last executing test programs: 9.34963148s ago: executing program 0 (id=6077): pipe2$9p(0x0, 0x80) mlockall(0x1) r0 = msgget$private(0x0, 0x7e) msgrcv(r0, 0x0, 0x0, 0x2, 0x0) rt_sigreturn() msgctl$IPC_RMID(r0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) lsetxattr(0x0, &(0x7f0000000300)=ANY=[], &(0x7f0000000180)='\n*O\xf1\xda8\x06P\x85\xa0\t\xd7\xd1', 0x0, 0x3) 7.333587546s ago: executing program 0 (id=6090): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) creat(&(0x7f0000000000)='./file0\x00', 0x0) rt_sigreturn() syz_clone3(&(0x7f0000000980)={0xa0044400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f00000001c0)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffffa3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.361723417s ago: executing program 0 (id=6103): io_uring_enter(0xffffffffffffffff, 0x5e40, 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "00d2dadd15df2c06a29a"}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) 5.647600895s ago: executing program 3 (id=6110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 5.466802915s ago: executing program 3 (id=6113): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 5.412879942s ago: executing program 3 (id=6115): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d010110000000090400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x80}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 5.111956003s ago: executing program 1 (id=6118): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f0000000000)={0x28, 0x7fffffffffffffd0, r1, {{0xffffffffffffffff, 0x4}}}, 0x28) 4.465095789s ago: executing program 1 (id=6119): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000780)="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", 0x54e676f5, 0xc000, 0x0, 0xffffffffffffff59) r1 = dup(r0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000580)={0x0, 0x13, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)=0x0) close_range(r1, r1, 0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) r3 = socket(0x1, 0x3, 0x0) mlockall(0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x204941, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) getegid() recvmsg$inet_nvme(r3, &(0x7f0000000140)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffe40}, 0x2101) 4.194569083s ago: executing program 4 (id=6122): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="07d98d396058a855921d034d0fb8034a5317ce586c382c8d41f8212309f82dd261e5f9263338a10244d7b49f8608f304ee79d951cd4ca8c44b84d8b2da6feb009a0d53224f69c7a037105aa12b36d0f2fa926dad5b4a129773ae0025ee2dccc42c4cc23ddd896f77e5b427f7950212eaeb0dd9c789f8def4d9fbf6274bbf72f31c5a548464395d9a68564fc12ef2196d7eac2b93ba137c89c360011aa0c15d2a0db9dfc760b6e069968685b051123d404ba4e94ccfdfebeaa7a30c8de388e00edff56b0c6968ec98e00ad8decf9dec77295a37e60510e906474b55034f7f6594c92e49dd422bb4346631b852e64add94f0ee", 0xf2}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0xfffffffe, 0x43) 4.114092995s ago: executing program 4 (id=6123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 4.096720428s ago: executing program 2 (id=6124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000280)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 3.973723785s ago: executing program 4 (id=6125): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x3f) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000740)=0x205, 0x4) ioctl$FIONCLEX(r0, 0x5450) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmmsg(r0, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000940)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a80)=""/100, 0x64}, {&(0x7f0000001f00)=""/209, 0xd1}, {&(0x7f0000003800)=""/241, 0xf1}, {&(0x7f00000033c0)=""/67, 0x43}], 0x4, &(0x7f0000000340)=""/184, 0xb8}, 0x3d}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, 0x0) 3.926460424s ago: executing program 2 (id=6126): r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x1, 0x8008cff, 0xffffffffffffffff, 0x0) 3.848694255s ago: executing program 2 (id=6127): readv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000280)=""/82, 0x52}], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280080003009002"], 0x44}, 0x1, 0xba01}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe80000000000000e5000000", @ANYRES32=0x41424344], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000200)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473ba6100b021ee66b9800000c00f146635004000000f300f20e06635800000000f22e0f30fa6c8", 0x54}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.370287891s ago: executing program 0 (id=6128): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x0, 0x0, 0x0, 0xe, 0xffffffff}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x2f}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 3.225725615s ago: executing program 2 (id=6129): mknodat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x100, 0x0) add_key$user(&(0x7f0000000600), 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_usb_connect(0x0, 0x24, &(0x7f0000000900)={{0x12, 0x1, 0x310, 0xc9, 0xd6, 0x29, 0x8, 0x13d3, 0x3341, 0x8f75, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0xc, 0x90, 0x5, [{{0x9, 0x4, 0x6d, 0x7, 0x0, 0xe5, 0xd2, 0x37}}]}}]}}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) 3.18730062s ago: executing program 0 (id=6130): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000040)={{0x9, 0x8}, {0x40, 0x6}, 0x7fffffff}) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') open_by_handle_at(r4, &(0x7f0000000280)=@shmem={0xc, 0x1, {0x2da}}, 0x9e0a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x24, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_4={0x3, 0x1, 0x6, "79d68277"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @local=@item_4={0x3, 0x2, 0x9, "822ece55"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r9 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[], 0x0) read$hidraw(r9, &(0x7f00000000c0)=""/34, 0x22) syz_usb_ep_write(r8, 0x81, 0x1, &(0x7f0000000000)='B') r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4138ae84, &(0x7f0000000c40)) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x4}) syz_open_dev$usbfs(0x0, 0x73, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 3.091056302s ago: executing program 4 (id=6131): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00@\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.753516901s ago: executing program 1 (id=6132): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x588, 0x230, 0x230, 0x0, 0xf0, 0x230, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@mcast2, 0xc, 0x0, 0x8001}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, [0xff, 0x0, 0x0, 0xff000000], [0xff, 0xffffff00, 0x0, 0xffffffff], 'veth1_to_hsr\x00', 'ip_vti0\x00', {0xff}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', 0x18, 0x3, 0x5}}}, {{@ipv6={@remote, @local, [0xff000000, 0xff000000, 0x0, 0xffffffff], [0xffffff], 'veth1_vlan\x00', 'netpci0\x00', {0xff}, {}, 0x84, 0x0, 0x4}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00', {0x3}}}}, {{@ipv6={@rand_addr=' \x01\x00', @local, [0xff, 0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xff000000], 'ipvlan1\x00', 'veth0_to_batadv\x00', {}, {}, 0x32, 0x0, 0x0, 0x12}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@local, @ipv4=@rand_addr=0x64010101, 0x20, 0x37, 0xe}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xffffffff], [0xffffff00, 0xffffff00, 0xffffffff, 0xff], 'pim6reg1\x00', 'veth0_macvtap\x00', {0xff}, {}, 0x0, 0x2, 0x4, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0xf0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) mknodat$loop(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x6004, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x402, 0x0) sync_file_range(r6, 0x0, 0x0, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e80100006d00000227bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000000000000001800348014003500766c616e30000000000000000000000008001c00", @ANYRES32, @ANYBLOB="24000e004ce90000000100000100000000000000b0be000000000000ff0f350900000000900016808c000180100006000400000039f3000003703f524a3545cecc0000000c00070004000000010000000c00050002000000070000002800010004000000bbbbbbbbbbbb00000000000000000000000000000000000000000000000000000c00030004000000090000000c00030008000000001000000c00040006000000ab0d000014000b000500000000000000080000000000000014000300626f86645f736c6176655f30000000001400350076657468315f6d616376746170000000640012800b0001006970367674690000540002807cfe0500fe88000000000000000000000000010114000500fe8000000000000000000000000000bb1409a99e3d5c9b8b040bfa745ebccffb00040000000000000000000000ffffe000000214000500200100000000000002000000000000016000128009000100766c616e00000000500002804c0004800c00010004000000070000000c00010004000000000000000c0001000f000000060000000c00010002000000050000006afd0100ad440000810000000c000100030000000100000000000200040000000000000000000500810000ffe30002001200000008000000050011001900000046c73da553530c48d7e425c157e896b68add7dcea833c60c1aaeca6c4733a6503f63fa2e410ffd34550145637cefd23bc3dc0bc6cdf3ed1e870a2f649b4b37e4b55210ab37e7cf8e763350da18d45a8c602bc018a63281383adeaa460820838c74be820579b517682092a44efe2f03c7563e45ed29a08154fd61e48d1e294401acd9fc52f88dfa7a752d27ac7ca6db547f84bdda8a318f594a86ec79d3ea8927f9e758d38be7b2ae9cbe17d6e912c2fac9af1ff55c49d6e85a0157b7ed0b5494ac525cef67c19cb4d61d07c3139e830e0eb209b52765821bfe9b8433f8512c14c29e30e64abfee5a1252b5cfe26ff260bcfd982c796daf0a4cbd47a278a49216f981f2bb071b80f5415bf872b135bd5d4f0900e950691f7b9a96db86a2ff9fafff0b7447710cbbfa895f8c4ac98558a240a3c1b61aa5c32e893f7303bf73ddf43105a6be603c3504"], 0x1e8}}, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) socket$key(0xf, 0x3, 0x2) 1.805957996s ago: executing program 1 (id=6133): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) fsopen(&(0x7f0000000340)='afs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0x3, &(0x7f0000000380)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r4}, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) syz_io_uring_setup(0x55de, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f00000001c0), &(0x7f00000000c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x26}}) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f0000000440)={'hsr0\x00', 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500100000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.77976453s ago: executing program 3 (id=6134): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0x11a}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0xfffffffe, 0x43) 1.529700269s ago: executing program 3 (id=6135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 960.823523ms ago: executing program 2 (id=6136): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000280)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 858.915094ms ago: executing program 1 (id=6137): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000071102c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 813.697614ms ago: executing program 3 (id=6138): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000400000003a386c12dac9394eda98649a4d75636de41c07e2801de051bebad90ddb4fe05d47ac044f3d46fd69fe123c2d01f40ec34d5e40b0814dea978509d3167c8731f85290dd9996b967bd2038d8519fffd451df59"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 668.372735ms ago: executing program 2 (id=6139): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone3(&(0x7f0000000600)={0x22000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x0], 0x1}, 0x58) 642.145438ms ago: executing program 1 (id=6140): sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001e80)=""/4099, 0x1003}, {&(0x7f0000001b80)=""/97, 0x61}], 0x2}}], 0x1, 0x700, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendfile(r1, r0, 0x0, 0x578410e9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40c0}, 0x4040801) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) 129.675466ms ago: executing program 4 (id=6141): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x0, 0x0, 0x0, 0xe, 0xffffffff}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 128.714215ms ago: executing program 0 (id=6142): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x3f, 0x0, &(0x7f0000000200)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 4 (id=6143): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{}, &(0x7f0000000e40), 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r3 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) kernel console output (not intermixed with test programs): 4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26382 comm="syz.3.4977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b907779f9 code=0x7fc00000 [ 1862.386530][T26031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1862.417773][ T29] audit: type=1326 audit(1857562144.069:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26382 comm="syz.3.4977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b907779f9 code=0x7fc00000 [ 1862.425093][T26031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1862.488547][T26031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1862.517653][T26031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1862.536175][T26031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1862.551381][T26031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1862.588283][T26031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1862.605606][T26031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1862.626440][T26031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1862.706751][T26031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1862.734915][T26031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1862.778970][T26031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1862.813636][T26031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1862.834342][T26031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1862.964697][T26417] sd 0:0:1:0: device reset [ 1863.067705][ T29] audit: type=1400 audit(1857562144.779:2073): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=26412 comm="syz.2.4982" [ 1863.776137][T26031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1863.804588][T26031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1863.826036][T26031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1863.869455][T26031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1863.993739][T26031] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.035815][T26031] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.803181][ T29] audit: type=1400 audit(1857562146.528:2074): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=26422 comm="syz.2.4984" dest=20000 [ 1864.882376][T26031] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.973311][T26031] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.156780][ T29] audit: type=1326 audit(1857562146.888:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26382 comm="syz.3.4977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b907779f9 code=0x7fc00000 [ 1865.267119][T12064] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1865.308955][ T29] audit: type=1326 audit(1857562146.888:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26382 comm="syz.3.4977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8b907779f9 code=0x7fc00000 [ 1865.406885][ T29] audit: type=1326 audit(1857562146.888:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26382 comm="syz.3.4977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b907779f9 code=0x7fc00000 [ 1865.451560][ T1833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1865.483546][ T1833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1865.484897][ T29] audit: type=1326 audit(1857562146.888:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26382 comm="syz.3.4977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b907779f9 code=0x7fc00000 [ 1865.552468][T12064] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1865.562924][ T29] audit: type=1326 audit(1857562146.888:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26382 comm="syz.3.4977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b907779f9 code=0x7fc00000 [ 1865.594377][T12064] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1865.598501][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1865.718743][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1865.927316][ T29] audit: type=1326 audit(1857562146.888:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26382 comm="syz.3.4977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b907779f9 code=0x7fc00000 [ 1866.259545][T12064] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1866.269646][T12064] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1866.288360][T12064] usb 1-1: config 0 descriptor?? [ 1866.320418][T26454] Bluetooth: MGMT ver 1.23 [ 1866.783257][T12064] petalynx 0003:18B1:0037.001E: collection stack underflow [ 1866.814465][T12064] petalynx 0003:18B1:0037.001E: item 0 1 0 12 parsing failed [ 1866.838439][T12064] petalynx 0003:18B1:0037.001E: parse failed [ 1866.865113][T12064] petalynx 0003:18B1:0037.001E: probe with driver petalynx failed with error -22 [ 1867.061735][T12064] usb 1-1: USB disconnect, device number 16 [ 1867.334637][T13688] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1867.547905][T13688] usb 2-1: Using ep0 maxpacket: 32 [ 1867.565263][T13688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1867.595682][T13688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1867.617891][T13688] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1867.637966][T13688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1867.660894][T13688] usb 2-1: config 0 descriptor?? [ 1869.273395][T13688] hkems 0003:2006:0118.001F: unbalanced delimiter at end of report description [ 1869.334005][T13688] hkems 0003:2006:0118.001F: parse failed [ 1869.370707][T13688] hkems 0003:2006:0118.001F: probe with driver hkems failed with error -22 [ 1869.612569][T22448] usb 2-1: USB disconnect, device number 125 [ 1870.856963][T26514] KVM: debugfs: duplicate directory 26514-5 [ 1875.461950][T16020] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1875.673703][T16020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1875.709000][T16020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1875.752010][T16020] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1875.810274][T16020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.844151][T16020] usb 4-1: config 0 descriptor?? [ 1876.334761][T21568] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1876.360593][T21568] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1876.369162][T21568] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1876.378222][T21568] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1876.386149][T21568] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1876.396033][T21568] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1877.096175][T16020] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0020/input/input52 [ 1877.182705][ T5266] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1877.214316][T26578] chnl_net:caif_netlink_parms(): no params data found [ 1877.227898][T16020] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0020/input/input53 [ 1877.323215][T16020] uclogic 0003:256C:006D.0020: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 1877.378363][T16020] usb 4-1: USB disconnect, device number 13 [ 1877.392810][ T5361] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1877.421273][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1877.452960][ T5266] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1877.519243][ T5266] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1877.569392][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1877.590623][T26578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1877.622972][ T5361] usb 2-1: Using ep0 maxpacket: 8 [ 1877.634506][ T5266] usb 5-1: config 0 descriptor?? [ 1877.639684][T26578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1877.650851][ T5361] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1877.670174][ T5361] usb 2-1: config 0 has no interface number 0 [ 1877.674142][T26578] bridge_slave_0: entered allmulticast mode [ 1877.697483][ T5361] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 1877.712418][ T5361] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 1877.728473][ T5361] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1877.752990][ T5361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1877.754441][T26578] bridge_slave_0: entered promiscuous mode [ 1877.772549][ T5361] usb 2-1: config 0 descriptor?? [ 1877.781424][T26578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1877.801692][T26578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1877.802384][T26585] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1877.833402][T26578] bridge_slave_1: entered allmulticast mode [ 1877.897051][T26578] bridge_slave_1: entered promiscuous mode [ 1877.912632][ T5361] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1878.079528][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1878.111497][ T5266] plantronics 0003:047F:FFFF.0021: ignoring exceeding usage max [ 1878.124159][ T5310] usb 2-1: USB disconnect, device number 126 [ 1878.135484][ T5266] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 1878.143966][ T5310] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 1878.180663][ T5266] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1878.208282][T26578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1878.371429][ T1833] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1878.397486][T26578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1878.440623][T21568] Bluetooth: hci5: command tx timeout [ 1878.508919][ T1833] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1878.571169][T26578] team0: Port device team_slave_0 added [ 1878.602953][ T1833] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1878.615742][ T5266] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1878.626169][T26578] team0: Port device team_slave_1 added [ 1878.650554][T26578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1878.657700][T26578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1878.685538][T26578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1878.717757][ T1833] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1878.737565][T26578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1878.744764][T26578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1878.771921][T26578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1878.817252][ T5266] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1878.844846][ T5266] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1878.863126][ T5266] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1878.875353][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1878.887260][ T5266] usb 1-1: SerialNumber: syz [ 1878.921067][T26578] hsr_slave_0: entered promiscuous mode [ 1878.937003][T26578] hsr_slave_1: entered promiscuous mode [ 1878.947642][T26578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1878.962777][T26578] Cannot create hsr debugfs directory [ 1879.008682][ T5310] usb 5-1: USB disconnect, device number 116 [ 1879.121586][ T5266] usb 1-1: 0:2 : does not exist [ 1879.157874][ T5266] usb 1-1: USB disconnect, device number 17 [ 1879.174262][ T1833] bridge_slave_1: left allmulticast mode [ 1879.180724][ T1833] bridge_slave_1: left promiscuous mode [ 1879.188706][ T1833] bridge0: port 2(bridge_slave_1) entered disabled state [ 1879.207000][ T1833] bridge_slave_0: left allmulticast mode [ 1879.214365][ T1833] bridge_slave_0: left promiscuous mode [ 1879.220078][ T1833] bridge0: port 1(bridge_slave_0) entered disabled state [ 1879.227663][T16020] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1879.414271][T16020] usb 2-1: Using ep0 maxpacket: 8 [ 1879.426717][T16020] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1879.432879][T26234] udevd[26234]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1879.442953][T16020] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1879.481303][T16020] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1879.509022][T16020] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1879.522583][T16020] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1879.536131][T16020] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1879.548802][T16020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.784062][ T5291] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1879.798343][T16020] usb 2-1: usb_control_msg returned -32 [ 1879.809928][T16020] usbtmc 2-1:16.0: can't read capabilities [ 1879.990537][ T5291] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1880.038329][ T5291] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1880.073182][ T5291] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1880.088203][ T5291] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1880.106491][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1880.167534][ T5291] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1880.226032][ T5291] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1880.243006][ T1833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1880.270568][ T1833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1880.282961][ T1833] bond0 (unregistering): Released all slaves [ 1880.320305][T26234] udevd[26234]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1880.464171][ T5310] usb 2-1: USB disconnect, device number 127 [ 1880.521091][T26611] vlan2: entered promiscuous mode [ 1880.522022][T21568] Bluetooth: hci5: command tx timeout [ 1880.536843][T26611] vlan2: entered allmulticast mode [ 1880.536972][ T5291] usb 4-1: USB disconnect, device number 14 [ 1880.600278][T26611] bond0: entered allmulticast mode [ 1880.608713][T26611] bond_slave_0: entered allmulticast mode [ 1880.618679][T26611] bond_slave_1: entered allmulticast mode [ 1880.624979][T26611] bond0: entered promiscuous mode [ 1880.630231][T26611] bond_slave_0: entered promiscuous mode [ 1880.636392][T26611] bond_slave_1: entered promiscuous mode [ 1880.659082][T26611] bond0: left allmulticast mode [ 1880.666739][T26611] bond_slave_0: left allmulticast mode [ 1880.683344][T26611] bond_slave_1: left allmulticast mode [ 1880.695203][T26611] bond0: left promiscuous mode [ 1880.701441][T26611] bond_slave_0: left promiscuous mode [ 1880.707477][T26611] bond_slave_1: left promiscuous mode [ 1880.974835][ T5266] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1881.172478][ T1833] hsr_slave_0: left promiscuous mode [ 1881.194885][ T5266] usb 5-1: Using ep0 maxpacket: 8 [ 1881.204376][ T1833] hsr_slave_1: left promiscuous mode [ 1881.212458][ T5266] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1881.227775][ T1833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1881.243726][ T5266] usb 5-1: config 0 has no interface number 0 [ 1881.252739][ T1833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1881.270401][ T5266] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1881.286501][ T5266] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1881.305387][ T1833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1881.315105][ T1833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1881.323707][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.365636][ T5266] usb 5-1: config 0 descriptor?? [ 1881.390713][ T5266] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1881.420996][ T1833] veth1_macvtap: left promiscuous mode [ 1881.451610][ T1833] veth0_macvtap: left promiscuous mode [ 1881.481688][ T1833] veth1_vlan: left promiscuous mode [ 1881.513290][ T1833] veth0_vlan: left promiscuous mode [ 1881.659286][ T5291] usb 5-1: USB disconnect, device number 117 [ 1881.659302][ C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1881.710737][ T5291] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 1882.367416][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 1882.367434][ T29] audit: type=1326 audit(1857562164.089:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26641 comm="syz.1.5045" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e723779f9 code=0x0 [ 1882.595575][T21568] Bluetooth: hci5: command tx timeout [ 1882.638205][ T1833] team0 (unregistering): Port device team_slave_1 removed [ 1882.709513][ T1833] team0 (unregistering): Port device team_slave_0 removed [ 1882.739847][T26658] fuse: Bad value for 'user_id' [ 1882.744718][T26658] fuse: Bad value for 'user_id' [ 1883.215059][T26664] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5053'. [ 1884.136199][T12064] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1884.336343][T12064] usb 2-1: Using ep0 maxpacket: 32 [ 1884.350228][T12064] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1884.366306][T12064] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1884.391976][T12064] usb 2-1: config 0 descriptor?? [ 1884.406864][T12064] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1884.676561][T21568] Bluetooth: hci5: command tx timeout [ 1884.722631][T26672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1885.857555][T12064] gspca_sunplus: reg_w_riv err -110 [ 1885.948408][T12064] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 1886.186383][T12064] usb 2-1: USB disconnect, device number 2 [ 1886.579004][T26578] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1886.603937][T26713] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.5064'. [ 1886.623131][T26578] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1886.658272][T26578] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1886.726193][T26578] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1886.791196][ T29] audit: type=1326 audit(1857562168.517:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26714 comm="syz.0.5065" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd480d779f9 code=0x0 [ 1886.873562][T26718] syzkaller0: entered promiscuous mode [ 1886.904081][T26718] syzkaller0: entered allmulticast mode [ 1886.927334][ T1833] syzkaller0: tun_net_xmit 48 [ 1886.949132][T26727] netlink: 'syz.4.5068': attribute type 29 has an invalid length. [ 1889.793032][ T5266] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1889.983334][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1889.994336][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1890.004218][ T5266] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 1890.013383][ T5266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1890.025490][ T5266] usb 2-1: config 0 descriptor?? [ 1890.458918][ T5266] input: HID 28bd:0933 Mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0933.0022/input/input54 [ 1890.565498][ T5266] uclogic 0003:28BD:0933.0022: input,hidraw0: USB HID v5.50 Mouse [HID 28bd:0933] on usb-dummy_hcd.1-1/input0 [ 1890.806672][ T5266] usb 2-1: USB disconnect, device number 3 [ 1891.115727][T26730] netlink: 'syz.4.5068': attribute type 29 has an invalid length. [ 1891.136497][T26776] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1891.316263][T26578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1891.365192][T26578] 8021q: adding VLAN 0 to HW filter on device team0 [ 1891.381048][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 