last executing test programs: 6.059396733s ago: executing program 3 (id=8814): socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de006", 0x23}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87d6d3032447f236426269422e70740455409baf685a743e7e079b3ac4a1b592da8a23ea97a80da6ec7fb46355caf53ab8efe6d61dbb939c5f96f86c3d", 0x6d}, {&(0x7f0000000f00)="68a55df1c6bed91373cc79fcf0ea4c17187a680c0c711ae1d37231d4e7cd61719f501fd0d890485c98ee906e64fad259a1", 0x31}], 0x5}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)="1f193ccd5e71244bc55dbcdc29e1a25fb59915f7f84fb5105984bc94ac926679df8c", 0x22}, {&(0x7f0000001100)="b35ba3572fcda875bc97e8", 0xb}, {&(0x7f0000001140)="795f2ce94a7d8725e389c01b493ee679f9e1f4660442a05c2cbbf66384679166ec101d934bd017c061424e92d24f48d86b", 0x31}, {&(0x7f0000001180)="93", 0x1}, {&(0x7f00000011c0)="3dff21fdbef2b0b843e0740163754db27084ece48f14e2ccb75ed71caecb8d01a49808a0a2269f17dc98a78e584f6cc71495faa98957034a6e6f6e9ea743d838d77a3f108a034c89", 0x48}, {&(0x7f0000001240)="b17b27be17bcb19544700a33471f8c21345d9ed983455906bb74ac68c911b5f14c7d60075f017c69c25768", 0x2b}, {&(0x7f0000001280)="45871f6c7aa143cfbb579d430702b24380586237795f6665c24e267fb8c62c14f85be705fbab74d85c8d479162b42724e414f24b9602b0c068930b8f0431f77f7ed4bb04c4bd7edbacb55c07e24b2b7ffbc83bb39385066e27b3b6727c8861edea62c5532877c2bc886e9f673bc9ef731ee32104bc102a8fda64676a9edf0e47f36cd6a35fd53b13b1f365ade8150f7e35c258b0253d8c4dcbc8", 0x9a}], 0x7}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)="d480dc1917d9339f4084892894143b343fddd9303f0429a7ae5d89e2d238c7a6d95b89164290c367be830f56c6b95c492363a9b522", 0x35}], 0x1}}], 0x5, 0x0) 5.803564736s ago: executing program 3 (id=8818): r0 = syz_io_uring_setup(0x3488, &(0x7f0000000500)={0x0, 0xd2a7, 0x10100, 0x1000, 0x181}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) add_key(&(0x7f00000013c0)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 5.554976135s ago: executing program 3 (id=8822): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x80}, 0xe) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1fc}], 0x3ffffffffffffe0, 0x40000040, 0x0) 5.198031045s ago: executing program 4 (id=8825): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000002c0)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0}) 5.099531756s ago: executing program 2 (id=8826): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x27) 4.957692103s ago: executing program 2 (id=8828): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="200617", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r1, r1, 0x0) 3.214419951s ago: executing program 0 (id=8836): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r0, r0, 0x2) 3.006386755s ago: executing program 0 (id=8837): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) unshare(0x2c060000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 2.808394465s ago: executing program 2 (id=8839): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 2.69928025s ago: executing program 2 (id=8841): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 2.641723842s ago: executing program 0 (id=8842): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x0, r2}, 0x10) 2.550372331s ago: executing program 2 (id=8843): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffe) r1 = accept4(r0, 0x0, 0x0, 0x80800) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x3, 0x9, 0x203, 0x17c0000, 0x2, 0x3ff, 0x6, 0x2}, &(0x7f0000000140)=0x20) 2.409793522s ago: executing program 0 (id=8845): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 2.409060335s ago: executing program 2 (id=8846): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b14, 0x0) 2.052706338s ago: executing program 4 (id=8847): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x40, 0xffff, 0x9, 0x3ff, 0x6}, &(0x7f0000000440)=0x14) 2.051752672s ago: executing program 0 (id=8848): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/97) 1.873936825s ago: executing program 4 (id=8849): ioctl$KVM_CAP_PTP_KVM(0xffffffffffffffff, 0x4068aea3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) tkill(0xffffffffffffffff, 0xc) 1.50356317s ago: executing program 1 (id=8850): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r0 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x189) 1.328504061s ago: executing program 1 (id=8851): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0xf, 0x8}) 1.047752447s ago: executing program 1 (id=8852): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x8, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000080)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 864.281465ms ago: executing program 1 (id=8853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x36, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8"}}}}, 0x44) 784.662494ms ago: executing program 4 (id=8854): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x401, 0x9, 0x9, 0x10001, 0x8}, &(0x7f0000000300)=0x98) 524.452929ms ago: executing program 1 (id=8855): pipe(&(0x7f0000000080)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 394.751426ms ago: executing program 1 (id=8856): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) open(&(0x7f0000000000)='./file0/file0\x00', 0x80000, 0x100) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r1, {0x7}}, 0x18) 285.98609ms ago: executing program 4 (id=8857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(r0, &(0x7f0000004340)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x14, 0x15, 0xa, 0x903, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x24008819}, 0x0) 284.25966ms ago: executing program 3 (id=8858): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x1000}) 208.206538ms ago: executing program 3 (id=8859): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x8) 191.348062ms ago: executing program 4 (id=8860): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) 98.345765ms ago: executing program 3 (id=8861): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)={0x7c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @random="13610680c4c9"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x20, 0xf, [@ht={0x2d, 0x1a, {0x800, 0x1, 0x0, 0x0, {0x0, 0x128a, 0x0, 0x80, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x8, 0x30}}]}]]}, 0x7c}}, 0x0) 0s ago: executing program 0 (id=8862): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmsg$alg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001f00)="4ed714", 0x3}], 0x4, 0x0, 0x0, 0x2000c810}, 0x4000050) kernel console output (not intermixed with test programs): onfig 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 598.354721][T22378] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 598.370270][ T5868] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 598.380225][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 598.389246][ T5868] usb 1-1: SerialNumber: syz [ 598.443803][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 598.457817][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 598.467761][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 598.483306][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.504932][ T9] usb 4-1: config 0 descriptor?? [ 598.619614][ T5868] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 598.630395][ T5868] usb 1-1: USB disconnect, device number 83 [ 598.929334][ T9] wacom 0003:056A:00BA.0079: Unknown device_type for 'HID 056a:00ba'. Assuming pen. [ 598.950262][ T9] wacom 0003:056A:00BA.0079: hidraw0: USB HID v0.02 Device [HID 056a:00ba] on usb-dummy_hcd.3-1/input0 [ 598.976204][ T9] input: Wacom Intuos4 8x13 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00BA.0079/input/input76 [ 599.176279][ T9] usb 4-1: USB disconnect, device number 91 [ 599.191526][ T43] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 599.352318][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 599.362149][ T43] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 599.391365][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.432942][ T43] usb 3-1: config 0 descriptor?? [ 599.672053][ T43] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 599.710591][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 599.745703][ T43] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 599.795057][ T43] usb 3-1: media controller created [ 599.867172][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 599.893235][T22420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 599.965267][ T43] az6027: usb out operation failed. (-71) [ 599.983799][ T43] az6027: usb out operation failed. (-71) [ 599.995373][ T43] stb0899_attach: Driver disabled by Kconfig [ 600.031155][ T43] az6027: no front-end attached [ 600.031155][ T43] [ 600.057497][ T43] az6027: usb out operation failed. (-71) [ 600.076196][ T43] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 600.098606][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input79 [ 600.151406][ T9] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 600.161382][ T43] dvb-usb: schedule remote query interval to 400 msecs. [ 600.168731][ T43] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 600.224015][ T43] usb 3-1: USB disconnect, device number 83 [ 600.342651][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 600.355297][ T43] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 600.375569][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 600.415072][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.487571][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 600.504422][ T9] pvrusb2: ********** [ 600.512370][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 600.544281][ T9] pvrusb2: Important functionality might not be entirely working. [ 600.561533][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 600.612614][ T9] pvrusb2: ********** [ 600.692478][ T2344] pvrusb2: Invalid write control endpoint [ 600.902573][ T2344] pvrusb2: Invalid write control endpoint [ 600.920488][ T5989] usb 2-1: USB disconnect, device number 103 [ 600.946648][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 600.986875][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 601.024997][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 601.052194][ T2344] pvrusb2: Device being rendered inoperable [ 601.058847][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 601.066932][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 601.089546][ T2344] pvrusb2: Attached sub-driver cx25840 [ 601.131509][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 601.178865][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 601.431886][ T5956] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 601.676765][ T5956] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 601.701528][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.742607][ T5956] usb 1-1: config 0 descriptor?? [ 601.818553][ T5956] gspca_main: spca508-2.14.0 probing 8086:0110 [ 602.017875][ T5956] gspca_spca508: reg_read err -32 [ 602.051762][ T5956] gspca_spca508: reg_read err -32 [ 602.271753][ T5956] gspca_spca508: reg_read err -71 [ 602.297376][ T5956] gspca_spca508: reg_read err -71 [ 602.312098][ T5956] gspca_spca508: reg write: error -71 [ 602.317760][ T5956] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 602.403849][ T5956] usb 1-1: USB disconnect, device number 84 [ 602.953149][T22483] kvm: apic: phys broadcast and lowest prio [ 604.548736][ T5956] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 604.711327][ T5956] usb 2-1: Using ep0 maxpacket: 8 [ 604.738354][ T5956] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 604.758713][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.780192][ T5956] usb 2-1: Product: syz [ 604.785193][ T5956] usb 2-1: Manufacturer: syz [ 604.789901][ T5956] usb 2-1: SerialNumber: syz [ 604.811651][ T5956] usb 2-1: config 0 descriptor?? [ 604.825565][ T5956] gspca_main: sq930x-2.14.0 probing 2770:930c [ 605.493577][ T5989] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 605.626980][ T5956] gspca_sq930x: ucbus_write failed -71 [ 605.662130][ T5989] usb 3-1: Using ep0 maxpacket: 32 [ 605.675212][ T5989] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 605.687425][ T5989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.708625][ T5989] usb 3-1: config 0 descriptor?? [ 605.851300][ T5956] gspca_sq930x: Sensor ov9630 not yet treated [ 605.857518][ T5956] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 605.888419][ T5956] usb 2-1: USB disconnect, device number 104 [ 605.936615][ T5989] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 605.958640][ T5989] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 605.982256][ T5989] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 605.994322][ T5989] usb 3-1: media controller created [ 606.033241][ T5989] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 606.111560][T22591] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7504'. [ 606.139142][ T5989] az6027: usb out operation failed. (-71) [ 606.156010][ T5989] az6027: usb out operation failed. (-71) [ 606.171550][ T5989] stb0899_attach: Driver disabled by Kconfig [ 606.188510][ T5989] az6027: no front-end attached [ 606.188510][ T5989] [ 606.206631][ T5989] az6027: usb out operation failed. (-71) [ 606.221522][ T5989] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 606.244255][ T5989] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input80 [ 606.269069][ T5989] dvb-usb: schedule remote query interval