last executing test programs: 8.306834665s ago: executing program 2 (id=2578): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) 7.951720179s ago: executing program 0 (id=2582): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x1070bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0x1}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x7, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x600488d8}, 0x20000090) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x5}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) close_range(r0, 0xffffffffffffffff, 0x40000000000000) 7.951440954s ago: executing program 2 (id=2583): mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x7) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x4000064f) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x2940, 0x2, 0x10}, 0x18) readv(r1, 0x0, 0x0) 7.795484503s ago: executing program 2 (id=2584): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000008b0ce5616701738f7f00"/23, @ANYRES64=0x0, @ANYRES8, @ANYRES64, @ANYRES64=r0, @ANYBLOB="00009af7fb"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4) 7.787525104s ago: executing program 0 (id=2585): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4811}, 0x2008c014) r12 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r12, 0xc0405602, &(0x7f0000000500)={0xc, 0x1, 0x2, "3bd9d3fe337649c318d3b5710fe89a0d9ec9b50e98bc2e00", 0x32315241}) 7.603229972s ago: executing program 2 (id=2586): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 5.727538319s ago: executing program 0 (id=2591): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}}) 5.466690938s ago: executing program 0 (id=2593): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x3, 0x17b}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x4d10, 0x2, 0x2, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 5.161513676s ago: executing program 2 (id=2594): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) 4.751810004s ago: executing program 2 (id=2596): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x7}]}, 0x8) syz_emit_ethernet(0x66, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2e86dd61002724a70030"], 0x0) 4.540701166s ago: executing program 4 (id=2599): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40844) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'veth0_to_bridge\x00', &(0x7f0000000140)=@ethtool_test={0x1a, 0x6, 0x800}}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000c000203010000000000001a2a0007000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000810}, 0x20004090) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x100, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, 0x0, &(0x7f0000000040)) r6 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r6, 0x0) socket$inet(0x2, 0x2, 0x0) r7 = fsopen(&(0x7f00000029c0)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f0000000540)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x00\x01\x00\x00\x00\x00\x00\x00\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xcb%bW\xda5\xda=\xeb\x00\xae\x93\xfd\'T6\x94J\xa4\x9cU\xc4\fA~[\xbf7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xb4a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\xa1\xa8\x0f(\xae\xba\x99U\nb(\xc8H\x99\x93j:\xd5\xd1\xf9\xa0\xab\xe1\x06T\xacs\xf0f\x88*\xf9\'\xe5\x8f\xe3\xf0\xa1\x95\xbb\xb4|\x04Hi\xab\xd3\x9d\xa9\xd8\x82\xaf@\xfe\x11\x1b\b\x00\x00\x00\x00\x00\x00\x00\xb7\xcb\xc23X\xd1h\a1\xccF\x17X\xf2h\xb5\x14%\x11\xcer\x1a\xf0.\x12\x19\xbe\xef\x93\xe0\xa72\x05K\x88\r\x0f]LN\xfc\x1db\xa25\r\x1fF\x8d\x87\xc1p\xaep\x13\xc5\xab\xa64\xea\x8b\xb7$%\x96i\x84\xb9\xb5\xf3\x19\xe7\xcf\xab\x19\x8a\xe6\xa3@\x04\x91\xd7p9)\xfe\a\n\xc1\f\xef\x91\xc5x{\xa13o^\xf6\xc4z\xb5\xc9\x936\x05\x1d=\xa4f\xef\xb4\x99\xe1\x0e\xec\xa1\xb4\xeb\xfb\x7f\xe0\x98v\xecG\x88\xc9\x16\x1c1,/>\xad)\xfbG\xc9\xbb7d\x8b{n\xdc\xa4\xbbl\x06>f\xaca\xfb\xd4\x8d\x01O\xd3i8d%6\x1d\xa1\x06r \xea\xaa\xe4\x02Y+\x98=2\x8a\xe2\x11\x82n*\x98\xf1\x84(\x83\xb0\xd4\xab\xe6\xa6\x14\xfd\x13\xe5\x91\x9e\x1b\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc6\xa2Z\x01\xdd', 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.097120247s ago: executing program 0 (id=2606): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={0x0, 0xbe3}, 0x8) fsopen(&(0x7f00000014c0)='proc\x00', 0x0) ptrace$poke(0x420f, 0x0, 0x0, 0x20000000000008) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x48, 0x9, 0x41, 0xddb}, {0x6, 0x6, 0x0, 0x9}]}, 0x8) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0x9ffc) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0x104, 0x1) 2.587747559s ago: executing program 4 (id=2607): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 2.391835832s ago: executing program 3 (id=2609): r0 = epoll_create(0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x10}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000300)={0x0, 0x9dc5, 0x0, 0x0, 0xf}) ppoll(&(0x7f00000000c0)=[{r0, 0x80}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) 2.377202157s ago: executing program 4 (id=2610): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x4, @sliced={0x8, [0x9, 0x8, 0x5, 0x5, 0xfffb, 0x2, 0x1ff, 0x4, 0xb32, 0xfffe, 0x5, 0x8001, 0x7, 0x8, 0x4, 0x8, 0x7f, 0x9, 0x7f, 0x9, 0x8, 0x2fc, 0x0, 0x400, 0x1, 0x9, 0x6, 0x2, 0x6, 0x7, 0x1, 0x6, 0x5, 0xfffa, 0x8, 0x4, 0xffff, 0x3ac1, 0xa045, 0x0, 0x4, 0xc889, 0xe8, 0x5, 0xe1a3, 0x0, 0xedad, 0x3], 0x5}}) 2.094710176s ago: executing program 4 (id=2612): syz_open_dev$dri(0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2.094153025s ago: executing program 0 (id=2613): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000001d40)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f00000000c0)) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x5, 0x0, 0x7043, r5}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x62b10e4ca06324a, &(0x7f0000002340)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) rt_sigqueueinfo(0x0, 0x11, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r8 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x32314742, 0x0, 0x4, [{0x2000000}, {}, {}, {0x4}, {0x80000000}]}}) 2.093196482s ago: executing program 3 (id=2614): pipe2(0x0, 0x480) mprotect(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x4) r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0xfffd, @remote}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000001980)="d6976d1a0a08dfbf8270c1d5c7fff805b05a0e56", 0x14}], 0x1}}], 0x1, 0x24004044) 2.007526565s ago: executing program 1 (id=2615): r0 = memfd_create(&(0x7f00000000c0)='y\x105\xfb\xf7u\x83%\x1f\xe09@:\x06\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\a\x00\x00\x00%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\xf4\xff\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad$\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV\x81\x17\xb2\x8b\xd0\'\r\v\xb8mU\x17\xd5r\x1e[\x8aH\xf8\xc4\xea\xcei\xdc\x03\x92\xeb(@f\xf2^-\x030\xd7\x15\xa0\xbb2WsCV\xd2kU\xe2Fb\x81\'\xc8\n\xa4f\x99r\xfe\xde\x16\x04\xe6\xba\xba{\x16\xed\xc9\xa1 \x89\xa5\xd6\x9a\xa1?\xc7\xa5\x96\xcd\a\xa3\xd7\t\xc1UL\xc7I\xc35g\xa9\x85-\xb5\xc7\xed\x94\xba\xf91\x19\xb5\xfa\xb4?V\xed\xd5p>3\xd0\xca\xa7@\x14\x17\xbc\xb5\xa3\xdc\xe6~s<\x92-\xa5\x19\xd0\x0f[JS-.dL\xf8_\xb4`\x05\xcf5\x9b\x06\xc5', 0x3) fcntl$addseals(r0, 0x409, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) dup2(r0, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)}], 0x1}}], 0x1, 0x20000001) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup2(r3, r6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r6, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000002840)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0xd322, @local, 0x6}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000340)='\b', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000080)={r5, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000140)={r5, 0x2}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.930372334s ago: executing program 3 (id=2616): memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x101402, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vmci(0xffffff9c, &(0x7f0000000580), 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r2}, 0x80, 0x0}}, {{&(0x7f00000022c0)=@can={0x1d, r2}, 0x80, 0x0}}], 0x2, 0x0) 1.772351231s ago: executing program 4 (id=2617): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x40) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="050025bd"], 0x2c}}, 0x40006) r4 = memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\xdf\xbd}.\xa6$2D\xf1T\xc9\x8aG\x12\xe51', 0x7) fcntl$addseals(r4, 0x409, 0xe) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x0, 0x5002) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x20008810) read$FUSE(r5, &(0x7f0000000240)={0x2020}, 0x2020) epoll_wait(r5, 0x0, 0x0, 0x8) pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x22000, 0x0) close(0xffffffffffffffff) 1.691794067s ago: executing program 3 (id=2618): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}, {0x0}], 0x2}, 0x0) 1.068018473s ago: executing program 1 (id=2619): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20002090) 1.015055739s ago: executing program 3 (id=2620): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x1b, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) 755.858532ms ago: executing program 1 (id=2621): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x10001, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) 701.811645ms ago: executing program 1 (id=2622): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x42, 0x17a) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x500, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0xfffffc98}]) 683.110597ms ago: executing program 3 (id=2623): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000034276d20402003c68e0100000001090212000100000000090400"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x0, 0x0}], 0x1}) 395.775102ms ago: executing program 1 (id=2624): r0 = epoll_create(0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x10}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000300)={0x0, 0x9dc5, 0x0, 0x0, 0xf}) ppoll(&(0x7f00000000c0)=[{r0, 0x80}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) 176.341306ms ago: executing program 1 (id=2625): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendmmsg$unix(r0, &(0x7f0000005a00)=[{{&(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)="b8835b9cb1a41e59", 0x8}], 0x1, 0x0, 0x0, 0x80}}, {{&(0x7f0000001240)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x2, 0x40) 0s ago: executing program 4 (id=2626): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8004) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r5}) add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000001c0), 0x0, r5) socket$inet(0x2, 0x800, 0x0) keyctl$assume_authority(0x10, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000600)) ptrace(0x10, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xf000, 0x2, 0x0, 0xeffffdff, 0x0, [{0x0, 0xec, 0xff}, {0x19, 0x5, 0xfe}, {0xfc, 0x1}, {0xfe, 0x0, 0x7f, '\x00', 0x6}, {0x8, 0x0, 0x9, '\x00', 0xb}, {}, {0x20, 0x81}, {0x0, 0xe}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0x81}, {}, {0x1, 0x50, 0x9}, {0x4, 0x7, 0x4, '\x00', 0x3}, {0x1, 0x4e}, {0x2, 0x3, 0x4, '\x00', 0xfe}, {}, {0x0, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x1, 0x5, 0x7, '\x00', 0x8}, {0x80, 0x4, 0x7f, '\x00', 0x40}, {0x0, 0x4, 0x8}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x1, 0x6}, {0xfc, 0x5, 0xe}]}}) kernel console output (not intermixed with test programs): 4] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.184357][ T5834] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 662.247744][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 662.277831][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 662.301439][ T5834] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 662.314362][T14492] netlink: 'syz.1.2127': attribute type 2 has an invalid length. [ 662.396793][ T5834] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 662.431926][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 662.469848][ T5834] usb 5-1: Product: syz [ 662.484319][ T5834] usb 5-1: Manufacturer: syz [ 662.497791][ T5834] usb 5-1: SerialNumber: syz [ 662.521426][ T5834] usb 5-1: config 0 descriptor?? [ 662.761408][ T5834] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 662.793855][ T5834] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 662.837988][ T5834] usb 5-1: USB disconnect, device number 14 [ 663.067784][ T5836] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 663.078422][ T5906] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 663.232042][ T5836] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 663.247822][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.248337][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 663.262228][ T5836] usb 1-1: Product: syz [ 663.283803][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.293565][ T5836] usb 1-1: Manufacturer: syz [ 663.303729][ T5836] usb 1-1: SerialNumber: syz [ 663.307573][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.320610][ T5836] usb 1-1: config 0 descriptor?? [ 663.342885][ T5906] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 663.362318][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.410238][ T5906] usb 4-1: config 0 descriptor?? [ 663.550497][ T5836] hso 1-1:0.0: Can't find BULK IN endpoint [ 663.578281][ T5836] usb-storage 1-1:0.0: USB Mass Storage device detected [ 663.683497][T14523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2132'. [ 663.829815][ T5906] usbhid 4-1:0.0: can't add hid device: -71 [ 663.835863][ T5906] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 663.958081][ T5906] usb 4-1: USB disconnect, device number 118 [ 664.525220][T14542] netlink: 'syz.3.2136': attribute type 4 has an invalid length. [ 664.774999][T14548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2135'. [ 664.805531][T14547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2135'. [ 665.000175][T14475] vivid-000: kernel_thread() failed [ 665.278047][ T5906] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 665.469518][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.498654][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.527562][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 665.567788][ T5906] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 665.598065][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.635842][ T5906] usb 4-1: config 0 descriptor?? [ 665.700472][ T5891] usb 1-1: USB disconnect, device number 124 [ 666.142732][ T5906] plantronics 0003:047F:FFFF.003D: collection stack underflow [ 666.159734][ T5906] plantronics 0003:047F:FFFF.003D: item 0 4 0 12 parsing failed [ 666.189090][ T5906] plantronics 0003:047F:FFFF.003D: parse failed [ 666.195475][ T5906] plantronics 0003:047F:FFFF.003D: probe with driver plantronics failed with error -22 [ 666.410316][T14579] binder: 14573:14579 ioctl 4018620d 0 returned -22 [ 666.448440][T14579] binder: 14573:14579 ioctl c018620c 0 returned -14 [ 666.729385][T14586] [U]  [ 666.742665][T14586] [U] K{ [ 666.762220][T14586] [U] T 1ŠFFˊ`GJǘGO/MC [ 666.797386][T14586] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 666.825061][T14586] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 666.862164][T14586] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 