product: syz [ 1100.595977][T12871] usb 1-1: Manufacturer: syz [ 1100.605464][T20345] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1100.620003][T12871] usb 1-1: SerialNumber: syz [ 1100.732344][T22128] netlink: 'syz.3.4382': attribute type 4 has an invalid length. [ 1100.749863][T22128] netlink: 'syz.3.4382': attribute type 4 has an invalid length. [ 1100.956855][T20345] usb 5-1: device descriptor read/64, error -71 [ 1101.195140][T20345] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1101.535111][T20345] usb 5-1: device descriptor read/64, error -71 [ 1101.747623][T20345] usb usb5-port1: attempt power cycle [ 1101.754794][T12871] usb 1-1: USB disconnect, device number 65 [ 1101.945081][ T956] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1102.096218][T20345] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1102.117981][T20345] usb 5-1: device descriptor read/8, error -71 [ 1102.163665][ T956] usb 3-1: config 0 has no interfaces? [ 1102.245097][T12871] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1102.267050][ T956] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1102.376475][T20345] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1102.440173][T22143] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4385'. [ 1102.464565][T20345] usb 5-1: device descriptor read/8, error -71 [ 1102.485557][T12871] usb 1-1: Using ep0 maxpacket: 8 [ 1102.498273][T12871] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1102.507590][T12871] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1102.528652][T12871] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1102.535846][ T956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.547155][T12871] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 1102.557404][ T956] usb 3-1: Product: syz [ 1102.562680][ T956] usb 3-1: Manufacturer: syz [ 1102.562756][T12871] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1102.594703][T22144] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1102.606201][T12871] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1102.617636][T12871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.627974][ T956] usb 3-1: SerialNumber: syz [ 1102.646194][T20345] usb usb5-port1: unable to enumerate USB device [ 1102.884461][T12871] usb 1-1: usb_control_msg returned -32 [ 1102.890436][T12871] usbtmc 1-1:16.0: can't read capabilities [ 1102.975884][ T956] usb 3-1: config 0 descriptor?? [ 1103.686847][T22106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.698526][T22106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.763313][T22149] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4386'. [ 1104.315962][T22154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1104.428967][T22155] loop9: detected capacity change from 0 to 3 [ 1104.523968][ T5934] buffer_io_error: 1070 callbacks suppressed [ 1104.523982][ T5934] Buffer I/O error on dev loop9, logical block 0, async page read [ 1104.603799][T12871] usb 3-1: USB disconnect, device number 92 [ 1104.621666][ T5934] Buffer I/O error on dev loop9, logical block 0, async page read [ 1104.661867][ T5934] Buffer I/O error on dev loop9, logical block 0, async page read [ 1104.836488][ T956] usb 1-1: USB disconnect, device number 66 [ 1104.861988][ T5934] Buffer I/O error on dev loop9, logical block 0, async page read [ 1104.921348][ T5934] Buffer I/O error on dev loop9, logical block 0, async page read [ 1104.952175][ T30] kauditd_printk_skb: 108 callbacks suppressed [ 1104.952193][ T30] audit: type=1800 audit(1759445097.737:1146): pid=22160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4389" name="nullb0" dev="devtmpfs" ino=3190 res=0 errno=0 [ 1105.002669][ T5934] Buffer I/O error on dev loop9, logical block 0, async page read [ 1105.062159][ T5934] Buffer I/O error on dev loop9, logical block 0, async page read [ 1105.161791][ T5934] Buffer I/O error on dev loop9, logical block 0, async page read [ 1105.172310][ T5934] Buffer I/O error on dev loop9, logical block 0, async page read [ 1105.182777][ T5934] Buffer I/O error on dev loop9, logical block 0, async page read [ 1105.355014][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1105.996864][T12871] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1106.171767][T12871] usb 1-1: Using ep0 maxpacket: 16 [ 1106.192632][T12871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.204166][T12871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.218129][T12871] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1106.228506][T12871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.381163][T12871] usb 1-1: config 0 descriptor?? [ 1106.405008][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1106.828038][T12871] gt683r_led 0003:1770:FF00.0037: ignoring exceeding usage max [ 1106.843567][T12871] gt683r_led 0003:1770:FF00.0037: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.0-1/input0 [ 1107.072210][T22168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.125842][T22168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.290138][T12871] usb 1-1: USB disconnect, device number 67 [ 1107.357825][T20345] gt683r_led 0003:1770:FF00.0037: failed to send set report request: -19 [ 1107.503861][T22179] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1108.135000][ T5841] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1108.299758][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 1108.373813][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.423857][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.475106][ T956] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1108.491753][ T5841] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1108.506094][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.521918][ T5841] usb 5-1: config 0 descriptor?? [ 1108.657849][ T956] usb 1-1: config 0 has no interfaces? [ 1108.691830][ T956] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1108.714579][ T956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.744507][ T956] usb 1-1: Product: syz [ 1108.757890][ T956] usb 1-1: Manufacturer: syz [ 1108.781575][ T956] usb 1-1: SerialNumber: syz [ 1108.849790][ T956] usb 1-1: config 0 descriptor?? [ 1108.943096][ T5841] usbhid 5-1:0.0: can't add hid device: -32 [ 1108.953934][ T5841] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1108.989264][ T5841] usb 5-1: USB disconnect, device number 78 [ 1109.225868][T22200] support for the xor transformation has been removed. [ 1109.620326][T22211] netlink: 'syz.4.4405': attribute type 13 has an invalid length. [ 1109.689009][T22214] loop9: detected capacity change from 0 to 7 [ 1109.710400][T22214] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1109.725161][T22214] loop9: partition table partially beyond EOD, truncated [ 1109.754632][T16662] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1109.764657][T16662] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.794774][T22214] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 1109.819676][T16662] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1109.887850][T16662] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.971853][ T5934] udevd[5934]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1109.975592][T16662] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1110.213139][T16662] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.553042][T16662] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1110.601424][T16662] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.794305][T22233] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1111.371492][T22237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4411'. [ 1111.402110][T22237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4411'. [ 1111.981620][T20345] usb 1-1: USB disconnect, device number 68 [ 1112.045108][T12871] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1112.248010][T22247] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4414'. [ 1112.290499][T12871] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1112.298907][T12871] usb 3-1: not running at top speed; connect to a high speed hub [ 1112.311963][T12871] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.328104][T12871] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1112.345196][T12871] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1112.381243][T12871] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1112.403660][T12871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.426307][T12871] usb 3-1: Product: syz [ 1112.446337][T12871] usb 3-1: Manufacturer: syz [ 1112.455392][T12871] usb 3-1: SerialNumber: syz [ 1112.675076][T20345] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1112.695328][T12871] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1112.712114][T12871] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1112.741652][T12871] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1112.834310][T12871] usb 3-1: USB disconnect, device number 93 [ 1112.840436][T20345] usb 4-1: Using ep0 maxpacket: 8 [ 1112.857345][T20345] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 1112.866895][T20345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.905624][T20345] usb 4-1: Product: syz [ 1112.930580][T20345] usb 4-1: Manufacturer: syz [ 1112.944081][T20345] usb 4-1: SerialNumber: syz [ 1112.971689][T20345] usb 4-1: config 0 descriptor?? [ 1112.993406][T20345] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 1113.018966][T20345] dvb-usb: bulk message failed: -22 (2/0) [ 1113.027246][T20345] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1113.037755][T20345] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 1113.063674][T22256] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4416'. [ 1113.299390][T20345] usb 4-1: media controller created [ 1113.374486][T22258] vlan0: entered allmulticast mode [ 1113.384226][T20345] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1113.405868][T22258] veth0_to_bond: entered allmulticast mode [ 1113.417181][T22260] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4417'. [ 1113.480015][T20345] dvb-usb: bulk message failed: -22 (1/0) [ 1113.495500][T20345] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 1113.519151][T20345] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input101 [ 1113.554721][T20345] dvb-usb: schedule remote query interval to 50 msecs. [ 1113.574418][T20345] dvb-usb: bulk message failed: -22 (2/0) [ 1113.583275][T20345] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 1113.625691][T12871] dvb-usb: bulk message failed: -22 (1/0) [ 1113.632086][T12871] dvb-usb: error while querying for an remote control event. [ 1113.648427][T20345] usb 4-1: USB disconnect, device number 117 [ 1113.705297][ T5841] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1113.850713][T20345] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 1113.908295][ T5841] usb 3-1: Using ep0 maxpacket: 16 [ 1113.932010][T22273] macsec1: entered promiscuous mode [ 1113.937606][T22273] bridge0: entered promiscuous mode [ 1113.948252][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.985171][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.009506][ T5841] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1114.051245][ T5841] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1114.088675][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.107525][ T5841] usb 3-1: config 0 descriptor?? [ 1114.327676][T22280] netlink: 'syz.3.4423': attribute type 4 has an invalid length. [ 1114.558355][ T5841] HID 045e:07da: Invalid code 65791 type 1 [ 1114.636537][ T5841] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0038/input/input102 [ 1114.737205][T22286] fuse: Bad value for 'fd' [ 1114.759628][ T5841] microsoft 0003:045E:07DA.0038: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1114.935801][ T5841] usb 3-1: USB disconnect, device number 94 [ 1115.192316][T22289] fido_id[22289]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1115.805427][ T5841] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1115.846999][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.853334][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.049978][ T5841] usb 3-1: Using ep0 maxpacket: 32 [ 1116.167001][ T5841] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1116.295059][ T5841] usb 3-1: config 0 has no interface number 0 [ 1116.301262][ T5841] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1116.416416][ T5841] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1116.444950][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.492293][ T5841] usb 3-1: Product: syz [ 1116.519940][ T5841] usb 3-1: Manufacturer: syz [ 1116.542052][ T5841] usb 3-1: SerialNumber: syz [ 1116.616755][ T5841] usb 3-1: config 0 descriptor?? [ 1116.647012][ T5841] smsc75xx v1.0.0 [ 1116.915076][T20345] usb 4-1: new low-speed USB device number 118 using dummy_hcd [ 1117.054028][ T5841] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1117.087006][ T5841] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1117.132068][ T5841] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1117.148510][ T5841] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1117.181839][ T5841] usb 3-1: USB disconnect, device number 95 [ 1117.308445][T20345] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1117.316867][T20345] usb 4-1: config 0 has no interface number 0 [ 