to 400 msecs. [ 606.287049][ T5989] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 606.328069][ T5989] usb 3-1: USB disconnect, device number 84 [ 606.471334][ T5989] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 606.715645][T22610] netlink: 'syz.3.7513': attribute type 25 has an invalid length. [ 606.732685][T22610] netlink: 184 bytes leftover after parsing attributes in process `syz.3.7513'. [ 606.910965][T22614] input: syz0 as /devices/virtual/input/input81 [ 607.123638][T22619] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 607.491472][ T9] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 607.651323][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 607.658402][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 607.666957][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 607.679292][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 607.692203][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 607.705597][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 607.718965][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 607.727335][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 607.744856][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 607.758663][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 607.776768][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 607.790908][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 607.800074][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 607.809382][ T30] audit: type=1326 audit(1754663029.120:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22641 comm="syz.4.7526" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f748678ebe9 code=0x0 [ 607.812493][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 607.847916][ T5868] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 607.856026][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 607.870531][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 607.885339][ T9] usb 4-1: string descriptor 0 read error: -22 [ 607.892803][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 607.902409][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.923781][ T9] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 608.013483][ T5868] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 608.022051][ T5868] usb 3-1: config 0 has no interface number 0 [ 608.028672][ T5868] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 608.045326][ T5868] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 608.059687][ T5868] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 608.069880][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.078694][ T5868] usb 3-1: Product: syz [ 608.083380][ T5868] usb 3-1: Manufacturer: syz [ 608.088186][ T5868] usb 3-1: SerialNumber: syz [ 608.096527][ T5868] usb 3-1: config 0 descriptor?? [ 608.108043][T22638] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 608.121865][ T5868] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 608.152195][ T5868] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 608.220306][ T5989] usb 4-1: USB disconnect, device number 92 [ 608.551713][ T5989] usb 3-1: USB disconnect, device number 85 [ 608.571700][ T5989] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 608.590570][ T5989] cyberjack 3-1:0.69: device disconnected [ 609.251287][ T43] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 609.320738][T22678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7542'. [ 609.338499][T22678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7542'. [ 609.376477][T22680] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7543'. [ 609.422952][ T43] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 609.436086][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.476962][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 609.501250][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.526219][ T43] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 609.539393][ T43] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 609.576241][ T43] usb 4-1: Product: syz [ 609.580700][ T43] usb 4-1: Manufacturer: syz [ 609.610709][ T43] cdc_wdm 4-1:1.0: skipping garbage [ 609.628542][ T43] cdc_wdm 4-1:1.0: skipping garbage [ 609.635587][T22691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7548'. [ 609.638533][ T43] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 609.669835][ T43] cdc_wdm 4-1:1.0: Unknown control protocol [ 610.080952][T22710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7557'. [ 610.405230][ T9] usb 4-1: USB disconnect, device number 93 [ 610.521624][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 610.539159][ T30] audit: type=1326 audit(1754663031.860:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22724 comm="syz.3.7564" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c4618ebe9 code=0x0 [ 611.223047][ T43] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 611.361425][ T5989] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 611.414090][ T43] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10 [ 611.456025][ T43] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024 [ 611.478361][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 611.493602][ T43] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 611.511275][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.530141][ T43] usb 3-1: Product: syz [ 611.536314][ T5989] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 611.545387][ T5989] usb 1-1: config 150 has no interface number 0 [ 611.552281][ T43] usb 3-1: Manufacturer: syz [ 611.567398][ T43] usb 3-1: SerialNumber: syz [ 611.572223][ T5989] usb 1-1: config 150 interface 204 has no altsetting 0 [ 611.589340][ T43] usb 3-1: config 0 descriptor?? [ 611.595606][ T5989] usb 1-1: config 150 interface 1 has no altsetting 0 [ 611.608823][ T43] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 611.628188][ T5989] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 611.638535][ T43] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 611.648927][ T5989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.659865][ T43] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 611.668303][ T5989] usb 1-1: Product: syz [ 611.673043][ T5989] usb 1-1: Manufacturer: syz [ 611.677817][ T5989] usb 1-1: SerialNumber: syz [ 611.683900][ T43] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 611.695003][ T43] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 611.715039][ T43] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 611.746111][ T43] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 611.763594][ T43] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 611.784353][ T43] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 611.792986][ T43] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 611.800722][ T43] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 611.831613][ T43] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 611.839689][ T43] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 611.868618][ T43] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 611.887617][ T43] usb 3-1: USB disconnect, device number 86 [ 611.922921][ T5989] xr_serial 1-1:150.204: xr_serial converter detected [ 611.953848][ T43] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 611.994996][ T43] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 612.009235][ T43] keyspan 3-1:0.0: device disconnected [ 612.532962][ T5989] xr_serial ttyUSB2: Failed to set reg 0x0d: -71 [ 612.546189][ T5989] xr_serial ttyUSB2: probe with driver xr_serial failed with error -71 [ 612.592492][ T5989] usb 1-1: USB disconnect, device number 85 [ 612.646822][ T5989] xr_serial 1-1:150.204: device disconnected [ 613.061288][ T5868] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 613.195102][ T30] audit: type=1326 audit(1754663034.510:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22820 comm="syz.3.7604" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c4618ebe9 code=0x0 [ 613.225420][ T5868] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 613.237463][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.253811][ T5868] usb 2-1: Product: syz [ 613.258409][ T5868] usb 2-1: Manufacturer: syz [ 613.263745][ T5868] usb 2-1: SerialNumber: syz [ 613.276579][ T5868] usb 2-1: config 0 descriptor?? [ 614.072510][T22845] netlink: 'syz.4.7614': attribute type 1 has an invalid length. [ 614.080650][T22845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7614'. [ 614.115854][ T5868] usb 2-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 614.141788][ T5868] f81604 2-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 614.171510][ T5868] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 614.211565][ T5868] usb 2-1: USB disconnect, device number 105 [ 614.721292][ T5989] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 614.814987][T22869] dvmrp8: entered allmulticast mode [ 614.832590][T22869] dvmrp8: left allmulticast mode [ 614.893101][ T5989] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 614.909109][ T5989] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.922099][ T5989] usb 1-1: config 0 interface 0 has no altsetting 0 [ 614.928876][ T5989] usb 1-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 614.939648][ T5989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.972162][ T5989] usb 1-1: config 0 descriptor?? [ 615.641313][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 615.691471][ T5868] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 615.804516][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 615.831129][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 615.853579][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 615.863009][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 615.871728][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.880887][ T5868] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 615.893872][ T5868] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 615.907977][T22887] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 615.928767][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 615.937959][ T5868] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 615.954746][ T5868] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 615.987523][ T5868] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.031758][ T5868] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 616.046929][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.103228][ T9] usb 1-1: USB disconnect, device number 86 [ 616.173908][ T5981] usb 3-1: USB disconnect, device number 87 [ 616.285526][ T5868] usb 2-1: GET_CAPABILITIES returned 0 [ 616.291429][ T5868] usbtmc 2-1:16.0: can't read capabilities [ 616.504142][ T5981] usb 2-1: USB disconnect, device number 106 [ 617.081988][ T5989] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 617.251538][ T5989] usb 1-1: Using ep0 maxpacket: 16 [ 617.258954][ T5989] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.271218][ T5989] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.281690][ T5989] usb 1-1: config 0 interface 0 has no altsetting 0 [ 617.289054][ T5989] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 617.298902][ T5932] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 617.307057][ T5989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.319358][ T5989] usb 1-1: config 0 descriptor?? [ 617.463995][ T5932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.475265][ T5932] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 617.484739][ T5932] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 617.494976][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.506540][ T5932] usb 3-1: config 0 descriptor?? [ 617.516310][ T5932] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 617.523746][ T5932] dvb-usb: bulk message failed: -22 (3/0) [ 617.535546][ T5932] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 617.548229][ T5932] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 617.556866][ T5932] usb 3-1: media controller created [ 617.565697][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 617.589162][ T5932] dvb-usb: bulk message failed: -22 (6/0) [ 617.595668][ T5932] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 617.608955][ T5932] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input82 [ 617.624116][ T5932] dvb-usb: schedule remote query interval to 150 msecs. [ 617.640495][ T5932] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 617.749073][ T5981] usb 3-1: USB disconnect, device number 88 [ 617.760682][ T5989] cougar 0003:060B:500A.007B: unexpected long global item [ 617.771370][ T5989] cougar 0003:060B:500A.007B: parse failed [ 617.783813][ T5989] cougar 0003:060B:500A.007B: probe with driver cougar failed with error -22 [ 617.799760][ T5981] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 617.948462][ T5868] usb 1-1: USB disconnect, device number 87 [ 617.954942][T22944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7658'. [ 618.125114][T22952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7662'. [ 618.421641][ T5876] Bluetooth: unknown link type 128 [ 618.541382][T22967] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 618.561552][T22967] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 618.619231][T22967] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 618.640908][T22967] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 