1891.388238][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1891.427198][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 1891.434371][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1891.597711][T26578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1892.000370][ T5291] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1892.296589][ T5291] usb 2-1: Using ep0 maxpacket: 8 [ 1892.317107][ T5291] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.365008][ T5291] usb 2-1: New USB device found, idVendor=16d8, idProduct=7212, bcdDevice=68.10 [ 1892.417575][ T5291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1892.461524][ T5291] usb 2-1: config 0 descriptor?? [ 1892.693331][T26578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1892.726662][ T5291] usb 2-1: USB disconnect, device number 4 [ 1892.851134][T26818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5086'. [ 1893.478566][T26578] veth0_vlan: entered promiscuous mode [ 1893.553161][T26578] veth1_vlan: entered promiscuous mode [ 1893.646118][T26578] veth0_macvtap: entered promiscuous mode [ 1893.679511][T26578] veth1_macvtap: entered promiscuous mode [ 1893.714825][T26578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1893.745964][T26578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.766714][T26578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1893.782614][T26578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.793206][T26578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1893.803950][T26578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.814680][T26578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1893.851080][T26578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.882852][T26578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1893.907609][T26578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1893.922989][T26836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5095'. [ 1893.934366][T26578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.945043][T26578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1893.956445][T26578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1893.967514][T26578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1893.983665][T26578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1894.021186][ T5310] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1894.028971][T26578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1894.040291][T26578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1894.059966][T26578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1894.083516][T26578] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1894.095781][T26578] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1894.108126][T26578] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1894.143785][ T29] audit: type=1326 audit(1857562175.863:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26841 comm="syz.3.5097" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b907779f9 code=0x0 [ 1894.166247][T26578] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1894.221284][ T5310] usb 5-1: Using ep0 maxpacket: 8 [ 1894.234179][ T5310] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1894.243493][T26842] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5096'. [ 1894.262592][ T5310] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1894.286632][ T5310] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1894.325115][ T5310] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1894.356366][ T5310] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1894.408933][ T5310] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1894.422428][ T5310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1894.545851][T14686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1894.577068][T14686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1894.663165][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1894.699095][ T5310] usb 5-1: usb_control_msg returned -32 [ 1894.699986][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1894.722426][ T5310] usbtmc 5-1:16.0: can't read capabilities [ 1895.098128][T26867] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 1895.111303][ T5291] usb 5-1: USB disconnect, device number 118 [ 1895.807099][T26885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5111'. [ 1897.105252][T26931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5132'. [ 1898.393414][ T5310] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1898.599454][ T5310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1898.628936][ T5310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1898.656568][ T5310] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1898.679194][ T5310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1898.730116][ T5310] usb 2-1: config 0 descriptor?? [ 1899.887864][ T5310] logitech-hidpp-device 0003:046D:C086.0023: item fetching failed at offset 4/5 [ 1899.905028][ T5310] logitech-hidpp-device 0003:046D:C086.0023: hidpp_probe:parse failed [ 1899.923593][ T5310] logitech-hidpp-device 0003:046D:C086.0023: probe with driver logitech-hidpp-device failed with error -22 [ 1901.398951][ T5291] usb 2-1: USB disconnect, device number 5 [ 1902.242226][ T29] audit: type=1326 audit(1857562183.959:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26980 comm="syz.3.5150" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b907779f9 code=0x0 [ 1904.455684][ T5266] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1904.982233][ T5266] usb 1-1: config 0 has no interfaces? [ 1905.018143][ T5266] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1905.041392][ T5266] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1905.105577][ T5266] usb 1-1: Product: syz [ 1905.114482][ T5266] usb 1-1: Manufacturer: syz [ 1905.128694][ T5266] usb 1-1: config 0 descriptor?? [ 1905.256408][T27029] netlink: 'syz.3.5165': attribute type 29 has an invalid length. [ 1905.275694][T27029] netlink: 'syz.3.5165': attribute type 29 has an invalid length. [ 1905.294260][T27032] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5161'. [ 1905.320158][T27029] netlink: 'syz.3.5165': attribute type 29 has an invalid length. [ 1905.353276][T27032] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1905.364468][T27029] netlink: 'syz.3.5165': attribute type 29 has an invalid length. [ 1905.365090][T27029] netlink: 'syz.3.5165': attribute type 29 has an invalid length. [ 1905.382411][T27032] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1905.393438][T13688] usb 1-1: USB disconnect, device number 18 [ 1905.624813][T27035] netlink: 'syz.3.5165': attribute type 29 has an invalid length. [ 1906.451788][ T29] audit: type=1326 audit(1857562188.157:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27041 comm="syz.2.5168" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3edf779f9 code=0x0 [ 1907.096372][T27054] virt_wifi0: mtu less than device minimum [ 1907.787601][ T29] audit: type=1326 audit(1857562189.496:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27090 comm="syz.4.5187" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc9ab779f9 code=0x0 [ 1907.823911][T27096] trusted_key: syz.2.5189 sent an empty control message without MSG_MORE. [ 1907.838266][T13688] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1908.048193][T13688] usb 4-1: Using ep0 maxpacket: 8 [ 1908.760401][T13688] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1908.777216][T13688] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1908.788898][T13688] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1908.799090][T13688] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1908.809233][T13688] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1908.871991][T13688] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1908.898890][T13688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1910.427607][T13688] usb 4-1: usb_control_msg returned -32 [ 1910.447234][T13688] usbtmc 4-1:16.0: can't read capabilities [ 1910.450889][T27118] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.5196'. [ 1910.534280][T27121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5197'. [ 1911.079670][ T5310] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1911.120506][T27131] No such timeout policy "syz1" [ 1911.310714][ T5310] usb 1-1: Using ep0 maxpacket: 8 [ 1911.330771][ T5310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1911.348293][ T5310] usb 1-1: config 4 has an invalid interface number: 109 but max is 0 [ 1911.421982][ T5310] usb 1-1: config 4 has no interface number 0 [ 1911.525526][ T5310] usb 1-1: config 4 interface 109 has no altsetting 0 [ 1911.748437][ T5310] usb 1-1: New USB device found, idVendor=13d3, idProduct=3341, bcdDevice=8f.75 [ 1911.890335][ T5310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.915037][T13688] usb 4-1: USB disconnect, device number 15 [ 1911.926285][ T5310] usb 1-1: Product: syz [ 1911.938491][ T5310] usb 1-1: Manufacturer: syz [ 1911.962516][ T5310] usb 1-1: SerialNumber: syz [ 1912.336563][ T29] audit: type=1326 audit(1857562194.024:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27143 comm="syz.3.5205" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b907779f9 code=0x0 [ 1912.354756][ T5310] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1913.226744][ T5310] usb 1-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 1913.271882][ T5310] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 1913.299410][ T5310] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 1913.326967][ T5310] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 1913.366819][ T5310] usb 1-1: USB disconnect, device number 19 [ 1913.505849][T27156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5207'. [ 1913.751120][ T8] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1914.031408][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 1914.063129][ T8] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 203, changing to 11 [ 1914.107687][ T8] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59188, setting to 1024 [ 1914.273140][T22448] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1914.276971][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1914.414046][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1914.504439][T22448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1914.572541][T22448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1914.573338][T27175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5218'. [ 1914.583393][T22448] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1914.602621][T22448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1914.622245][T27170] netlink: 'syz.0.5215': attribute type 4 has an invalid length. [ 1914.642538][T22448] usb 5-1: config 0 descriptor?? [ 1914.644299][T27154] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1914.683706][ T8] hub 3-1:4.0: USB hub found [ 1914.786868][T27181] virt_wifi0: mtu less than device minimum [ 1914.902648][ T8] hub 3-1:4.0: 2 ports detected [ 1914.944213][ T29] audit: type=1326 audit(1857562196.663:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27182 comm="syz.3.5220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b907779f9 code=0x0 [ 1914.965384][ C1] vkms_vblank_simulate: vblank timer overrun [ 1915.078580][T22448] sony 0003:054C:0268.0024: item fetching failed at offset 1/5 [ 1915.104751][ T8] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 1915.117121][T22448] sony 0003:054C:0268.0024: parse failed [ 1915.119944][ T8] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 1915.167057][T22448] sony 0003:054C:0268.0024: probe with driver sony failed with error -22 [ 1915.185341][ T8] usb 3-1: USB disconnect, device number 118 [ 1915.297729][ T5310] usb 5-1: USB disconnect, device number 119 [ 1916.023302][T27208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5230'. [ 1916.226547][T27211] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5231'. [ 1916.677913][ T29] audit: type=1326 audit(1857562198.382:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27228 comm="syz.3.5238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b907779f9 code=0x0 [ 1917.097351][T27245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5244'. [ 1917.162810][ T5310] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1917.389432][ T5310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1917.424834][ T5310] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1917.458330][ T5310] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1917.476750][ T5310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1917.490051][ T5310] usb 2-1: SerialNumber: syz [ 1917.714416][ T5310] usb 2-1: 0:2 : does not exist [ 1917.766568][ T5310] usb 2-1: USB disconnect, device number 6 [ 1918.034902][T26234] udevd[26234]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1918.090559][T27274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5255'. [ 1918.137692][T27274] netlink: 25 bytes leftover after parsing attributes in process `syz.4.5255'. [ 1918.223279][T27276] loop7: detected capacity change from 16384 to 16314 [ 1918.349715][T27278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5256'. [ 1918.981387][T27301] tc_dump_action: action bad kind [ 1919.006213][T27304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5269'. [ 1919.059519][T27305] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1919.205548][T27309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5266'. [ 1919.553740][T27332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5280'. [ 1919.687721][T27338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5282'. [ 1920.183375][ T29] audit: type=1326 audit(1857562201.880:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27350 comm="syz.4.5288" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc9ab779f9 code=0x0 [ 1920.283537][ T29] audit: type=1400 audit(1857562201.980:2152): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=27353 comm="syz.3.5289" [ 1921.267266][ T46] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1921.486632][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1921.515571][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1921.532071][ T46] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1921.541466][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1921.572844][ T46] usb 2-1: config 0 descriptor?? [ 1922.827946][ T46] uclogic 0003:256C:006D.0025: interface is invalid, ignoring [ 1923.041292][ T8] usb 2-1: USB disconnect, device number 7 [ 1923.185783][ T5310] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1923.369107][ T5310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1923.418902][ T5310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1923.462655][ T5310] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1923.489913][ T5310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1923.501269][ T5310] usb 1-1: SerialNumber: syz [ 1923.739314][ T5310] usb 1-1: 0:2 : does not exist [ 1923.767098][ T29] audit: type=1400 audit(1857562205.478:2153): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=27404 comm="syz.1.5310" [ 1923.822428][ T5310] usb 1-1: USB disconnect, device number 20 [ 1924.098798][T26234] udevd[26234]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1924.695430][ T29] audit: type=1400 audit(1857562206.398:2154): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=27441 comm="syz.1.5327" [ 1924.960328][ T58] blk_print_req_error: 10 callbacks suppressed [ 1924.960347][ T58] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 1925.476940][ T5310] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1925.677255][T22448] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1925.706953][ T5310] usb 3-1: Using ep0 maxpacket: 32 [ 1925.714715][ T5310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1925.728024][ T5310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1925.745079][ T5310] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1925.756448][ T5310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1925.803739][ T5310] usb 3-1: config 0 descriptor?? [ 1925.820505][ T5310] hub 3-1:0.0: USB hub found [ 1925.887109][T22448] usb 4-1: Using ep0 maxpacket: 8 [ 1925.889198][T13688] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1925.894751][T22448] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1925.914675][T22448] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1925.928674][T22448] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1925.963667][T22448] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1925.977535][T22448] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1926.007400][T22448] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1926.025422][ T5310] hub 3-1:0.0: 1 port detected [ 1926.050550][T22448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.140934][T13688] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1926.181447][T13688] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1926.211852][T13688] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1926.224733][T13688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1926.238846][ T5310] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1926.249671][ T5310] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1926.272867][T22448] usb 4-1: usb_control_msg returned -32 [ 1926.283158][T13688] usb 1-1: SerialNumber: syz [ 1926.287319][T22448] usbtmc 4-1:16.0: can't read capabilities [ 1926.309755][ T5310] usbhid 3-1:0.0: can't add hid device: -71 [ 1926.333943][ T5310] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1926.408660][ T5310] usb 3-1: USB disconnect, device number 119 [ 1926.524249][T13688] usb 1-1: 0:2 : does not exist [ 1926.571886][T13688] usb 1-1: USB disconnect, device number 21 [ 1926.821658][T26234] udevd[26234]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1927.128330][T22448] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 1927.331263][T22448] usb 5-1: New USB device found, idVendor=0b05, idProduct=173f, bcdDevice=9d.6b [ 1927.357373][T22448] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.392896][T22448] usb 5-1: Product: syz [ 1927.406547][T22448] usb 5-1: Manufacturer: syz [ 1927.423231][T22448] usb 5-1: SerialNumber: syz [ 1927.451746][T22448] usb 5-1: config 0 descriptor?? [ 1927.941229][T22448] dvb-usb: found a 'ASUS My Cinema U3100 Mini DVBT Tuner' in warm state. [ 1928.004416][T22448] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1928.030696][T22448] dvbdev: DVB: registering new adapter (ASUS My Cinema U3100 Mini DVBT Tuner) [ 1928.050960][T22448] usb 5-1: media controller created [ 1928.064454][T22448] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1928.171670][T22448] DVB: Unable to find symbol dib7000p_attach() [ 1928.185995][T22448] dvb-usb: no frontend was attached by 'ASUS My Cinema U3100 Mini DVBT Tuner' [ 1928.351562][T27521] __nla_validate_parse: 1 callbacks suppressed [ 1928.351582][T27521] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5359'. [ 1928.366978][T22448] rc_core: IR keymap rc-dib0700-rc5 not found [ 1928.377079][T22448] Registered IR keymap rc-empty [ 1928.395077][T22448] dvb-usb: could not initialize remote control. [ 1928.412233][T22448] dvb-usb: ASUS My Cinema U3100 Mini DVBT Tuner successfully initialized and connected. [ 1928.425279][ T8] usb 4-1: USB disconnect, device number 16 [ 1928.467305][T22448] usb 5-1: USB disconnect, device number 120 [ 1928.545558][T26101] udevd[26101]: setting mode of /dev/i2c-1 to 020600 failed: No such file or directory [ 1928.556175][T22448] dvb-usb: ASUS My Cinema U3100 Mini DVBT Tuner successfully deinitialized and disconnected. [ 1928.597625][T27527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5360'. [ 1928.613355][T26101] udevd[26101]: setting owner of /dev/i2c-1 to uid=0, gid=0 failed: No such file or directory [ 1928.674017][ T29] audit: type=1326 audit(1857562210.376:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27522 comm="syz.1.5360" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e723779f9 code=0x0 [ 1929.400427][T27553] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5373'. [ 1929.638998][T13688] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1929.797477][T27573] sit0: entered promiscuous mode [ 1929.818022][T27573] netlink: 'syz.0.5383': attribute type 1 has an invalid length. [ 1929.839832][T27573] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5383'. [ 1929.840966][T13688] usb 5-1: Using ep0 maxpacket: 8 [ 1929.876696][T13688] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1929.885138][ T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1929.893229][T13688] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1929.905295][T13688] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1929.909107][ T5291] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1929.915612][T13688] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1929.940377][T13688] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1929.961036][T13688] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1929.977760][T13688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1929.992949][T27579] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5386'. [ 1930.083714][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1930.110592][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1930.129032][ T8] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1930.140742][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.149206][T27584] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1930.153089][ T5291] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1930.159378][ T8] usb 4-1: config 0 descriptor?? [ 1930.176686][ T5291] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1930.194048][ T5291] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1930.203647][T13688] usb 5-1: usb_control_msg returned -32 [ 1930.207398][ T5291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1930.209730][T13688] usbtmc 5-1:16.0: can't read capabilities [ 1930.223505][ T5291] usb 3-1: SerialNumber: syz [ 1930.631246][ T5291] usb 3-1: 0:2 : does not exist [ 1930.653355][ T5291] usb 3-1: unit 5 not found! [ 1930.683936][ T5291] usb 3-1: USB disconnect, device number 120 [ 1930.851053][T27603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5394'. [ 1930.900826][T26234] udevd[26234]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1931.294376][T27617] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5398'. [ 1931.392646][ T8] uclogic 0003:256C:006D.0026: failed retrieving string descriptor #100: -71 [ 1931.421227][ T8] uclogic 0003:256C:006D.0026: failed retrieving pen parameters: -71 [ 1931.443766][ T8] uclogic 0003:256C:006D.0026: failed probing pen v1 parameters: -71 [ 1931.461528][ T8] uclogic 0003:256C:006D.0026: failed probing parameters: -71 [ 1931.481719][ T8] uclogic 0003:256C:006D.0026: probe with driver uclogic failed with error -71 [ 1931.528850][ T8] usb 4-1: USB disconnect, device number 17 [ 1932.064396][T27637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5405'. [ 1932.161907][T27643] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5409'. [ 1932.360466][ T46] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1932.640849][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 1932.745267][ T5291] usb 5-1: USB disconnect, device number 121 [ 1932.774400][ T46] usb 2-1: config index 0 descriptor too short (expected 49, got 36) [ 1932.974096][ T46] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1933.046444][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1933.075437][ T46] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1933.090337][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1933.107385][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1933.135685][ T46] usb 2-1: config index 1 descriptor too short (expected 49, got 36) [ 1933.146531][ T46] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1933.154418][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1933.217147][ T46] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1933.246620][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1933.265757][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1933.285938][ T46] usb 2-1: config index 2 descriptor too short (expected 49, got 36) [ 1933.309381][ T46] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1933.327134][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1933.356158][ T46] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1933.379815][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1933.398989][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1933.462359][ T46] usb 2-1: string descriptor 0 read error: -22 [ 1933.488684][ T46] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1933.513251][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.567265][ T46] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1934.507121][T13688] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1934.619672][T27678] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5408'. [ 1934.623440][T27682] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5423'. [ 1934.707562][T13688] usb 1-1: Using ep0 maxpacket: 8 [ 1934.721970][T13688] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1934.735108][T13688] usb 1-1: config 0 has no interface number 0 [ 1934.760064][T13688] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1934.781474][T13688] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1934.791253][T27678] netlink: 'syz.1.5408': attribute type 1 has an invalid length. [ 1934.800509][T13688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1934.825090][T13688] usb 1-1: config 0 descriptor?? [ 1934.859138][T13688] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1935.630035][T16020] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1935.664149][T12064] usb 1-1: USB disconnect, device number 22 [ 1935.684189][T12064] iowarrior 1-1:0.1: I/O-Warror #1 now disconnected [ 1935.857713][T16020] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1935.906603][T16020] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1935.942384][T16020] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1935.967586][T16020] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1935.981334][T16020] usb 3-1: config 0 descriptor?? [ 1937.175666][T27720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5435'. [ 1938.079491][T16020] uclogic 0003:256C:006D.0027: failed retrieving string descriptor #100: -71 [ 1938.088564][T16020] uclogic 0003:256C:006D.0027: failed retrieving pen parameters: -71 [ 1938.098691][T16020] uclogic 0003:256C:006D.0027: failed probing pen v1 parameters: -71 [ 1938.105994][ T5266] usb 2-1: USB disconnect, device number 8 [ 1938.107523][T16020] uclogic 0003:256C:006D.0027: failed probing parameters: -71 [ 1938.142688][T16020] uclogic 0003:256C:006D.0027: probe with driver uclogic failed with error -71 [ 1938.163311][T12064] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1938.199602][T16020] usb 3-1: USB disconnect, device number 121 [ 1938.377732][T12064] usb 1-1: Using ep0 maxpacket: 8 [ 1938.406281][T12064] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1938.427390][T12064] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1938.464861][T12064] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1938.483375][T12064] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1938.513481][T12064] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1938.536891][T12064] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1938.570361][T12064] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.744142][T16020] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1938.804903][T12064] usb 1-1: usb_control_msg returned -32 [ 1938.811395][T12064] usbtmc 1-1:16.0: can't read capabilities [ 1938.826423][T12064] usb 1-1: USB disconnect, device number 23 [ 1939.010183][T16020] usb 3-1: Using ep0 maxpacket: 8 [ 1939.081346][T16020] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1939.188947][T16020] usb 3-1: config 0 has no interface number 0 [ 1939.577327][T16020] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1939.599338][T16020] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1939.628784][T16020] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.691822][T27756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5448'. [ 1939.722981][T16020] usb 3-1: config 0 descriptor?? [ 1939.736843][T16020] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1939.951745][ T5266] usb 3-1: USB disconnect, device number 122 [ 1939.986506][ T5266] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 1941.106213][T12064] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1941.690878][T12064] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1941.965896][T12064] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1941.976125][T12064] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1941.995521][T12064] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1942.006177][T12064] usb 2-1: config 0 descriptor?? [ 1942.062067][T27795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5462'. [ 1942.149484][T27798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5464'. [ 1942.385632][ T5266] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1942.665729][T22448] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1942.709271][T12064] usb 2-1: language id specifier not provided by device, defaulting to English [ 1942.943847][T22448] usb 4-1: Using ep0 maxpacket: 8 [ 1943.071268][T22448] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1943.098045][ T5266] usb 1-1: Using ep0 maxpacket: 8 [ 1943.111849][T22448] usb 4-1: config 0 has no interface number 0 [ 1943.114775][ T5266] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1943.126732][ T5266] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1943.132214][T22448] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1943.145129][ T5266] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1943.151984][T22448] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1943.163950][ T5266] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1943.168106][T22448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.176761][ T5266] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1943.188613][T22448] usb 4-1: config 0 descriptor?? [ 1943.202709][ T5266] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1943.216320][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.953122][ T5266] usb 1-1: usb_control_msg returned -32 [ 1943.980751][ T5266] usbtmc 1-1:16.0: can't read capabilities [ 1944.015517][T12064] uclogic 0003:256C:006D.0028: failed retrieving string descriptor #100: -71 [ 1944.025481][T12064] uclogic 0003:256C:006D.0028: failed retrieving pen parameters: -71 [ 1944.035019][T12064] uclogic 0003:256C:006D.0028: failed probing pen v1 parameters: -71 [ 1944.043340][ T5266] usb 1-1: USB disconnect, device number 24 [ 1944.045988][T12064] uclogic 0003:256C:006D.0028: failed probing parameters: -71 [ 1944.061987][T22448] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1944.081817][T12064] uclogic 0003:256C:006D.0028: probe with driver uclogic failed with error -71 [ 1944.098273][T12064] usb 2-1: USB disconnect, device number 9 [ 1944.209995][T27824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5475'. [ 