1117.322984][T20345] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1117.334742][T20345] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1117.355356][T20345] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1117.366766][T20345] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1117.380576][T20345] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1117.390098][T20345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.466488][T20345] usb 4-1: config 0 descriptor?? [ 1117.473141][T22306] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1117.483838][T20345] ldusb 4-1:0.55: Interrupt in endpoint not found [ 1117.692100][T20345] usb 4-1: USB disconnect, device number 118 [ 1117.744044][T22318] netlink: 'syz.2.4434': attribute type 1 has an invalid length. [ 1117.794232][T22320] usb usb8: usbfs: process 22320 (syz.0.4435) did not claim interface 15 before use [ 1118.465099][ T956] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1118.752067][ T956] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1118.904767][ T956] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.921969][T22344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4441'. [ 1118.931152][ T956] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1119.051252][ T956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.092960][ T956] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1119.111600][ T956] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1119.138798][ T956] usb 5-1: Product: syz [ 1119.147364][ T956] usb 5-1: Manufacturer: syz [ 1119.182944][ T956] cdc_wdm 5-1:1.0: skipping garbage [ 1119.195978][T22349] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4443'. [ 1119.218731][ T956] cdc_wdm 5-1:1.0: skipping garbage [ 1119.278747][ T956] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1119.310996][ T956] cdc_wdm 5-1:1.0: Unknown control protocol [ 1120.119462][T22362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4445'. [ 1120.225233][T22362] fuse: Bad value for 'fd' [ 1121.429271][ T10] usb 5-1: USB disconnect, device number 79 [ 1121.595233][ T956] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1121.636011][ T5841] usb 2-1: new low-speed USB device number 95 using dummy_hcd [ 1121.705048][ T43] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1121.735753][ T956] usb 4-1: device descriptor read/64, error -71 [ 1121.753608][T22383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4453'. [ 1121.783767][T22386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4454'. [ 1121.793908][T22383] netlink: 'syz.4.4453': attribute type 1 has an invalid length. [ 1121.808365][ T5841] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1121.822081][ T5841] usb 2-1: config 0 has no interface number 0 [ 1121.830505][ T5841] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1121.850255][ T5841] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1121.856737][ T43] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1121.871301][ T5841] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1121.878000][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.904983][ T5841] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1121.914458][ T43] usb 1-1: config 0 descriptor?? [ 1121.936859][ T43] cp210x 1-1:0.0: cp210x converter detected [ 1121.949414][ T5841] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1121.962798][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.977262][ T5841] usb 2-1: config 0 descriptor?? [ 1121.983191][T22377] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1121.994805][ T5841] ldusb 2-1:0.55: Interrupt in endpoint not found [ 1122.001705][ T956] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1122.135128][ T956] usb 4-1: device descriptor read/64, error -71 [ 1122.195217][T20345] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1122.206592][ T5841] usb 2-1: USB disconnect, device number 95 [ 1122.245597][ T956] usb usb4-port1: attempt power cycle [ 1122.336094][T20345] usb 5-1: device descriptor read/64, error -71 [ 1122.595192][ T956] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1122.595278][T20345] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1122.616308][ T956] usb 4-1: device descriptor read/8, error -71 [ 1122.752144][T20345] usb 5-1: device descriptor read/64, error -71 [ 1122.758802][ T43] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 1122.774973][ T43] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1122.794264][ T43] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1122.815248][ T43] usb 1-1: USB disconnect, device number 69 [ 1122.825346][ T5934] udevd[5934]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 1122.832453][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1122.844198][ T43] cp210x 1-1:0.0: device disconnected [ 1122.855619][ T956] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1122.876415][T20345] usb usb5-port1: attempt power cycle [ 1122.885728][ T956] usb 4-1: device descriptor read/8, error -71 [ 1123.005872][ T956] usb usb4-port1: unable to enumerate USB device [ 1123.245175][T22403] CIFS: VFS: Malformed UNC in devname [ 1123.255140][T20345] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1123.285871][T20345] usb 5-1: device descriptor read/8, error -71 [ 1123.545307][T20345] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1123.575753][T20345] usb 5-1: device descriptor read/8, error -71 [ 1123.645813][ T956] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1123.718524][T20345] usb usb5-port1: unable to enumerate USB device [ 1123.963149][ T956] usb 1-1: Using ep0 maxpacket: 16 [ 1123.977999][ T956] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1123.991976][ T956] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1124.029249][ T956] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1124.044237][ T956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.056433][ T956] usb 1-1: Product: syz [ 1124.060606][ T956] usb 1-1: Manufacturer: syz [ 1124.067537][ T956] usb 1-1: SerialNumber: syz [ 1124.326155][ T956] usb 1-1: 0:2 : does not exist [ 1124.363544][ T956] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1124.455335][ T956] usb 1-1: USB disconnect, device number 70 [ 1124.565435][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1124.589729][T22417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4466'. [ 1124.766648][T22425] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4465'. [ 1124.904997][T20345] usb 3-1: new low-speed USB device number 96 using dummy_hcd [ 1125.057765][T20345] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1125.066337][T20345] usb 3-1: config 0 has no interface number 0 [ 1125.072517][T20345] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1125.102029][T20345] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1125.106383][T22432] binder: 22431:22432 unknown command 0 [ 1125.145168][T20345] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1125.159108][T22432] binder: 22431:22432 ioctl c0306201 200000000080 returned -22 [ 1125.185032][ T43] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 1125.197999][T20345] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1125.221586][T20345] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1125.359564][T20345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.371611][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1125.390973][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1125.419395][T20345] usb 3-1: config 0 descriptor?? [ 1125.432109][ T43] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 1125.449287][T22439] netlink: 14220 bytes leftover after parsing attributes in process `syz.4.4472'. [ 1125.487213][T22421] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1125.558155][T20345] ldusb 3-1:0.55: Interrupt in endpoint not found [ 1125.567689][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.632299][ T43] usb 2-1: config 0 descriptor?? [ 1125.657637][T22427] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1125.745050][ T956] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 1125.843629][ T5841] usb 3-1: USB disconnect, device number 96 [ 1125.896930][ T956] usb 5-1: config 5 has an invalid interface number: 3 but max is 0 [ 1125.905882][ T956] usb 5-1: config 5 has no interface number 0 [ 1125.919458][ T956] usb 5-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 1125.929096][ T956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.938535][ T956] usb 5-1: Product: syz [ 1125.945344][ T956] usb 5-1: Manufacturer: syz [ 1125.954628][ T956] usb 5-1: SerialNumber: syz [ 1125.995950][ T956] ftdi_sio 5-1:5.3: FTDI USB Serial Device converter detected [ 1125.997006][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 1126.162128][ T956] ftdi_sio ttyUSB0: unknown device type: 0xfd36 [ 1126.236646][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1126.252666][ T956] usb 5-1: USB disconnect, device number 84 [ 1126.290406][ T956] ftdi_sio 5-1:5.3: device disconnected [ 1126.319659][ T43] usb 2-1: USB disconnect, device number 96 [ 1126.569042][T22446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4474'. [ 1126.594689][T22446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4474'. [ 1126.648457][T22446] erspan0: entered promiscuous mode [ 1126.673669][T22446] batadv_slave_1: entered promiscuous mode [ 1126.720867][T22446] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1126.763137][T22446] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 1127.122226][T22469] netlink: 'syz.4.4483': attribute type 4 has an invalid length. [ 1127.265161][ T956] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1127.325945][T12871] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1127.405043][ T10] usb 5-1: new low-speed USB device number 85 using dummy_hcd [ 1127.415025][ T956] usb 1-1: Using ep0 maxpacket: 8 [ 1127.420614][ T956] usb 1-1: too many configurations: 128, using maximum allowed: 8 [ 1127.442259][ T956] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1127.451453][ T956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=162 [ 1127.459810][ T956] usb 1-1: Product: syz [ 1127.463980][ T956] usb 1-1: Manufacturer: syz [ 1127.468655][ T956] usb 1-1: SerialNumber: syz [ 1127.475265][ T43] usb 4-1: new low-speed USB device number 123 using dummy_hcd [ 1127.483809][ T956] usb 1-1: config 0 descriptor?? [ 1127.490507][T12871] usb 3-1: Using ep0 maxpacket: 16 [ 1127.498378][ T956] gspca_main: 047d:5003 too many config [ 1127.499132][T12871] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1127.520707][T12871] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 1127.532048][T12871] usb 3-1: config 13 has no interface number 0 [ 1127.540717][T12871] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1127.551785][T12871] usb 3-1: config 13 interface 50 has no altsetting 0 [ 1127.558486][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1127.564812][T12871] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1127.579771][T12871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.579947][ T10] usb 5-1: config 0 has no interface number 0 [ 1127.588116][T12871] usb 3-1: Product: syz [ 1127.594546][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1127.605878][T12871] usb 3-1: Manufacturer: syz [ 1127.609761][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1127.613838][T12871] usb 3-1: SerialNumber: syz [ 1127.618596][T22467] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1127.636642][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1127.652040][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1127.665401][ T43] usb 4-1: Invalid ep0 maxpacket: 32 [ 1127.671105][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1127.681229][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1127.694572][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1127.704036][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.714751][ T10] usb 5-1: config 0 descriptor?? [ 1127.724706][T22472] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1127.739765][ T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1127.825077][ T43] usb 4-1: new low-speed USB device number 124 using dummy_hcd [ 1127.860028][T12871] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1127.867432][T12871] usb 3-1: MIDIStreaming interface descriptor not found [ 1127.897021][T12871] usb 3-1: USB disconnect, device number 97 [ 1127.938268][ T5942] udevd[5942]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1127.951062][T22472] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 1127.978287][ T10] usb 5-1: USB disconnect, device number 85 [ 1127.985025][ T43] usb 4-1: Invalid ep0 maxpacket: 32 [ 1127.991552][ T43] usb usb4-port1: attempt power cycle [ 1128.001478][ T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1128.335506][ T43] usb 4-1: new low-speed USB device number 125 using dummy_hcd [ 1128.355818][ T43] usb 4-1: Invalid ep0 maxpacket: 32 [ 1128.414323][T22478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.423743][T22478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.495102][ T43] usb 4-1: new low-speed USB device number 126 using dummy_hcd [ 1128.657175][ T43] usb 4-1: Invalid ep0 maxpacket: 32 [ 1128.681387][ T43] usb usb4-port1: unable to enumerate USB device [ 1129.636386][T22492] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4489'. [ 1129.925208][ T10] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1130.075187][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1130.084330][ T10] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1130.127078][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.128675][ T43] usb 1-1: USB disconnect, device number 71 [ 1130.211209][ T10] usb 5-1: Product: syz [ 1130.235280][ T10] usb 5-1: Manufacturer: syz [ 1130.240014][ T10] usb 5-1: SerialNumber: syz [ 1130.304391][ T10] usb 5-1: config 0 descriptor?? [ 1130.439369][ T10] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1130.452284][T22498] delete_channel: no stack [ 1130.632667][T22507] binder_alloc: binder_alloc_mmap_handler: 22506 200000ffd000-200001000000 already mapped failed -16 [ 1130.767239][ T10] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1130.782186][ T10] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 1130.814865][ T956] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1130.943927][ T10] usb 5-1: USB disconnect, device number 86 [ 1131.065036][ T43] usb 3-1: new low-speed USB device number 98 using dummy_hcd [ 1131.252309][ T43] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1131.271789][ T43] usb 3-1: config 0 has no interface number 0 [ 1131.301847][ T956] usb 4-1: Using ep0 maxpacket: 32 [ 1131.327054][ T956] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1131.342313][ T956] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 1131.351224][ T956] usb 4-1: config 7 has no interface number 0 [ 1131.357783][ T956] usb 4-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1131.367857][ T956] usb 4-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 1131.378009][ T956] usb 4-1: config 7 interface 187 has no altsetting 0 [ 1131.389144][ T956] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1131.451000][ T956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.575376][ T43] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1131.583929][ T956] usb 4-1: Product: syz [ 1131.590795][ T43] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1131.602407][ T43] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1131.614103][ T43] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1131.625444][ T43] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1131.636303][ T956] usb 4-1: Manufacturer: syz [ 1131.636326][ T956] usb 4-1: SerialNumber: syz [ 1131.641295][ T43] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1131.665562][ T43] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1131.674792][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.707949][ T43] usb 3-1: config 0 descriptor?? [ 1131.714147][T22518] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1131.734648][ T43] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1131.926710][ T956] usb 4-1: Unknown endpoint type found, address 0x07 [ 1131.933726][ T956] usb 4-1: Not enough endpoints found in device, aborting! [ 1131.955861][T22518] ldusb 3-1:0.55: Couldn't submit interrupt_in_urb -90 [ 1131.999275][ T43] usb 3-1: USB disconnect, device number 98 [ 1132.035356][ T43] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1132.128495][ T956] usb 4-1: USB disconnect, device number 127 [ 1132.546026][T22541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4505'. [ 1132.615168][ T956] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1132.665926][T22545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4505'. [ 1132.676886][T22545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4505'. [ 1132.765673][ T956] usb 1-1: Using ep0 maxpacket: 32 [ 1132.777797][ T956] usb 1-1: no configurations [ 1132.793323][ T956] usb 1-1: can't read configurations, error -22 [ 1132.870162][T22552] netlink: 'syz.3.4508': attribute type 1 has an invalid length. [ 1132.883057][T22552] netlink: 'syz.3.4508': attribute type 2 has an invalid length. [ 1132.891089][T22552] netlink: 'syz.3.4508': attribute type 1 has an invalid length. [ 1132.902834][T22552] netlink: 1156 bytes leftover after parsing attributes in process `syz.3.4508'. [ 1132.967247][ T956] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1133.235029][ T956] usb 1-1: Using ep0 maxpacket: 32 [ 1133.235188][ T43] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1133.256215][ T956] usb 1-1: no configurations [ 1133.276949][ T956] usb 1-1: can't read configurations, error -22 [ 1133.323037][ T956] usb usb1-port1: attempt power cycle [ 1133.415163][ T43] usb 3-1: device descriptor read/64, error -71 [ 1133.665469][ T43] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1133.686895][ T956] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1133.705045][ T10] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1133.746742][ T956] usb 1-1: Using ep0 maxpacket: 32 [ 1133.781878][ T956] usb 1-1: no configurations [ 1133.805333][ T956] usb 1-1: can't read configurations, error -22 [ 1133.835398][ T43] usb 3-1: device descriptor read/64, error -71 [ 1133.875494][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1133.927582][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1133.945748][ T43] usb usb3-port1: attempt power cycle [ 1133.982985][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1133.992962][ T956] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1134.045931][ T956] usb 1-1: Using ep0 maxpacket: 32 [ 1134.062314][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1134.097567][ T956] usb 1-1: no configurations [ 1134.119229][ T956] usb 1-1: can't read configurations, error -22 [ 1134.144652][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1134.167877][ T956] usb usb1-port1: unable to enumerate USB device [ 1134.194797][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.229764][ T10] usb 5-1: Product: syz [ 1134.282194][ T10] usb 5-1: Manufacturer: syz [ 1134.292475][ T10] usb 5-1: SerialNumber: syz [ 1134.360289][ T10] usb 5-1: config 0 descriptor?? [ 1134.375171][ T43] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1134.375423][T22567] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4512'. [ 1134.395740][ T43] usb 3-1: device descriptor read/8, error -71 [ 1134.423050][T22561] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1134.470224][ T10] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 1134.489126][ T10] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 1134.502003][ T10] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 1134.515193][ T10] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 1134.521882][ T10] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 1134.665028][ T43] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1134.705753][ T43] usb 3-1: device descriptor read/8, error -71 [ 1134.835700][ T43] usb usb3-port1: unable to enumerate USB device [ 1134.907178][T22579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4515'. [ 1135.030432][ T5841] usb 5-1: USB disconnect, device number 87 [ 1135.044147][ T5841] mcba_usb 5-1:0.0 can0: device disconnected [ 1135.053333][T22579] 8021q: adding VLAN 0 to HW filter on device team1 [ 1135.128198][ T10] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 1135.175047][T12650] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1135.305976][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1135.314729][ T10] usb 2-1: config 0 has no interface number 0 [ 1135.325513][T12650] usb 4-1: device descriptor read/64, error -71 [ 1135.334621][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1135.361934][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1135.385270][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1135.417617][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1135.442742][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1135.460569][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1135.478952][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1135.488905][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.504186][ T10] usb 2-1: config 0 descriptor?? [ 1135.514443][T22578] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1135.619840][T12650] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1135.683186][ T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1135.739830][T22578] ldusb 2-1:0.55: Couldn't submit interrupt_in_urb -90 [ 1135.785045][T12650] usb 4-1: device descriptor read/64, error -71 [ 1135.789992][T20345] usb 2-1: USB disconnect, device number 97 [ 1135.829886][T20345] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1135.928181][T12650] usb usb4-port1: attempt power cycle [ 1136.166013][ T43] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1136.265082][T12650] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1136.285771][T12650] usb 4-1: device descriptor read/8, error -71 [ 1136.400266][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 1136.419170][ T43] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1136.428657][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.539577][ T43] usb 3-1: config 0 descriptor?? [ 1136.546963][T12650] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1136.577033][T12650] usb 4-1: device descriptor read/8, error -71 [ 1136.686304][T12650] usb usb4-port1: unable to enumerate USB device [ 1137.066660][T22603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.082366][T22603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.136439][T22603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.191574][T22603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.256566][ T43] lenovo 0003:17EF:6047.0039: hidraw0: USB HID v1.01 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 1137.738267][ T43] lenovo 0003:17EF:6047.0039: Failed to switch middle button: -71 [ 1137.751455][ T43] lenovo 0003:17EF:6047.0039: Fn-lock setting failed: -71 [ 1137.761559][ T43] lenovo 0003:17EF:6047.0039: Sensitivity setting failed: -71 [ 1137.795028][ T43] usb 3-1: USB disconnect, device number 103 [ 1137.930738][T22636] netlink: 'syz.3.4527': attribute type 13 has an invalid length. [ 1138.267058][ T43] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 1138.429856][ T43] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 1138.438432][ T43] usb 4-1: config 0 has no interface number 0 [ 1138.444572][ T43] usb 4-1: config 0 interface 49 has no altsetting 0 [ 1138.452175][ T43] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10b2, bcdDevice=c7.1b [ 1138.464954][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.476951][ T43] usb 4-1: config 0 descriptor?? [ 1138.598887][T20345] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1138.694370][T22641] netlink: 'syz.3.4529': attribute type 2 has an invalid length. [ 1138.718915][T22641] netlink: 1184 bytes leftover after parsing attributes in process `syz.3.4529'. [ 1138.757942][T20345] usb 3-1: Using ep0 maxpacket: 16 [ 1138.767457][ T43] usb 4-1: string descriptor 0 read error: -71 [ 1138.779443][T20345] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1138.822358][T20345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.833419][ T43] usb 4-1: USB disconnect, device number 6 [ 1138.852473][T20345] usb 3-1: Product: syz [ 1138.859712][T20345] usb 3-1: Manufacturer: syz [ 1138.869785][T20345] usb 3-1: SerialNumber: syz [ 1138.892906][T20345] usb 3-1: config 0 descriptor?? [ 1139.128021][T22645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.145702][T22645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.246581][T20345] usb_8dev 3-1:0.0 can0: sending command message failed [ 1139.318511][T20345] usb_8dev 3-1:0.0 can0: can't get firmware version [ 1139.405830][T20345] usb_8dev 3-1:0.0: probe with driver usb_8dev failed with error -22 [ 1139.475148][T20345] usb 3-1: USB disconnect, device number 104 [ 1140.405132][ T43] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1140.425053][T12650] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1140.574511][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 1140.591411][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1140.599465][ T43] usb 1-1: can't read configurations, error -61 [ 1140.601266][T12650] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1140.615361][T12650] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.634032][T12650] usb 3-1: config 0 descriptor?? [ 1140.651701][T12650] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1140.658263][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1140.702702][T22680] input: syz1 as /devices/virtual/input/input105 [ 1140.744353][ T43] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1140.825051][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1140.832434][ T10] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 1140.845548][T22680] netlink: 'syz.1.4542': attribute type 1 has an invalid length. [ 1140.885488][T20345] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1140.885674][ T10] usb 4-1: config 0 has no interface number 0 [ 1140.904519][ T10] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1140.917184][ T10] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1140.928761][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 1140.936302][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1140.938439][ T10] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1140.943954][ T43] usb 1-1: can't read configurations, error -61 [ 1140.970318][ T43] usb usb1-port1: attempt power cycle [ 1141.015583][ T10] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1141.023912][ T10] usb 4-1: Product: syz [ 1141.029603][T22681] gretap1: entered