618.680328][T22967] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 618.689902][T22975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7672'. [ 618.718372][T22967] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 618.731823][T22967] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 618.801226][T22967] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 618.820004][T22967] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 618.886795][T22967] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 618.912480][T22967] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 618.969786][T22984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7676'. [ 619.082786][T22986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 619.107179][T22986] bond0: (slave bond1): Enslaving as an active interface with an up link [ 619.181557][ T5989] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 619.343435][ T5989] usb 3-1: Using ep0 maxpacket: 16 [ 619.360870][ T5989] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 619.383855][ T5989] usb 3-1: config 0 has no interface number 0 [ 619.405707][ T5989] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 619.462403][ T5989] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 619.493785][ T5989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.527947][ T5989] usb 3-1: Product: syz [ 619.545588][ T5989] usb 3-1: Manufacturer: syz [ 619.550327][ T5989] usb 3-1: SerialNumber: syz [ 619.574524][ T5989] usb 3-1: config 0 descriptor?? [ 619.590922][T22978] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 619.627900][ T5989] asix 3-1:0.251: probe with driver asix failed with error -22 [ 619.761813][ T5868] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 619.907838][ T5981] usb 3-1: USB disconnect, device number 89 [ 619.957782][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 619.966758][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 620.004079][ T5868] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 620.031305][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.050041][ T5868] usb 1-1: Product: syz [ 620.054631][ T5868] usb 1-1: Manufacturer: syz [ 620.059389][ T5868] usb 1-1: SerialNumber: syz [ 620.083994][ T5868] usb 1-1: config 0 descriptor?? [ 620.231409][ T5989] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 620.407323][ T5989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 620.440692][ T5989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.456881][ T5989] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 620.468123][ T5989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.497109][ T5989] usb 2-1: config 0 descriptor?? [ 620.512996][ T5876] Bluetooth: hci0: command 0x0406 tx timeout [ 620.517349][ T5868] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 620.671866][ T5876] Bluetooth: hci1: command 0x0406 tx timeout [ 620.761437][ T5876] Bluetooth: hci3: command 0x0406 tx timeout [ 620.831226][ T5876] Bluetooth: hci4: command 0x0406 tx timeout [ 620.911898][ T5876] Bluetooth: hci2: command 0x0406 tx timeout [ 620.918965][ T5868] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 620.945119][ T5989] hid-thrustmaster 0003:044F:B65D.007C: unknown main item tag 0x0 [ 620.976463][ T5868] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 620.990717][ T5989] hid-thrustmaster 0003:044F:B65D.007C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 621.020291][ T5989] hid-thrustmaster 0003:044F:B65D.007C: Wrong number of endpoints? [ 621.031264][ T5868] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 621.118149][ T5868] usb 1-1: USB disconnect, device number 88 [ 621.172099][ C1] hid-thrustmaster 0003:044F:B65D.007C: Unknown packet type 0x0, unable to proceed further with wheel init [ 621.385935][ T5989] usb 2-1: USB disconnect, device number 107 [ 621.817528][T23073] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7714'. [ 621.842110][T23073] netem: unknown loss type 0 [ 621.847781][T23073] netem: change failed [ 622.591443][ T5876] Bluetooth: hci0: command 0x0406 tx timeout [ 622.667112][T23099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7726'. [ 622.754843][ T5876] Bluetooth: hci1: command 0x0406 tx timeout [ 622.831330][ T5876] Bluetooth: hci3: command 0x0406 tx timeout [ 622.891910][T23105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7729'. [ 622.911236][ T5876] Bluetooth: hci4: command 0x0406 tx timeout [ 622.991557][ T5876] Bluetooth: hci2: command 0x0406 tx timeout [ 623.266092][ T5989] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 623.361453][T23120] netlink: 277 bytes leftover after parsing attributes in process `syz.2.7736'. [ 623.383419][ T30] audit: type=1326 audit(1754663044.700:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23121 comm="syz.1.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4018ebe9 code=0x7ffc0000 [ 623.451440][ T5989] usb 1-1: Using ep0 maxpacket: 16 [ 623.461463][ T30] audit: type=1326 audit(1754663044.700:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23121 comm="syz.1.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4018ebe9 code=0x7ffc0000 [ 623.488749][ T30] audit: type=1326 audit(1754663044.700:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23121 comm="syz.1.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f6b4018ebe9 code=0x7ffc0000 [ 623.531626][ T5989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.549460][ T5989] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 623.575962][ T5989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.590253][ T30] audit: type=1326 audit(1754663044.700:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23121 comm="syz.1.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4018ebe9 code=0x7ffc0000 [ 623.627786][T23127] gtp0: entered promiscuous mode [ 623.638761][ T30] audit: type=1326 audit(1754663044.700:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23121 comm="syz.1.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4018ebe9 code=0x7ffc0000 [ 623.663321][ T5989] usb 1-1: config 0 descriptor?? [ 623.710041][T23127] gtp0: entered allmulticast mode [ 624.116261][ T5989] mcp2221 0003:04D8:00DD.007D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 624.131780][T23143] sctp: [Deprecated]: syz.4.7746 (pid 23143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 624.131780][T23143] Use struct sctp_sack_info instead [ 624.181184][ T5932] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 624.224882][T23147] netlink: 'syz.1.7749': attribute type 3 has an invalid length. [ 624.361991][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 624.374292][ T5932] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 624.401359][ T5932] usb 3-1: config 0 has no interface number 0 [ 624.411525][ T5932] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.434068][ T5932] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.461269][ T5932] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 624.481390][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.509258][ T5932] usb 3-1: config 0 descriptor?? [ 624.542277][ T5989] usb 1-1: USB disconnect, device number 89 [ 624.595620][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.605416][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.831825][ T5876] Bluetooth: hci1: command 0x0406 tx timeout [ 625.176511][ T5932] input: HID 28bd:0094 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0094.007E/input/input83 [ 625.305121][ T5932] uclogic 0003:28BD:0094.007E: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.2-1/input1 [ 625.408203][ T5932] usb 3-1: USB disconnect, device number 90 [ 625.550555][T23169] fido_id[23169]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 625.819512][T23186] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7766'. [ 626.128737][ T30] audit: type=1326 audit(1754663047.450:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23187 comm="syz.3.7767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4618ebe9 code=0x7fc00000 [ 626.701204][ T5989] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 626.729362][ T30] audit: type=1326 audit(1754663048.050:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23187 comm="syz.3.7767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c4612add9 code=0x7fc00000 [ 626.797382][ T30] audit: type=1326 audit(1754663048.050:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23187 comm="syz.3.7767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0c4612ae9f code=0x7fc00000 [ 626.854873][ T5989] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 626.871482][ T5989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.879604][ T5989] usb 1-1: Product: syz [ 626.885019][ T30] audit: type=1326 audit(1754663048.050:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23187 comm="syz.3.7767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0c4618ebe9 code=0x7fc00000 [ 626.919273][ T5989] usb 1-1: Manufacturer: syz [ 626.925634][ T5989] usb 1-1: SerialNumber: syz [ 626.961740][ T5989] usb 1-1: config 0 descriptor?? [ 627.088065][T23232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7786'. [ 627.177648][ T5989] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22 [ 627.580243][ T5989] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 627.761338][ T5932] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 627.808813][ T5989] usb 1-1: USB disconnect, device number 90 [ 627.924720][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 627.936823][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.949686][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.962050][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 627.976772][ T5932] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 627.987793][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.008995][ T5932] usb 2-1: config 0 descriptor?? [ 628.561619][ T5932] microsoft 0003:045E:07DA.007F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 628.610113][ T5932] microsoft 0003:045E:07DA.007F: no inputs found [ 628.643590][ T5932] microsoft 0003:045E:07DA.007F: could not initialize ff, continuing anyway [ 628.676551][ T5932] usb 2-1: USB disconnect, device number 108 [ 628.786600][T23278] fido_id[23278]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 628.899545][T23290] netlink: 'syz.2.7812': attribute type 33 has an invalid length. [ 628.939212][T23290] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 629.236392][T23296] loop2: detected capacity change from 0 to 7 [ 629.258514][T23296] Dev loop2: unable to read RDB block 7 [ 629.268538][T23296] loop2: unable to read partition table [ 629.281729][T23296] loop2: partition table beyond EOD, truncated [ 629.288147][T23296] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 629.463361][T23305] loop8: detected capacity change from 0 to 1 [ 629.487703][T23305] Dev loop8: unable to read RDB block 1 [ 629.497329][T23305] loop8: unable to read partition table [ 629.533637][T23305] loop8: partition table beyond EOD, truncated [ 629.540053][T23305] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 629.808137][T23312] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 629.834476][T23312] syzkaller1: linktype set to 823 [ 630.311743][ T5868] usb 4-1: new low-speed USB device number 94 using dummy_hcd [ 630.499646][ T5868] usb 4-1: config 0 has no interfaces? [ 630.511378][ T5868] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 630.528488][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.550208][ T5868] usb 4-1: config 0 descriptor?? [ 630.714300][T23357] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7843'. [ 630.815343][T23323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7827'. [ 630.853437][ T5868] usb 4-1: USB disconnect, device number 94 [ 631.117171][T23370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7850'. [ 631.214109][T23372] binder: 23371:23372 ioctl 541b 0 returned -22 [ 631.581206][ T5989] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 631.754133][ T5989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.776700][ T5989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.788093][ T5932] usb 2-1: new low-speed USB device number 109 using dummy_hcd [ 631.798900][ T5989] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 631.810112][ T5989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.830547][ T5989] usb 1-1: config 0 descriptor?? [ 631.841348][T23406] netlink: 200 bytes leftover after parsing attributes in process `syz.2.7864'. [ 631.973395][ T5932] usb 2-1: config 0 has no interfaces? [ 631.979213][ T5932] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 632.075871][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.090335][ T5932] usb 2-1: config 0 descriptor?? [ 632.285509][ T5989] playstation 0003:054C:0DF2.0080: unknown main item tag 0x0 [ 632.300905][ T5989] playstation 0003:054C:0DF2.0080: unknown main item tag 0x0 [ 632.338762][ T5989] playstation 0003:054C:0DF2.0080: unknown main item tag 0x0 [ 632.347952][ T5989] playstation 0003:054C:0DF2.0080: unknown main item tag 0x0 [ 632.355234][ T5868] usb 2-1: USB disconnect, device number 109 [ 632.369799][ T5989] playstation 0003:054C:0DF2.0080: unknown main item tag 0x0 [ 632.393968][ T5989] playstation 0003:054C:0DF2.0080: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 632.702847][ T5989] playstation 0003:054C:0DF2.0080: Failed