666.928598][T14586] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 667.071458][T14586] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 667.168825][T14586] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 667.230280][T14586] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 667.429278][T14586] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 667.458071][T14586] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 667.476345][T14586] [U] 22Ʃ۩X?0;3U [ 667.546628][T14586] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 667.708857][T14586] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 667.759591][T14586] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 667.781010][T14586] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 667.793097][T14586] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 667.825301][T14586] [U] EC [ 667.838497][T14586] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 667.861169][T14586] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 667.958531][ T5891] usb 4-1: USB disconnect, device number 119 [ 667.968076][ T5906] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 668.160529][ T5906] usb 5-1: config 8 has an invalid interface number: 80 but max is 0 [ 668.184136][ T5906] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 668.234895][ T5906] usb 5-1: config 8 has no interface number 0 [ 668.249157][ T5906] usb 5-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 668.274986][ T5906] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 668.314941][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.351693][ T5906] usb 5-1: NFC: intf ffff88807a023000 id ffffffff8e93ee20 [ 668.518683][ T5891] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 668.551197][ T5836] usb 5-1: USB disconnect, device number 15 [ 668.642597][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2142'. [ 668.720005][ T5906] hid-generic 0008:0006:0007.003E: unknown main item tag 0x0 [ 668.744567][ T5906] hid-generic 0008:0006:0007.003E: unknown main item tag 0x0 [ 668.760172][ T5906] hid-generic 0008:0006:0007.003E: unknown main item tag 0x0 [ 668.778842][ T5906] hid-generic 0008:0006:0007.003E: unknown main item tag 0x0 [ 668.808113][ T5906] hid-generic 0008:0006:0007.003E: unknown main item tag 0x0 [ 668.825873][ T5906] hid-generic 0008:0006:0007.003E: unknown main item tag 0x0 [ 668.843760][ T5906] hid-generic 0008:0006:0007.003E: unknown main item tag 0x0 [ 668.869818][ T5906] hid-generic 0008:0006:0007.003E: unknown main item tag 0x0 [ 668.898879][ T5906] hid-generic 0008:0006:0007.003E: unknown main item tag 0x0 [ 668.927933][ T5906] hid-generic 0008:0006:0007.003E: unknown main item tag 0x0 [ 668.969279][ T5906] hid-generic 0008:0006:0007.003E: hidraw0: HID v0.07 Device [syz1] on syz1 [ 669.232716][T14626] fido_id[14626]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 669.947799][ T5834] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 670.109304][ T5834] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 670.147891][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 670.167792][ T5834] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 670.187160][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.210895][ T5834] usb 5-1: config 0 descriptor?? [ 670.216131][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 670.216148][ T30] audit: type=1326 audit(1766731878.855:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14643 comm="syz.3.2151" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9a918f749 code=0x0 [ 670.233488][T14646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2152'. [ 670.252455][T14636] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 670.264240][ T5834] hub 5-1:0.0: USB hub found [ 670.547848][ T5836] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 670.570408][T14650] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2148'. [ 670.727907][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 670.749099][ T5836] usb 2-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 670.765935][ T5836] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 670.791958][ T5836] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 670.817456][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.835286][ T5836] usb 2-1: Product: syz [ 670.844200][ T5836] usb 2-1: Manufacturer: syz [ 670.854328][ T5836] usb 2-1: SerialNumber: syz [ 671.079862][ T5836] usb 2-1: 0:2 : does not exist [ 671.138807][ T5836] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 671.186992][ T5836] usb 2-1: USB disconnect, device number 19 [ 671.267327][T12102] udevd[12102]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 671.898304][ T5891] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 672.088963][ T5891] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 672.107773][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.136918][ T5891] usb 1-1: Product: syz [ 672.154657][ T5891] usb 1-1: Manufacturer: syz [ 672.175669][ T5891] usb 1-1: SerialNumber: syz [ 672.314661][ T5891] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 672.394344][ T5906] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 672.788565][ T5834] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 672.814429][ T5834] usbhid 5-1:0.0: can't add hid device: -71 [ 672.828090][ T5836] usb 1-1: USB disconnect, device number 125 [ 672.858266][ T5834] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 672.888572][ T5834] usb 5-1: USB disconnect, device number 16 [ 672.952833][T14667] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2156'. [ 672.963397][T14667] netlink: 'syz.1.2156': attribute type 1 has an invalid length. [ 673.247749][ T5834] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 673.399544][ T5834] usb 2-1: config 0 has an invalid interface number: 39 but max is 0 [ 673.408255][ T5834] usb 2-1: config 0 has no interface number 0 [ 673.414603][ T5834] usb 2-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 673.431206][ T5906] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 673.441565][ T5906] ath9k_htc: Failed to initialize the device [ 673.441838][ T5834] usb 2-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 673.457105][ T5836] usb 1-1: ath9k_htc: USB layer deinitialized [ 673.468194][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.483496][ T5834] usb 2-1: Product: syz [ 673.488515][ T5834] usb 2-1: Manufacturer: syz [ 673.493151][ T5834] usb 2-1: SerialNumber: syz [ 673.510421][ T5834] usb 2-1: config 0 descriptor?? [ 673.549051][ T5891] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 673.628969][T14701] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2166'. [ 673.666682][T14704] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2166'. [ 673.738484][ T5891] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.763335][ T5891] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 673.780028][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.794824][ T5834] usb 2-1: USB disconnect, device number 20 [ 673.805125][ T5891] usb 4-1: Product: syz [ 673.815077][ T5891] usb 4-1: Manufacturer: syz [ 673.825463][ T5891] usb 4-1: SerialNumber: syz [ 673.834285][T12102] udevd[12102]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 673.950881][T14722] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2169'. [ 674.547151][T14728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.556402][T14728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.778215][ T5906] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 674.801878][T14732] syz.4.2174 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 674.927857][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 674.951007][ T5906] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 674.979166][ T5906] usb 2-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 675.001028][ T5906] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 675.027139][ T5906] usb 2-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 675.051894][ T5891] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 675.058732][ T5891] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 675.067808][ T5891] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 675.094488][ T5906] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 675.111064][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.130213][ T5906] usb 2-1: Product: syz [ 675.140694][ T5906] usb 2-1: Manufacturer: syz [ 675.154965][ T5906] usb 2-1: SerialNumber: syz [ 675.175082][ T5906] hso 2-1:6.0: Can't find BULK OUT endpoint [ 675.337419][T14748] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2177'. [ 675.375518][ T5834] usb 2-1: USB disconnect, device number 21 [ 675.671249][ T5891] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 675.707418][ T5891] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 675.738591][ T5891] usb 4-1: USB disconnect, device number 121 [ 675.745493][ T5891] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 676.156739][T14762] xt_policy: output policy not valid in PREROUTING and INPUT [ 676.167769][ T5834] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 676.240827][T14765] netlink: 1072 bytes leftover after parsing attributes in process `syz.0.2183'. [ 676.353793][ T5834] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 676.363603][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.374304][ T5834] usb 2-1: Product: syz [ 676.378945][ T5834] usb 2-1: Manufacturer: syz [ 676.383905][ T5834] usb 2-1: SerialNumber: syz [ 676.402544][ T5834] usb 2-1: config 0 descriptor?? [ 676.417994][ T5834] ch341 2-1:0.0: ch341-uart converter detected [ 676.556193][T14778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2188'. [ 676.617241][ T5834] usb 2-1: failed to receive control message: -121 [ 676.625242][ T5834] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 676.838037][ T5891] usb 2-1: USB disconnect, device number 22 [ 676.845284][ T5891] ch341 2-1:0.0: device disconnected [ 676.954491][ C1] hrtimer: interrupt took 35301 ns [ 677.502718][T14799] ip6tnl0: Caught tx_queue_len zero misconfig [ 677.566249][ T5891] hid_parser_main: 43 callbacks suppressed [ 677.566265][ T5891] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 677.589101][ T5891] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 677.599549][ T5891] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 677.607347][ T5891] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 677.683159][ T5891] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 677.708421][ T5891] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 677.728325][ T5891] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 677.736200][ T5891] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 677.757101][ T5891] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 677.765107][ T5891] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 677.808334][ T5891] hid-generic 0003:0004:0000.003F: hidraw0: USB HID vb854c.db Device [syz1] on syz1 [ 677.898054][ T30] audit: type=1326 audit(1766731886.525:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14806 comm="syz.1.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 677.941420][ T30] audit: type=1326 audit(1766731886.525:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14806 comm="syz.1.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 677.951700][T14803] fido_id[14803]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 677.985146][ T30] audit: type=1326 audit(1766731886.535:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14806 comm="syz.1.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 678.012966][ T30] audit: type=1326 audit(1766731886.535:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14806 comm="syz.1.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 678.040758][ T30] audit: type=1326 audit(1766731886.535:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14806 comm="syz.1.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 678.064289][ T30] audit: type=1326 audit(1766731886.535:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14806 comm="syz.1.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 678.106817][T14811] binder: 14804:14811 ioctl 4018620d 0 returned -22 [ 678.116608][T14811] binder: 14804:14811 ioctl c018620c 0 returned -14 [ 678.175264][ T30] audit: type=1326 audit(1766731886.535:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14806 comm="syz.1.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 678.198872][ T30] audit: type=1326 audit(1766731886.535:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14806 comm="syz.1.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 678.274109][ T30] audit: type=1326 audit(1766731886.535:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14806 comm="syz.1.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 678.319726][ T30] audit: type=1326 audit(1766731886.535:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14806 comm="syz.1.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 678.709084][ T5891] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 678.878610][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 678.894531][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.909382][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.953906][ T5891] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 678.983084][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.018703][ T5891] usb 1-1: config 0 descriptor?? [ 679.041070][ T5891] hub 1-1:0.0: USB hub found [ 679.274472][ T5891] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 679.318381][ T5834] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 679.484068][ T5834] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 18432, setting to 64 [ 679.511625][ T5834] usb 2-1: config 0 interface 0 has no altsetting 0 [ 679.518849][ T5891] usbhid 1-1:0.0: can't add hid device: -71 [ 679.528928][ T5891] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 679.553168][ T5834] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 679.576650][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 679.588908][ T5834] usb 2-1: Product: syz [ 679.590369][ T5891] usb 1-1: USB disconnect, device number 126 [ 679.593115][ T5834] usb 2-1: Manufacturer: syz [ 679.608308][ T5834] usb 2-1: SerialNumber: syz [ 679.620971][ T5834] usb 2-1: config 0 descriptor?? [ 679.686107][ T5834] usb 2-1: selecting invalid altsetting 0 [ 679.881849][T14825] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 679.918298][ T5834] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 679.974200][ T5891] usb 2-1: USB disconnect, device number 23 [ 680.069065][ T5834] usb 4-1: device descriptor read/64, error -71 [ 680.100217][T14850] x_tables: duplicate underflow at hook 1 [ 680.208259][ T50] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 680.318113][ T5834] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 680.370073][ T50] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 680.379237][ T50] usb 5-1: config 0 has no interface number 0 [ 680.389078][ T50] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 680.410353][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.419222][ T50] usb 5-1: Product: syz [ 680.423486][ T50] usb 5-1: Manufacturer: syz [ 680.427798][ T5891] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 680.428853][ T50] usb 5-1: SerialNumber: syz [ 680.448234][ T5834] usb 4-1: device descriptor read/64, error -71 [ 680.455338][ T50] usb 5-1: config 0 descriptor?? [ 680.578743][ T5834] usb usb4-port1: attempt power cycle [ 680.592567][T14863] tipc: Enabled bearer , priority 0 [ 680.600979][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 680.610476][T14863] syzkaller0: entered promiscuous mode [ 680.617008][T14863] syzkaller0: entered allmulticast mode [ 680.625224][ T5891] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 680.638395][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.646853][ T5891] usb 1-1: Product: syz [ 680.668932][ T5891] usb 1-1: Manufacturer: syz [ 680.672325][T14846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.673606][ T5891] usb 1-1: SerialNumber: syz [ 680.699198][T14846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.709783][T14863] tipc: Resetting bearer [ 680.730727][T14861] tipc: Resetting bearer [ 680.764448][T14861] tipc: Disabling bearer [ 680.894571][T14860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.905960][T14860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.940812][ T5834] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 680.952103][ T50] usb 5-1: Firmware: major: 0, minor: 255, hardware type: UNKNOWN (145) [ 680.979026][ T5834] usb 4-1: device descriptor read/8, error -71 [ 680.983054][ T5891] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 681.031344][ T5891] snd-usb-audio 1-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 681.048955][ T5891] usb 1-1: USB disconnect, device number 127 [ 681.074318][T12095] udevd[12095]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 681.153446][ T50] usb 5-1: Read permanent extended address 04:40:7e:be:6c:bf:26:d7 from device [ 681.163683][ T50] usb 5-1: atusb_probe: initialization failed, error = -524 [ 681.172153][ T50] atusb 5-1:0.128: probe with driver atusb failed with error -524 [ 681.218259][ T5834] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 681.239088][ T5834] usb 4-1: device descriptor read/8, error -71 [ 681.327785][ T5906] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 681.359007][ T5834] usb usb4-port1: unable to enumerate USB device [ 681.370631][ T5891] usb 5-1: USB disconnect, device number 17 [ 681.458435][ T5906] usb 2-1: device descriptor read/64, error -71 [ 681.570098][T14874] fuse: Bad value for 'fd' [ 681.581170][T14874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.598159][T14874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.608731][T14874] netlink: 'syz.2.2216': attribute type 6 has an invalid length. [ 681.655612][T14874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.667001][T14874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.693964][T14880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.698158][ T5906] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 681.713837][T14880] loop7: detected capacity change from 0 to 16384 [ 681.809359][T14881] loop7: detected capacity change from 16384 to 16383 [ 681.838395][ T5906] usb 2-1: device descriptor read/64, error -71 [ 681.950268][ T5906] usb usb2-port1: attempt power cycle [ 682.287852][ T5906] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 682.316644][ T5906] usb 2-1: device descriptor read/8, error -71 [ 682.416222][T14892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 682.525869][T14896] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2224'. [ 682.578233][ T5906] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 682.620517][ T5906] usb 2-1: device descriptor read/8, error -71 [ 682.739071][ T5906] usb usb2-port1: unable to enumerate USB device [ 682.867729][ T5891] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 683.030349][ T5891] usb 1-1: unable to get BOS descriptor or descriptor too short [ 683.050397][ T5891] usb 1-1: not running at top speed; connect to a high speed hub [ 683.070470][ T5891] usb 1-1: config 1 has an invalid interface descriptor of length 5, skipping [ 683.080236][ T5891] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.091232][ T5891] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 19 [ 683.100730][ T5891] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4 [ 683.113499][ T5891] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 683.127384][ T5891] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 683.136992][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.145816][ T5891] usb 1-1: Product: syz [ 683.150326][ T5891] usb 1-1: Manufacturer: syz [ 683.155059][ T5891] usb 1-1: SerialNumber: syz [ 683.238198][ T5906] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 683.397515][ T5891] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 683.408387][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 683.434243][ T5906] usb 4-1: unable to get BOS descriptor or descriptor too short [ 683.467169][ T5906] usb 4-1: config 218 has an invalid descriptor of length 171, skipping remainder of the config [ 683.488494][ T5906] usb 4-1: config 218 has 0 interfaces, different from the descriptor's value: 5 [ 683.508136][ T5891] usb 1-1: USB disconnect, device number 2 [ 683.521997][ T5906] usb 4-1: New USB device found, idVendor=06f8, idProduct=0001, bcdDevice=e0.c5 [ 683.548752][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.567326][ T5906] usb 4-1: Product: syz [ 683.600098][ T5906] usb 4-1: Manufacturer: syz [ 683.618826][ T5906] usb 4-1: SerialNumber: syz [ 683.854968][ T5906] usb 4-1: USB disconnect, device number 126 [ 683.983589][T14936] kvm: pic: non byte write [ 683.988680][T14936] kvm: pic: non byte write [ 683.993608][T14936] kvm: pic: single mode not supported [ 683.998948][T14936] kvm: pic: single mode not supported [ 684.005049][T14936] kvm: pic: level sensitive irq not supported [ 684.368031][ T5834] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 684.538298][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 684.555583][ T5834] usb 5-1: config 0 interface 0 has no altsetting 0 [ 684.574596][ T5834] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 684.604309][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.642143][ T5834] usb 5-1: config 0 descriptor?? [ 684.648953][T14958] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 684.678891][T14957] IPVS: stopping backup sync thread 14958 ... [ 684.692288][T14957] IPVS: length: 223 != 663119736 [ 684.707256][T14957] loop4: detected capacity change from 0 to 7 [ 684.754811][T12102] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 684.765996][T12102] loop4: partition table partially beyond EOD, truncated [ 684.789235][T12102] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 684.833143][T14957] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 684.840042][T14957] loop4: partition table partially beyond EOD, truncated [ 684.858234][T14957] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 685.074656][ T5834] mcp2221 0003:04D8:00DD.0040: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 685.144735][T14966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.169453][T14966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.285388][ T5834] usb 5-1: USB disconnect, device number 18 [ 685.332480][ T5199] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 685.339185][ T5199] loop4: partition table partially beyond EOD, truncated [ 685.346789][ T5199] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 685.416167][T12102] udevd[12102]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 685.658042][ T5834] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 685.782884][T14979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2245'. [ 685.792631][ T5834] usb 5-1: device descriptor read/64, error -71 [ 685.803681][T14979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2245'. [ 685.832931][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.844943][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.068667][ T5906] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 686.078318][ T5834] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 686.207819][ T5834] usb 5-1: device descriptor read/64, error -71 [ 686.238062][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 686.238317][ T50] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 686.245203][ T5906] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 686.259765][ T5906] usb 1-1: config 0 has no interface number 0 [ 686.265908][ T5906] usb 1-1: config 0 interface 1 has no altsetting 0 [ 686.275201][ T5906] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=ff.7e [ 686.284643][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.292836][ T5906] usb 1-1: Product: syz [ 686.297119][ T5906] usb 1-1: Manufacturer: syz [ 686.302241][ T5906] usb 1-1: SerialNumber: syz [ 686.309839][ T5906] usb 1-1: config 0 descriptor?? [ 686.319023][ T5834] usb usb5-port1: attempt power cycle [ 686.400262][ T50] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 686.412661][ T50] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 686.423568][ T50] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 686.433048][ T50] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 686.444584][ T50] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 686.458487][ T50] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 686.467577][ T50] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 686.478251][ T50] usb 4-1: Product: syz [ 686.482453][ T50] usb 4-1: Manufacturer: syz [ 686.496918][ T50] cdc_wdm 4-1:1.0: skipping garbage [ 686.502760][ T50] cdc_wdm 4-1:1.0: skipping garbage [ 686.509686][ T50] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 686.515627][ T50] cdc_wdm 4-1:1.0: Unknown control protocol [ 686.517492][ T5906] i2c-cp2615 1-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 686.545880][ T5906] usb 1-1: USB disconnect, device number 3 [ 686.658323][ T5834] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 686.679016][ T5834] usb 5-1: device descriptor read/8, error -71 [ 686.751180][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 686.758059][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 686.764521][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 686.771112][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 686.777387][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 686.783974][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 686.790542][ T50] usb 4-1: USB disconnect, device number 127 [ 686.797542][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 686.804167][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 686.810248][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 686.849378][T14989] binder: 14984:14989 ioctl 4018620d 0 returned -22 [ 686.856495][T14989] binder: 14984:14989 ioctl c018620c 0 returned -14 [ 686.938438][ T5834] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 686.969064][ T5834] usb 5-1: device descriptor read/8, error -71 [ 687.079161][ T5834] usb usb5-port1: unable to enumerate USB device [ 687.137741][ T50] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 687.176106][T14992] loop6: detected capacity change from 0 to 524288000 [ 687.183896][T14992] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2249'. [ 687.308353][ T50] usb 4-1: Using ep0 maxpacket: 8 [ 687.316445][ T50] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 687.325558][ T50] usb 4-1: config 0 has no interface number 1 [ 687.332284][ T50] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 687.342545][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.362180][ T50] usb 4-1: config 0 descriptor?? [ 687.575967][ T50] qcserial 4-1:0.2: Qualcomm USB modem converter detected [ 687.684362][T14994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.693856][T14994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.761552][T14994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.771632][T14994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.781387][T14983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.795554][T14983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.946261][T15001] kAFS: unable to lookup cell '' [ 687.969254][T15001] kAFS: unable to lookup cell '(,c' [ 688.422043][ T50] usb 4-1: USB disconnect, device number 2 [ 688.442861][ T50] qcserial 4-1:0.2: device disconnected [ 688.562683][T15014] xt_CT: No such helper "pptp" [ 689.987860][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 689.995199][T15003] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 690.002284][T15003] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 690.148209][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 690.154387][T15004] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 690.967368][T15004] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 690.967377][T15003] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 690.974882][T15003] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 690.981578][T15004] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 690.991219][T15003] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 691.015233][T15018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.037523][T15003] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 691.046567][T15018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.064875][T15003] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 691.111872][T15003] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 691.258010][ T5906] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 691.278606][ T5891] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 691.458119][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 691.568050][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 691.590966][T15038] binder: 15030:15038 ioctl 4018620d 0 returned -22 [ 691.599229][T15038] binder: 15030:15038 ioctl c018620c 0 returned -14 [ 691.647464][ T5891] usb 4-1: device descriptor read/all, error -71 [ 691.708026][ T8317] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 691.770426][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 691.839056][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 691.920263][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 691.941624][ T8317] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 691.953460][ T8317] usb 5-1: config 0 has no interface number 0 [ 691.972315][ T8317] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 691.987077][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0039, bcdDevice= 0.00 [ 692.005135][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.014911][ T8317] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 692.034457][ T10] usb 1-1: config 0 descriptor?? [ 692.040016][ T5891] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 692.049140][ T8317] usb 5-1: config 0 interface 113 has no altsetting 0 [ 692.061607][T15029] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 692.082392][ T8317] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 692.092191][ T8317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.100644][ T8317] usb 5-1: Product: syz [ 692.105580][ T8317] usb 5-1: Manufacturer: syz [ 692.113941][ T8317] usb 5-1: SerialNumber: syz [ 692.152770][ T8317] usb 5-1: config 0 descriptor?? [ 692.164383][ C0] usb 5-1: NFC: Urb failure (status -71) [ 692.172557][ T8317] usb 5-1: NFC: Unable to get FW version [ 692.180616][ T8317] pn533_usb 5-1:0.113: probe with driver pn533_usb failed with error -90 [ 692.215873][ T5891] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 692.225241][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.233828][ T5891] usb 4-1: Product: syz [ 692.238343][ T5891] usb 4-1: Manufacturer: syz [ 692.256266][ T5891] usb 4-1: SerialNumber: syz [ 692.282157][ T5891] usb 4-1: config 0 descriptor?? [ 692.307262][ T5891] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 692.648136][ T10] wacom 0003:056A:0039.0041: hidraw0: USB HID v0.00 Device [HID 056a:0039] on usb-dummy_hcd.0-1/input0 [ 692.780806][ T5891] gspca_sunplus: reg_w_riv err -71 [ 692.793595][ T5891] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 692.795758][ T50] usb 1-1: USB disconnect, device number 4 [ 692.841660][ T5891] usb 4-1: USB disconnect, device number 4 [ 692.916036][T15052] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2264'. [ 694.221954][T15083] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 694.408079][ T5891] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 694.459315][ T50] usb 5-1: USB disconnect, device number 23 [ 694.651716][T15093] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2275'. [ 694.920817][T15105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.948721][T15105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.235636][ T5834] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 695.237755][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 695.325990][T15091] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 695.362480][T15091] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 695.408283][ T5834] usb 4-1: Using ep0 maxpacket: 8 [ 695.418378][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 695.438521][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 695.445416][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.459549][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 695.472409][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 695.473595][ T10] usb 1-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 695.513391][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.522160][ T5834] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 695.541397][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 695.550580][ T10] usb 1-1: config 0 descriptor?? [ 695.573620][ T5834] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 695.608250][ T5834] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 695.617497][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.630559][ T5834] usb 4-1: config 0 descriptor?? [ 695.654003][T15107] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 696.013021][T15122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.032695][T15122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.236657][T13985] Bluetooth: hci5: unexpected event 0x12 length: 1 < 8 [ 696.245819][T13985] Bluetooth: hci5: Malformed Event: 0x02 [ 696.252266][T13985] Bluetooth: hci5: unexpected event 0x04 length: 15 > 10 [ 696.252546][T13985] Bluetooth: hci5: connection err: -111 [ 697.156540][T13155] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.178564][T13155] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.209979][T13155] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.242645][T13155] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.483364][ T10] usb 1-1: USB disconnect, device number 5 [ 697.908350][ T5829] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 698.022169][ T10] usb 4-1: USB disconnect, device number 5 [ 698.802404][T15172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.811382][T15172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.035481][T15172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.051057][T15172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.133780][T15172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.180223][T15172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.286279][ T5834] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 699.438281][ T5834] usb 1-1: device descriptor read/64, error -71 [ 699.444648][ T50] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 699.602198][ T50] usb 5-1: Using ep0 maxpacket: 16 [ 699.611408][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.626801][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.644500][ T50] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 699.668271][ T50] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 699.685572][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.698279][ T5834] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 699.717224][ T50] usb 5-1: config 0 descriptor?? [ 699.824391][T15190] netlink: 'syz.1.2298': attribute type 11 has an invalid length. [ 699.832927][T15190] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2298'. [ 699.843881][ T5834] usb 1-1: device descriptor read/64, error -71 [ 699.852248][T15190] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2298'. [ 699.958223][ T5834] usb usb1-port1: attempt power cycle [ 700.063093][T15201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.079065][T15201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.092340][T15201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.101682][T15201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.110778][T15201] binder: 15200:15201 ioctl c0306201 2000000021c0 returned -22 [ 700.120354][T15201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2302'. [ 700.133940][ T50] hid_parser_main: 162 callbacks suppressed [ 700.133961][ T50] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 700.148655][ T50] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 700.155907][ T50] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 700.164197][ T50] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 700.171947][ T50] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 700.179975][ T50] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 700.187223][ T50] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 700.195130][ T50] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 700.202889][ T50] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 700.210686][ T50] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 700.218064][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 700.232219][ T50] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0042/input/input82 [ 700.298535][ T5834] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 700.321383][ T50] microsoft 0003:045E:07DA.0042: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 700.346576][ T5834] usb 1-1: device descriptor read/8, error -71 [ 700.364076][ T50] usb 5-1: USB disconnect, device number 24 [ 700.378774][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 700.389837][ T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 700.414272][ T10] usb 4-1: config 0 has no interface number 0 [ 700.431289][ T10] usb 4-1: config 0 interface 184 has no altsetting 0 [ 700.450112][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 700.462541][T15203] fido_id[15203]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 700.477336][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.485750][ T10] usb 4-1: Product: syz [ 700.496067][ T10] usb 4-1: Manufacturer: syz [ 700.502573][ T10] usb 4-1: SerialNumber: syz [ 700.513013][ T10] usb 4-1: config 0 descriptor?? [ 700.526881][ T10] smsc75xx v1.0.0 [ 700.588157][ T5834] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 700.609103][ T5834] usb 1-1: device descriptor read/8, error -71 [ 700.718762][ T5834] usb usb1-port1: unable to enumerate USB device [ 700.745899][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 700.758964][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 700.772919][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 700.789192][ T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 700.803946][ T10] usb 4-1: USB disconnect, device number 6 [ 701.678266][ T5834] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 701.838478][ T5834] usb 4-1: Using ep0 maxpacket: 32 [ 701.865218][ T5834] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.882748][ T5834] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.899545][ T5834] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 701.977003][ T5834] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 701.987088][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 701.996203][ T5834] usb 4-1: Product: syz [ 702.002153][ T5834] usb 4-1: Manufacturer: syz [ 702.012449][ T5834] usb 4-1: SerialNumber: syz [ 702.035486][ T5834] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input83 [ 702.208081][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 702.242546][ T5834] usb 4-1: USB disconnect, device number 7 [ 702.280131][ T5834] appletouch 4-1:1.0: input: appletouch disconnected [ 702.369457][ T10] usb 2-1: config 0 has no interfaces? [ 702.381611][ T10] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 702.398536][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.411562][ T10] usb 2-1: Product: syz [ 702.416050][ T10] usb 2-1: Manufacturer: syz [ 702.423456][ T10] usb 2-1: SerialNumber: syz [ 702.438551][ T10] usb 2-1: config 0 descriptor?? [ 702.656738][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2307'. [ 702.677043][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2307'. [ 702.897017][T15239] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 702.903580][T15239] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 702.956761][T15239] vhci_hcd vhci_hcd.0: Device attached [ 702.996618][T15240] vhci_hcd: connection closed [ 702.997271][ T1097] vhci_hcd vhci_hcd.0: stop threads [ 703.010165][T15244] fuse: Bad value for 'rootmode' [ 703.025835][ T1097] vhci_hcd vhci_hcd.0: release socket [ 703.043696][ T1097] vhci_hcd vhci_hcd.0: disconnect device [ 703.261887][ T10] usb 2-1: USB disconnect, device number 30 [ 705.050547][T15308] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2327'. [ 705.071571][T15308] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2327'. [ 705.106681][T15308] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2327'. [ 705.278755][T15317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.316823][T15317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.345514][T15317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.345762][T15317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.738250][ T5834] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 705.921340][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 705.921357][ T30] audit: type=1326 audit(1766731914.565:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15329 comm="syz.2.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65e78f749 code=0x7ffc0000 [ 706.000918][ T5834] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 706.014185][ T5834] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 706.025575][ T30] audit: type=1326 audit(1766731914.605:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15329 comm="syz.2.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65e78f749 code=0x7ffc0000 [ 706.026372][ T5834] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 706.059428][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.070053][T15330] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2333'. [ 706.176194][T15337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.185428][T15337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.198705][ T30] audit: type=1326 audit(1766731914.695:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15329 comm="syz.2.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd65e78f749 code=0x7ffc0000 [ 706.288494][ T30] audit: type=1326 audit(1766731914.695:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15329 comm="syz.2.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65e78f749 code=0x7ffc0000 [ 706.381783][T15319] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 706.396126][ T5834] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 706.428343][ T30] audit: type=1326 audit(1766731914.695:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15329 comm="syz.2.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65e78f749 code=0x7ffc0000 [ 706.491875][ T30] audit: type=1326 audit(1766731914.705:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15329 comm="syz.2.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd65e78f749 code=0x7ffc0000 [ 706.601630][ T30] audit: type=1326 audit(1766731914.705:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15329 comm="syz.2.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65e78f749 code=0x7ffc0000 [ 706.671764][ T30] audit: type=1326 audit(1766731914.705:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15329 comm="syz.2.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65e78f749 code=0x7ffc0000 [ 706.834098][ T30] audit: type=1326 audit(1766731914.715:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15329 comm="syz.2.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd65e78f749 code=0x7ffc0000 [ 706.854211][T15354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.940918][T15354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.997052][ T30] audit: type=1326 audit(1766731914.715:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15329 comm="syz.2.