allmulticast mode [ 1141.040495][T22681] bond2: (slave gretap1): making interface the new active one [ 1141.048088][ T10] usb 4-1: Manufacturer: syz [ 1141.048131][ T10] usb 4-1: SerialNumber: syz [ 1141.060797][ T10] usb 4-1: config 0 descriptor?? [ 1141.067779][T22681] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1141.076836][T20345] usb 5-1: Using ep0 maxpacket: 32 [ 1141.084645][ T10] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 1141.092316][T20345] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1141.093431][ T10] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 1141.107597][T20345] usb 5-1: config 0 has no interface number 0 [ 1141.150976][T20345] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1141.181205][ T10] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 1141.210794][ T10] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1141.241109][T20345] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1141.242932][ T10] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 1141.260923][ T10] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1141.272287][ T10] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 1141.299318][T20345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.300594][ T10] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1141.320990][ T10] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 1141.325184][ T43] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1141.334541][ T10] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1141.361695][ T10] usb 4-1: USB disconnect, device number 7 [ 1141.367155][T20345] usb 5-1: Product: syz [ 1141.380110][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 1141.385418][ T10] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1141.430810][T20345] usb 5-1: Manufacturer: syz [ 1141.431912][ T10] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1141.455409][T20345] usb 5-1: SerialNumber: syz [ 1141.466370][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1141.475809][ T43] usb 1-1: can't read configurations, error -61 [ 1141.513239][ T10] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1141.523924][T12650] gspca_stv06xx: I2C: Read error writing address: -71 [ 1141.536281][T12650] usb 3-1: USB disconnect, device number 105 [ 1141.591176][ T10] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1141.603954][ T10] keyspan 4-1:0.107: device disconnected [ 1141.609726][T20345] usb 5-1: config 0 descriptor?? [ 1141.619454][T20345] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 1141.632899][ T43] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1141.708222][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 1141.724150][T20345] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 1141.763496][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1141.772100][ T43] usb 1-1: can't read configurations, error -61 [ 1141.786307][ T43] usb usb1-port1: unable to enumerate USB device [ 1141.816984][T22686] @ÿ: renamed from bond_slave_0 [ 1141.817030][T20345] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1142.033213][T20345] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 1142.128469][T22698] netlink: 'syz.3.4547': attribute type 1 has an invalid length. [ 1142.190796][T22698] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1142.206477][ T43] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1142.380617][T22677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.391612][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 1142.397509][T22677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.417582][ T43] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1142.427087][ T43] usb 2-1: config 0 has no interface number 0 [ 1142.435939][ T43] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1142.455622][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.463808][ T43] usb 2-1: Product: syz [ 1142.468196][ T43] usb 2-1: Manufacturer: syz [ 1142.472805][ T43] usb 2-1: SerialNumber: syz [ 1142.487124][ T43] usb 2-1: config 0 descriptor?? [ 1142.507973][ T43] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1142.582601][T22698] bond3 (unregistering): Released all slaves [ 1142.595360][ T10] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1142.636603][T12650] usb 5-1: USB disconnect, device number 88 [ 1142.646777][T12650] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 1142.755274][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1142.762062][ T10] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1142.791955][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.836134][ T10] usb 3-1: config 0 descriptor?? [ 1143.044045][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1143.307608][ T956] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1143.485037][ T956] usb 5-1: Using ep0 maxpacket: 32 [ 1143.498219][ T956] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1143.554811][ T956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1143.650273][ T956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1143.718693][ T956] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1143.733363][ T956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.752058][ T956] usb 5-1: config 0 descriptor?? [ 1143.774274][T22715] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1143.794560][ T956] hub 5-1:0.0: USB hub found [ 1143.962551][T22726] syz_tun: entered allmulticast mode [ 1144.060471][ T43] gspca_spca1528: reg_w err -110 [ 1144.072259][ T43] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 1144.072285][T22730] netlink: 'syz.3.4556': attribute type 4 has an invalid length. [ 1144.202250][ T956] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1144.232470][ T956] usbhid 5-1:0.0: can't add hid device: -71 [ 1144.247898][ T956] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1144.377763][ T956] usb 5-1: USB disconnect, device number 89 [ 1144.477992][ T5841] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1144.576510][T22703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.585668][T22703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.613904][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1144.631516][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1144.649451][ T5841] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 1144.658265][ T10] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1144.666674][ T5841] usb 4-1: config 0 has no interface number 0 [ 1144.672916][ T5841] usb 4-1: config 0 interface 29 has no altsetting 0 [ 1144.686715][ T10] usb 3-1: USB disconnect, device number 106 [ 1144.695678][ T5841] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1144.707949][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.725413][ T5841] usb 4-1: Product: syz [ 1144.725496][ T43] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1144.729784][ T5841] usb 4-1: Manufacturer: syz [ 1144.764649][ T5841] usb 4-1: SerialNumber: syz [ 1144.794488][ T5841] usb 4-1: config 0 descriptor?? [ 1144.867034][T22745] netlink: 'syz.4.4562': attribute type 4 has an invalid length. [ 1144.877688][T12871] usb 2-1: USB disconnect, device number 98 [ 1144.919828][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 1144.943065][ T43] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1144.981252][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1145.015733][ T43] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1145.037206][ T5841] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1145.041387][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.080238][ T43] usb 1-1: Product: syz [ 1145.084433][ T43] usb 1-1: Manufacturer: syz [ 1145.112681][ T43] usb 1-1: SerialNumber: syz [ 1145.135544][T12650] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1145.220214][T22749] qrtr: Invalid version 5 [ 1145.225622][T22749] program syz.1.4563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1145.262217][T22749] block device autoloading is deprecated and will be removed. [ 1145.340058][ T43] usb 1-1: 0:2 : does not exist [ 1145.345125][T12650] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1145.366804][T12650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.380239][T12650] usb 5-1: Product: syz [ 1145.384541][T12650] usb 5-1: Manufacturer: syz [ 1145.400334][ T43] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1145.409400][T22732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.437178][T12650] usb 5-1: SerialNumber: syz [ 1145.473143][T12650] usb 5-1: config 0 descriptor?? [ 1145.481528][T22732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.505916][T12650] ch341 5-1:0.0: ch341-uart converter detected [ 1145.510159][ T43] usb 1-1: USB disconnect, device number 80 [ 1145.544046][T22732] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1145.581092][ T5841] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 1145.598541][ T5841] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 1145.607182][ T5841] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 1145.640209][ T8859] udevd[8859]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1145.716240][ T5841] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -22 [ 1145.760277][T22756] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 1145.772252][T22756] binder: BINDER_SET_CONTEXT_MGR already set [ 1145.779434][T22756] binder: 22755:22756 ioctl 4018620d 2000000002c0 returned -16 [ 1145.804103][ T5841] usb 4-1: USB disconnect, device number 8 [ 1145.842224][T22757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4565'. [ 1145.962416][T22759] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4566'. [ 1146.225172][ T43] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1146.380816][T22767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1146.390005][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 1146.403712][ T43] usb 2-1: config 1 has an invalid interface number: 214 but max is 0 [ 1146.425243][ T43] usb 2-1: config 1 has no interface number 0 [ 1146.431539][ T43] usb 2-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1146.442723][ T43] usb 2-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 1146.459198][ T43] usb 2-1: config 1 interface 214 has no altsetting 0 [ 1146.470791][ T43] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 1146.490833][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.500637][ T24] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1146.517305][ T43] usb 2-1: Product: syz [ 1146.521648][ T43] usb 2-1: Manufacturer: syz [ 1146.526359][ T43] usb 2-1: SerialNumber: syz [ 1146.535325][T22759] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1146.545779][T22759] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1146.560438][ T43] ums-alauda 2-1:1.214: USB Mass Storage device detected [ 1146.592723][ T43] scsi host1: usb-storage 2-1:1.214 [ 1146.596138][T12650] usb 5-1: ch341-uart converter now attached to ttyUSB0 [ 1146.685485][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1146.725148][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1146.744501][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1146.798158][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1146.798608][T12650] usb 2-1: USB disconnect, device number 99 [ 1146.815698][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.832951][T22785] netlink: 'syz.3.4572': attribute type 13 has an invalid length. [ 1146.841959][ T24] usb 1-1: Product: syz [ 1146.851422][ T24] usb 1-1: Manufacturer: syz [ 1146.857691][ T24] usb 1-1: SerialNumber: syz [ 1146.873962][ T24] usb 1-1: config 0 descriptor?? [ 1146.906277][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1146.920913][ T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1146.940802][ T43] usb 5-1: USB disconnect, device number 90 [ 1146.950972][ T43] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 1146.969715][ T43] ch341 5-1:0.0: device disconnected [ 1147.038224][T22788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.054040][T22788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.364998][T12650] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1147.466551][ T5841] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 1147.515193][T12650] usb 3-1: Using ep0 maxpacket: 8 [ 1147.520878][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1147.530218][T12650] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1147.539851][T12650] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.549375][ T24] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1147.559988][T12650] usb 3-1: Product: syz [ 1147.576774][T12650] usb 3-1: Manufacturer: syz [ 1147.587761][T12650] usb 3-1: SerialNumber: syz [ 1147.598586][T12650] usb 3-1: config 0 descriptor?? [ 1147.649931][ T5841] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1147.658829][ T5841] usb 4-1: config 0 has no interface number 0 [ 1147.671716][ T5841] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1147.684650][ T5841] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1147.696237][ T5841] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1147.708522][ T5841] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1147.784462][ T5841] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1147.811148][T12650] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1147.819719][ T10] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1147.835588][ T5841] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1147.875775][ T5841] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1147.891402][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.919296][ T5841] usb 4-1: config 0 descriptor?? [ 1147.945398][T22796] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1147.953020][T22796] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1147.987874][ T10] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1147.998259][ T10] usb 5-1: config 1 has no interface number 0 [ 1148.004393][ T10] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1148.018828][ T5841] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1148.117224][ T10] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1148.148881][ T10] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.167726][ T10] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1148.187031][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.201114][ T10] usb 5-1: Product: syz [ 1148.252405][ T5841] usb 4-1: USB disconnect, device number 9 [ 1148.270598][ T5841] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1148.350341][ T10] usb 5-1: Manufacturer: syz [ 1148.379168][ T10] usb 5-1: SerialNumber: syz [ 1148.436831][T22803] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1148.750015][T22803] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1148.875346][ T24] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1148.882424][ T24] em28xx 1-1:0.0: No AC97 audio processor [ 1149.027382][ T10] usb 5-1: Incompatible driver and firmware versions [ 1149.452165][T12650] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1149.472677][T12650] usb 3-1: USB disconnect, device number 107 [ 1149.700910][T12650] usb 1-1: USB disconnect, device number 81 [ 1149.707783][T12650] em28xx 1-1:0.0: Disconnecting em28xx [ 1149.720842][T12650] em28xx 1-1:0.0: Freeing device [ 1149.759736][T22819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4582'. [ 1149.800921][T22821] netlink: 'syz.0.4583': attribute type 13 has an invalid length. [ 1150.305199][ T24] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1150.365031][T12650] usb 2-1: new low-speed USB device number 100 using dummy_hcd [ 1150.435576][ T24] usb 3-1: device descriptor read/64, error -71 [ 1150.540800][T12650] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1150.549235][T12650] usb 2-1: config 0 has no interface number 0 [ 1150.569084][T12650] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1150.592882][ T43] usb 5-1: USB disconnect, device number 91 [ 1150.641736][T12650] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1150.674042][T12650] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1150.743843][ T24] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1150.772003][T12650] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.179210][T12650] usb 2-1: config 0 descriptor?? [ 1151.217708][T12650] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1151.241383][ T24] usb 3-1: device descriptor read/64, error -71 [ 1151.366106][ T24] usb usb3-port1: attempt power cycle [ 1151.398010][T22831] iowarrior 2-1:0.1: Error -90 while submitting URB [ 1151.414587][T12650] usb 2-1: USB disconnect, device number 100 [ 1151.715231][ T24] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1151.799278][ T24] usb 3-1: device descriptor read/8, error -71 [ 1151.858070][T22852] netlink: 'syz.0.4594': attribute type 13 has an invalid length. [ 1152.066822][ T24] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1152.117644][ T24] usb 3-1: device descriptor read/8, error -71 [ 1152.231837][ T24] usb usb3-port1: unable to enumerate USB device [ 1152.281063][ T43] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1152.493930][ T43] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1152.510398][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1152.538567][ T43] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1152.548072][ T43] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1152.564072][ T43] usb 2-1: Product: syz [ 1152.568736][ T43] usb 2-1: Manufacturer: syz [ 1152.574328][ T43] usb 2-1: SerialNumber: syz [ 1152.654585][ T43] usb 2-1: config 0 descriptor?? [ 1152.700122][ T43] usb 2-1: selecting invalid altsetting 0 [ 1153.035590][ T10] usb 2-1: USB disconnect, device number 101 [ 1153.612576][T22881] fuse: Bad value for 'fd' [ 1153.961768][T22890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1153.984218][T22890] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4606'. [ 1154.335026][ T43] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1154.414467][T22898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4609'. [ 1154.640997][T22898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1154.650734][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 1154.677687][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.694660][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1154.758990][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1154.809501][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1154.882174][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1154.941777][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1154.953927][ T43] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1154.966108][ T43] usb 2-1: Manufacturer: syz [ 1154.978179][ T43] usb 2-1: config 0 descriptor?? [ 1155.184992][ T10] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1155.525019][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1155.543262][ T10] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1155.552493][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.590168][ T10] usb 3-1: config 0 descriptor?? [ 1155.626885][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1155.645130][T12650] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1155.737410][ T43] rc_core: IR keymap rc-hauppauge not found [ 1155.750522][ T43] Registered IR keymap rc-empty [ 1155.797088][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1155.816616][T12650] usb 1-1: Using ep0 maxpacket: 8 [ 1155.855184][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1155.855261][T12650] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1155.882534][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1155.895571][T12650] usb 1-1: config 59 has an invalid interface number: 141 but max is 0 [ 1155.912177][T12650] usb 1-1: config 59 has no interface number 0 [ 1155.916256][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input107 [ 1156.032092][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1156.072747][T12650] usb 1-1: config 59 interface 141 altsetting 6 endpoint 0xC has an invalid bInterval 160, changing to 11 [ 1156.085838][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1156.105159][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1156.138606][T22921] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4613'. [ 1156.185250][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1156.205384][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1156.217606][T12650] usb 1-1: config 59 interface 141 has no altsetting 0 [ 1156.225661][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1156.245125][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1156.265085][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1156.292758][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1156.335096][ T43] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1156.351502][ T10] gspca_nw80x: reg_r err -110 [ 1156.367464][ T43] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1156.380720][ T43] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1156.381009][ T10] nw80x 3-1:0.0: probe with driver nw80x failed with error -110 [ 1156.433021][T12650] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.72 [ 1156.447775][T12650] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.464181][T12650] usb 1-1: Product: syz [ 1156.470772][T12650] usb 1-1: Manufacturer: syz [ 1156.471134][ T43] usb 2-1: USB disconnect, device number 102 [ 1156.479533][T12650] usb 1-1: SerialNumber: syz [ 1156.688060][T22922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1156.732353][ T24] usb 3-1: USB disconnect, device number 112 [ 1156.906529][T22925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4614'. [ 1157.336328][ T24] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1157.506801][ T24] usb 2-1: config 0 has no interfaces? [ 1157.511999][T12650] usbtest 1-1:59.141: couldn't get endpoints, -71 [ 1157.538055][T12650] usbtest 1-1:59.141: probe with driver usbtest failed with error -71 [ 1157.560565][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1157.569595][T12650] usb 1-1: USB disconnect, device number 82 [ 1157.602116][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.643692][ T24] usb 2-1: Product: syz [ 1157.667603][ T24] usb 2-1: Manufacturer: syz [ 1157.688927][ T24] usb 2-1: SerialNumber: syz [ 1157.707103][ T24] usb 2-1: config 0 descriptor?? [ 1157.926991][ T10] usb 2-1: USB disconnect, device number 103 [ 1157.976698][T22948] fuse: Bad value for 'fd' [ 1158.017307][T12650] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1158.215163][T12650] usb 4-1: Using ep0 maxpacket: 32 [ 1158.227557][T12650] usb 4-1: config 134 has too many interfaces: 203, using maximum allowed: 32 [ 1158.252728][T12650] usb 4-1: config 134 has 1 interface, different from the descriptor's value: 203 [ 1158.281103][T12650] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1158.300866][T12650] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.332189][T22952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4622'. [ 1158.347579][T12650] usb 4-1: Product: syz [ 1158.368739][T12650] usb 4-1: Manufacturer: syz [ 1158.392112][T12650] usb 4-1: SerialNumber: syz [ 1158.465308][T22952] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4622'. [ 1158.575292][ T24] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1158.745182][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1158.753414][ T24] usb 3-1: config 0 has an invalid interface number: 247 but max is 0 [ 1158.778159][ T24] usb 3-1: config 0 has no interface number 0 [ 1158.799883][ T24] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1158.815156][ T24] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1158.833172][ T24] usb 3-1: Product: syz [ 1158.841547][ T24] usb 3-1: Manufacturer: syz [ 1158.850834][T12650] peak_usb 4-1:134.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1158.875415][T12650] peak_usb 4-1:134.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1158.916227][ T24] usb 3-1: config 0 descriptor?? [ 1158.965953][T12650] peak_usb 4-1:134.0: probe with driver peak_usb failed with error -71 [ 1159.008896][T12650] usb 4-1: USB disconnect, device number 10 [ 1159.125514][ T24] usb 3-1: USB disconnect, device number 113 [ 1160.074766][T22979] netlink: 'syz.3.4627': attribute type 4 has an invalid length. [ 1160.745131][T12650] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1160.915186][T12650] usb 2-1: Using ep0 maxpacket: 32 [ 1160.929252][T12650] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.974284][T12650] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1161.050619][T12650] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1161.092156][T12650] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1161.146845][T12650] usb 2-1: Product: syz [ 1161.198060][T12650] usb 2-1: Manufacturer: syz [ 1161.239795][T12650] hub 2-1:4.0: USB hub found [ 1161.469370][T22986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.495458][T22986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.515351][ T10] usb 3-1: new low-speed USB device number 114 using dummy_hcd [ 1161.573552][T12650] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 1161.809531][T23011] fuse: Bad value for 'fd' [ 1161.815849][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1161.833658][T23007] program syz.0.4637 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1161.843204][ T10] usb 3-1: config 0 has no interface number 0 [ 1161.855153][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1161.966977][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1161.978351][T12650] usb 2-1: USB disconnect, device number 104 [ 1161.992036][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1162.045486][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1162.066452][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1162.085059][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1162.098884][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1162.266129][ T24] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1162.297485][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.329702][ T10] usb 3-1: config 0 descriptor?? [ 1162.351250][T22993] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1162.362299][T22993] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1162.387664][ T10] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1162.498103][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1162.619756][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.638786][ T10] usb 3-1: USB disconnect, device number 114 [ 1162.665970][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1162.668075][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 1162.704153][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.735128][ T24] usb 5-1: Product: syz [ 1162.749687][ T24] usb 5-1: Manufacturer: syz [ 1162.769042][ T24] usb 5-1: SerialNumber: syz [ 1162.794737][ T24] usb 5-1: config 0 descriptor?? [ 1162.823176][ T24] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 1162.878219][ T24] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 1162.975967][T12650] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1163.127268][T12650] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1163.139174][T12650] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1163.229863][T12650] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1163.252392][T12650] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.301149][T12650] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1163.326131][T12650] usb 1-1: invalid MIDI out EP 0 [ 1163.335051][ T10] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1163.466799][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1163.485282][ T24] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1163.519465][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.532786][T12650] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1163.593996][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1163.617547][T12650] usb 1-1: USB disconnect, device number 83 [ 1163.630675][ T10] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1163.656390][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.665211][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1163.672303][ T24] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1163.683193][ T10] usb 2-1: config 0 descriptor?? [ 1163.705132][T23014] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1163.734477][T23014] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1163.755295][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.830950][ T24] usb 3-1: config 0 descriptor?? [ 1164.089542][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1164.112043][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1164.311323][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1164.338848][ T24] usb 3-1: media controller created [ 1164.433070][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1164.905173][ T43] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1165.055319][ T43] usb 4-1: device descriptor read/64, error -71 [ 1165.285199][ T24] stb0899_attach: Driver disabled by Kconfig [ 1165.325504][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1165.336137][ T24] az6027: no front-end attached [ 1165.336137][ T24] [ 1165.348661][T12871] usb 5-1: USB disconnect, device number 92 [ 1165.465274][ T43] usb 4-1: device descriptor read/64, error -71 [ 1165.576635][ T43] usb usb4-port1: attempt power cycle [ 1165.780961][T23060] netlink: 'syz.4.4652': attribute type 13 has an invalid length. [ 1165.798853][T23060] bridge0: left promiscuous mode [ 1165.936038][ T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1165.965875][ T43] usb 4-1: device descriptor read/8, error -71 [ 1166.152728][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 1166.167703][T12650] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1166.185129][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1166.210613][ T10] usb 2-1: USB disconnect, device number 105 [ 1166.225742][ T43] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1166.258237][ T43] usb 4-1: device descriptor read/8, error -71 [ 1166.367072][ T43] usb usb4-port1: unable to enumerate USB device [ 1166.380340][T12650] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1166.391728][T12650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.408985][T12650] usb 5-1: Product: syz [ 1166.413251][T12650] usb 5-1: Manufacturer: syz [ 1166.419415][T12650] usb 5-1: SerialNumber: syz [ 1166.442717][T12650] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1166.463339][ T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1166.560904][ T24] az6027: usb out operation failed. (-71) [ 1166.595295][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1166.680223][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input108 [ 1166.717427][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 1166.724726][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1166.735925][ T24] usb 3-1: USB disconnect, device number 115 [ 1166.806695][ T43] usb 5-1: USB disconnect, device number 93 [ 1167.193527][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1167.323441][T23078] netlink: 'syz.2.4657': attribute type 10 has an invalid length. [ 1167.331764][T23078] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4657'. [ 1167.363047][T23080] netlink: 'syz.2.4657': attribute type 10 has an invalid length. [ 1167.425057][T23080] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4657'. [ 1167.505360][T23086] binder_alloc: binder_alloc_mmap_handler: 23085 200000ffc000-200001000000 already mapped failed -16 [ 1167.524938][ T10] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1167.532016][ T10] ath9k_htc: Failed to initialize the device [ 1167.560410][ T43] usb 5-1: ath9k_htc: USB layer deinitialized [ 1167.862167][T23101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4665'. [ 1167.986173][T12650] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1168.135023][ T10] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1168.156717][T12650] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1168.166461][T12650] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.183108][T12650] usb 3-1: config 0 descriptor?? [ 1168.212007][T12650] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1168.295200][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1168.302737][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1168.315560][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1168.412944][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1168.507320][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1168.521007][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1168.535040][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.631741][T12650] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 1168.696664][ T24] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1168.855021][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1168.872382][ T24] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1168.891054][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.917114][ T24] usb 1-1: config 0 descriptor?? [ 1168.936224][T23107] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4667'. [ 1168.966502][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 1168.972080][ T10] usbtmc 5-1:16.0: can't read capabilities [ 1169.050979][T12650] gspca_cpia1: usb_control_msg 02, error -71 [ 1169.060583][T12650] gspca_cpia1: usb_control_msg 05, error -71 [ 1169.071314][T12650] cpia1 3-1:0.0: unexpected systemstate: 00 [ 1169.142205][T12650] usb 3-1: USB disconnect, device number 116 [ 1169.170330][ T10] usb 5-1: USB disconnect, device number 94 [ 1169.210641][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1169.222463][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1169.242847][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1169.247031][T23111] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4668'. [ 1169.283592][ T24] usb 1-1: media controller created [ 1169.311082][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1170.046084][T23124] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4671'. [ 1170.352395][T23133] sit1: entered allmulticast mode [ 1170.515149][ T24] stb0899_attach: Driver disabled by Kconfig [ 1170.521619][ T24] az6027: no front-end attached [ 1170.521619][ T24] [ 1170.645125][ T10] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1170.777267][ T10] usb 2-1: device descriptor read/64, error -71 [ 1171.025069][ T10] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1171.254967][ T10] usb 2-1: device descriptor read/64, error -71 [ 1171.365434][ T10] usb usb2-port1: attempt power cycle [ 1171.705173][ T10] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1171.718392][ T24] az6027: usb out operation failed. (-71) [ 1171.731091][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1171.743824][ T10] usb 2-1: device descriptor read/8, error -71 [ 1171.746145][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input109 [ 1171.819678][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 1171.842582][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1171.890705][ T24] usb 1-1: USB disconnect, device number 84 [ 1172.005063][ T10] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1172.037861][ T10] usb 2-1: device descriptor read/8, error -71 [ 1172.124238][T23148] vti0: entered promiscuous mode [ 1172.147683][ T10] usb usb2-port1: unable to enumerate USB device [ 1172.157355][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1172.169152][T23148] vti0: entered allmulticast mode [ 1172.574959][ T10] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1172.785348][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1172.795295][ T24] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1173.518011][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1173.527378][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.545118][ T10] usb 3-1: Product: syz [ 1173.549515][ T10] usb 3-1: Manufacturer: syz [ 1173.554202][ T10] usb 3-1: SerialNumber: syz [ 1173.943740][T23170] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4682'. [ 1173.953942][T23170] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4682'. [ 1173.978880][T23170] netlink: 'syz.3.4682': attribute type 5 has an invalid length. [ 1174.021182][T23170] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4682'. [ 1174.248397][T23180] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4683'. [ 1174.915062][T12650] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1175.105110][T12650] usb 2-1: Using ep0 maxpacket: 16 [ 1175.135956][T12650] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.196097][T12650] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 1175.206864][T12650] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.248310][T12650] usb 2-1: config 0 descriptor?? [ 1175.279961][ T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1175.385588][ T10] usb 3-1: USB disconnect, device number 117 [ 1175.403537][T23194] netlink: 'syz.2.4688': attribute type 4 has an invalid length. [ 1175.859894][T12650] sunplus 0003:04FC:05D8.003A: unknown main item tag 0x0 [ 1175.873893][T12650] sunplus 0003:04FC:05D8.003A: unknown main item tag 0x0 [ 1175.881396][T12650] sunplus 0003:04FC:05D8.003A: unknown main item tag 0x0 [ 1175.888735][T12650] sunplus 0003:04FC:05D8.003A: unknown main item tag 0x0 [ 1175.901706][T12650] sunplus 0003:04FC:05D8.003A: unknown main item tag 0x0 [ 1175.909233][T12650] sunplus 0003:04FC:05D8.003A: unknown main item tag 0x0 [ 1175.916490][T12650] sunplus 0003:04FC:05D8.003A: unknown main item tag 0x0 [ 1175.923732][T12650] sunplus 0003:04FC:05D8.003A: unknown main item tag 0x0 [ 1175.930978][T12650] sunplus 0003:04FC:05D8.003A: unknown main item tag 0x0 [ 1175.939461][T12650] sunplus 0003:04FC:05D8.003A: unknown main item tag 0x0 [ 1175.967960][T12650] sunplus 0003:04FC:05D8.003A: hidraw0: USB HID vff.fd Device [HID 04fc:05d8] on usb-dummy_hcd.1-1/input0 [ 1176.073573][T12650] usb 2-1: USB disconnect, device number 110 [ 1176.570495][T23204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4690'. [ 1176.885286][ T24] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1176.965034][ T43] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1177.135075][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 1177.147495][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.169309][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.193888][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1177.285655][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.291047][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1177.292173][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.304850][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.342390][ T43] usb 4-1: Product: syz [ 1177.350189][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1177.383444][ T43] usb 4-1: Manufacturer: syz [ 1177.390528][ T43] usb 4-1: SerialNumber: syz [ 1177.448431][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.488996][ T24] usb 5-1: config 0 descriptor?? [ 1177.699350][ T43] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1177.917828][ T24] plantronics 0003:047F:FFFF.003B: reserved main item tag 0xe [ 1177.956567][ T24] plantronics 0003:047F:FFFF.003B: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1178.132568][T23204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4690'. [ 1178.265091][T12650] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 1178.368613][ T10] usb 5-1: USB disconnect, device number 96 [ 1178.423496][T12650] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.449699][T12650] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1178.463335][T12650] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1178.474832][T12650] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1178.485832][T12650] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1178.502157][T12650] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1178.514675][T12650] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1178.605387][T12650] usb 1-1: Product: syz [ 1178.635645][T12650] usb 1-1: Manufacturer: syz [ 1178.640277][T12650] usb 1-1: SerialNumber: syz [ 1178.671504][T12650] usb 1-1: config 0 descriptor?? [ 1178.759903][T23232] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4696'. [ 1178.882495][T12650] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1178.889357][T12650] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1178.915195][ T24] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1178.978046][T23234] netlink: 'syz.4.4699': attribute type 4 has an invalid length. [ 1179.082937][T12650] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 1179.090984][T12650] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1179.110190][T12650] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1179.123796][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1179.146617][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 1179.154802][T23236] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4700'. [ 1179.177438][ T24] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 1179.202998][ T24] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.376924][T12650] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 1179.384411][ T24] usb 2-1: config 5 has no interface number 0 [ 1179.394223][ T24] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1179.411088][ T24] usb 2-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1179.425236][ T24] usb 2-1: config 5 interface 246 has no altsetting 0 [ 1179.449881][ T24] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 1179.463464][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.474255][ T24] usb 2-1: Product: syz [ 1179.483080][ T24] usb 2-1: Manufacturer: syz [ 1179.490494][ T24] usb 2-1: SerialNumber: syz [ 1179.579360][T23216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.605627][T23216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.719862][ T30] audit: type=1804 audit(1759445172.507:1147): pid=23230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4698" name="/newroot/332/file0" dev="tmpfs" ino=1729 res=1 errno=0 [ 1179.755715][ T30] audit: type=1800 audit(1759445172.507:1148): pid=23230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4698" name="file0" dev="tmpfs" ino=1729 res=0 errno=0 [ 1179.814808][ T24] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1179.837318][ T59] usb 2-1: Failed to submit usb control message: -71 [ 1179.855998][ T59] usb 2-1: unable to send the bmi data to the device: -71 [ 1179.863875][ T59] usb 2-1: unable to get target info from device [ 1179.870490][ T59] usb 2-1: could not get target info (-71) [ 1179.876530][ T59] usb 2-1: could not probe fw (-71) [ 1179.950346][T23246] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4701'. [ 1179.972459][ T24] usb 2-1: USB disconnect, device number 111 [ 1180.131011][T12650] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1180.146753][T12650] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 1180.186192][T12650] usb 1-1: USB disconnect, device number 85 [ 1180.520223][ T24] usb 4-1: USB disconnect, device number 15 [ 1180.624605][ T24] usblp0: removed [ 1180.863739][ T10] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1180.921446][T23261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4705'. [ 1181.070930][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.095104][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1181.105016][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1181.113073][T23265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4705'. [ 1181.223328][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1181.246179][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.280930][ T10] usb 2-1: config 0 descriptor?? [ 1182.056940][ T10] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1182.115314][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1182.297098][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1182.313319][ T24] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1182.323854][ T24] usb 4-1: config 0 has no interface number 0 [ 1182.352967][T23283] kvm: pic: level sensitive irq not supported [ 1182.353776][ T24] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1182.805476][ T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1182.814555][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.997043][ T24] usb 4-1: Product: syz [ 1183.017351][ T24] usb 4-1: Manufacturer: syz [ 1183.051930][ T24] usb 4-1: SerialNumber: syz [ 1183.290622][ T24] usb 4-1: config 0 descriptor?? [ 1183.320839][ T24] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 1183.343858][ T24] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 1183.531266][ T24] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 1183.541565][ T24] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 1183.813237][T23296] bridge1: entered allmulticast mode [ 1184.225150][ T24] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1184.285118][ T10] usb 2-1: reset high-speed USB device number 112 using dummy_hcd [ 1184.293630][ T10] usb 2-1: device reset changed ep0 maxpacket size! [ 1184.405192][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1184.453899][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1184.455674][T12650] usb 2-1: USB disconnect, device number 112 [ 1184.469952][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.499739][ T24] usb 5-1: config 0 descriptor?? [ 1184.515041][T12871] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1184.645645][T12650] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1184.739637][T12871] usb 1-1: Using ep0 maxpacket: 32 [ 1184.802831][T12871] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1184.833044][ T10] usb 4-1: USB disconnect, device number 16 [ 1184.843346][T12650] usb 2-1: Using ep0 maxpacket: 16 [ 1184.863002][T12650] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1184.880137][T12650] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1184.902728][T12650] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1184.923545][T12650] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1184.933831][T12650] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.943727][T12650] usb 2-1: Product: syz [ 1184.957159][T12650] usb 2-1: Manufacturer: syz [ 1184.961796][T12650] usb 2-1: SerialNumber: syz [ 1184.975599][T12650] usb 2-1: config 0 descriptor?? [ 1184.978719][T12871] usb 1-1: config 0 has no interface number 0 [ 1185.025021][T12871] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1185.123856][T12871] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1185.141578][T12871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.151035][T12871] usb 1-1: Product: syz [ 1185.173389][T12871] usb 1-1: Manufacturer: syz [ 1185.206258][T23301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.251179][T12871] usb 1-1: SerialNumber: syz [ 1185.281624][ T24] usbhid 5-1:0.0: can't add hid device: -32 [ 1185.289114][T23301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.297775][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1185.317171][T23315] fuse: Bad value for 'fd' [ 1185.336541][T23316] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4719'. [ 1185.367575][T12871] usb 1-1: config 0 descriptor?? [ 1185.430667][T12871] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 1185.443230][ T24] usb 5-1: USB disconnect, device number 97 [ 1185.492812][T12871] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 1185.559623][T12650] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -12 [ 1185.587016][T12871] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 1185.598979][T23323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4721'. [ 1185.608524][T12871] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 1185.643253][T12650] usb 2-1: USB disconnect, device number 113 [ 1186.075048][ T10] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1186.252099][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1186.263069][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1186.278800][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1186.300110][ T10] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1186.311421][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.323934][ T10] usb 5-1: Product: syz [ 1186.331245][ T10] usb 5-1: Manufacturer: syz [ 1186.337861][ T10] usb 5-1: SerialNumber: syz [ 1186.351684][ T10] usb 5-1: config 0 descriptor?? [ 1186.449092][ T10] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input111 [ 1186.629354][ T10] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 1186.822505][ T10] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 1186.928930][ T10] usb 5-1: USB disconnect, device number 98 [ 1187.061028][ T24] usb 1-1: USB disconnect, device number 86 [ 1188.676174][T23357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4730'. [ 1188.687744][T23357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4730'. [ 1188.831922][T23359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4732'. [ 1188.845230][T12871] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1188.995191][T12871] usb 4-1: Using ep0 maxpacket: 32 [ 1189.002590][T12871] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1189.018562][T12871] usb 4-1: config 0 has no interface number 0 [ 1189.039763][T12871] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1189.058453][T23361] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4733'. [ 1189.076685][T12871] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1189.091407][T12871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.143500][T12871] usb 4-1: Product: syz [ 1189.161899][T12871] usb 4-1: Manufacturer: syz [ 1189.177877][T12871] usb 4-1: SerialNumber: syz [ 1189.202787][T12871] usb 4-1: config 0 descriptor?? [ 1189.233843][T12871] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1189.268133][T12871] em28xx 4-1:0.89: Video interface 89 found: bulk [ 1189.831673][T12871] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1190.039792][ T30] audit: type=1326 audit(1759445182.827:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8167b8eec9 code=0x7ffc0000 [ 1190.062593][ T30] audit: type=1326 audit(1759445182.827:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8167b8eec9 code=0x7ffc0000 [ 1190.086148][ T30] audit: type=1326 audit(1759445182.827:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8167b8eec9 code=0x7ffc0000 [ 1190.123914][ T30] audit: type=1326 audit(1759445182.827:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8167b8eec9 code=0x7ffc0000 [ 1190.153353][ T30] audit: type=1326 audit(1759445182.827:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8167b8eacb code=0x7ffc0000 [ 1190.176523][ T30] audit: type=1326 audit(1759445182.827:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8167b8eacb code=0x7ffc0000 [ 1190.199288][ T30] audit: type=1326 audit(1759445182.827:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8167bc1785 code=0x7ffc0000 [ 1190.242816][ T30] audit: type=1326 audit(1759445183.027:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8167b8eec9 code=0x7ffc0000 [ 1190.265777][ T30] audit: type=1326 audit(1759445183.027:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8167b8eec9 code=0x7ffc0000 [ 1190.288407][ T30] audit: type=1326 audit(1759445183.027:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23352 comm="syz.3.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8167b8eec9 code=0x7ffc0000 [ 1190.295318][ T24] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1190.453627][T12871] em28xx 4-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1190.469780][T12871] em28xx 4-1:0.89: board has no eeprom [ 1190.485522][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1190.492452][ T24] usb 5-1: config 0 has an invalid interface number: 180 but max is 0 [ 1190.501385][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.511884][ T24] usb 5-1: config 0 has no interface number 0 [ 1190.518243][ T24] usb 5-1: config 0 interface 180 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 1190.529649][ T24] usb 5-1: config 0 interface 180 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1190.548992][ T24] usb 5-1: New USB device found, idVendor=1bbb, idProduct=00b7, bcdDevice=f2.c9 [ 1190.558714][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.566862][ T24] usb 5-1: Product: syz [ 1190.571171][ T24] usb 5-1: Manufacturer: syz [ 1190.576400][ T24] usb 5-1: SerialNumber: syz [ 1190.584798][ T24] usb 5-1: config 0 descriptor?? [ 1190.597940][ T24] option 5-1:0.180: GSM modem (1-port) converter detected [ 1190.803609][T12871] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1190.815451][T12871] em28xx 4-1:0.89: analog set to bulk mode. [ 1190.821633][ T24] em28xx 4-1:0.89: Registering V4L2 extension [ 1190.952019][T23386] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4740'. [ 1191.061099][ T24] em28xx 4-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 1191.306761][ T10] usb 5-1: USB disconnect, device number 99 [ 1191.314675][ T10] option 5-1:0.180: device disconnected [ 1191.705051][T12650] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1191.865025][T12650] usb 3-1: Using ep0 maxpacket: 8 [ 1191.883420][T12650] usb 3-1: config 0 has an invalid interface number: 166 but max is 0 [ 1191.908790][T12650] usb 3-1: config 0 has no interface number 0 [ 1191.944239][T12650] usb 3-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=79.c0 [ 1191.994389][T12650] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.059141][T12650] usb 3-1: Product: syz [ 1192.085188][T12650] usb 3-1: Manufacturer: syz [ 1192.093576][T12650] usb 3-1: SerialNumber: syz [ 1192.152256][T12650] usb 3-1: config 0 descriptor?? [ 1192.164704][ T10] usb 4-1: USB disconnect, device number 17 [ 1192.171768][ T10] em28xx 4-1:0.89: Disconnecting em28xx [ 1192.179796][ T24] em28xx 4-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 1192.245416][ T24] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 1192.269009][ T24] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1192.404983][ T24] em28xx 4-1:0.89: No AC97 audio processor [ 1192.440471][T12650] snd-usb-audio 3-1:0.166: probe with driver snd-usb-audio failed with error -71 [ 1192.537193][T23422] netlink: 'syz.1.4749': attribute type 13 has an invalid length. [ 1192.548219][ T24] usb 4-1: Decoder not found [ 1192.550234][T12650] usb 3-1: USB disconnect, device number 118 [ 1192.575867][ T24] em28xx 4-1:0.89: failed to create media graph [ 1192.586232][ T24] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1192.657244][ T24] em28xx 4-1:0.89: Registering snapshot button... [ 1192.657594][T23427] ================================================================== [ 1192.672094][T23427] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 1192.679469][T23427] Read of size 8 at addr ffff88807b954740 by task v4l_id/23427 [ 1192.687087][T23427] [ 1192.689402][T23427] CPU: 0 UID: 0 PID: 23427 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1192.689422][T23427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1192.689433][T23427] Call Trace: [ 1192.689441][T23427] [ 1192.689448][T23427] dump_stack_lvl+0x189/0x250 [ 1192.689472][T23427] ? rcu_is_watching+0x15/0xb0 [ 1192.689490][T23427] ? __kasan_check_byte+0x12/0x40 [ 1192.689511][T23427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1192.689531][T23427] ? rcu_is_watching+0x15/0xb0 [ 1192.689549][T23427] ? lock_release+0x4b/0x3e0 [ 1192.689567][T23427] ? __virt_addr_valid+0x1c8/0x5c0 [ 1192.689591][T23427] ? __virt_addr_valid+0x4a5/0x5c0 [ 1192.689614][T23427] print_report+0xca/0x240 [ 1192.689632][T23427] ? v4l2_fh_open+0xc7/0x430 [ 1192.689647][T23427] kasan_report+0x118/0x150 [ 1192.689668][T23427] ? v4l2_fh_open+0xc7/0x430 [ 1192.689687][T23427] v4l2_fh_open+0xc7/0x430 [ 1192.689705][T23427] em28xx_v4l2_open+0x157/0x9a0 [ 1192.689733][T23427] v4l2_open+0x20f/0x360 [ 1192.689751][T23427] chrdev_open+0x4cc/0x5e0 [ 1192.689775][T23427] ? __pfx_chrdev_open+0x10/0x10 [ 1192.689797][T23427] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1192.689823][T23427] ? __pfx_chrdev_open+0x10/0x10 [ 1192.689844][T23427] do_dentry_open+0x953/0x13f0 [ 1192.689864][T23427] vfs_open+0x3b/0x340 [ 1192.689877][T23427] ? path_openat+0x2ecd/0x3830 [ 1192.689896][T23427] path_openat+0x2ee5/0x3830 [ 1192.689913][T23427] ? arch_stack_walk+0xfc/0x150 [ 1192.689940][T23427] ? stack_depot_save_flags+0x40/0x860 [ 1192.689968][T23427] ? __pfx_path_openat+0x10/0x10 [ 1192.689985][T23427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.690008][T23427] do_filp_open+0x1fa/0x410 [ 1192.690025][T23427] ? __lock_acquire+0xab9/0xd20 [ 1192.690042][T23427] ? __pfx_do_filp_open+0x10/0x10 [ 1192.690068][T23427] ? _raw_spin_unlock+0x28/0x50 [ 1192.690083][T23427] ? alloc_fd+0x64c/0x6c0 [ 1192.690108][T23427] do_sys_openat2+0x121/0x1c0 [ 1192.690124][T23427] ? __pfx_do_sys_openat2+0x10/0x10 [ 1192.690141][T23427] ? exc_page_fault+0x76/0xf0 [ 1192.690164][T23427] ? do_user_addr_fault+0xc85/0x1380 [ 1192.690182][T23427] __x64_sys_openat+0x138/0x170 [ 1192.690200][T23427] do_syscall_64+0xfa/0x3b0 [ 1192.690220][T23427] ? lockdep_hardirqs_on+0x9c/0x150 [ 1192.690237][T23427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.690252][T23427] ? clear_bhb_loop+0x60/0xb0 [ 1192.690270][T23427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.690286][T23427] RIP: 0033:0x7f42ed0a7407 [ 1192.690302][T23427] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1192.690317][T23427] RSP: 002b:00007ffc03760200 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1192.690334][T23427] RAX: ffffffffffffffda RBX: 00007f42ed741880 RCX: 00007f42ed0a7407 [ 1192.690347][T23427] RDX: 0000000000000000 RSI: 00007ffc03761f1b RDI: ffffffffffffff9c [ 1192.690359][T23427] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1192.690369][T23427] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1192.690379][T23427] R13: 00007ffc03760450 R14: 00007f42ed846000 R15: 0000558d2c9724d8 [ 1192.690397][T23427] [ 1192.690404][T23427] [ 1192.999014][T23427] Allocated by task 24: [ 1193.003152][T23427] kasan_save_track+0x3e/0x80 [ 1193.007829][T23427] __kasan_kmalloc+0x93/0xb0 [ 1193.012413][T23427] __kmalloc_cache_noprof+0x230/0x3d0 [ 1193.017786][T23427] em28xx_v4l2_init+0x10b/0x2e70 [ 1193.022717][T23427] em28xx_init_extension+0x120/0x1c0 [ 1193.027989][T23427] process_scheduled_works+0xade/0x17b0 [ 1193.033520][T23427] worker_thread+0x8a0/0xda0 [ 1193.038104][T23427] kthread+0x711/0x8a0 [ 1193.042166][T23427] ret_from_fork+0x436/0x7d0 [ 1193.046742][T23427] ret_from_fork_asm+0x1a/0x30 [ 1193.051493][T23427] [ 1193.053801][T23427] Freed by task 24: [ 1193.057587][T23427] kasan_save_track+0x3e/0x80 [ 1193.062252][T23427] kasan_save_free_info+0x46/0x50 [ 1193.067257][T23427] __kasan_slab_free+0x5b/0x80 [ 1193.072007][T23427] kfree+0x18e/0x440 [ 1193.075887][T23427] em28xx_v4l2_init+0x1683/0x2e70 [ 1193.080899][T23427] em28xx_init_extension+0x120/0x1c0 [ 1193.086192][T23427] process_scheduled_works+0xade/0x17b0 [ 1193.091722][T23427] worker_thread+0x8a0/0xda0 [ 1193.096299][T23427] kthread+0x711/0x8a0 [ 1193.100356][T23427] ret_from_fork+0x436/0x7d0 [ 1193.104932][T23427] ret_from_fork_asm+0x1a/0x30 [ 1193.109688][T23427] [ 1193.111992][T23427] The buggy address belongs to the object at ffff88807b954000 [ 1193.111992][T23427] which belongs to the cache kmalloc-8k of size 8192 [ 1193.126026][T23427] The buggy address is located 1856 bytes inside of [ 1193.126026][T23427] freed 8192-byte region [ffff88807b954000, ffff88807b956000) [ 1193.139983][T23427] [ 1193.142292][T23427] The buggy address belongs to the physical page: [ 1193.148694][T23427] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b950 [ 1193.157445][T23427] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1193.165926][T23427] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1193.173457][T23427] page_type: f5(slab) [ 1193.177433][T23427] raw: 00fff00000000040 ffff88801a042280 dead000000000122 0000000000000000 [ 1193.186005][T23427] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 1193.194572][T23427] head: 00fff00000000040 ffff88801a042280 dead000000000122 0000000000000000 [ 1193.203223][T23427] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 1193.211876][T23427] head: 00fff00000000003 ffffea0001ee5401 00000000ffffffff 00000000ffffffff [ 1193.220528][T23427] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1193.229176][T23427] page dumped because: kasan: bad access detected [ 1193.235577][T23427] page_owner tracks the page as allocated [ 1193.241270][T23427] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 23353, tgid 23352 (syz.3.4731), ts 1190694020098, free_ts 1190468557299 [ 1193.264354][T23427] post_alloc_hook+0x240/0x2a0 [ 1193.269109][T23427] get_page_from_freelist+0x21e4/0x22c0 [ 1193.274657][T23427] __alloc_frozen_pages_noprof+0x181/0x370 [ 1193.280472][T23427] alloc_pages_mpol+0x232/0x4a0 [ 1193.285310][T23427] allocate_slab+0x8a/0x370 [ 1193.289797][T23427] ___slab_alloc+0xbeb/0x1420 [ 1193.294462][T23427] __kmalloc_cache_noprof+0x296/0x3d0 [ 1193.299823][T23427] audit_log_d_path+0xb8/0x1a0 [ 1193.304575][T23427] audit_log_d_path_exe+0x42/0x70 [ 1193.309596][T23427] audit_log_task+0x2b3/0x3c0 [ 1193.314259][T23427] audit_seccomp+0x86/0x190 [ 1193.318752][T23427] __seccomp_filter+0xce4/0x1e10 [ 1193.323678][T23427] syscall_trace_enter+0xaa/0x160 [ 1193.328688][T23427] do_syscall_64+0xd3/0x3b0 [ 1193.333176][T23427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.339051][T23427] page last free pid 8859 tgid 8859 stack trace: [ 1193.345358][T23427] __free_frozen_pages+0xbc4/0xd30 [ 1193.350462][T23427] __put_partials+0x156/0x1a0 [ 1193.355129][T23427] put_cpu_partial+0x17c/0x250 [ 1193.359873][T23427] __slab_free+0x2d5/0x3c0 [ 1193.364273][T23427] qlist_free_all+0x97/0x140 [ 1193.368847][T23427] kasan_quarantine_reduce+0x148/0x160 [ 1193.374293][T23427] __kasan_slab_alloc+0x22/0x80 [ 1193.379131][T23427] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1193.384579][T23427] getname_flags+0xb8/0x540 [ 1193.389074][T23427] do_sys_openat2+0xbc/0x1c0 [ 1193.393647][T23427] __x64_sys_openat+0x138/0x170 [ 1193.398483][T23427] do_syscall_64+0xfa/0x3b0 [ 1193.402977][T23427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.408857][T23427] [ 1193.411163][T23427] Memory state around the buggy address: [ 1193.416773][T23427] ffff88807b954600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1193.424815][T23427] ffff88807b954680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1193.432879][T23427] >ffff88807b954700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1193.440917][T23427] ^ [ 1193.447046][T23427] ffff88807b954780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1193.455088][T23427] ffff88807b954800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1193.463143][T23427] ================================================================== [ 1193.475026][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input112 [ 1193.570607][ T24] em28xx 4-1:0.89: Remote control support is not available for this card. [ 1193.594149][ T10] em28xx 4-1:0.89: Closing input extension [ 1193.602861][ T10] em28xx 4-1:0.89: Deregistering snapshot button [ 1193.684912][T23427] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1193.692142][T23427] CPU: 1 UID: 0 PID: 23427 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1193.701152][T23427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1193.711196][T23427] Call Trace: [ 1193.714463][T23427] [ 1193.717402][T23427] dump_stack_lvl+0x99/0x250 [ 1193.721986][T23427] ? __asan_memcpy+0x40/0x70 [ 1193.726566][T23427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1193.731778][T23427] ? __pfx__printk+0x10/0x10 [ 1193.736373][T23427] vpanic+0x281/0x750 [ 1193.740349][T23427] ? preempt_schedule+0xae/0xc0 [ 1193.745200][T23427] ? __pfx_vpanic+0x10/0x10 [ 1193.749689][T23427] ? preempt_schedule_common+0x83/0xd0 [ 1193.755132][T23427] ? preempt_schedule+0xae/0xc0 [ 1193.759968][T23427] ? __pfx_preempt_schedule+0x10/0x10 [ 1193.765331][T23427] panic+0xb9/0xc0 [ 1193.769057][T23427] ? __pfx_panic+0x10/0x10 [ 1193.773462][T23427] ? __pfx_panic+0x10/0x10 [ 1193.777860][T23427] ? v4l2_fh_open+0xc7/0x430 [ 1193.782432][T23427] check_panic_on_warn+0x89/0xb0 [ 1193.787358][T23427] ? v4l2_fh_open+0xc7/0x430 [ 1193.791949][T23427] end_report+0x78/0x160 [ 1193.796179][T23427] kasan_report+0x129/0x150 [ 1193.800669][T23427] ? v4l2_fh_open+0xc7/0x430 [ 1193.805255][T23427] v4l2_fh_open+0xc7/0x430 [ 1193.809678][T23427] em28xx_v4l2_open+0x157/0x9a0 [ 1193.814530][T23427] v4l2_open+0x20f/0x360 [ 1193.818755][T23427] chrdev_open+0x4cc/0x5e0 [ 1193.823155][T23427] ? __pfx_chrdev_open+0x10/0x10 [ 1193.828084][T23427] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1193.834430][T23427] ? __pfx_chrdev_open+0x10/0x10 [ 1193.839381][T23427] do_dentry_open+0x953/0x13f0 [ 1193.844151][T23427] vfs_open+0x3b/0x340 [ 1193.848202][T23427] ? path_openat+0x2ecd/0x3830 [ 1193.852957][T23427] path_openat+0x2ee5/0x3830 [ 1193.857535][T23427] ? arch_stack_walk+0xfc/0x150 [ 1193.862385][T23427] ? stack_depot_save_flags+0x40/0x860 [ 1193.867846][T23427] ? __pfx_path_openat+0x10/0x10 [ 1193.872772][T23427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.878839][T23427] do_filp_open+0x1fa/0x410 [ 1193.883328][T23427] ? __lock_acquire+0xab9/0xd20 [ 1193.888164][T23427] ? __pfx_do_filp_open+0x10/0x10 [ 1193.893184][T23427] ? _raw_spin_unlock+0x28/0x50 [ 1193.898022][T23427] ? alloc_fd+0x64c/0x6c0 [ 1193.902358][T23427] do_sys_openat2+0x121/0x1c0 [ 1193.907284][T23427] ? __pfx_do_sys_openat2+0x10/0x10 [ 1193.912467][T23427] ? exc_page_fault+0x76/0xf0 [ 1193.917132][T23427] ? do_user_addr_fault+0xc85/0x1380 [ 1193.922410][T23427] __x64_sys_openat+0x138/0x170 [ 1193.927248][T23427] do_syscall_64+0xfa/0x3b0 [ 1193.931747][T23427] ? lockdep_hardirqs_on+0x9c/0x150 [ 1193.936935][T23427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.942988][T23427] ? clear_bhb_loop+0x60/0xb0 [ 1193.947652][T23427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.953534][T23427] RIP: 0033:0x7f42ed0a7407 [ 1193.957935][T23427] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1193.977527][T23427] RSP: 002b:00007ffc03760200 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1193.985931][T23427] RAX: ffffffffffffffda RBX: 00007f42ed741880 RCX: 00007f42ed0a7407 [ 1193.993890][T23427] RDX: 0000000000000000 RSI: 00007ffc03761f1b RDI: ffffffffffffff9c [ 1194.001846][T23427] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1194.009801][T23427] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1194.017763][T23427] R13: 00007ffc03760450 R14: 00007f42ed846000 R15: 0000558d2c9724d8 [ 1194.025731][T23427] [ 1194.029014][T23427] Kernel Offset: disabled [ 1194.033329][T23427] Rebooting in 86400 seconds..