to retrieve feature with reportID 32: -71 [ 632.751614][ T5989] playstation 0003:054C:0DF2.0080: Failed to retrieve DualSense firmware info: -71 [ 632.788588][ T5989] playstation 0003:054C:0DF2.0080: Failed to get firmware info from DualSense [ 632.830053][ T5989] playstation 0003:054C:0DF2.0080: Failed to create dualsense. [ 632.867452][ T5989] playstation 0003:054C:0DF2.0080: probe with driver playstation failed with error -71 [ 632.923379][ T5989] usb 1-1: USB disconnect, device number 91 [ 633.041211][ T5932] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 633.214324][ T5932] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 633.251221][ T5932] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 633.281271][ T5932] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 633.311683][ T5932] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 633.341247][ T5932] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 633.361307][ T5932] usb 4-1: config 0 interface 0 has no altsetting 0 [ 633.383387][ T5932] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 633.434669][ T5932] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 633.463101][ T5932] usb 4-1: Product: syz [ 633.467491][ T5932] usb 4-1: Manufacturer: syz [ 633.473967][ T5932] usb 4-1: SerialNumber: syz [ 633.490253][ T5932] usb 4-1: config 0 descriptor?? [ 633.509380][T23427] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 633.533661][ T5932] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 633.567871][ T5932] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 633.805087][T23456] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.099696][ T5868] usb 4-1: USB disconnect, device number 95 [ 634.129148][ T5868] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 634.437128][T23488] netlink: 'syz.1.7900': attribute type 9 has an invalid length. [ 634.447533][T23488] netlink: 212260 bytes leftover after parsing attributes in process `syz.1.7900'. [ 635.104776][T23511] loop7: detected capacity change from 0 to 7 [ 635.127913][T23511] Dev loop7: unable to read RDB block 7 [ 635.144990][T23511] loop7: AHDI p1 p2 [ 635.155087][T23511] loop7: partition table partially beyond EOD, truncated [ 635.177935][T23511] loop7: p1 start 1702000233 is beyond EOD, truncated [ 635.561454][ T5932] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 635.731285][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 635.751633][ T5932] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 635.792526][ T5932] usb 3-1: config 0 has no interface number 0 [ 635.819556][ T5932] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 635.858376][ T5932] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 635.898449][ T5932] usb 3-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5 [ 635.931193][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.939488][ T5932] usb 3-1: Product: syz [ 635.948616][ T5932] usb 3-1: Manufacturer: syz [ 635.964049][ T5932] usb 3-1: SerialNumber: syz [ 635.989909][ T5932] usb 3-1: config 0 descriptor?? [ 636.221626][ T5932] iowarrior 3-1:0.186: IOWarrior product=0x1500, serial=42424242 interface=186 now attached to iowarrior0 [ 636.360525][T23496] syz.1.7904 (23496): drop_caches: 1 [ 636.386093][T23499] syz.1.7904 (23499): drop_caches: 1 [ 636.467006][ T5932] usb 3-1: USB disconnect, device number 91 [ 637.115283][T23563] pimreg: entered allmulticast mode [ 637.127592][T23563] pimreg: left allmulticast mode [ 637.937955][T23585] kvm: kvm [23583]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 638.172104][ T5932] usb 3-1: new low-speed USB device number 92 using dummy_hcd [ 638.343057][ T5932] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 638.363838][ T5932] usb 3-1: config 0 has no interface number 0 [ 638.383683][ T5932] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 638.417055][ T5932] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 638.443375][ T5932] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 638.467661][ T5932] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 638.483398][ T5932] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 638.499654][ T5932] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 638.502787][T23604] bond0: Unable to set down delay as MII monitoring is disabled [ 638.522296][ T5932] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 638.537733][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.551007][ T5932] usb 3-1: config 0 descriptor?? [ 638.565893][T23588] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 638.586882][T23588] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 638.605060][ T5932] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 638.827791][ T5956] usb 3-1: USB disconnect, device number 92 [ 638.847237][ T5956] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 638.951551][ T5868] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 639.111201][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 639.123139][ T5868] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 639.134920][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.169813][ T5868] pvrusb2: Hardware description: Terratec Grabster AV400 [ 639.199101][ T5868] pvrusb2: ********** [ 639.203938][ T5868] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 639.217816][ T5868] pvrusb2: Important functionality might not be entirely working. [ 639.241361][ T5868] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 639.263120][ T5868] pvrusb2: ********** [ 639.299985][ T30] audit: type=1326 audit(1754663060.620:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23629 comm="syz.3.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4618ebe9 code=0x7ffc0000 [ 639.326940][ T30] audit: type=1326 audit(1754663060.650:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23629 comm="syz.3.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4618ebe9 code=0x7ffc0000 [ 639.350023][ C0] vkms_vblank_simulate: vblank timer overrun [ 639.382975][ T2344] pvrusb2: Invalid write control endpoint [ 639.428075][ T30] audit: type=1326 audit(1754663060.650:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23629 comm="syz.3.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0c4618ebe9 code=0x7ffc0000 [ 639.490396][ T30] audit: type=1326 audit(1754663060.650:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23629 comm="syz.3.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4618ebe9 code=0x7ffc0000 [ 639.524405][ T30] audit: type=1326 audit(1754663060.650:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23629 comm="syz.3.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f0c4618ebe9 code=0x7ffc0000 [ 639.558966][ T30] audit: type=1326 audit(1754663060.650:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23629 comm="syz.3.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4618ebe9 code=0x7ffc0000 [ 639.603282][ T30] audit: type=1326 audit(1754663060.650:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23629 comm="syz.3.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0c4618ebe9 code=0x7ffc0000 [ 639.651477][ T30] audit: type=1326 audit(1754663060.650:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23629 comm="syz.3.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4618ebe9 code=0x7ffc0000 [ 639.652865][ T5932] usb 1-1: USB disconnect, device number 92 [ 639.839674][ T2344] pvrusb2: Invalid write control endpoint [ 639.870389][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 639.927835][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 639.942761][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 639.956905][ T2344] pvrusb2: Device being rendered inoperable [ 639.961746][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 639.965574][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 639.978835][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 639.993702][ T2344] pvrusb2: Attached sub-driver cx25840 [ 639.999361][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 640.010035][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 640.258572][T23661] cifs: Unknown parameter 'fd' [ 640.416649][ T5868] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 640.603992][ T5868] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 640.620875][ T5868] usb 4-1: config 0 has no interface number 0 [ 640.630376][ T5868] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.667711][ T5868] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.695676][ T5868] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 640.710896][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.746230][ T5868] usb 4-1: config 0 descriptor?? [ 640.969068][ T5932] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 641.155588][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.177529][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.191191][ T5932] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 641.193560][ T5868] logitech-djreceiver 0003:046D:C71B.0081: unknown main item tag 0x0 [ 641.219482][ T5868] logitech-djreceiver 0003:046D:C71B.0081: unknown main item tag 0x0 [ 641.233991][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.238783][ T5868] logitech-djreceiver 0003:046D:C71B.0081: unknown main item tag 0x0 [ 641.263284][ T5932] usb 3-1: config 0 descriptor?? [ 641.301643][ T5868] logitech-djreceiver 0003:046D:C71B.0081: unknown main item tag 0x0 [ 641.330487][ T5868] logitech-djreceiver 0003:046D:C71B.0081: unknown main item tag 0x0 [ 641.357514][ T5868] logitech-djreceiver 0003:046D:C71B.0081: unknown main item tag 0x0 [ 641.381300][ T5868] logitech-djreceiver 0003:046D:C71B.0081: unknown main item tag 0x0 [ 641.405061][ T5868] logitech-djreceiver 0003:046D:C71B.0081: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.3-1/input32 [ 641.438566][ T5868] usb 4-1: USB disconnect, device number 96 [ 641.591579][ T5989] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 641.697068][ T5932] pyra 0003:1E7D:2CF6.0082: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 641.720740][ T30] audit: type=1326 audit(1754663063.040:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23682 comm="syz.4.7985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748678ebe9 code=0x7ffc0000 [ 641.784625][ T5989] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.791698][ T30] audit: type=1326 audit(1754663063.070:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23682 comm="syz.4.7985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f748678ebe9 code=0x7ffc0000 [ 641.818135][ C0] vkms_vblank_simulate: vblank timer overrun [ 641.831504][ T5989] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.917219][ T5989] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.946460][T23677] fido_id[23677]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 641.969635][ T5989] usb 1-1: config 0 interface 0 has no altsetting 0 [ 641.978904][ T5989] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 642.010151][ T5989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.061018][ T5989] usb 1-1: config 0 descriptor?? [ 642.095399][ T5932] pyra 0003:1E7D:2CF6.0082: couldn't init struct pyra_device [ 642.119304][ T5932] pyra 0003:1E7D:2CF6.0082: couldn't install mouse [ 642.134084][ T5932] pyra 0003:1E7D:2CF6.0082: probe with driver pyra failed with error -71 [ 642.172293][ T5932] usb 3-1: USB disconnect, device number 93 [ 642.314973][T23690] fido_id[23690]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 642.323618][T23694] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7990'. [ 642.385283][ T13] bond0: (slave netdevsim0): link status definitely down, disabling slave [ 642.418933][ T13] bond0: (slave bond1): link status definitely down, disabling slave [ 642.496010][T23698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7992'. [ 642.496725][ T5989] kye 0003:0458:5015.0083: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 642.535497][T23698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7992'. [ 642.546418][ T5989] kye 0003:0458:5015.0083: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.0-1/input0 [ 642.567280][ T5989] kye 0003:0458:5015.0083: tablet-enabling feature report not found [ 642.581168][ T5989] kye 0003:0458:5015.0083: tablet enabling failed [ 642.765781][ T5868] usb 1-1: USB disconnect, device number 93 [ 643.231624][ T5989] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 643.414008][ T5989] usb 3-1: Using ep0 maxpacket: 32 [ 643.456473][ T5989] usb 3-1: unable to get BOS descriptor or descriptor too short [ 643.469760][ T5989] usb 3-1: no configurations [ 643.487017][ T5989] usb 3-1: can't read configurations, error -22 [ 644.205466][T23774] vivid-006: disconnect [ 644.983498][T23771] vivid-006: reconnect [ 644.992906][T23801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8040'. [ 645.169231][T23804] tap0: tun_chr_ioctl cmd 2148553947 [ 645.499020][T23814] sock: sock_set_timeout: `syz.3.8046' (pid 23814) tries to set negative timeout [ 645.888676][T23821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8049'. [ 646.001379][ T5989] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 646.127599][T23841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8057'. [ 646.173468][ T5989] usb 1-1: Using ep0 maxpacket: 16 [ 646.180903][ T5989] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 646.201355][ T5989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 646.226340][ T5989] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 646.251658][ T5989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.299837][ T5989] usb 1-1: Product: syz [ 646.313768][ T5989] usb 1-1: Manufacturer: syz [ 646.325458][ T5989] usb 1-1: SerialNumber: syz [ 646.338691][ T5989] usb 1-1: config 0 descriptor?? [ 646.363452][ T5989] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 646.393709][ T5989] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 646.592612][T23858] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8064'. [ 646.609989][T23853] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8064'. [ 646.634420][T23855] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8064'. [ 646.970767][ T5989] em28xx 1-1:0.0: chip ID is em2860 [ 647.050941][ T5932] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 647.184507][ T5989] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 647.204192][ T5989] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 647.211681][ T5989] em28xx 1-1:0.0: No AC97 audio processor [ 647.231374][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 647.239273][ T5932] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 647.277872][ T5989] usb 1-1: USB disconnect, device number 94 [ 647.292574][ T5989] em28xx 1-1:0.0: Disconnecting em28xx [ 647.302239][ T5932] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 647.348254][ T5932] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 647.369234][ T5932] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 647.383901][ T5989] em28xx 1-1:0.0: Freeing device [ 647.397053][T23885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8077'. [ 647.407512][ T5932] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 647.423185][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 647.434018][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.587058][T23891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8079'. [ 647.678408][ T5932] usb 2-1: GET_CAPABILITIES returned 0 [ 647.697744][ T5932] usbtmc 2-1:16.0: can't read capabilities [ 647.905838][ T5932] usb 2-1: USB disconnect, device number 110 [ 648.294167][ T5989] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 648.466015][ T5989] usb 4-1: Using ep0 maxpacket: 8 [ 648.487298][ T5989] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 648.507063][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.522671][ T5989] usb 4-1: Product: syz [ 648.527347][ T5989] usb 4-1: Manufacturer: syz [ 648.532554][ T5989] usb 4-1: SerialNumber: syz [ 648.537895][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 648.537912][ T30] audit: type=1326 audit(1754663069.860:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23930 comm="syz.1.8099" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b4018ebe9 code=0x0 [ 648.574567][ T5989] usb 4-1: config 0 descriptor?? [ 648.691361][ T5956] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 648.789391][ T5989] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 648.843709][ T5956] usb 3-1: config 4 has an invalid interface number: 4 but max is 0 [ 648.852250][ T5956] usb 3-1: config 4 has no interface number 0 [ 648.858650][ T5956] usb 3-1: config 4 interface 4 has no altsetting 0 [ 648.868210][ T5956] usb 3-1: New USB device found, idVendor=1435, idProduct=0326, bcdDevice=ea.c7 [ 648.877655][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.886075][ T5956] usb 3-1: Product: syz [ 648.890335][ T5956] usb 3-1: Manufacturer: syz [ 648.895799][ T5956] usb 3-1: SerialNumber: syz [ 648.996426][ T5868] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 649.031383][ T5956] usb 3-1: reset full-speed USB device number 96 using dummy_hcd [ 649.152026][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 649.160305][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 649.172703][ T5868] usb 1-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.00 [ 649.182778][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.194109][ T5868] usb 1-1: config 0 descriptor?? [ 649.398613][ T5989] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 649.424049][T23939] netlink: 'syz.1.8102': attribute type 3 has an invalid length. [ 649.428356][ T5989] usb 4-1: USB disconnect, device number 97 [ 649.433192][T23939] netlink: 188 bytes leftover after parsing attributes in process `syz.1.8102'. [ 649.639171][ T5868] logitech-hidpp-device 0003:046D:0A87.0084: unknown main item tag 0x0 [ 649.659204][ T5868] logitech-hidpp-device 0003:046D:0A87.0084: unknown main item tag 0x0 [ 649.669324][ T5868] logitech-hidpp-device 0003:046D:0A87.0084: item fetching failed at offset 3/5 [ 649.682376][ T5868] logitech-hidpp-device 0003:046D:0A87.0084: hidpp_probe:parse failed [ 649.690949][ T5868] logitech-hidpp-device 0003:046D:0A87.0084: probe with driver logitech-hidpp-device failed with error -22 [ 649.748378][ T5956] usb 3-1: USB disconnect, device number 96 [ 649.858707][ T5868] usb 1-1: USB disconnect, device number 95 [ 649.901816][ T5956] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 650.062456][ T5956] usb 3-1: Using ep0 maxpacket: 32 [ 650.073154][ T5956] usb 3-1: config 4 has an invalid interface number: 4 but max is 0 [ 650.091216][ T5956] usb 3-1: config 4 has no interface number 0 [ 650.097817][ T5956] usb 3-1: config 4 interface 4 has no altsetting 0 [ 650.112833][ T5956] usb 3-1: New USB device found, idVendor=1435, idProduct=0326, bcdDevice=ea.c7 [ 650.127062][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.136150][ T5956] usb 3-1: Product: syz [ 650.140790][ T5956] usb 3-1: Manufacturer: syz [ 650.146999][ T5956] usb 3-1: SerialNumber: syz [ 650.291541][ T5956] usb 3-1: reset high-speed USB device number 97 using dummy_hcd [ 650.545453][T23970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8116'. [ 651.039543][T23986] netlink: 'syz.3.8123': attribute type 1 has an invalid length. [ 651.075329][T23986] bond1: entered promiscuous mode [ 651.080765][T23986] bond1: entered allmulticast mode [ 651.159552][ T5956] usb 3-1: USB disconnect, device number 97 [ 652.732433][ T5956] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 652.733635][T24054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8153'. [ 652.846345][T24057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8154'. [ 652.927002][ T5956] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 652.951728][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.012422][ T5956] usb 3-1: config 0 descriptor?? [ 653.236532][ T5956] ath6kl: Failed to submit usb control message: -71 [ 653.261260][ T5989] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 653.274786][ T5956] ath6kl: unable to send the bmi data to the device: -71 [ 653.296616][ T5956] ath6kl: Unable to send get target info: -71 [ 653.330133][ T5956] ath6kl: Failed to init ath6kl core: -71 [ 653.352634][ T5956] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 653.398458][ T5956] usb 3-1: USB disconnect, device number 98 [ 653.422776][ T5989] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 653.446650][ T5989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.468179][ T5989] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 653.487651][ T5989] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 653.521383][ T5989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.542256][ T5989] usb 1-1: config 0 descriptor?? [ 653.965709][ T5989] holtek_kbd 0003:04D9:A055.0085: unknown main item tag 0x0 [ 653.993279][ T5989] holtek_kbd 0003:04D9:A055.0085: unknown main item tag 0x0 [ 654.034323][ T5989] holtek_kbd 0003:04D9:A055.0085: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.0-1/input0 [ 654.196556][ T5989] usb 1-1: USB disconnect, device number 96 [ 654.574759][T24126] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 654.581412][T24126] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 654.596019][T24126] vhci_hcd vhci_hcd.0: Device attached [ 654.841291][ T5989] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 654.871310][ T5932] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 655.031327][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 655.039826][ T5932] usb 4-1: config 0 has no interfaces? [ 655.050746][ T5932] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 655.060871][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.092513][ T5932] usb 4-1: config 0 descriptor?? [ 655.181869][ T5956] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 655.308858][T24127] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 655.309664][ T5868] usb 4-1: USB disconnect, device number 98 [ 655.344486][ T2969] vhci_hcd: stop threads [ 655.349269][ T2969] vhci_hcd: release socket [ 655.355799][ T2969] vhci_hcd: disconnect device [ 655.364276][ T5956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 655.377705][ T5956] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 655.388558][ T5956] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 655.417935][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.437343][ T5956] usb 2-1: config 0 descriptor?? [ 655.455061][ T5956] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 655.467603][ T5956] dvb-usb: bulk message failed: -22 (3/0) [ 655.483156][ T5956] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 655.494130][ T5956] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 655.506542][ T5956] usb 2-1: media controller created [ 655.516508][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 655.547882][ T5956] dvb-usb: bulk message failed: -22 (6/0) [ 655.557660][ T5956] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 655.582470][ T5956] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input86 [ 655.607763][ T5956] dvb-usb: schedule remote query interval to 150 msecs. [ 655.618266][ T5956] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 655.775125][ T5956] dvb-usb: bulk message failed: -22 (1/0) [ 655.780928][ T5956] dvb-usb: error while querying for an remote control event. [ 655.936994][ T5956] usb 2-1: USB disconnect, device number 111 [ 655.975183][ T5981] dvb-usb: bulk message failed: -22 (1/0) [ 655.985685][ T5981] dvb-usb: error while querying for an remote control event. [ 656.027983][ T5956] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 656.055971][T24163] veth1_macvtap: left promiscuous mode [ 656.211627][ T5932] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 656.396017][ T5932] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 656.425285][ T5932] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 656.450939][ T5932] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 656.474283][ T5932] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 656.494312][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.518861][T24161] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 656.641643][ T5956] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 656.739305][T24185] tipc: Enabling of bearer rejected, already enabled [ 656.830161][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.873727][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.894899][ T5956] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 656.906818][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.928496][ T5956] usb 4-1: config 0 descriptor?? [ 657.040584][T24194] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 657.148105][T24198] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 657.159099][T24198] syzkaller0: linktype set to 270 [ 657.351268][ T43] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 657.370416][ T5956] playstation 0003:054C:0DF2.0086: unknown main item tag 0x0 [ 657.385185][ T5956] playstation 0003:054C:0DF2.0086: unknown main item tag 0x0 [ 657.395582][ T5956] playstation 0003:054C:0DF2.0086: unknown main item tag 0x0 [ 657.413551][ T5956] playstation 0003:054C:0DF2.0086: unknown main item tag 0x0 [ 657.427155][ T5956] playstation 0003:054C:0DF2.0086: unknown main item tag 0x0 [ 657.445180][ T5956] playstation 0003:054C:0DF2.0086: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 657.511321][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 657.537507][ T43] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 657.557762][ T43] usb 2-1: config 0 has no interface number 0 [ 657.568410][ T5956] playstation 0003:054C:0DF2.0086: Invalid reportID received, expected 9 got 169 [ 657.569270][ T43] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 657.583463][ T5956] playstation 0003:054C:0DF2.0086: Failed to retrieve DualSense pairing info: -22 [ 657.598263][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.598291][ T43] usb 2-1: Product: syz [ 657.598306][ T43] usb 2-1: Manufacturer: syz [ 657.598321][ T43] usb 2-1: SerialNumber: syz [ 657.619357][ T5932] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 657.633346][ T43] usb 2-1: config 0 descriptor?? [ 657.645248][ T43] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 657.654410][ T5956] playstation 0003:054C:0DF2.0086: Failed to get MAC address from DualSense [ 657.657930][ T5932] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input87 [ 657.678536][ T5956] playstation 0003:054C:0DF2.0086: Failed to create dualsense. [ 657.707477][ T5956] playstation 0003:054C:0DF2.0086: probe with driver playstation failed with error -22 [ 657.716100][ T5932] usb 3-1: USB disconnect, device number 99 [ 657.718264][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 657.805241][ T5986] udevd[5986]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 657.829187][ T5956] usb 4-1: USB disconnect, device number 99 [ 657.876529][ T43] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 657.890792][ T43] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 658.285949][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 658.287200][ T5981] usb 2-1: USB disconnect, device number 112 [ 658.306267][ T5981] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 658.323737][ T5981] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 658.336867][ T5981] quatech2 2-1:0.51: device disconnected [ 658.521823][ T5956] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 658.703841][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.715346][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.727829][ T5956] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 658.737700][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.748097][ T5956] usb 3-1: config 0 descriptor?? [ 658.781330][ T5932] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 658.931200][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 658.939013][ T5932] usb 1-1: config 5 has an invalid interface number: 206 but max is 0 [ 658.948616][ T5932] usb 1-1: config 5 has no interface number 0 [ 658.957821][ T5932] usb 1-1: config 5 interface 206 has no altsetting 0 [ 658.975502][ T5932] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=60.44 [ 658.986409][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.995191][ T5932] usb 1-1: Product: syz [ 659.000003][ T5932] usb 1-1: Manufacturer: syz [ 659.006258][ T5932] usb 1-1: SerialNumber: syz [ 659.042298][ T30] audit: type=1326 audit(1754663080.370:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24223 comm="syz.1.