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65e78f749 code=0x7ffc0000 [ 707.110848][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 707.325035][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 707.346911][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 109: 80, using maximum allowed: 30 [ 707.363309][ T10] usb 4-1: config 0 interface 0 altsetting 109 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.415223][ T10] usb 4-1: config 0 interface 0 altsetting 109 has 1 endpoint descriptor, different from the interface descriptor's value: 80 [ 707.544062][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 707.659315][ T10] usb 4-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 707.676116][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.714397][ T10] usb 4-1: config 0 descriptor?? [ 707.828788][T15367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2339'. [ 708.156726][T15370] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2340'. [ 708.452437][ T10] waltop 0003:172F:0500.0043: unknown main item tag 0x0 [ 708.478337][ T10] waltop 0003:172F:0500.0043: unknown main item tag 0x0 [ 708.499454][ T10] waltop 0003:172F:0500.0043: unknown main item tag 0x0 [ 708.521675][ T10] waltop 0003:172F:0500.0043: unknown main item tag 0x0 [ 708.542675][ T10] waltop 0003:172F:0500.0043: unknown main item tag 0x0 [ 708.573742][ T10] waltop 0003:172F:0500.0043: hidraw0: USB HID v0.05 Device [HID 172f:0500] on usb-dummy_hcd.3-1/input0 [ 708.651695][ T50] usb 4-1: USB disconnect, device number 8 [ 708.821514][T15378] fido_id[15378]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 709.026873][ T50] usb 1-1: USB disconnect, device number 10 [ 709.938761][ T5891] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 710.121605][ T5891] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.138502][ T5891] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 710.161154][ T5891] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 710.180980][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.198361][ T50] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 710.228349][ T5891] usb 4-1: Product: syz [ 710.232576][ T5891] usb 4-1: Manufacturer: syz [ 710.237214][ T5891] usb 4-1: SerialNumber: syz [ 710.338248][ T50] usb 5-1: device descriptor read/64, error -71 [ 710.351702][T15421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2355'. [ 710.363338][T15422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2355'. [ 710.473172][ T5891] usb 4-1: 0:2 : does not exist [ 710.488360][ T5834] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 710.494564][ T5891] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 710.519512][T15421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.539365][ T5891] usb 4-1: USB disconnect, device number 9 [ 710.557316][T15421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.578194][ T50] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 710.582559][T12102] udevd[12102]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 710.648258][ T5834] usb 1-1: Using ep0 maxpacket: 16 [ 710.661198][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.688267][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 710.708277][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 710.728240][ T5834] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 710.748279][ T5834] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 710.761902][ T50] usb 5-1: device descriptor read/64, error -71 [ 710.806960][ T5834] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 710.817417][ T5834] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 710.832714][ T5834] usb 1-1: Manufacturer: syz [ 710.841701][ T5834] usb 1-1: config 0 descriptor?? [ 710.890176][ T50] usb usb5-port1: attempt power cycle [ 711.102364][ T5836] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 711.114399][ T5834] rc_core: IR keymap rc-hauppauge not found [ 711.121394][ T5834] Registered IR keymap rc-empty [ 711.126639][ T5834] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.139993][T15444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.150288][ T5834] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.160059][T15443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.172800][ T5834] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 711.185308][T15444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.196810][ T5834] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input85 [ 711.209927][T15443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.228548][ T50] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 711.244691][ T5834] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.259277][ T50] usb 5-1: device descriptor read/8, error -71 [ 711.270247][ T5836] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 711.279247][ T5834] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.286552][ T5836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.297467][ T5836] usb 2-1: config 0 has no interface number 0 [ 711.304539][ T5834] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.316391][ T5836] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 711.326171][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.334916][ T5834] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.343296][ T5836] usb 2-1: Product: syz [ 711.347597][ T5836] usb 2-1: Manufacturer: syz [ 711.353021][ T5836] usb 2-1: SerialNumber: syz [ 711.362522][ T5836] usb 2-1: config 0 descriptor?? [ 711.378468][ T5834] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.398444][ T5834] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.418010][ T5834] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.428000][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 711.438768][ T5834] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.458385][ T5834] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.468275][ T5891] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 711.478304][ T5834] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.497772][ T50] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 711.507447][ T5834] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 711.516890][ T5834] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 711.528735][ T50] usb 5-1: device descriptor read/8, error -71 [ 711.578639][ T5836] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 711.599118][ T5836] uvcvideo 2-1:0.64: No valid video chain found. [ 711.631651][ T5836] usb 2-1: USB disconnect, device number 31 [ 711.648523][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 711.650878][ T50] usb usb5-port1: unable to enumerate USB device [ 711.669539][ T5891] usb 4-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 711.685047][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.693892][ T5891] usb 4-1: Product: syz [ 711.699225][ T5891] usb 4-1: Manufacturer: syz [ 711.704214][ T5891] usb 4-1: SerialNumber: syz [ 711.725959][ T5891] usb 4-1: config 0 descriptor?? [ 711.884571][ T5836] usb 1-1: USB disconnect, device number 11 [ 711.944857][ T5891] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 712.183792][T15459] binder: 15453:15459 ioctl 4018620d 0 returned -22 [ 712.192146][T15459] binder: 15453:15459 ioctl c018620c 0 returned -14 [ 712.599974][ T5891] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 712.790510][ T5891] usb 4-1: device firmware changed [ 712.803296][ T5891] usb 4-1: [UEAGLE-ATM] interface 1 not found [ 712.809667][ T5891] ueagle-atm 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 712.819063][ T5891] usb 4-1: USB disconnect, device number 10 [ 712.901567][T15472] random: crng reseeded on system resumption [ 713.079440][ T5891] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 713.258046][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 713.267045][ T5891] usb 4-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 713.276699][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.370171][ T5891] usb 4-1: Product: М [ 713.380541][ T5891] usb 4-1: Manufacturer: 崖헗䊺֌暫酦啼瘏ᰮ驸沰凭ᘒꎵ艀悭馧㽵 [ 713.398218][ T5891] usb 4-1: SerialNumber: ֊蛲뵑댏쥷茆姀蚹ᵘꊤ놩嘪趼蝷慧룃驋䶂僀赿뮒㺴劥ﭵ词윪欽Ṍ똊ඨЋꀋᔨ䀾擘罖৳폪"䀍兩ꝋ꓈딑愰 [ 713.434696][ T5891] usb 4-1: config 0 descriptor?? [ 713.650139][T15446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.672136][T15446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.755485][T15484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.765574][ T5891] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 713.776978][T15484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.008008][ T5836] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 714.160370][ T5836] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 714.182929][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.208489][ T5836] usb 2-1: config 0 descriptor?? [ 714.431166][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 714.440855][ T5836] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 714.450504][ T5836] [drm:udl_init] *ERROR* Selecting channel failed [ 714.474093][ T5836] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 714.495348][ T5836] [drm] Initialized udl on minor 2 [ 714.515000][ T5836] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 714.538934][ T5836] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 714.559296][ T50] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 714.567409][ T50] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 714.572950][ T5891] usb 4-1: [UEAGLE-ATM] interface 1 not found [ 714.584764][ T5891] ueagle-atm 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 714.588610][ T5836] usb 2-1: USB disconnect, device number 32 [ 714.626112][ T5891] usb 4-1: USB disconnect, device number 11 [ 714.879182][T15500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2374'. [ 714.912582][T15500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2374'. [ 715.298305][ T50] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 715.323827][T15507] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 715.409514][T15504] IPv6: sit1: Disabled Multicast RS [ 715.453411][ T50] usb 4-1: Using ep0 maxpacket: 8 [ 715.469097][T15504] sit1: entered allmulticast mode [ 715.479876][ T50] usb 4-1: unable to get BOS descriptor or descriptor too short [ 715.492562][ T50] usb 4-1: config 11 has an invalid interface number: 242 but max is 0 [ 715.515499][ T50] usb 4-1: config 11 has no interface number 0 [ 715.533430][ T50] usb 4-1: config 11 interface 242 altsetting 225 has an endpoint descriptor with address 0x7B, changing to 0xB [ 715.552836][ T50] usb 4-1: config 11 interface 242 altsetting 225 bulk endpoint 0xB has invalid maxpacket 8 [ 715.588977][ T50] usb 4-1: config 11 interface 242 altsetting 225 endpoint 0x6 has invalid maxpacket 15735, setting to 1024 [ 715.621082][ T50] usb 4-1: config 11 interface 242 altsetting 225 bulk endpoint 0x6 has invalid maxpacket 1024 [ 715.653716][ T50] usb 4-1: config 11 interface 242 altsetting 225 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 715.665601][ T5834] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 715.691888][ T50] usb 4-1: config 11 interface 242 altsetting 225 endpoint 0xE has invalid wMaxPacketSize 0 [ 715.728253][ T50] usb 4-1: config 11 interface 242 has no altsetting 0 [ 715.798290][ T5834] usb 1-1: device descriptor read/64, error -71 [ 715.973769][ T50] usb 4-1: string descriptor 0 read error: -71 [ 715.981815][ T50] usb 4-1: New USB device found, idVendor=05da, idProduct=0094, bcdDevice=38.8a [ 715.998643][ T50] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.013796][ T50] usb 4-1: can't set config #11, error -71 [ 716.023810][ T50] usb 4-1: USB disconnect, device number 12 [ 716.040643][ T5834] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 716.178248][ T5834] usb 1-1: device descriptor read/64, error -71 [ 716.289292][ T5834] usb usb1-port1: attempt power cycle [ 716.638338][ T5834] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 716.668916][ T5834] usb 1-1: device descriptor read/8, error -71 [ 716.867062][T15530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.901965][T15530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.919936][ T5834] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 716.950257][ T5834] usb 1-1: device descriptor read/8, error -71 [ 717.081128][ T5834] usb usb1-port1: unable to enumerate USB device [ 718.105110][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 718.105132][ T30] audit: type=1326 audit(1766731926.705:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15541 comm="syz.1.2385" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb7c3d8f749 code=0x0 [ 718.814689][T15558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.855372][T15558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.068168][ T5891] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 719.228050][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 719.234739][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.251697][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.302197][ T5891] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 719.312401][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.331632][ T5891] usb 1-1: config 0 descriptor?? [ 719.348339][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 719.518371][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 719.538402][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 719.554245][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 719.564368][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.573742][ T10] usb 2-1: Product: syz [ 719.578876][ T10] usb 2-1: Manufacturer: syz [ 719.583593][ T10] usb 2-1: SerialNumber: syz [ 719.618827][ T10] usb 2-1: config 0 descriptor?? [ 719.639681][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 719.668212][ T10] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 719.777899][ T5891] savu 0003:1E7D:2D5A.0044: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 719.963420][T15560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.972666][T15560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.993484][T15560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.011287][T15560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.049883][ T50] usb 1-1: USB disconnect, device number 16 [ 720.241567][ T10] em28xx 2-1:0.0: unknown em28xx chip ID (104) [ 720.348347][ T5834] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 720.444288][T15591] usb usb8: usbfs: process 15591 (syz.4.2397) did not claim interface 0 before use [ 720.454811][T15591] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 720.485333][T15591] syzkaller0: entered promiscuous mode [ 720.491586][T15591] syzkaller0: entered allmulticast mode [ 720.498450][ T5834] usb 4-1: Using ep0 maxpacket: 32 [ 720.505667][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.523899][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.548706][ T5834] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 720.560398][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.601657][ T5834] usb 4-1: config 0 descriptor?? [ 720.784673][T15597] fuse: Bad value for 'user_id' [ 720.791543][T15597] fuse: Bad value for 'user_id' [ 720.852469][ T10] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 720.874524][ T10] em28xx 2-1:0.0: board has no eeprom [ 720.961827][ T5891] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 721.022440][ T5834] smartjoyplus 0003:0925:8866.0045: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.3-1/input0 [ 721.039385][ T5834] smartjoyplus 0003:0925:8866.0045: Force feedback for SmartJoy PLUS PS2/USB adapter [ 721.118105][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 721.130155][ T5891] usb 5-1: config index 0 descriptor too short (expected 8228, got 36) [ 721.150664][ T5891] usb 5-1: config 231 has an invalid descriptor of length 242, skipping remainder of the config [ 721.171793][ T5891] usb 5-1: config 231 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 721.188409][ T10] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 721.201038][ T10] em28xx 2-1:0.0: dvb set to bulk mode. [ 721.206929][ T5891] usb 5-1: config 231 interface 0 has no altsetting 0 [ 721.217140][ T5906] em28xx 2-1:0.0: Binding DVB extension [ 721.234279][ T5891] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 721.253819][ T10] usb 4-1: USB disconnect, device number 13 [ 721.265355][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.299955][ T5891] usbhid 5-1:231.0: couldn't find an input interrupt endpoint [ 721.383057][ T5834] usb 2-1: USB disconnect, device number 33 [ 721.389410][ T5906] em28xx 2-1:0.0: Registering input extension [ 721.419278][ T5834] em28xx 2-1:0.0: Disconnecting em28xx [ 721.424956][ T5834] em28xx 2-1:0.0: Closing input extension [ 721.457177][ T5834] em28xx 2-1:0.0: Freeing device [ 722.349091][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 722.418332][ T5906] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 722.541114][ T10] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 722.563629][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.590185][ T10] usb 1-1: Product: syz [ 722.598183][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 722.604365][ T10] usb 1-1: Manufacturer: syz [ 722.611185][ T10] usb 1-1: SerialNumber: syz [ 722.618005][ T5906] usb 4-1: config 1 interface 0 has no altsetting 0 [ 722.628790][ T5906] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.40 [ 