1944.282920][T27824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5475'. [ 1944.328093][ T5310] usb 4-1: USB disconnect, device number 18 [ 1944.350200][ T5310] iowarrior 4-1:0.1: I/O-Warror #1 now disconnected [ 1944.435106][T27829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5477'. [ 1946.482581][T27858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5488'. [ 1946.527450][T27858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5488'. [ 1946.555991][T27861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5489'. [ 1946.837662][T22448] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1946.929330][T16020] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1947.050159][T22448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1947.097327][T22448] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1947.126555][T22448] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1947.139710][T16020] usb 3-1: Using ep0 maxpacket: 8 [ 1947.158461][T16020] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1947.172453][T22448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1947.182487][T16020] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1947.203741][T22448] usb 4-1: config 0 descriptor?? [ 1947.211330][T16020] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1947.221670][T16020] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1947.234676][T16020] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1947.250883][T16020] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1947.260083][T16020] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1947.875684][T16020] usb 3-1: usb_control_msg returned -32 [ 1947.912402][T16020] usbtmc 3-1:16.0: can't read capabilities [ 1947.948873][T16020] usb 3-1: USB disconnect, device number 123 [ 1948.144944][T27894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5502'. [ 1948.155917][T27894] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5502'. [ 1948.392258][T22448] usb 4-1: language id specifier not provided by device, defaulting to English [ 1949.124078][T22448] uclogic 0003:256C:006D.0029: failed retrieving string descriptor #100: -71 [ 1949.162091][T22448] uclogic 0003:256C:006D.0029: failed retrieving pen parameters: -71 [ 1949.186086][T22448] uclogic 0003:256C:006D.0029: failed probing pen v1 parameters: -71 [ 1949.208482][T22448] uclogic 0003:256C:006D.0029: failed probing parameters: -71 [ 1949.238867][T22448] uclogic 0003:256C:006D.0029: probe with driver uclogic failed with error -71 [ 1949.276718][T22448] usb 4-1: USB disconnect, device number 19 [ 1949.401630][T27917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5512'. [ 1950.681395][T27928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5515'. [ 1951.695861][ T5266] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1951.884959][T27954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5526'. [ 1952.784791][T27965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5529'. [ 1952.891167][T16020] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1952.950552][ T5266] usb 2-1: Using ep0 maxpacket: 8 [ 1952.964320][ T5266] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1952.978515][ T5266] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1952.989689][ T5266] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1952.999921][ T5266] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1953.010456][ T5266] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1953.023498][ T5266] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1953.042939][ T5266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.102878][T16020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1953.123157][T16020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1953.146659][T16020] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1953.170920][T16020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.200550][T16020] usb 4-1: config 0 descriptor?? [ 1953.940332][ T5266] usb 2-1: usb_control_msg returned -32 [ 1953.946137][ T5266] usbtmc 2-1:16.0: can't read capabilities [ 1953.957107][ T5266] usb 2-1: USB disconnect, device number 10 [ 1954.118881][T16020] usb 4-1: language id specifier not provided by device, defaulting to English [ 1954.342160][T27992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5541'. [ 1954.348243][T27994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5540'. [ 1955.678040][T16020] uclogic 0003:256C:006D.002A: failed retrieving string descriptor #100: -71 [ 1955.746945][T16020] uclogic 0003:256C:006D.002A: failed retrieving pen parameters: -71 [ 1955.789567][T16020] uclogic 0003:256C:006D.002A: failed probing pen v1 parameters: -71 [ 1955.840609][T16020] uclogic 0003:256C:006D.002A: failed probing parameters: -71 [ 1955.992518][ T5291] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1956.081300][T16020] uclogic 0003:256C:006D.002A: probe with driver uclogic failed with error -71 [ 1956.347798][ T5291] usb 2-1: Using ep0 maxpacket: 8 [ 1956.400273][T16020] usb 4-1: USB disconnect, device number 20 [ 1956.493362][ T5291] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1956.523041][ T5291] usb 2-1: config 0 has no interface number 0 [ 1956.529979][ T5291] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1956.548176][ T5291] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1956.569839][ T5291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1956.590095][ T5291] usb 2-1: config 0 descriptor?? [ 1956.632720][ T5266] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1956.645952][ T5291] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1956.827434][T28028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5553'. [ 1956.842853][ T5266] usb 3-1: Using ep0 maxpacket: 8 [ 1956.851300][ T5291] usb 2-1: USB disconnect, device number 11 [ 1956.857248][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1956.866033][ T5266] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1956.880922][ T5266] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1956.903157][ T5291] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 1956.914675][ T5266] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1956.945984][ T5266] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1956.984892][ T5266] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1957.009405][ T5266] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1957.022023][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.318082][ T5266] usb 3-1: usb_control_msg returned -32 [ 1957.404202][ T5266] usbtmc 3-1:16.0: can't read capabilities [ 1957.802048][ T5266] usb 3-1: USB disconnect, device number 124 [ 1958.256333][ T5291] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1958.602793][T28059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5565'. [ 1959.205170][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1959.253734][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1959.283374][ T5291] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1959.308573][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1959.338432][ T5291] usb 4-1: config 0 descriptor?? [ 1960.409322][ T5266] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1960.559930][ T5291] usbhid 4-1:0.0: can't add hid device: -32 [ 1960.572918][ T5291] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1960.614448][ T5266] usb 5-1: Using ep0 maxpacket: 8 [ 1960.626436][ T5266] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1960.653757][T28088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5578'. [ 1960.654903][ T5266] usb 5-1: config 0 has no interface number 0 [ 1960.673545][ T5266] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1960.684461][ T5266] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1960.693511][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1960.705081][ T5266] usb 5-1: config 0 descriptor?? [ 1960.722858][ T5266] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 1960.734986][T16020] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1960.973031][T16020] usb 2-1: Using ep0 maxpacket: 8 [ 1960.990329][T16020] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1961.000412][T16020] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1961.142332][T16020] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1961.289662][T16020] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1961.445567][T16020] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1961.485956][ T5291] usb 5-1: USB disconnect, device number 122 [ 1961.524920][T16020] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1961.534553][T16020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1961.609328][T22448] usb 4-1: USB disconnect, device number 21 [ 1961.759087][T16020] usb 2-1: usb_control_msg returned -32 [ 1961.776405][T16020] usbtmc 2-1:16.0: can't read capabilities [ 1961.826005][T16020] usb 2-1: USB disconnect, device number 12 [ 1963.039457][T28127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5590'. [ 1963.896687][ T5266] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1964.119631][T12330] Bluetooth: hci2: command 0x0406 tx timeout [ 1964.147780][ T4608] Bluetooth: hci0: command 0x0406 tx timeout [ 1964.267177][T16020] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1964.558928][T16020] usb 3-1: Using ep0 maxpacket: 8 [ 1964.675021][T16020] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1964.709645][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1964.725068][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1964.734997][ T5266] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1964.738682][T16020] usb 3-1: config 0 has no interface number 0 [ 1964.744049][ T5266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1964.765753][ T5266] usb 2-1: config 0 descriptor?? [ 1964.775594][T16020] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1964.802620][T16020] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1964.821465][T16020] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1964.847101][T16020] usb 3-1: config 0 descriptor?? [ 1964.907344][T16020] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 1965.152993][T16020] usb 3-1: USB disconnect, device number 125 [ 1965.186081][T28167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5606'. [ 1965.357581][ T5266] usbhid 2-1:0.0: can't add hid device: -32 [ 1965.365128][ T5266] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1966.444095][ T5266] usb 2-1: USB disconnect, device number 13 [ 1966.554330][T28194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5617'. [ 1968.673362][ T5266] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1968.888542][ T5266] usb 3-1: Using ep0 maxpacket: 8 [ 1968.899463][ T5266] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1968.907498][ T5266] usb 3-1: config 0 has no interface number 0 [ 1968.921258][ T5266] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1968.934649][ T5266] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1968.944376][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.957243][ T5266] usb 3-1: config 0 descriptor?? [ 1968.959619][ T25] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1968.967712][ T5266] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 1969.202949][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1969.309374][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1969.491273][ T25] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1969.695524][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1969.723435][T22448] usb 3-1: USB disconnect, device number 126 [ 1969.743563][ T25] usb 1-1: config 0 descriptor?? [ 1970.176855][ T25] usbhid 1-1:0.0: can't add hid device: -32 [ 1970.205413][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1972.085188][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1972.108638][T22448] usb 1-1: USB disconnect, device number 25 [ 1972.283420][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 1972.300451][ T25] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1972.326192][ T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1972.366103][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1972.400589][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1972.464655][ T25] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1972.514931][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1972.527924][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1972.754503][ T25] usb 2-1: usb_control_msg returned -32 [ 1972.770350][ T25] usbtmc 2-1:16.0: can't read capabilities [ 1972.778351][T22448] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1973.600963][T22448] usb 5-1: Using ep0 maxpacket: 8 [ 1973.613694][T22448] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1973.641175][T22448] usb 5-1: config 0 has no interface number 0 [ 1973.647320][T22448] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1973.670658][T22448] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1973.709468][T22448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.727581][T22448] usb 5-1: config 0 descriptor?? [ 1973.748849][T22448] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 1973.950044][T22448] usb 5-1: USB disconnect, device number 123 [ 1974.161263][ T5266] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1974.374428][ T5266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1974.418484][ T5266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1974.523947][ T5266] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1974.632733][ T5266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1974.967025][ T5266] usb 4-1: config 0 descriptor?? [ 1975.139130][ T5361] usb 2-1: USB disconnect, device number 14 [ 1975.763345][ T5266] usbhid 4-1:0.0: can't add hid device: -32 [ 1975.898296][ T5266] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1976.889088][T22448] usb 4-1: USB disconnect, device number 22 [ 1976.912606][ T8] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1977.005861][ T5266] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1977.112962][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 1977.223256][ T5266] usb 2-1: Using ep0 maxpacket: 8 [ 1977.253873][ T8] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1977.348402][ T5266] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1977.403791][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1977.488260][ T5266] usb 2-1: config 0 has no interface number 0 [ 1977.548045][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1977.571576][ T5266] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1977.595376][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1977.608136][ T5266] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1977.632877][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1977.646272][ T5266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1977.655765][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1977.666686][ T5266] usb 2-1: config 0 descriptor?? [ 1977.679245][ T5266] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 1977.734762][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1978.165386][ T8] usb 5-1: usb_control_msg returned -32 [ 1978.222840][ T8] usbtmc 5-1:16.0: can't read capabilities [ 1978.277279][ T5266] usb 2-1: USB disconnect, device number 15 [ 1979.383917][T22448] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1979.664527][T22448] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1979.858761][T22448] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1980.005483][T22448] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1980.036948][T22448] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1980.055562][T22448] usb 3-1: config 0 descriptor?? [ 1980.077804][ T8] usb 5-1: USB disconnect, device number 124 [ 1980.239987][T28420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5701'. [ 1981.051294][T22448] usbhid 3-1:0.0: can't add hid device: -32 [ 1981.059100][T22448] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1981.374839][ T5361] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1981.564876][ T5361] usb 2-1: Using ep0 maxpacket: 8 [ 1981.575611][ T5361] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1981.599881][ T5361] usb 2-1: config 0 has no interface number 0 [ 1981.619360][ T5361] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1981.661600][ T5361] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1981.681334][ T5361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1981.704558][ T5361] usb 2-1: config 0 descriptor?? [ 1981.723931][ T5361] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 1981.966973][ T5266] usb 2-1: USB disconnect, device number 16 [ 1982.142126][T22448] usb 3-1: USB disconnect, device number 127 [ 1982.155973][ T5361] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1982.395386][ T5361] usb 4-1: Using ep0 maxpacket: 8 [ 1982.444286][ T5361] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1982.625625][ T5361] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1982.826469][ T5361] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1982.997069][ T5361] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1983.070285][T28457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5715'. [ 1983.075617][ T5361] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1983.172223][ T5361] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1983.230979][ T5361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1984.163155][ T5361] usb 4-1: usb_control_msg returned -32 [ 1984.193169][ T5361] usbtmc 4-1:16.0: can't read capabilities [ 1984.560864][T22448] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1984.854150][ T5361] usb 4-1: USB disconnect, device number 23 [ 1984.917181][ T8] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1985.291375][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 1985.456074][ T8] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1985.470963][T22448] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1985.473372][ T8] usb 5-1: config 0 has no interface number 0 [ 1985.496971][T28491] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5728'. [ 1985.507420][ T8] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1985.518274][T22448] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1985.562144][T22448] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1985.587016][ T8] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1985.601624][T22448] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1985.606260][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1985.629361][ T8] usb 5-1: config 0 descriptor?? [ 1985.672214][ T8] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 1985.688403][T22448] usb 3-1: config 0 descriptor?? [ 1986.380900][T22448] usbhid 3-1:0.0: can't add hid device: -32 [ 1986.433430][ T5310] usb 5-1: USB disconnect, device number 125 [ 1986.442736][T22448] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1987.219614][ T5310] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1987.412716][T28523] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5741'. [ 1987.449735][ T5310] usb 2-1: Using ep0 maxpacket: 8 [ 1987.455125][T22448] usb 3-1: USB disconnect, device number 2 [ 1987.458796][ T5310] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1987.487819][ T5310] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1987.517873][ T5310] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1987.671399][ T5310] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1987.868582][ T5310] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1988.175720][ T5310] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1988.264620][ T5310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1988.556760][ T5310] usb 2-1: usb_control_msg returned -32 [ 1988.564468][ T5310] usbtmc 2-1:16.0: can't read capabilities [ 1989.642401][T28556] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5754'. [ 1989.769031][ T5266] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1990.009349][ T5266] usb 1-1: Using ep0 maxpacket: 8 [ 1990.080313][ T5266] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1990.160140][ T5266] usb 1-1: config 0 has no interface number 0 [ 1990.269566][ T5266] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1990.422217][ T5266] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1990.588140][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1990.619039][ T5266] usb 1-1: config 0 descriptor?? [ 1990.628725][ T5266] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 1990.634983][T16020] usb 2-1: USB disconnect, device number 17 [ 1990.842421][ T8] usb 1-1: USB disconnect, device number 26 [ 1991.565067][T28588] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5765'. [ 1992.980706][T22448] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1993.056515][T28619] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5778'. [ 1993.220684][T22448] usb 1-1: Using ep0 maxpacket: 8 [ 1993.308289][T22448] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1993.463006][T22448] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1993.621767][T22448] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1993.787066][T22448] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1993.815143][T22448] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1993.841376][T22448] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1993.858530][T22448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1994.118549][T22448] usb 1-1: usb_control_msg returned -32 [ 1994.133290][T22448] usbtmc 1-1:16.0: can't read capabilities [ 1994.189897][ T5310] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1994.314365][T28649] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5791'. [ 1994.412055][ T5310] usb 2-1: Using ep0 maxpacket: 8 [ 1994.450559][ T5310] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1994.510055][ T5310] usb 2-1: config 0 has no interface number 0 [ 1994.580791][ T5310] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1994.737062][ T5310] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1994.855678][ T5310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1994.937439][ T5266] usb 1-1: USB disconnect, device number 27 [ 1995.019707][ T5310] usb 2-1: config 0 descriptor?? [ 1995.061383][ T5310] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 1995.545808][ T5310] usb 2-1: USB disconnect, device number 18 [ 1996.331742][T28677] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5802'. [ 1997.270851][T22448] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1997.983596][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1998.140032][T22448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1998.155207][T22448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1998.166069][T22448] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1998.176237][T22448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.194236][T22448] usb 5-1: config 0 descriptor?? [ 1998.299002][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 1998.319567][ T8] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1998.340881][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1998.386732][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1998.404141][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1998.416042][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1998.429818][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1998.448739][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.561111][T28711] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5815'. [ 1998.644006][T16020] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1998.672164][ T8] usb 2-1: usb_control_msg returned -32 [ 1998.678930][ T8] usbtmc 2-1:16.0: can't read capabilities [ 1998.853627][T16020] usb 1-1: Using ep0 maxpacket: 8 [ 1998.861378][T16020] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1998.878036][T16020] usb 1-1: config 0 has no interface number 0 [ 1998.889396][T16020] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1998.902473][T16020] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1998.921465][T16020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.939681][T16020] usb 1-1: config 0 descriptor?? [ 1998.949559][T16020] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 1999.161112][ T8] usb 1-1: USB disconnect, device number 28 [ 1999.237668][T16020] usb 2-1: USB disconnect, device number 19 [ 1999.436609][T22448] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.002B/input/input56 [ 1999.518457][T22448] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.002B/input/input57 [ 1999.542452][T22448] uclogic 0003:256C:006D.002B: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 1999.961608][T28154] Bluetooth: hci5: command 0x0406 tx timeout [ 2000.113050][T22448] usb 5-1: USB disconnect, device number 126 [ 2000.672096][T28743] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5826'. [ 2001.915153][T22448] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2002.804472][T22448] usb 4-1: Using ep0 maxpacket: 8 [ 2002.817085][T22448] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2002.825107][T22448] usb 4-1: config 0 has no interface number 0 [ 2002.877613][T22448] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2002.895846][T22448] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2002.904906][T22448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2002.944487][T22448] usb 4-1: config 0 descriptor?? [ 2002.958130][T22448] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 2003.167200][T22448] usb 4-1: USB disconnect, device number 24 [ 2003.180767][T28779] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5840'. [ 2004.396340][ T5266] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2004.647717][ T5266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2004.745942][ T5266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2004.863306][ T5266] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2004.994171][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2005.154736][ T5266] usb 1-1: config 0 descriptor?? [ 2005.986621][T28816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5854'. [ 2006.117383][T22448] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2006.347361][T22448] usb 2-1: Using ep0 maxpacket: 8 [ 2006.368627][T22448] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2006.376646][T22448] usb 2-1: config 0 has no interface number 0 [ 2006.401851][T22448] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2006.427497][T22448] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2006.436561][T22448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.478465][T22448] usb 2-1: config 0 descriptor?? [ 2006.486001][T22448] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 2006.661930][ T5266] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.002C/input/input58 [ 2006.696355][T22448] usb 2-1: USB disconnect, device number 20 [ 2006.777788][ T5266] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.002C/input/input59 [ 2006.805139][ T5266] uclogic 0003:256C:006D.002C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 2006.875004][ T5266] usb 1-1: USB disconnect, device number 29 [ 2009.551754][T22448] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2009.609036][ T5310] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2009.712641][T22448] usb 3-1: device descriptor read/64, error -71 [ 2009.779060][ T5291] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2010.029765][T22448] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2010.118769][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2010.236789][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2010.279216][ T5291] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2010.301262][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2010.309506][T22448] usb 3-1: device descriptor read/64, error -71 [ 2010.318212][ T5291] usb 4-1: config 0 descriptor?? [ 2010.440447][T22448] usb usb3-port1: attempt power cycle [ 2010.449356][ T5310] usb 2-1: Using ep0 maxpacket: 8 [ 2010.471269][ T5310] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2010.496005][ T5310] usb 2-1: config 0 has no interface number 0 [ 2010.507467][ T5310] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2010.523357][ T5310] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2010.533946][ T5310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2010.551138][ T5310] usb 2-1: config 0 descriptor?? [ 2010.559237][ T5310] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 2010.777274][T16020] usb 2-1: USB disconnect, device number 21 [ 2010.900178][T22448] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2010.951613][T22448] usb 3-1: device descriptor read/8, error -71 [ 2011.280037][T22448] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2012.060141][T22448] usb 3-1: device descriptor read/8, error -71 [ 2012.066423][ T5291] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.002D/input/input60 [ 2012.107798][ T5291] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.002D/input/input61 [ 2012.143697][ T5291] uclogic 0003:256C:006D.002D: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 2012.200243][T22448] usb usb3-port1: unable to enumerate USB device [ 2012.265491][T13688] usb 4-1: USB disconnect, device number 25 [ 2014.701759][T22448] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2014.709473][ T5291] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2014.872240][T22448] usb 2-1: device descriptor read/64, error -71 [ 2014.921654][ T5291] usb 1-1: Using ep0 maxpacket: 8 [ 2014.928525][ T5291] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2014.937107][ T5291] usb 1-1: config 0 has no interface number 0 [ 2014.944246][ T5291] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2014.954414][ T5291] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2014.965411][ T5291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2014.976206][ T5291] usb 1-1: config 0 descriptor?? [ 2014.985048][ T5291] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 2015.161959][T22448] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2015.181746][T16020] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2015.195883][T13688] usb 1-1: USB disconnect, device number 30 [ 2015.331892][T22448] usb 2-1: device descriptor read/64, error -71 [ 2015.373195][T16020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2015.385082][T16020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2015.394980][T16020] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2015.405279][T16020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2015.416514][T16020] usb 4-1: config 0 descriptor?? [ 2015.467074][T22448] usb usb2-port1: attempt power cycle [ 2015.518884][T28956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5908'. [ 2015.912146][T22448] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2015.943130][T22448] usb 2-1: device descriptor read/8, error -71 [ 2016.244489][T22448] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2016.283190][T22448] usb 2-1: device descriptor read/8, error -71 [ 2016.418275][T22448] usb usb2-port1: unable to enumerate USB device [ 2016.660284][T16020] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.002E/input/input62 [ 