722.646304][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.664408][ T5906] usb 4-1: Product: 䉔㜛ᾇ狤쪤矫隹⿰熳왂त쁲ꚃލ꫙闳檋೙⨂휨慑捚舫猯霓⛟✦퟈槊읇ﴴ⤤䤧聆飺퐬婚ﵙ侱禋엺梗ఞ䂿઱段灒㤼ۊ픓ꨜ僠㱸稥㦅⥟뙖䝳キ燖床꼓됀彳开㝅녅䲙䠞ᔍ㯚뮅見⹔ [ 722.692216][ T5906] usb 4-1: Manufacturer: ц [ 722.696806][ T5906] usb 4-1: SerialNumber: 㩶চ핱帩㦐덣⢙ꦎઃ╩蛒Ɏ⩠滲芏茇᧼믟瞎╵้㸯继禹䴇᡽롟Ɯ⸻㖹ꭋ쵘⿭눱⧻ᩩ匇僼鎆Ⲵῖ鎚뢔⁞ᶄᦴ鹺ꬁḈ颭→펗ﶦ僼置苇桉嶻䍳⇫嗶殕軨딎毠좄ᘔᶍ㫉暯祐 [ 722.846996][T15626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.860409][T15626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.901486][T15647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.916327][T15647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.941808][ T5906] usbhid 4-1:1.0: can't add hid device: -71 [ 722.949662][ T5906] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 722.972818][ T5906] usb 4-1: USB disconnect, device number 14 [ 723.010622][ T10] rtl8150 1-1:1.0: couldn't reset the device [ 723.021921][ T10] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 723.049384][ T10] usb 1-1: USB disconnect, device number 17 [ 723.578524][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 723.745426][ T5834] usb 5-1: USB disconnect, device number 29 [ 723.758747][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 723.780356][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 723.817726][ T5906] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 723.829419][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 723.901808][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 723.943385][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 724.008722][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 724.026190][ T5906] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 724.131081][T15675] input: syz0 as /devices/virtual/input/input87 [ 724.157191][ T5906] usb 2-1: config 0 has no interface number 0 [ 724.175203][ T10] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 724.199197][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.207556][ T5906] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=2f.1f [ 724.218277][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.261579][ T10] usb 1-1: Product: syz [ 724.272733][ T5906] usb 2-1: Product: syz [ 724.277048][ T10] usb 1-1: Manufacturer: syz [ 724.282119][ T5834] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 724.282142][ T5906] usb 2-1: Manufacturer: syz [ 724.296770][ T10] usb 1-1: SerialNumber: syz [ 724.306052][ T10] usb 1-1: config 0 descriptor?? [ 724.326425][ T5906] usb 2-1: SerialNumber: syz [ 724.354022][ T5906] usb 2-1: config 0 descriptor?? [ 724.541985][ T5834] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.553970][ T5834] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 724.568690][ T5834] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 724.735588][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.791720][ T5834] usb 5-1: Product: syz [ 724.796084][ T30] audit: type=1326 audit(1766731933.395:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15657 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 724.828215][ T5834] usb 5-1: Manufacturer: syz [ 724.836020][ T5834] usb 5-1: SerialNumber: syz [ 724.857201][ T30] audit: type=1326 audit(1766731933.395:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15657 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 724.884420][ T30] audit: type=1326 audit(1766731933.395:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15657 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 724.912403][ T30] audit: type=1326 audit(1766731933.395:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15657 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb7c3d8de97 code=0x7ffc0000 [ 724.915863][ T5834] cdc_mbim 5-1:1.0: skipping garbage [ 725.037200][ T30] audit: type=1326 audit(1766731933.395:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15657 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb7c3d90eea code=0x7ffc0000 [ 725.089055][ T30] audit: type=1326 audit(1766731933.395:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15657 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7c3d8df90 code=0x7ffc0000 [ 725.149168][T15673] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 725.199482][ T30] audit: type=1326 audit(1766731933.525:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15657 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 725.223980][ T30] audit: type=1326 audit(1766731933.525:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15657 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 725.251861][ T30] audit: type=1326 audit(1766731933.525:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15657 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb7c3d8e15c code=0x7ffc0000 [ 725.281573][ T30] audit: type=1326 audit(1766731933.605:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15657 comm="syz.1.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 725.358314][ T10] iforce 1-1:0.0: usb_submit_urb failed: -110 [ 725.427392][ T10] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 725.444768][ T10] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 725.463310][ T10] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 725.479465][ T10] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 725.498208][ T10] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 725.504955][ T10] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 725.523169][ T10] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 725.538146][ T10] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 725.551655][ T10] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 725.566333][ T10] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 725.580059][ T10] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 725.598693][ T10] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 725.618797][ T10] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 725.637524][ T10] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 725.658060][ T10] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 725.678147][ T10] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 725.706592][ T10] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 725.725479][ T10] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 725.735580][ T10] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 725.747537][ T10] input input88: Timeout waiting for response from device. [ 725.902778][ T5834] cdc_mbim 5-1:1.0: bind() failure [ 725.911278][ T5834] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 725.919374][ T5834] cdc_ncm 5-1:1.1: bind() failure [ 725.963910][T15690] trusted_key: encrypted_key: insufficient parameters specified [ 725.979477][ T5834] usb 5-1: USB disconnect, device number 30 [ 726.206791][T15696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.395298][T15696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.458348][ T5834] usb 1-1: USB disconnect, device number 18 [ 726.709931][T15701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2424'. [ 727.038338][ T50] usb 2-1: USB disconnect, device number 34 [ 727.111294][T15709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2427'. [ 727.451189][T15724] ip6gretap2: entered promiscuous mode [ 727.467591][T15724] ip6gretap2: entered allmulticast mode [ 727.698589][ T50] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 727.860073][ T50] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.875085][ T50] usb 2-1: config 0 interface 0 has no altsetting 0 [ 727.894312][ T50] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 727.904886][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.062684][ T50] usb 2-1: config 0 descriptor?? [ 728.584282][ T50] kye 0003:0458:5019.0046: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 728.599798][ T50] kye 0003:0458:5019.0046: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.1-1/input0 [ 728.611693][ T50] kye 0003:0458:5019.0046: tablet-enabling feature report not found [ 728.620282][ T50] kye 0003:0458:5019.0046: tablet enabling failed [ 728.658226][ T5834] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 728.866483][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 728.872271][ T10] usb 2-1: USB disconnect, device number 35 [ 728.894409][ T5834] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 728.904180][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.933791][ T5834] usb 5-1: Product: syz [ 728.941448][ T5834] usb 5-1: Manufacturer: syz [ 728.946775][ T5834] usb 5-1: SerialNumber: syz [ 728.959173][ T5834] usb 5-1: config 0 descriptor?? [ 728.974219][ T5834] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 729.053005][T15758] input: syz0 as /devices/virtual/input/input89 [ 730.088763][ T5834] gspca_topro: reg_w err -110 [ 730.128620][ T5834] gspca_topro: Sensor soi763a [ 730.192165][T15783] loop2: detected capacity change from 0 to 7 [ 730.208724][T15783] Dev loop2: unable to read RDB block 7 [ 730.219016][T15783] loop2: AHDI p1 p2 p3 [ 730.223325][T15783] loop2: partition table partially beyond EOD, truncated [ 730.276874][T15783] loop2: p1 start 1601398130 is beyond EOD, truncated [ 730.298268][T15783] loop2: p2 start 1702059890 is beyond EOD, truncated [ 730.648380][ T5199] Dev loop2: unable to read RDB block 7 [ 730.658312][ T5199] loop2: AHDI p1 p2 p3 [ 730.665025][ T5199] loop2: partition table partially beyond EOD, truncated [ 730.676425][ T10] usb 5-1: USB disconnect, device number 31 [ 730.684222][ T5199] loop2: p1 start 1601398130 is beyond EOD, truncated [ 730.699569][ T5199] loop2: p2 start 1702059890 is beyond EOD, truncated [ 730.839142][ T5906] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 730.978755][ T5906] usb 1-1: device descriptor read/64, error -71 [ 731.161210][T15803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.176609][T15803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.228269][ T5906] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 731.338410][T15803] bond0: left promiscuous mode [ 731.347575][T15803] bond_slave_1: left promiscuous mode [ 731.359267][ T5906] usb 1-1: device descriptor read/64, error -71 [ 731.403759][ T1097] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.504137][ T5906] usb usb1-port1: attempt power cycle [ 731.510745][ T1097] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 731.528451][ T1097] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.545050][ T1097] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 731.638056][ T1097] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.652761][ T1097] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 731.670819][ T1097] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.689444][ T1097] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 731.777329][ T5199] Dev loop2: unable to read RDB block 7 [ 731.790489][ T5199] loop2: AHDI p1 p2 p3 [ 731.802411][ T5199] loop2: partition table partially beyond EOD, truncated [ 731.817390][ T5199] loop2: p1 start 1601398130 is beyond EOD, truncated [ 731.828754][ T5199] loop2: p2 start 1702059890 is beyond EOD, truncated [ 731.848202][ T5906] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 731.882012][ T5906] usb 1-1: device descriptor read/8, error -71 [ 732.026992][T15824] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2455'. [ 732.208094][ T5906] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 732.239108][ T5906] usb 1-1: device descriptor read/8, error -71 [ 732.250868][T15828] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2457'. [ 732.360044][ T5906] usb usb1-port1: unable to enumerate USB device [ 732.659523][T15833] kvm: MWAIT instruction emulated as NOP! [ 733.200978][T15844] netlink: 'syz.2.2462': attribute type 13 has an invalid length. [ 733.210591][T15844] netlink: 'syz.2.2462': attribute type 17 has an invalid length. [ 733.333922][T15844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.344307][T15844] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.355540][T15844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 733.358425][ T5891] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 733.452516][T15847] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 733.548600][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 733.578602][ T5891] usb 2-1: unable to get BOS descriptor or descriptor too short [ 733.597984][ T5891] usb 2-1: config 5 has an invalid interface number: 212 but max is 0 [ 733.608404][ T5891] usb 2-1: config 5 has no interface number 0 [ 733.615898][ T5891] usb 2-1: config 5 interface 212 altsetting 41 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 733.636971][ T5891] usb 2-1: config 5 interface 212 has no altsetting 0 [ 733.663913][ T5891] usb 2-1: New USB device found, idVendor=0763, idProduct=2019, bcdDevice=3a.5e [ 733.663946][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.663967][ T5891] usb 2-1: Product: syz [ 733.663983][ T5891] usb 2-1: Manufacturer: syz [ 733.663998][ T5891] usb 2-1: SerialNumber: syz [ 733.909809][ T5891] usb 2-1: USB disconnect, device number 36 [ 733.955272][T12102] udevd[12102]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:5.212/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 734.266612][ T5906] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 734.458140][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 734.467058][ T5906] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 734.507996][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.526313][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 734.526329][ T30] audit: type=1326 audit(1766731943.165:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15869 comm="syz.2.2471" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd65e78f749 code=0x0 [ 734.538640][ T5906] usb 1-1: config 0 descriptor?? [ 734.583381][T15871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.592228][T15871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.629152][ T5906] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 734.676260][ T5906] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input90 [ 734.890780][ T5906] usb 1-1: USB disconnect, device number 23 [ 734.970803][ T30] audit: type=1326 audit(1766731943.615:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 734.999527][T15883] netlink: 'syz.1.2474': attribute type 1 has an invalid length. [ 735.016933][ T30] audit: type=1326 audit(1766731943.645:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 735.048952][ T30] audit: type=1326 audit(1766731943.645:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 735.098875][ T5836] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 735.110587][T15883] 8021q: adding VLAN 0 to HW filter on device bond6 [ 735.117459][ T30] audit: type=1326 audit(1766731943.645:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 735.148608][ T30] audit: type=1326 audit(1766731943.645:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 735.197046][T15886] bond6: (slave geneve3): making interface the new active one [ 735.210317][T15886] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 735.213609][ T30] audit: type=1326 audit(1766731943.645:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 735.241901][T15151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.258799][T15151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.272973][T15151] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.284074][T15151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.291645][ T30] audit: type=1326 audit(1766731943.645:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 735.316121][ T5836] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 735.328583][ T5836] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 735.341265][ T30] audit: type=1326 audit(1766731943.645:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 735.348384][ T5836] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 735.392586][ T5836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 735.403164][ T5836] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 735.413410][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 735.423157][ T5836] usb 5-1: Product: syz [ 735.427345][ T5836] usb 5-1: Manufacturer: syz [ 735.433067][ T5836] usb 5-1: SerialNumber: syz [ 735.459050][ T30] audit: type=1326 audit(1766731943.645:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15882 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c3d8f749 code=0x7ffc0000 [ 735.499480][ T5836] usb 5-1: config 0 descriptor?? [ 735.506792][T15881] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 735.546004][ T5836] usb 5-1: selecting invalid altsetting 0 [ 735.655564][T15896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.667298][T15896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.777996][ T5836] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 735.808169][ T5913] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 735.929776][ T5836] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.940290][ T5836] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 735.951584][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 735.962990][ T5836] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 735.976344][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 735.984046][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.996903][ T5836] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 736.006706][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.015501][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.025943][ T5836] usb 1-1: Product: syz [ 736.030695][ T5836] usb 1-1: Manufacturer: syz [ 736.035342][ T5836] usb 1-1: SerialNumber: syz [ 736.040527][ T5913] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 736.051011][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.059576][ T5834] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 736.069263][ T5836] usb 1-1: config 0 descriptor?? [ 736.079425][ T5836] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected [ 736.090115][ T5913] usb 4-1: config 0 descriptor?? [ 736.096419][ T5836] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 736.112118][ T5836] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 736.219707][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.230421][ T5834] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 736.242607][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 736.253737][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 736.263742][ T5834] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 736.294099][ T5834] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 736.304365][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 736.336507][ T5834] usb 2-1: Product: syz [ 736.348174][ T5834] usb 2-1: Manufacturer: syz [ 736.352844][ T5834] usb 2-1: SerialNumber: syz [ 736.362234][ T5834] usb 2-1: config 0 descriptor?? [ 736.370620][ T5891] usb 5-1: USB disconnect, device number 32 [ 736.521265][ T5913] vrc2 0003:07C0:1125.0047: fixing up VRC-2 report descriptor [ 736.568720][ T5913] input: HID 07c0:1125 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:07C0:1125.0047/input/input91 [ 736.601056][ T5834] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 736.635445][ T5834] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 736.701800][ T5913] vrc2 0003:07C0:1125.0047: input,hidraw0: USB HID v10.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.3-1/input0 [ 736.771984][T15912] vivid-007: disconnect [ 736.798336][ T5834] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 736.815185][ T5834] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 736.840849][ T5834] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 736.893338][ T5891] usb 4-1: USB disconnect, device number 15 [ 736.998987][ T5834] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 737.040496][T15915] fido_id[15915]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 737.420104][T15910] vivid-007: reconnect [ 737.611445][T15900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.634136][T15900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.688551][T15924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.708339][ T5834] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 737.729712][ T5834] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 737.737740][T15924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.812207][T15928] Cannot find add_set index 1 as target [ 737.838929][T15924] Cannot find add_set index 1 as target [ 737.843697][ T5834] usb 2-1: USB disconnect, device number 37 [ 738.338131][ T5891] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 738.358071][ T5906] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 738.492722][ T5891] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 738.506938][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.521524][ T5891] usb 5-1: Product: syz [ 738.529860][ T5891] usb 5-1: Manufacturer: syz [ 738.537401][ T5891] usb 5-1: SerialNumber: syz [ 738.553482][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.580507][ T5891] usb 5-1: config 0 descriptor?? [ 738.587980][ T5906] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 738.610805][ T5891] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 033 [ 738.625631][ T5906] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 738.651936][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.682039][ T5906] usb 4-1: config 0 descriptor?? [ 738.714135][ T5913] usb 1-1: USB disconnect, device number 24 [ 738.729184][ T5913] garmin_gps 1-1:0.0: device disconnected [ 738.808967][ T5891] (null): failure setting delay to 10us [ 738.826738][ T5891] i2c-tiny-usb 5-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 738.859879][ T5891] usb 5-1: USB disconnect, device number 33 [ 739.228390][ T5913] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 739.316685][ T5906] Bluetooth: Can't get version to change to load ram patch err [ 739.334668][ T5906] Bluetooth: Loading sysconfig file failed [ 739.344821][ T5906] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 739.375756][ T5906] usb 4-1: USB disconnect, device number 16 [ 739.414354][ T5913] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 739.455969][ T5913] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 739.486137][ T5913] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 739.505509][ T5913] usb 1-1: config 220 has no interface number 2 [ 739.549313][ T5913] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 739.585314][ T5913] usb 1-1: config 220 interface 0 has no altsetting 0 [ 739.623592][ T5913] usb 1-1: config 220 interface 76 has no altsetting 0 [ 739.654033][ T5913] usb 1-1: config 220 interface 1 has no altsetting 0 [ 739.759231][ T5913] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 739.771394][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.793648][ T5913] usb 1-1: Product: syz [ 739.828558][ T5913] usb 1-1: Manufacturer: syz [ 739.853595][ T5913] usb 1-1: SerialNumber: syz [ 739.868277][ T5906] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 739.937966][T15968] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2498'. [ 740.078489][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 740.308420][ T5906] usb 5-1: unable to get BOS descriptor or descriptor too short [ 740.318108][ T5906] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 740.326625][ T5906] usb 5-1: config 7 has no interface number 0 [ 740.341121][ T5906] usb 5-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 740.354979][ T5913] usb 1-1: selecting invalid altsetting 0 [ 740.507569][ T5906] usb 5-1: config 7 interface 187 has no altsetting 0 [ 740.509523][ T5913] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 740.525960][ T5906] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 740.541524][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.563644][ T5906] usb 5-1: Product: syz [ 740.568526][ T5906] usb 5-1: Manufacturer: syz [ 740.580421][ T5913] uvcvideo 1-1:220.0: No valid video chain found. [ 740.597357][ T5906] usb 5-1: SerialNumber: syz [ 740.625582][ T5913] usb 1-1: selecting invalid altsetting 0 [ 740.669339][ T5913] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 740.713819][ T5913] usb 1-1: USB disconnect, device number 25 [ 740.831142][ T5906] usb 5-1: Cannot retrieve CPort count: 0 [ 740.837012][ T5906] usb 5-1: Cannot retrieve CPort count: -5 [ 740.905649][ T5906] es2_ap_driver 5-1:7.187: probe with driver es2_ap_driver failed with error -5 [ 741.033332][ T5906] usb 5-1: USB disconnect, device number 34 [ 741.805847][T16004] input: syz0 as /devices/virtual/input/input92 [ 741.882878][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2507'. [ 741.906309][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2507'. [ 741.932880][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2507'. [ 741.960717][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2507'. [ 741.978149][ T5906] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 741.987233][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2507'. [ 742.012793][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2507'. [ 742.025906][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2507'. [ 742.036011][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2507'. [ 742.046159][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2507'. [ 742.218160][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 742.225010][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.265092][ T5906] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 742.298349][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.334287][ T5906] usb 5-1: config 0 descriptor?? [ 742.398334][ T5891] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 742.559287][ T5891] usb 1-1: not running at top speed; connect to a high speed hub [ 742.570782][ T5891] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 742.580637][ T5891] usb 1-1: config 1 has no interface number 1 [ 742.586931][ T5891] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 742.630034][ T5891] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 742.639909][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.649414][ T5891] usb 1-1: Product: syz [ 742.664056][ T5891] usb 1-1: Manufacturer: syz [ 742.692548][ T5891] usb 1-1: SerialNumber: syz [ 742.771542][ T5906] mcp2221 0003:04D8:00DD.0048: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 742.948242][ T5913] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 742.965156][ T5891] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 742.976380][T16002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.988787][T16002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.024891][ T5891] usb 1-1: failed to enable PITCH for EP 0x82 [ 743.049828][T16029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.068807][T16029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.078795][ T5913] usb 2-1: device descriptor read/64, error -71 [ 743.203797][ T5891] usb 1-1: USB disconnect, device number 26 [ 743.240613][T16002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.270599][T16002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.286490][T11856] udevd[11856]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 743.307014][T16002] openvswitch: netlink: Duplicate or invalid key (type 0). [ 743.319020][ T5913] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 743.321137][T16002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.418559][ T5906] usb 5-1: USB disconnect, device number 35 [ 743.478283][ T5913] usb 2-1: device descriptor read/64, error -71 [ 743.526266][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 743.526285][ T30] audit: type=1326 audit(1766731952.165:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16031 comm="syz.3.2515" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9a918f749 code=0x0 [ 743.588715][ T5913] usb usb2-port1: attempt power cycle [ 743.938423][ T5913] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 743.958683][ T5913] usb 2-1: device descriptor read/8, error -71 [ 744.076996][T16050] netlink: 'syz.4.2520': attribute type 21 has an invalid length. [ 744.085255][T16050] IPv6: NLM_F_CREATE should be specified when creating new route [ 744.095130][T16050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 744.103039][T16050] IPv6: NLM_F_CREATE should be set when creating new route [ 744.110443][T16050] IPv6: NLM_F_CREATE should be set when creating new route [ 744.117829][T16050] IPv6: NLM_F_CREATE should be set when creating new route [ 744.127083][T16050] netlink: 'syz.4.2520': attribute type 21 has an invalid length. [ 744.135540][T16050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 744.199175][ T5913] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 744.229551][ T5913] usb 2-1: device descriptor read/8, error -71 [ 744.342255][ T5913] usb usb2-port1: unable to enumerate USB device [ 744.587095][ T5913] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 744.758381][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 744.770363][ T5913] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 744.781089][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.790602][ T5913] usb 4-1: Product: syz [ 744.795153][ T5913] usb 4-1: Manufacturer: syz [ 744.801185][ T5913] usb 4-1: SerialNumber: syz [ 744.810255][ T5913] usb 4-1: config 0 descriptor?? [ 745.018372][ T5913] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 745.093026][ T5913] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 745.110480][ T5913] usb 4-1: USB disconnect, device number 17 [ 746.788562][T16107] __nla_validate_parse: 14 callbacks suppressed [ 746.788585][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2534'. [ 747.157826][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2535'. [ 747.167151][T16111] openvswitch: netlink: Missing key (keys=40, expected=80) [ 747.286139][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.294396][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.578049][ T5891] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 747.619979][ T5913] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 747.727993][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 747.735698][ T5891] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 747.804729][ T5913] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 747.817237][ T5913] usb 5-1: config 1 has no interface number 0 [ 747.827689][ T5891] usb 4-1: config 179 has no interface number 0 [ 747.830682][ T5913] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 747.854412][ T5913] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 747.858774][ T5891] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 747.865102][ T5913] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.900401][ T5913] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 