2016.773818][T16020] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.002E/input/input63 [ 2016.822858][T16020] uclogic 0003:256C:006D.002E: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 2016.857384][T16020] usb 4-1: USB disconnect, device number 26 [ 2017.771721][T28989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5921'. [ 2018.236102][T13688] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2018.423388][T13688] usb 2-1: Using ep0 maxpacket: 8 [ 2018.439790][T13688] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2018.456977][T13688] usb 2-1: config 0 has no interface number 0 [ 2018.492439][T13688] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2018.722727][T13688] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2018.856543][T13688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2019.110024][T13688] usb 2-1: config 0 descriptor?? [ 2019.134288][T13688] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 2019.163886][T16020] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2019.343022][T13688] usb 2-1: USB disconnect, device number 26 [ 2019.344036][T16020] usb 4-1: device descriptor read/64, error -71 [ 2019.390813][T29029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5937'. [ 2019.665847][T16020] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2019.835930][T16020] usb 4-1: device descriptor read/64, error -71 [ 2019.968779][T16020] usb usb4-port1: attempt power cycle [ 2019.984267][T22448] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2020.176238][T22448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2020.203619][T22448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2020.217878][T22448] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2020.227537][T22448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2020.238612][T22448] usb 1-1: config 0 descriptor?? [ 2020.384338][T16020] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2020.425273][T16020] usb 4-1: device descriptor read/8, error -71 [ 2021.379327][T16020] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2021.533142][T29063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5950'. [ 2021.616918][T16020] usb 4-1: device not accepting address 30, error -71 [ 2021.643894][T16020] usb usb4-port1: unable to enumerate USB device [ 2021.749684][T22448] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.002F/input/input64 [ 2021.854685][T22448] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.002F/input/input65 [ 2021.894580][T22448] uclogic 0003:256C:006D.002F: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 2021.955617][T12064] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2021.981100][ T5361] usb 1-1: USB disconnect, device number 31 [ 2022.155259][T12064] usb 5-1: Using ep0 maxpacket: 8 [ 2022.174638][T12064] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2022.192813][T12064] usb 5-1: config 0 has no interface number 0 [ 2022.201740][T12064] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2022.212248][T12064] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2022.223155][T12064] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.240582][T12064] usb 5-1: config 0 descriptor?? [ 2022.257760][T12064] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 2022.469564][ T5361] usb 5-1: USB disconnect, device number 127 [ 2022.985769][T12064] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2023.216494][T12064] usb 4-1: device descriptor read/64, error -71 [ 2023.575927][T12064] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2023.806312][T12064] usb 4-1: device descriptor read/64, error -71 [ 2023.839842][T29108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2023.872511][T29107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5968'. [ 2023.933322][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2023.942349][T12064] usb usb4-port1: attempt power cycle [ 2023.988800][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.041632][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.075168][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.108805][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.236352][ T25] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2024.253094][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.265835][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.273669][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.283818][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.292802][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.301083][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.320297][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.346698][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.354084][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.379261][T12064] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2024.397714][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.429672][T12064] usb 4-1: device descriptor read/8, error -71 [ 2024.442116][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.456631][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.464070][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.472608][T22448] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2024.499964][ T25] usb 2-1: config 0 has no interfaces? [ 2024.512386][ T25] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2024.522375][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.530022][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.538157][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.552321][ T25] usb 2-1: config 0 descriptor?? [ 2024.566634][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.642695][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.660689][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.675371][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.685773][T22448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2024.736632][T12064] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2024.744365][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.774605][T22448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2024.797584][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.810517][T22448] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2024.820871][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.830398][T22448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.838565][T12064] usb 4-1: device descriptor read/8, error -71 [ 2024.847873][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.860953][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.872010][T22448] usb 1-1: config 0 descriptor?? [ 2024.879499][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.899065][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.917853][T16020] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2024.940872][T16020] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2024.977076][T12064] usb usb4-port1: unable to enumerate USB device [ 2025.406882][ T5361] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2025.617003][ T5361] usb 5-1: Using ep0 maxpacket: 8 [ 2025.631552][ T5361] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2025.640112][ T5361] usb 5-1: config 0 has no interface number 0 [ 2025.646375][ T5361] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2025.674395][ T5361] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2025.699824][ T5361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2025.731012][ T5361] usb 5-1: config 0 descriptor?? [ 2025.755507][ T5361] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 2025.958232][ T5361] usb 5-1: USB disconnect, device number 2 [ 2026.677476][T22448] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0031/input/input66 [ 2026.901637][T22448] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0031/input/input67 [ 2026.923216][ T5361] usb 2-1: USB disconnect, device number 27 [ 2026.974851][T22448] uclogic 0003:256C:006D.0031: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 2027.008875][T22448] usb 1-1: USB disconnect, device number 32 [ 2027.029156][T29140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5982'. [ 2027.458248][ T5361] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2027.638700][ T5361] usb 4-1: device descriptor read/64, error -71 [ 2027.701638][ T29] audit: type=1326 audit(1857562309.356:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29161 comm="syz.0.5991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd480d779f9 code=0x7ffc0000 [ 2027.732166][ T29] audit: type=1326 audit(1857562309.356:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29161 comm="syz.0.5991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd480d779f9 code=0x7ffc0000 [ 2027.757501][ T29] audit: type=1326 audit(1857562309.356:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29161 comm="syz.0.5991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd480d779f9 code=0x7ffc0000 [ 2027.785827][ T29] audit: type=1326 audit(1857562309.356:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29161 comm="syz.0.5991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd480d779f9 code=0x7ffc0000 [ 2027.814596][ T29] audit: type=1326 audit(1857562309.356:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29161 comm="syz.0.5991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd480d779f9 code=0x7ffc0000 [ 2027.840183][ T29] audit: type=1326 audit(1857562309.386:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29161 comm="syz.0.5991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd480d779f9 code=0x7ffc0000 [ 2027.911482][ T29] audit: type=1326 audit(1857562309.386:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29161 comm="syz.0.5991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd480d779f9 code=0x7ffc0000 [ 2027.915385][T29163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2027.935070][ T29] audit: type=1326 audit(1857562309.386:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29161 comm="syz.0.5991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd480d779f9 code=0x7ffc0000 [ 2027.987404][ T5361] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2028.007794][T29164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2028.035250][ T29] audit: type=1326 audit(1857562309.386:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29161 comm="syz.0.5991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fd480d779f9 code=0x7ffc0000 [ 2028.076651][T29167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2028.140833][ T5361] usb 4-1: device descriptor read/64, error -71 [ 2028.279770][ T5361] usb usb4-port1: attempt power cycle [ 2028.413171][T29174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5995'. [ 2028.574505][T29182] @: renamed from vlan0 (while UP) [ 2028.698512][ T5361] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2028.739422][ T5361] usb 4-1: device descriptor read/8, error -71 [ 2028.839660][T13688] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2028.888557][T16020] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2029.019020][ T5361] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2029.028846][T13688] usb 2-1: Using ep0 maxpacket: 8 [ 2029.040358][T13688] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2029.048620][T13688] usb 2-1: config 0 has no interface number 0 [ 2029.054938][T13688] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2029.091671][T16020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2029.097934][ T5361] usb 4-1: device descriptor read/8, error -71 [ 2029.118616][T16020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2029.123305][T13688] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2029.135246][T16020] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2029.149200][T13688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.158470][T16020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.167308][T13688] usb 2-1: config 0 descriptor?? [ 2029.179373][T13688] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 2029.189284][T16020] usb 5-1: config 0 descriptor?? [ 2029.239399][ T5361] usb usb4-port1: unable to enumerate USB device [ 2029.338178][T29193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6004'. [ 2029.370558][ T29] audit: type=1326 audit(1857562311.025:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29191 comm="syz.2.6004" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3edf779f9 code=0x0 [ 2029.397495][ T5361] usb 2-1: USB disconnect, device number 28 [ 2029.404223][ T5266] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 2029.628563][ T5266] usb 1-1: New USB device found, idVendor=0b05, idProduct=173f, bcdDevice=9d.6b [ 2029.639848][ T5266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2029.648007][ T5266] usb 1-1: Product: syz [ 2029.654859][ T5266] usb 1-1: Manufacturer: syz [ 2029.660031][ T5266] usb 1-1: SerialNumber: syz [ 2029.678133][ T5266] usb 1-1: config 0 descriptor?? [ 2030.093554][ T5266] dvb-usb: found a 'ASUS My Cinema U3100 Mini DVBT Tuner' in cold state, will try to load a firmware [ 2030.171562][ T5266] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2030.207749][ T5266] dib0700: firmware download failed at 7 with -22 [ 2030.236319][ T5266] usb 1-1: USB disconnect, device number 33 [ 2030.442810][T16020] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0032/input/input68 [ 2030.494383][T29205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6009'. [ 2030.543378][T16020] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0032/input/input69 [ 2030.574287][T16020] uclogic 0003:256C:006D.0032: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 2030.678552][T16020] usb 5-1: USB disconnect, device number 3 [ 2030.897852][T29217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6013'. [ 2030.995987][T29220] netlink: 'syz.0.6015': attribute type 29 has an invalid length. [ 2031.029192][T29220] netlink: 'syz.0.6015': attribute type 29 has an invalid length. [ 2031.039498][T29220] netlink: 'syz.0.6015': attribute type 29 has an invalid length. [ 2031.057549][T29220] netlink: 'syz.0.6015': attribute type 29 has an invalid length. [ 2031.083750][T29220] netlink: 'syz.0.6015': attribute type 29 has an invalid length. [ 2031.432539][T29233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6021'. [ 2031.490101][ T5266] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2031.660327][ T5266] usb 3-1: device descriptor read/64, error -71 [ 2031.707649][T29244] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2031.950254][ T5266] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2032.091883][T29254] netlink: 'syz.3.6029': attribute type 29 has an invalid length. [ 2032.100389][ T5266] usb 3-1: device descriptor read/64, error -71 [ 2032.106241][T29254] netlink: 'syz.3.6029': attribute type 29 has an invalid length. [ 2032.115568][T29254] netlink: 'syz.3.6029': attribute type 29 has an invalid length. [ 2032.132063][T29254] netlink: 'syz.3.6029': attribute type 29 has an invalid length. [ 2032.141355][T29254] netlink: 'syz.3.6029': attribute type 29 has an invalid length. [ 2032.220529][ T5266] usb usb3-port1: attempt power cycle [ 2032.262355][T29262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6034'. [ 2032.390619][T16020] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2032.603499][T16020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2032.625494][T16020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2032.645777][T16020] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2032.667802][ T5266] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2032.670411][T16020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2032.695306][T16020] usb 1-1: config 0 descriptor?? [ 2032.701407][ T5266] usb 3-1: device descriptor read/8, error -71 [ 2033.270847][ T5266] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2033.321623][ T5266] usb 3-1: device descriptor read/8, error -71 [ 2033.449297][ T5266] usb usb3-port1: unable to enumerate USB device [ 2034.062721][T16020] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0033/input/input70 [ 2034.171679][T16020] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0033/input/input71 [ 2034.232696][T16020] uclogic 0003:256C:006D.0033: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 2034.271123][T16020] usb 1-1: USB disconnect, device number 34 [ 2034.401696][T29292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6046'. [ 2035.163116][ T29] audit: type=1107 audit(1857562316.813:2166): pid=29323 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='_me' [ 2035.164642][T29327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6060'. [ 2035.822018][T13688] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2036.060755][T13688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2036.073536][T29349] validate_nla: 10 callbacks suppressed [ 2036.073555][T29349] netlink: 'syz.2.6070': attribute type 29 has an invalid length. [ 2036.080984][T29351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6071'. [ 2036.092138][T13688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2036.122153][T13688] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2036.131234][T13688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2036.147652][T29352] netlink: 'syz.2.6070': attribute type 29 has an invalid length. [ 2036.167091][T13688] usb 2-1: config 0 descriptor?? [ 2036.194285][T29349] netlink: 'syz.2.6070': attribute type 29 has an invalid length. [ 2036.213042][T29349] netlink: 'syz.2.6070': attribute type 29 has an invalid length. [ 2036.231453][T29349] netlink: 'syz.2.6070': attribute type 29 has an invalid length. [ 2037.774235][T13688] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0034/input/input72 [ 2037.883636][T13688] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0034/input/input73 [ 2037.938778][T13688] uclogic 0003:256C:006D.0034: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 2037.987844][T13688] usb 2-1: USB disconnect, device number 29 [ 2038.022299][T29381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6082'. [ 2038.683195][T29405] netlink: 'syz.4.6091': attribute type 29 has an invalid length. [ 2038.711657][T29405] netlink: 'syz.4.6091': attribute type 29 has an invalid length. [ 2038.725810][T29405] netlink: 'syz.4.6091': attribute type 29 has an invalid length. [ 2038.744620][T29405] netlink: 'syz.4.6091': attribute type 29 has an invalid length. [ 2038.772069][T29405] netlink: 'syz.4.6091': attribute type 29 has an invalid length. [ 2038.894018][T29411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6094'. [ 2039.533907][T13688] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 2039.708219][T29436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6106'. [ 2039.754074][T13688] usb 2-1: New USB device found, idVendor=0b05, idProduct=173f, bcdDevice=9d.6b [ 2039.773380][T13688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.791349][T13688] usb 2-1: Product: syz [ 2039.796009][T13688] usb 2-1: Manufacturer: syz [ 2039.800630][T13688] usb 2-1: SerialNumber: syz [ 2039.808537][T13688] usb 2-1: config 0 descriptor?? [ 2039.824200][T16020] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2040.004273][ T5266] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2040.027653][T16020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2040.032380][T13688] dvb-usb: found a 'ASUS My Cinema U3100 Mini DVBT Tuner' in cold state, will try to load a firmware [ 2040.053516][T16020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2040.074738][T16020] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2040.084014][T16020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2040.085454][T13688] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2040.119769][T16020] usb 1-1: config 0 descriptor?? [ 2040.120952][T13688] dib0700: firmware download failed at 7 with -22 [ 2040.156300][T13688] usb 2-1: USB disconnect, device number 30 [ 2040.216053][ T5266] usb 3-1: Using ep0 maxpacket: 8 [ 2040.224602][ T5266] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2040.248141][ T5266] usb 3-1: config 0 has no interface number 0 [ 2040.254771][ T5266] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2040.270115][ T5266] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2040.290057][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2040.310063][ T5266] usb 3-1: config 0 descriptor?? [ 2040.330461][ T5266] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 2040.539484][ T5291] usb 3-1: USB disconnect, device number 11 [ 2040.710327][T29461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6117'. [ 2040.744563][T12064] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2041.582314][T29471] validate_nla: 5 callbacks suppressed [ 2041.582333][T29471] netlink: 'syz.2.6121': attribute type 29 has an invalid length. [ 2041.604746][T29471] netlink: 'syz.2.6121': attribute type 29 has an invalid length. [ 2041.613427][T29471] netlink: 'syz.2.6121': attribute type 29 has an invalid length. [ 2041.630032][T29471] netlink: 'syz.2.6121': attribute type 29 has an invalid length. [ 2041.640970][T29471] netlink: 'syz.2.6121': attribute type 29 has an invalid length. [ 2041.705283][T12064] usb 4-1: Using ep0 maxpacket: 8 [ 2041.728488][T16020] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0035/input/input74 [ 2041.751562][T12064] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2041.764939][T12064] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2041.785295][T12064] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2041.794380][T12064] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2041.851677][T16020] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0035/input/input75 [ 2041.899826][T16020] uclogic 0003:256C:006D.0035: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 2041.953310][T16020] usb 1-1: USB disconnect, device number 35 [ 2042.588416][T29494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6128'. [ 2042.945584][ T5266] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2043.055802][T16020] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2043.075849][T22448] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2043.156104][ T5266] usb 3-1: Using ep0 maxpacket: 8 [ 2043.165093][ T5266] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2043.181535][ T5266] usb 3-1: config 4 has an invalid interface number: 109 but max is 0 [ 2043.192658][ T5266] usb 3-1: config 4 has no interface number 0 [ 2043.202304][ T5266] usb 3-1: config 4 interface 109 has no altsetting 0 [ 2043.220452][ T5266] usb 3-1: New USB device found, idVendor=13d3, idProduct=3341, bcdDevice=8f.75 [ 2043.234975][ T5266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.249794][ T5266] usb 3-1: Product: syz [ 2043.254515][ T5266] usb 3-1: Manufacturer: syz [ 2043.261910][ T5266] usb 3-1: SerialNumber: syz [ 2043.366217][T16020] usb 1-1: Using ep0 maxpacket: 16 [ 2043.463166][T22448] usb 5-1: Using ep0 maxpacket: 32 [ 2043.523639][T16020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2043.682624][T22448] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 2043.765071][T16020] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2043.854972][T22448] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.872422][ T5266] r8712u: register rtl8712_netdev_ops to netdev_ops [ 2043.886455][T22448] usb 5-1: Product: syz [ 2043.891569][T16020] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2043.893014][ T5266] usb 3-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 2043.906061][T22448] usb 5-1: Manufacturer: syz [ 2043.912024][T16020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2043.916210][T13688] usb 4-1: USB disconnect, device number 39 [ 2043.923191][T22448] usb 5-1: SerialNumber: syz [ 2043.936244][ T5266] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 2043.942868][ T5266] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 2043.986199][ T5266] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 2044.018716][ T5266] usb 3-1: USB disconnect, device number 12 [ 2044.071356][T22448] usb 5-1: config 0 descriptor?? [ 2044.080405][T16020] usb 1-1: config 0 descriptor?? [ 2044.645190][T16020] microsoft 0003:045E:07DA.0036: item fetching failed at offset 31/34 [ 2044.806173][T16020] microsoft 0003:045E:07DA.0036: parse failed [ 2044.820118][T29498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2044.851076][T16020] microsoft 0003:045E:07DA.0036: probe with driver microsoft failed with error -22 [ 2044.872183][T29498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2044.921390][T22448] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 2045.127178][ T5361] usb 1-1: USB disconnect, device number 36 [ 2045.128028][T22448] usb 5-1: USB disconnect, device number 4 [ 2045.426898][T29018] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2045.645579][T29018] usb 4-1: Using ep0 maxpacket: 32 [ 2045.669604][T29018] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 2045.696190][T29018] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.711871][T29018] usb 4-1: Product: syz [ 2045.722077][T29018] usb 4-1: Manufacturer: syz [ 2045.726708][T29018] usb 4-1: SerialNumber: syz [ 2045.771751][T29539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6141'. [ 2045.801464][T29018] usb 4-1: config 0 descriptor?? [ 2045.833510][T29541] binder: 29540:29541 unknown command 0 [ 2045.872352][T29541] binder: 29540:29541 ioctl c0306201 20000080 returned -22 [ 2046.085027][T29541] ------------[ cut here ]------------ [ 2046.091321][T29541] kernel BUG at drivers/android/binder.c:1173! [ 2046.097565][T29541] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 2046.104510][T29541] CPU: 1 UID: 0 PID: 29541 Comm: syz.0.6142 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 2046.115257][T29541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 2046.125320][T29541] RIP: 0010:binder_inc_ref_for_node+0xdf7/0xe00 [ 2046.131584][T29541] Code: ce f8 e9 4e fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 59 fd ff ff 48 89 df e8 94 2b ce f8 e9 4c fd ff ff e8 3a 0b 6a f8 90 <0f> 0b 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2046.151191][T29541] RSP: 0018:ffffc90003f4f5e8 EFLAGS: 00010287 [ 2046.157267][T29541] RAX: ffffffff89296c06 RBX: 0000000000000000 RCX: 0000000000040000 [ 2046.165240][T29541] RDX: ffffc90009af1000 RSI: 000000000000091d RDI: 000000000000091e [ 2046.173202][T29541] RBP: ffff88807b666020 R08: ffffffff8929673b R09: 0000000000000000 [ 2046.181170][T29541] R10: ffff88801a798330 R11: ffffed10034f3068 R12: 0000000000000000 [ 2046.189145][T29541] R13: dffffc0000000000 R14: ffff88802a4d0b28 R15: ffff88802a4d0b10 [ 2046.197127][T29541] FS: 00007fd481a616c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 2046.206063][T29541] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2046.212649][T29541] CR2: 0000000000000000 CR3: 0000000060930000 CR4: 00000000003526f0 [ 2046.220625][T29541] Call Trace: [ 2046.223911][T29541] [ 2046.226838][T29541] ? __die_body+0x88/0xe0 [ 2046.231173][T29541] ? die+0xcf/0x110 [ 2046.234993][T29541] ? do_trap+0x15a/0x3a0 [ 2046.239244][T29541] ? binder_inc_ref_for_node+0xdf7/0xe00 [ 2046.244875][T29541] ? do_error_trap+0x1dc/0x2c0 [ 2046.249650][T29541] ? binder_inc_ref_for_node+0xdf7/0xe00 [ 2046.255282][T29541] ? __pfx_do_error_trap+0x10/0x10 [ 2046.260392][T29541] ? handle_invalid_op+0x34/0x40 [ 2046.265323][T29541] ? binder_inc_ref_for_node+0xdf7/0xe00 [ 2046.270960][T29541] ? exc_invalid_op+0x38/0x50 [ 2046.275637][T29541] ? asm_exc_invalid_op+0x1a/0x20 [ 2046.280653][T29541] ? binder_inc_ref_for_node+0x92b/0xe00 [ 2046.286286][T29541] ? binder_inc_ref_for_node+0xdf6/0xe00 [ 2046.291915][T29541] ? binder_inc_ref_for_node+0xdf7/0xe00 [ 2046.297533][T29541] ? binder_inc_ref_for_node+0xdf6/0xe00 [ 2046.303164][T29541] binder_ioctl_write_read+0xc7b/0x8d00 [ 2046.308710][T29541] ? 0xffffffffa00007d8 [ 2046.312869][T29541] ? __pfx_stack_trace_save+0x10/0x10 [ 2046.318227][T29541] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 2046.324192][T29541] ? __lock_acquire+0x137a/0x2040 [ 2046.329236][T29541] ? binder_get_thread+0x16e/0x6c0 [ 2046.334337][T29541] ? __pfx_lock_release+0x10/0x10 [ 2046.339355][T29541] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2046.344568][T29541] ? _raw_spin_unlock+0x28/0x50 [ 2046.349417][T29541] ? binder_get_thread+0x178/0x6c0 [ 2046.354513][T29541] binder_ioctl+0x43d/0x1c70 [ 2046.359108][T29541] ? tomoyo_path_number_perm+0x71a/0x880 [ 2046.364736][T29541] ? tomoyo_path_number_perm+0x208/0x880 [ 2046.370370][T29541] ? smack_log+0x123/0x540 [ 2046.374787][T29541] ? __pfx_binder_ioctl+0x10/0x10 [ 2046.379819][T29541] ? __pfx_smack_log+0x10/0x10 [ 2046.384596][T29541] ? smk_access+0x4ab/0x4e0 [ 2046.389097][T29541] ? smk_tskacc+0x300/0x370 [ 2046.393611][T29541] ? smack_file_ioctl+0x2fa/0x3a0 [ 2046.398645][T29541] ? __pfx_smack_file_ioctl+0x10/0x10 [ 2046.404017][T29541] ? __fget_files+0x3f6/0x470 [ 2046.408683][T29541] ? __fget_files+0x29/0x470 [ 2046.413282][T29541] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2046.418232][T29541] ? security_file_ioctl+0x87/0xb0 [ 2046.423346][T29541] ? __pfx_binder_ioctl+0x10/0x10 [ 2046.428375][T29541] __se_sys_ioctl+0xfc/0x170 [ 2046.432975][T29541] do_syscall_64+0xf3/0x230 [ 2046.437491][T29541] ? clear_bhb_loop+0x35/0x90 [ 2046.442176][T29541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2046.448069][T29541] RIP: 0033:0x7fd480d779f9 [ 2046.452481][T29541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2046.472097][T29541] RSP: 002b:00007fd481a61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2046.480502][T29541] RAX: ffffffffffffffda RBX: 00007fd480f05f80 RCX: 00007fd480d779f9 [ 2046.488459][T29541] RDX: 00000000200003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 2046.496427][T29541] RBP: 00007fd480de58ee R08: 0000000000000000 R09: 0000000000000000 [ 2046.504381][T29541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2046.512348][T29541] R13: 0000000000000000 R14: 00007fd480f05f80 R15: 00007ffdb5314d88 [ 2046.520333][T29541] [ 2046.523342][T29541] Modules linked in: [ 2046.528468][T29541] ---[ end trace 0000000000000000 ]--- [ 2046.533927][T29541] RIP: 0010:binder_inc_ref_for_node+0xdf7/0xe00 [ 2046.540736][T29541] Code: ce f8 e9 4e fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 59 fd ff ff 48 89 df e8 94 2b ce f8 e9 4c fd ff ff e8 3a 0b 6a f8 90 <0f> 0b 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2046.560402][T29541] RSP: 0018:ffffc90003f4f5e8 EFLAGS: 00010287 [ 2046.566464][T29541] RAX: ffffffff89296c06 RBX: 0000000000000000 RCX: 0000000000040000 [ 2046.574452][T29541] RDX: ffffc90009af1000 RSI: 000000000000091d RDI: 000000000000091e [ 2046.582442][T29541] RBP: ffff88807b666020 R08: ffffffff8929673b R09: 0000000000000000 [ 2046.590427][T29541] R10: ffff88801a798330 R11: ffffed10034f3068 R12: 0000000000000000 [ 2046.598437][T29541] R13: dffffc0000000000 R14: ffff88802a4d0b28 R15: ffff88802a4d0b10 [ 2046.606402][T29541] FS: 00007fd481a616c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 2046.616045][T29541] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2046.623111][T29541] CR2: 0000000000000000 CR3: 0000000060930000 CR4: 00000000003526f0 [ 2046.631099][T29541] Kernel panic - not syncing: Fatal exception [ 2046.637371][T29541] Kernel Offset: disabled [ 2046.641685][T29541] Rebooting in 86400 seconds..