747.927666][ T5891] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 747.947682][ T5891] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 747.969869][ T5891] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 748.005659][ T5891] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 748.008958][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.058219][ T5913] usb 5-1: Product: syz [ 748.078266][ T5913] usb 5-1: Manufacturer: syz [ 748.082906][ T5913] usb 5-1: SerialNumber: syz [ 748.089317][ T5891] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 748.093608][T16120] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 748.149622][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.191426][T16119] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 748.307475][T16120] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 748.619942][ T5834] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 748.730911][T16120] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2537'. [ 748.769973][T16140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.791419][ T5913] usb 5-1: Incompatible driver and firmware versions [ 748.810972][T16140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.874132][ T5913] usb 5-1: USB disconnect, device number 36 [ 748.890153][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.902003][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.945331][ T5834] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 748.995968][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.051105][ T5834] usb 2-1: config 0 descriptor?? [ 749.938979][ T5834] usbhid 2-1:0.0: can't add hid device: -32 [ 749.948280][ T5834] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 750.089753][ T5834] usb 2-1: USB disconnect, device number 42 [ 750.509425][ T5834] usb 4-1: USB disconnect, device number 18 [ 750.509454][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 750.524227][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 751.198380][ T5834] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 751.288521][T16201] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2563'. [ 751.364111][ T5834] usb 2-1: config 0 has no interfaces? [ 751.370225][ T5834] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 751.380408][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.581490][ T5834] usb 2-1: config 0 descriptor?? [ 752.389437][T16216] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 752.669770][T16224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.693800][T16224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.727242][T16224] binder: BINDER_SET_CONTEXT_MGR already set [ 752.751133][T16224] binder: 16221:16224 ioctl 4018620d 200000004a80 returned -16 [ 752.775763][T16224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.803231][T16224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.150963][T16224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2568'. [ 754.113355][ T5891] usb 2-1: USB disconnect, device number 43 [ 754.136812][T16238] bond4 (unregistering): Released all slaves [ 754.918564][ T5834] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 755.078366][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 755.088594][ T5834] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 755.118387][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.128212][ T5913] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 755.149180][ T5834] usb 2-1: config 0 descriptor?? [ 755.318233][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 755.348640][ T5913] usb 5-1: config 0 has no interfaces? [ 755.360683][ T5913] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 755.430299][ T5834] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 755.438028][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.462929][ T5834] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 755.482411][ T5913] usb 5-1: config 0 descriptor?? [ 755.503897][ T5834] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 755.601845][ T5834] usb 2-1: media controller created [ 755.692055][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 755.742130][ T5834] az6027: usb out operation failed. (-71) [ 755.759027][ T5834] az6027: usb out operation failed. (-71) [ 755.772414][ T5834] stb0899_attach: Driver disabled by Kconfig [ 755.795284][ T5834] az6027: no front-end attached [ 755.795284][ T5834] [ 755.814312][ T5834] az6027: usb out operation failed. (-71) [ 755.828459][ T5834] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 755.848924][ T5834] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input94 [ 755.923717][T16279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.936418][T16279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.360093][T16283] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2588'. [ 756.399138][ T5834] dvb-usb: schedule remote query interval to 400 msecs. [ 756.406498][ T5834] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 756.423275][ T5834] usb 2-1: USB disconnect, device number 44 [ 756.789340][ T5834] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 758.257198][ T5913] usb 5-1: USB disconnect, device number 37 [ 758.639873][T16318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2599'. [ 758.684338][ T5834] usb 3-1: USB disconnect, device number 68 [ 758.855558][T16319] pimreg: entered allmulticast mode [ 758.942928][T16322] pimreg: left allmulticast mode [ 759.051917][T13985] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 759.065491][T13985] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 759.074468][T13985] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 759.088853][T13985] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 759.096523][T13985] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 759.482729][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2604'. [ 760.155120][T16326] chnl_net:caif_netlink_parms(): no params data found [ 760.556764][T16326] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.573467][T16326] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.592359][T16326] bridge_slave_0: entered allmulticast mode [ 760.623478][T16326] bridge_slave_0: entered promiscuous mode [ 760.666620][T16326] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.727725][T16326] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.735095][T16326] bridge_slave_1: entered allmulticast mode [ 760.772953][T16326] bridge_slave_1: entered promiscuous mode [ 760.903132][T16326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.001078][T16326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.141041][T16326] team0: Port device team_slave_0 added [ 761.154940][T16326] team0: Port device team_slave_1 added [ 761.172864][T16383] syzkaller0: entered promiscuous mode [ 761.179627][T16383] syzkaller0: entered allmulticast mode [ 761.187802][ T5829] Bluetooth: hci5: command tx timeout [ 761.188383][ T5913] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 761.202151][ T5913] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 761.228344][ T5836] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 761.486017][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.510894][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.544969][ T5836] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 761.614902][ T5836] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 761.625216][T16326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.632850][T16326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.662629][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.689006][ T5836] usb 1-1: config 0 descriptor?? [ 761.822433][T16326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.029354][T16326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.060347][T16326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.170731][T16326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.271226][ T1036] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.398174][ T5913] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 762.476898][ T1036] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.519226][T16326] hsr_slave_0: entered promiscuous mode [ 762.532175][T16326] hsr_slave_1: entered promiscuous mode [ 762.546196][T16326] debugfs: 'hsr0' already exists in 'hsr' [ 762.568011][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 762.573665][T16326] Cannot create hsr debugfs directory [ 762.575327][ T5913] usb 4-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 762.591086][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.653287][ T1036] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.675243][ T5913] usb 4-1: config 0 descriptor?? [ 762.720726][ T5913] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 762.813080][ T5913] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 762.885666][ T5913] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 762.894140][ T5913] usb 4-1: media controller created [ 762.923204][T16399] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] SMP KASAN PTI [ 762.935221][T16399] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 762.943671][T16399] CPU: 1 UID: 0 PID: 16399 Comm: syz.3.2623 Tainted: G L syzkaller #0 PREEMPT(full) [ 762.954712][T16399] Tainted: [L]=SOFTLOCKUP [ 762.959022][T16399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 762.969075][T16399] RIP: 0010:__mutex_lock+0x13b/0x1350 [ 762.974443][T16399] Code: 20 54 8b 99 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 25 10 00 00 83 3d 23 53 30 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 d9 14 cc f6 4d 39 64 24 60 0f 85 51 0f 00 [ 762.994039][T16399] RSP: 0018:ffffc9000c2e7420 EFLAGS: 00010202 [ 763.000100][T16399] RAX: 0000000000000019 RBX: ffffc9000c2e7500 RCX: ffffffff998b5403 [ 763.008059][T16399] RDX: 0000000000000000 RSI: ffffffff8d975e98 RDI: 00000000000000c8 [ 763.016018][T16399] RBP: ffffc9000c2e75d8 R08: ffffc9000c2e7547 R09: 0000000000000000 [ 763.023981][T16399] R10: ffffc9000c2e7520 R11: fffff5200185cea9 R12: 0000000000000068 [ 763.032125][T16399] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 763.040089][T16399] FS: 00007fb9a9f956c0(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 763.049024][T16399] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 763.055595][T16399] CR2: 0000001b30c23ffc CR3: 00000000595ec000 CR4: 00000000003526f0 [ 763.063555][T16399] Call Trace: [ 763.066820][T16399] [ 763.069744][T16399] ? __mutex_lock+0x349/0x1350 [ 763.074499][T16399] ? __lock_acquire+0x6b6/0x2cf0 [ 763.079426][T16399] ? dvb_usbv2_generic_write+0x26/0x60 [ 763.084896][T16399] ? __mutex_trylock_common+0x153/0x260 [ 763.090448][T16399] ? mxl111sf_ctrl_msg+0xb0/0x2f0 [ 763.095570][T16399] ? __pfx___mutex_lock+0x10/0x10 [ 763.100595][T16399] ? __pfx___mutex_lock+0x10/0x10 [ 763.105611][T16399] ? __mutex_lock+0x335/0x1350 [ 763.110367][T16399] dvb_usbv2_generic_write+0x26/0x60 [ 763.115648][T16399] mxl111sf_ctrl_msg+0x160/0x2f0 [ 763.120667][T16399] mxl111sf_write_reg+0xa6/0x1c0 [ 763.125657][T16399] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 763.131189][T16399] ? update_triggers+0x49a/0x4d0 [ 763.136112][T16399] mxl111sf_i2c_xfer+0x461/0x4f00 [ 763.141121][T16399] ? unwind_next_frame+0xa5/0x23d0 [ 763.146227][T16399] ? unwind_next_frame+0xa5/0x23d0 [ 763.151325][T16399] ? is_bpf_text_address+0x26/0x2b0 [ 763.156522][T16399] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 763.161969][T16399] ? is_bpf_text_address+0x292/0x2b0 [ 763.167249][T16399] ? is_bpf_text_address+0x26/0x2b0 [ 763.172438][T16399] ? kernel_text_address+0xa5/0xe0 [ 763.177538][T16399] ? __kernel_text_address+0xd/0x40 [ 763.182721][T16399] ? unwind_get_return_address+0x4d/0x90 [ 763.188339][T16399] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 763.194485][T16399] ? arch_stack_walk+0xfc/0x150 [ 763.199350][T16399] ? stack_trace_save+0x9c/0xe0 [ 763.204190][T16399] ? __pfx_stack_trace_save+0x10/0x10 [ 763.209552][T16399] ? stack_depot_save_flags+0x33/0x810 [ 763.215017][T16399] ? __pfx_stack_trace_save+0x10/0x10 [ 763.220374][T16399] ? look_up_lock_class+0x57/0x110 [ 763.225470][T16399] ? register_lock_class+0x31/0x2e0 [ 763.230657][T16399] ? __lock_acquire+0x6b6/0x2cf0 [ 763.235583][T16399] __i2c_transfer+0x79a/0x1f00 [ 763.240342][T16399] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 763.246135][T16399] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 763.251927][T16399] ? i2c_transfer+0xc8/0x2d0 [ 763.256500][T16399] i2c_transfer+0x1cc/0x2d0 [ 763.260987][T16399] i2cdev_ioctl_rdwr+0x460/0x740 [ 763.265917][T16399] i2cdev_ioctl+0x64b/0x820 [ 763.270421][T16399] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 763.275448][T16399] ? __fget_files+0x3a0/0x420 [ 763.280290][T16399] ? __fget_files+0x2a/0x420 [ 763.284886][T16399] ? bpf_lsm_file_ioctl+0x9/0x20 [ 763.289826][T16399] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 763.294839][T16399] __se_sys_ioctl+0xfc/0x170 [ 763.299420][T16399] do_syscall_64+0xec/0xf80 [ 763.303909][T16399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.309958][T16399] ? trace_irq_disable+0x37/0x100 [ 763.314969][T16399] ? clear_bhb_loop+0x60/0xb0 [ 763.319630][T16399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.325513][T16399] RIP: 0033:0x7fb9a918f749 [ 763.329912][T16399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.349597][T16399] RSP: 002b:00007fb9a9f95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 763.358109][T16399] RAX: ffffffffffffffda RBX: 00007fb9a93e5fa0 RCX: 00007fb9a918f749 [ 763.366365][T16399] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 763.374333][T16399] RBP: 00007fb9a9213f91 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 763.382290][T16399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 763.390245][T16399] R13: 00007fb9a93e6038 R14: 00007fb9a93e5fa0 R15: 00007fb9a950fa28 [ 763.398205][T16399] [ 763.401219][T16399] Modules linked in: [ 763.406243][T16399] ---[ end trace 0000000000000000 ]--- [ 763.428009][T16399] RIP: 0010:__mutex_lock+0x13b/0x1350 [ 763.433888][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 763.470539][ T5913] usb 4-1: selecting invalid altsetting 1 [ 763.476300][ T5913] set interface failed [ 763.507779][T16399] Code: 20 54 8b 99 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 25 10 00 00 83 3d 23 53 30 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 d9 14 cc f6 4d 39 64 24 60 0f 85 51 0f 00 [ 763.589261][ T1036] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.758205][T16399] RSP: 0018:ffffc9000c2e7420 EFLAGS: 00010202 [ 763.764357][T16399] RAX: 0000000000000019 RBX: ffffc9000c2e7500 RCX: ffffffff998b5403 [ 763.793799][T16399] RDX: 0000000000000000 RSI: ffffffff8d975e98 RDI: 00000000000000c8 [ 763.833880][T16399] RBP: ffffc9000c2e75d8 R08: ffffc9000c2e7547 R09: 0000000000000000 [ 763.858016][T16399] R10: ffffc9000c2e7520 R11: fffff5200185cea9 R12: 0000000000000068 [ 763.888272][T16399] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 763.913323][T16399] FS: 00007fb9a9f956c0(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 763.938187][T16399] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 763.945404][T16399] CR2: 000055cdffaa1000 CR3: 00000000595ec000 CR4: 00000000003526f0 [ 763.967767][T16399] Kernel panic - not syncing: Fatal exception [ 763.974328][T16399] Kernel Offset: disabled [ 763.978663][T16399] Rebooting in 86400 seconds..