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4018ebe9 code=0x7ffc0000 [ 659.070945][ T30] audit: type=1326 audit(1754663080.370:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24223 comm="syz.1.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4018ebe9 code=0x7ffc0000 [ 659.108703][ T30] audit: type=1326 audit(1754663080.370:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24223 comm="syz.1.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f6b4018ebe9 code=0x7ffc0000 [ 659.138304][ T30] audit: type=1326 audit(1754663080.370:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24223 comm="syz.1.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4018ebe9 code=0x7ffc0000 [ 659.163361][ T30] audit: type=1326 audit(1754663080.370:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24223 comm="syz.1.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4018ebe9 code=0x7ffc0000 [ 659.245643][ T5932] usb_ehset_test 1-1:5.206: probe with driver usb_ehset_test failed with error -32 [ 659.283579][ T5932] usb 1-1: USB disconnect, device number 97 [ 659.580008][ T5956] hid-led 0003:0FC5:B080.0087: probe with driver hid-led failed with error -71 [ 659.612960][ T5956] usb 3-1: USB disconnect, device number 100 [ 659.946204][ T5989] vhci_hcd: vhci_device speed not set [ 660.081611][ T5956] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 660.263132][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.285199][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.326110][ T5956] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 660.389313][ T5956] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 660.448500][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.502381][ T5956] usb 4-1: config 0 descriptor?? [ 660.978378][ T5956] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 660.996222][ T5956] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 661.030061][ T5956] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 661.096968][ T5956] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 661.106922][ T5956] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 661.156766][ T5956] plantronics 0003:047F:FFFF.0088: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 661.289949][ T5956] usb 4-1: USB disconnect, device number 100 [ 661.663395][T24301] netlink: 'syz.1.8263': attribute type 2 has an invalid length. [ 661.673186][T24301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8263'. [ 662.297677][ T5956] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 662.471641][ T5956] usb 3-1: Using ep0 maxpacket: 16 [ 662.492638][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.521003][ T5956] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 662.543326][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.560741][ T5956] usb 3-1: config 0 descriptor?? [ 662.997093][ T5956] mcp2221 0003:04D8:00DD.0089: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 663.191549][ T5868] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 663.276242][T24357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8288'. [ 663.287070][T24357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8288'. [ 663.356865][ T5868] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.368245][ T5868] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 663.381738][ T5868] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 663.398652][ T5989] usb 3-1: USB disconnect, device number 101 [ 663.399017][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 663.420004][ T5868] usb 1-1: SerialNumber: syz [ 663.518792][T24363] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8291'. [ 663.530912][T24363] netlink: 'syz.1.8291': attribute type 2 has an invalid length. [ 663.648128][ T5868] usb 1-1: 0:2 : does not exist [ 663.691350][T24369] input: syz1 as /devices/virtual/input/input88 [ 663.700476][ T5868] usb 1-1: USB disconnect, device number 98 [ 664.101235][ T5956] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 664.251717][ T5868] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 664.265235][ T5956] usb 2-1: config 0 has no interfaces? [ 664.287159][T24378] netlink: 'syz.4.8298': attribute type 15 has an invalid length. [ 664.287498][ T5956] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 664.312944][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.325409][ T5956] usb 2-1: Product: syz [ 664.330042][ T5956] usb 2-1: Manufacturer: syz [ 664.336253][ T5956] usb 2-1: SerialNumber: syz [ 664.352172][ T5956] usb 2-1: config 0 descriptor?? [ 664.446350][ T5868] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 664.464793][ T5868] usb 3-1: config 0 interface 0 has no altsetting 0 [ 664.476610][ T5868] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 664.494311][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 664.503689][ T5868] usb 3-1: Product: syz [ 664.508104][ T5868] usb 3-1: Manufacturer: syz [ 664.518773][ T5868] usb 3-1: SerialNumber: syz [ 664.536655][ T5868] usb 3-1: config 0 descriptor?? [ 664.561555][ T5989] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 664.569014][ T5868] usb 3-1: selecting invalid altsetting 0 [ 664.599496][ T5932] usb 2-1: USB disconnect, device number 113 [ 664.723732][ T5989] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 664.743122][ T5989] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 664.804549][ T5989] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 664.824620][ T5989] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 664.851803][ T5989] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 664.866861][ T5932] usb 3-1: USB disconnect, device number 102 [ 664.891036][ T5989] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 664.913965][ T5989] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 664.940833][ T5989] usb 1-1: Product: syz [ 664.947669][ T5989] usb 1-1: Manufacturer: syz [ 664.967739][ T5989] cdc_wdm 1-1:1.0: skipping garbage [ 664.995471][T24394] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8305'. [ 664.996359][ T5989] cdc_wdm 1-1:1.0: skipping garbage [ 665.017230][ T5989] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 665.025396][ T5989] cdc_wdm 1-1:1.0: Unknown control protocol [ 665.218826][ T5868] usb 1-1: USB disconnect, device number 99 [ 665.500116][T24411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 665.925265][T24430] netem: incorrect gi model size [ 665.969809][T24430] netem: change failed [ 666.500918][T24457] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.8335'. [ 666.912341][T24472] @: renamed from vlan0 (while UP) [ 667.022376][T24475] netlink: 'syz.3.8342': attribute type 1 has an invalid length. [ 667.158600][T24480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8345'. [ 667.502834][ T5932] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 667.712065][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 667.726504][ T5932] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 667.758583][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.777424][ T5932] usb 4-1: Product: syz [ 667.792107][ T5932] usb 4-1: Manufacturer: syz [ 667.796835][ T5932] usb 4-1: SerialNumber: syz [ 667.847541][ T5932] r8152-cfgselector 4-1: Unknown version 0x0000 [ 667.866247][ T5932] r8152-cfgselector 4-1: config 0 descriptor?? [ 667.981519][T24512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8360'. [ 668.126435][ T5932] r8152-cfgselector 4-1: Needed 2 retries to read version [ 668.145265][ T5932] r8152-cfgselector 4-1: Unknown version 0x0000 [ 668.169785][ T5932] r8152-cfgselector 4-1: bad CDC descriptors [ 668.391688][ T5868] r8152-cfgselector 4-1: USB disconnect, device number 101 [ 668.538911][ T30] audit: type=1326 audit(1754663089.860:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24535 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748678ebe9 code=0x7ffc0000 [ 668.646360][ T30] audit: type=1326 audit(1754663089.860:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24535 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748678ebe9 code=0x7ffc0000 [ 668.718471][ T30] audit: type=1326 audit(1754663089.860:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24535 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f748678d550 code=0x7ffc0000 [ 668.766179][ T30] audit: type=1326 audit(1754663089.860:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24535 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748678ebe9 code=0x7ffc0000 [ 668.790069][ T30] audit: type=1326 audit(1754663089.890:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24535 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748678ebe9 code=0x7ffc0000 [ 668.832575][T24544] tap0: tun_chr_ioctl cmd 1074025677 [ 668.861507][T24544] tap0: linktype set to 805 [ 669.101177][ T5868] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 669.293986][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.310696][ T5868] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 669.346911][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.374539][ T5868] usb 3-1: config 0 descriptor?? [ 669.614549][ T5868] usbhid 3-1:0.0: can't add hid device: -71 [ 669.627620][ T5868] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 669.649783][ T5868] usb 3-1: USB disconnect, device number 103 [ 669.804000][T24598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 669.844505][T24598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 670.131456][ T5868] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 670.281584][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 670.295471][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.310436][ T5868] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 670.326619][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.355556][ T5868] usb 3-1: config 0 descriptor?? [ 670.368374][ T5868] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 670.390150][ T5868] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 670.580089][ T5932] usb 3-1: USB disconnect, device number 104 [ 670.607124][ T5932] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 670.618266][T24622] loop8: detected capacity change from 0 to 7 [ 670.634606][T24622] Dev loop8: unable to read RDB block 7 [ 670.644679][T24622] loop8: unable to read partition table [ 670.651010][T24622] loop8: partition table beyond EOD, truncated [ 670.658779][T24622] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 670.838554][T24630] loop8: detected capacity change from 0 to 8 [ 670.849583][ T6027] Dev loop8: unable to read RDB block 8 [ 670.856242][ T6027] loop8: unable to read partition table [ 670.868523][ T6027] loop8: partition table beyond EOD, truncated [ 670.878718][T24630] Dev loop8: unable to read RDB block 8 [ 670.890264][T24630] loop8: unable to read partition table [ 670.909726][T24630] loop8: partition table beyond EOD, truncated [ 670.919303][T24630] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 671.005168][T24634] netlink: 'syz.1.8416': attribute type 29 has an invalid length. [ 671.018293][T24634] netlink: 'syz.1.8416': attribute type 29 has an invalid length. [ 671.030352][T24634] netlink: 'syz.1.8416': attribute type 29 has an invalid length. [ 671.041556][T24634] netlink: 'syz.1.8416': attribute type 29 has an invalid length. [ 671.103619][T24636] syzkaller1: entered promiscuous mode [ 671.109696][T24636] syzkaller1: entered allmulticast mode [ 672.031513][ T5868] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 672.194949][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 672.210339][ T5868] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 672.222877][ T5868] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 672.241196][ T5868] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 672.263017][ T5868] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 672.284680][T24677] syz_tun: left allmulticast mode [ 672.290003][ T5868] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 672.315020][ T5868] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 672.331581][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.425217][T24679] binder: 24678:24679 ioctl c0306201 200000001d40 returned -14 [ 672.605627][ T5868] usb 1-1: GET_CAPABILITIES returned 0 [ 672.627850][ T5868] usbtmc 1-1:16.0: can't read capabilities [ 672.828518][T24667] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 672.849532][ T5932] usb 1-1: USB disconnect, device number 100 [ 673.265458][T24710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8452'. [ 673.291439][ T5932] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 673.464024][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 673.478504][ T5932] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 673.509308][ T5932] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 673.530204][ T5932] usb 3-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 673.548376][ T5932] usb 3-1: Product: syz [ 673.560597][ T5932] usb 3-1: Manufacturer: syz [ 673.572766][ T5932] usb 3-1: SerialNumber: syz [ 673.593556][ T5932] usb 3-1: config 0 descriptor?? [ 673.831583][ T5932] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 674.201336][ T5956] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 674.364092][ T5956] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 674.374144][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.386844][ T5956] usb 4-1: config 0 descriptor?? [ 674.396255][ T5956] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 674.420980][ T5932] gspca_sunplus: reg_w_riv err -71 [ 674.434600][ T5932] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 674.448477][ T5932] usb 3-1: USB disconnect, device number 105 [ 675.021742][ T5932] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 675.194053][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.216088][ T5932] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 675.229446][ T5956] usb 4-1: USB disconnect, device number 102 [ 675.245621][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.267865][ T5932] usb 1-1: config 0 descriptor?? [ 675.281221][ T5868] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 675.378318][T24759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 675.441229][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 675.451018][ T5868] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 675.463176][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.472421][ T5868] usb 3-1: Product: syz [ 675.477181][ T5868] usb 3-1: Manufacturer: syz [ 675.483726][ T5868] usb 3-1: SerialNumber: syz [ 675.497878][ T5932] usbhid 1-1:0.0: can't add hid device: -71 [ 675.507603][ T5932] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 675.509792][ T5868] usb 3-1: config 0 descriptor?? [ 675.520265][ T5932] usb 1-1: USB disconnect, device number 101 [ 675.952302][ T5868] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 675.961617][ T5932] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 675.971769][ T5868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 675.990685][ T5868] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 676.011995][ T5868] usb 3-1: media controller created [ 676.084622][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 676.146755][ T5932] usb 1-1: Using ep0 maxpacket: 32 [ 676.168477][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.169408][ T5868] zl10353_read_register: readreg error (reg=127, ret==0) [ 676.190931][ T5868] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 676.200076][ T5868] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 676.206399][ T5932] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 676.219262][ T5868] usb 3-1: USB disconnect, device number 106 [ 676.315547][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.317165][ T5868] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 676.355095][ T5932] usb 1-1: config 0 descriptor?? [ 676.405422][ T5932] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 676.518628][ T5932] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 676.792229][ T5932] usb 1-1: USB disconnect, device number 102 [ 676.856760][ T5932] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 677.531328][ T5932] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 677.707057][ T5932] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.719893][ T5932] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.767504][ T5932] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 677.801181][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.810350][ T5932] usb 3-1: Product: syz [ 677.815816][ T5932] usb 3-1: Manufacturer: syz [ 677.821817][ T5932] usb 3-1: SerialNumber: syz [ 677.831631][ T5989] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 677.886479][T24831] loop8: detected capacity change from 0 to 8 [ 677.896074][ T6027] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 677.905016][ T6027] loop8: p1 start 1953705584 is beyond EOD, truncated [ 677.913923][ T6027] loop8: p2 start 700027685 is beyond EOD, truncated [ 677.922722][ T6027] loop8: p3 start 31919608 is beyond EOD, truncated [ 677.930486][ T6027] loop8: p4 start 4201384960 is beyond EOD, truncated [ 677.938157][ T6027] loop8: p5 start 2842431134 is beyond EOD, truncated [ 677.945503][ T6027] loop8: p6 start 1584160440 is beyond EOD, truncated [ 677.953017][ T6027] loop8: p7 start 2589729944 is beyond EOD, truncated [ 677.971022][ T6027] loop8: p8 start 1229243498 is beyond EOD, truncated [ 677.978348][ T6027] loop8: p9 start 1043497832 is beyond EOD, truncated [ 677.990256][ T6027] loop8: p10 start 883525942 is beyond EOD, truncated [ 677.994751][T24834] syzkaller1: entered promiscuous mode [ 677.999308][ T6027] loop8: p11 start 2065041852 is beyond EOD, [ 678.003480][T24834] syzkaller1: entered allmulticast mode [ 678.011402][ T5989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 678.027079][ T6027] truncated [ 678.032110][ T5989] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 678.036571][ T6027] loop8: p12 start 3320555364 is beyond EOD, [ 678.042739][ T5989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.060782][ T6027] truncated [ 678.079786][T24831] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 678.088408][T24831] loop8: p1 start 1953705584 is beyond EOD, truncated [ 678.091795][ T5989] usb 4-1: config 0 descriptor?? [ 678.109576][T24831] loop8: p2 start 700027685 is beyond EOD, [ 678.110166][T24821] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 678.126883][T24831] truncated [ 678.130078][T24831] loop8: p3 start 31919608 is beyond EOD, truncated [ 678.142809][T24831] loop8: p4 start 4201384960 is beyond EOD, truncated [ 678.150510][T24831] loop8: p5 start 2842431134 is beyond EOD, truncated [ 678.158403][T24831] loop8: p6 start 1584160440 is beyond EOD, truncated [ 678.167468][T24831] loop8: p7 start 2589729944 is beyond EOD, truncated [ 678.176468][T24831] loop8: p8 start 1229243498 is beyond EOD, truncated [ 678.198836][T24831] loop8: p9 start 1043497832 is beyond EOD, truncated [ 678.206230][T24831] loop8: p10 start 883525942 is beyond EOD, truncated [ 678.233484][T24831] loop8: p11 start 2065041852 is beyond EOD, truncated [ 678.240653][T24831] loop8: p12 start 3320555364 is beyond EOD, truncated [ 678.358234][T24841] veth1_macvtap: left promiscuous mode [ 678.364535][T24841] macsec0: entered promiscuous mode [ 678.373153][T24841] macsec0: entered allmulticast mode [ 678.408419][T24841] veth1_macvtap: entered promiscuous mode [ 678.414898][T24841] veth1_macvtap: entered allmulticast mode [ 678.421831][T24841] macsec0: left promiscuous mode [ 678.427441][T24841] macsec0: left allmulticast mode [ 678.435020][T24841] veth1_macvtap: left allmulticast mode [ 678.469794][T24844] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe [ 678.559484][ T5989] elan 0003:04F3:0755.008A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 678.725720][T24852] usb usb8: usbfs: process 24852 (syz.1.8514) did not claim interface 0 before use [ 678.805815][ T5956] usb 4-1: USB disconnect, device number 103 [ 678.895229][ T5932] cdc_ncm 3-1:1.0: bind() failure [ 678.909494][ T5932] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 678.934357][ T5932] cdc_ncm 3-1:1.1: bind() failure [ 678.951006][ T5932] usb 3-1: USB disconnect, device number 107 [ 679.030774][ T30] audit: type=1326 audit(1754663100.350:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24861 comm="syz.1.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4018ebe9 code=0x7ffc0000 [ 679.060863][ T30] audit: type=1326 audit(1754663100.360:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24861 comm="syz.1.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4018ebe9 code=0x7ffc0000 [ 679.110836][ T30] audit: type=1326 audit(1754663100.360:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24861 comm="syz.1.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4018ebe9 code=0x7ffc0000 [ 679.140296][ T30] audit: type=1326 audit(1754663100.360:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24861 comm="syz.1.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4018ebe9 code=0x7ffc0000 [ 679.164903][ C0] vkms_vblank_simulate: vblank timer overrun [ 679.174638][ T30] audit: type=1326 audit(1754663100.360:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24861 comm="syz.1.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b4018ebe9 code=0x7ffc0000 [ 679.198292][ C0] vkms_vblank_simulate: vblank timer overrun [ 679.286418][ T30] audit: type=1326 audit(1754663100.360:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24861 comm="syz.1.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4018ebe9 code=0x7ffc0000 [ 679.311592][ T30] audit: type=1326 audit(1754663100.360:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24861 comm="syz.1.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4018ebe9 code=0x7ffc0000 [ 679.339385][ T30] audit: type=1326 audit(1754663100.360:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24861 comm="syz.1.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4018ebe9 code=0x7ffc0000 [ 679.428919][ T30] audit: type=1326 audit(1754663100.360:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24861 comm="syz.1.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6b4018ebe9 code=0x7ffc0000 [ 679.542128][ T30] audit: type=1326 audit(1754663100.360:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24861 comm="syz.1.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4018ebe9 code=0x7ffc0000 [ 680.311190][ T5932] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 680.501311][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 680.508501][ T5932] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.522887][ T5932] usb 4-1: config 0 has no interfaces? [ 680.534656][ T5932] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 680.551250][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 680.565690][ T5932] usb 4-1: SerialNumber: syz [ 680.577000][ T5932] usb 4-1: config 0 descriptor?? [ 680.702624][ T5989] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 680.815664][ T5932] usb 4-1: USB disconnect, device number 104 [ 680.883279][ T5989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.922773][ T5989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.972470][ T5989] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 681.100893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 681.122653][ T5989] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 681.143683][ T5989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.161957][ T5989] usb 1-1: config 0 descriptor?? [ 681.356608][T24930] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 681.365091][ T5932] IPVS: starting estimator thread 0... [ 681.482369][T24932] IPVS: using max 32 ests per chain, 76800 per kthread [ 681.635500][ T5989] plantronics 0003:047F:FFFF.008B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 681.958656][ T5989] usb 1-1: USB disconnect, device number 103 [ 683.211398][ T5953] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 683.404003][ T5953] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.424974][ T5953] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 683.456904][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.507446][ T5953] usb 1-1: config 0 descriptor?? [ 683.520025][ T5953] pwc: Askey VC010 type 2 USB webcam detected. [ 683.881408][ T5989] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 684.041663][ T5989] usb 3-1: Using ep0 maxpacket: 16 [ 684.059999][ T5989] usb 3-1: unable to get BOS descriptor or descriptor too short [ 684.073890][ T5989] usb 3-1: config 3 has an invalid interface number: 212 but max is 1 [ 684.094812][ T5989] usb 3-1: config 3 has an invalid interface number: 3 but max is 1 [ 684.108153][ T5989] usb 3-1: config 3 has no interface number 0 [ 684.117312][ T5989] usb 3-1: config 3 has no interface number 1 [ 684.124820][ T5989] usb 3-1: config 3 interface 212 has no altsetting 0 [ 684.134717][ T5953] pwc: recv_control_msg error -32 req 02 val 2700 [ 684.150348][ T5989] usb 3-1: config 3 interface 3 has no altsetting 0 [ 684.158469][ T5953] pwc: recv_control_msg error -71 req 02 val 2c00 [ 684.168683][ T5953] pwc: recv_control_msg error -71 req 04 val 1000 [ 684.177932][ T5989] usb 3-1: New USB device found, idVendor=0499, idProduct=1507, bcdDevice=aa.69 [ 684.188336][ T5953] pwc: recv_control_msg error -71 req 04 val 1300 [ 684.196357][ T5989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.207263][ T5953] pwc: recv_control_msg error -71 req 04 val 1400 [ 684.214340][ T5989] usb 3-1: Product: syz [ 684.219199][ T5989] usb 3-1: Manufacturer: syz [ 684.224122][ T5953] pwc: recv_control_msg error -71 req 02 val 2000 [ 684.231028][ T5989] usb 3-1: SerialNumber: syz [ 684.236635][ T5953] pwc: recv_control_msg error -71 req 02 val 2100 [ 684.248696][ T5953] pwc: recv_control_msg error -71 req 04 val 1500 [ 684.263944][ T5953] pwc: recv_control_msg error -71 req 02 val 2500 [ 684.272013][ T5953] pwc: recv_control_msg error -71 req 02 val 2400 [ 684.279345][ T5953] pwc: recv_control_msg error -71 req 02 val 2600 [ 684.287996][ T5953] pwc: recv_control_msg error -71 req 02 val 2900 [ 684.296727][ T5953] pwc: recv_control_msg error -71 req 02 val 2800 [ 684.305244][ T5953] pwc: recv_control_msg error -71 req 04 val 1100 [ 684.314014][ T5953] pwc: recv_control_msg error -71 req 04 val 1200 [ 684.331904][ T5953] pwc: Registered as video103. [ 684.355413][ T5953] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input89 [ 684.395538][ T5953] usb 1-1: USB disconnect, device number 104 [ 684.487777][ T5989] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 684.537048][ T5989] snd-usb-audio 3-1:3.212: probe with driver snd-usb-audio failed with error -2 [ 684.603939][ T5989] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 684.685216][ T5989] snd-usb-audio 3-1:3.3: probe with driver snd-usb-audio failed with error -2 [ 684.732196][ T5989] usb 3-1: USB disconnect, device number 108 [ 684.820578][ T6027] udevd[6027]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.036689][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.044913][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.997557][T25094] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.8620'. [ 688.192205][ T5953] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 688.351356][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 688.365270][ T5953] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 688.376006][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.427259][ T5953] usb 3-1: config 0 descriptor?? [ 688.454448][ T5953] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 688.464695][ T5989] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 688.555559][T25121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8632'. [ 688.597404][T25123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 688.633212][ T5989] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 688.657222][ T5989] usb 2-1: config 0 has no interface number 0 [ 688.681476][ T5989] usb 2-1: config 0 interface 20 altsetting 119 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 688.712682][ T5989] usb 2-1: config 0 interface 20 altsetting 119 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 688.725526][ T5989] usb 2-1: config 0 interface 20 altsetting 119 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 688.738331][ T5989] usb 2-1: config 0 interface 20 altsetting 119 has an invalid descriptor for endpoint zero, skipping [ 688.750775][ T5989] usb 2-1: config 0 interface 20 has no altsetting 0 [ 688.772037][ T5989] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 688.796009][ T5989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.811151][ T5989] usb 2-1: Product: syz [ 688.816452][ T5989] usb 2-1: Manufacturer: syz [ 688.822906][ T5989] usb 2-1: SerialNumber: syz [ 688.836276][ T5989] usb 2-1: config 0 descriptor?? [ 688.927133][T25131] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 689.066701][ T5989] keyspan 2-1:0.20: Keyspan 1 port adapter converter detected [ 689.090443][ T5989] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 87 [ 689.103150][ T5989] keyspan 2-1:0.20: unsupported endpoint type 0 [ 689.112839][ T5989] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 81 [ 689.124711][ T5989] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 1 [ 689.133476][ T5989] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 2 [ 689.142642][ T5989] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 85 [ 689.152110][ T5989] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 5 [ 689.163106][ T5989] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 689.186129][ T5989] usb 2-1: USB disconnect, device number 114 [ 689.222663][ T5989] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 689.250431][ T5989] keyspan 2-1:0.20: device disconnected [ 689.489714][ T5953] gspca_nw80x: reg_w err -71 [ 689.496712][ T5953] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 689.521661][ T5953] usb 3-1: USB disconnect, device number 109 [ 689.787450][T25147] loop6: detected capacity change from 0 to 63 [ 689.798881][T25147] buffer_io_error: 33 callbacks suppressed [ 689.798899][T25147] Buffer I/O error on dev loop6, logical block 0, async page read [ 689.821474][T25147] Buffer I/O error on dev loop6, logical block 0, async page read [ 689.830820][T25147] Buffer I/O error on dev loop6, logical block 0, async page read [ 689.845053][T25147] Buffer I/O error on dev loop6, logical block 0, async page read [ 689.860461][T25147] Buffer I/O error on dev loop6, logical block 0, async page read [ 689.880772][T25147] Buffer I/O error on dev loop6, logical block 0, async page read [ 689.906668][T25147] Buffer I/O error on dev loop6, logical block 0, async page read [ 689.931668][T25148] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 689.945586][T25147] loop6: unable to read partition table [ 689.962296][T25148] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 689.973118][T25147] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 690.006273][T25150] netlink: 'syz.4.8645': attribute type 1 has an invalid length. [ 690.013576][T25151] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 690.054239][T25150] netlink: 124 bytes leftover after parsing attributes in process `syz.4.8645'. [ 690.407828][T25164] syzkaller1: entered promiscuous mode [ 690.434181][T25164] syzkaller1: entered allmulticast mode [ 690.804907][T25186] batadv0: entered promiscuous mode [ 690.816697][T25186] bond0: entered promiscuous mode [ 690.822150][T25186] bond_slave_0: entered promiscuous mode [ 690.828467][T25186] bond_slave_1: entered promiscuous mode [ 690.841453][ T5953] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 690.859605][T25186] debugfs: 'hsr1' already exists in 'hsr' [ 690.867707][T25186] Cannot create hsr debugfs directory [ 690.878605][T25186] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 690.889939][T25186] hsr1: entered allmulticast mode [ 690.907877][T25186] batadv0: entered allmulticast mode [ 690.916943][T25186] bond0: entered allmulticast mode [ 690.924263][T25186] bond_slave_0: entered allmulticast mode [ 690.931523][T25186] bond_slave_1: entered allmulticast mode [ 690.938333][T25186] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 691.005606][ T5953] usb 3-1: Using ep0 maxpacket: 16 [ 691.029612][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.063549][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.086488][ T5953] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 691.100874][ T5953] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 691.111822][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.132901][ T5953] usb 3-1: config 0 descriptor?? [ 691.171202][ T5956] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 691.331268][ T5956] usb 1-1: Using ep0 maxpacket: 8 [ 691.339636][ T5956] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 691.361187][ T5956] usb 1-1: config 0 has no interface number 0 [ 691.367769][ T5956] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 691.380592][ T5956] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 691.390844][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.412254][ T5956] usb 1-1: config 0 descriptor?? [ 691.433882][ T5956] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 691.555073][ T5953] HID 045e:07da: Invalid code 65791 type 1 [ 691.575382][ T5953] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.008C/input/input90 [ 691.608895][ T5953] microsoft 0003:045E:07DA.008C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 691.816643][ T5953] usb 3-1: USB disconnect, device number 110 [ 692.221017][ T5953] usb 1-1: USB disconnect, device number 105 [ 692.524929][T25218] netlink: 'syz.2.8670': attribute type 1 has an invalid length. [ 692.575098][T25218] netlink: 'syz.2.8670': attribute type 2 has an invalid length. [ 692.629297][T25218] netlink: 'syz.2.8670': attribute type 1 has an invalid length. [ 692.678751][T25218] netlink: 'syz.2.8670': attribute type 2 has an invalid length. [ 692.933972][T25229] input: syz0 as /devices/virtual/input/input91 [ 694.010553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 694.431365][ T5953] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 694.611198][ T5953] usb 3-1: Using ep0 maxpacket: 16 [ 694.637839][T25267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8692'. [ 694.655856][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.672187][T25266] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 694.691513][ T5953] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 694.742783][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.794501][ T5953] usb 3-1: config 0 descriptor?? [ 694.991827][ T5956] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 695.026404][T25279] batadv_slave_1: entered promiscuous mode [ 695.063586][T25278] batadv_slave_1: left promiscuous mode [ 695.173397][ T5956] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 695.214624][ T5956] usb 2-1: config 150 has no interface number 0 [ 695.236581][ T5953] mcp2221 0003:04D8:00DD.008D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 695.256894][ T5956] usb 2-1: config 150 interface 204 has no altsetting 0 [ 695.285375][ T5956] usb 2-1: config 150 interface 1 has no altsetting 0 [ 695.319436][ T5956] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 695.345251][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.383104][ T5956] usb 2-1: Product: syz [ 695.404928][ T5956] usb 2-1: Manufacturer: syz [ 695.420594][T25286] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 695.448912][ T5956] usb 2-1: SerialNumber: syz [ 695.684699][ T5953] usb 3-1: USB disconnect, device number 111 [ 695.708185][ T5956] xr_serial 2-1:150.204: xr_serial converter detected [ 695.743746][T25295] loop8: detected capacity change from 0 to 7 [ 695.776777][T25295] Dev loop8: unable to read RDB block 7 [ 695.803831][T25295] loop8: AHDI p1 p3 p4 [ 695.808924][T25295] loop8: partition table partially beyond EOD, truncated [ 695.837271][T25295] loop8: p1 start 975770946 is beyond EOD, truncated [ 695.849165][T25295] loop8: p3 start 6514546 is beyond EOD, truncated [ 696.514191][ T5956] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 696.533245][ T30] kauditd_printk_skb: 314 callbacks suppressed [ 696.533263][ T30] audit: type=1800 audit(1754663117.860:663): pid=25317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8713" name="nullb0" dev="devtmpfs" ino=3963 res=0 errno=0 [ 696.540371][ T5956] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 696.608830][ T5956] usb 2-1: USB disconnect, device number 115 [ 696.693517][ T5956] xr_serial 2-1:150.204: device disconnected [ 697.997481][T25363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 698.028956][T25363] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 698.540678][T25378] input: syz1 as /devices/virtual/input/input92 [ 699.251163][ T5932] usb 4-1: new low-speed USB device number 105 using dummy_hcd [ 699.423777][ T5932] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 699.442153][ T5932] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 699.465163][ T5932] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 699.512267][ T5932] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 699.537391][ T5932] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 699.564040][ T5932] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 699.576796][ T5932] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 699.590893][ T5932] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 699.606886][ T5953] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 699.623574][ T5932] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 699.640184][ T5932] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 699.682969][ T5932] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 699.690818][ T5932] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 699.731154][ T5932] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 699.751798][ T5932] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 699.781399][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 699.791503][ T5932] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 699.812427][ T5953] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 699.831321][ T5953] usb 3-1: config 0 has no interface number 0 [ 699.838048][ T5953] usb 3-1: config 0 interface 12 has no altsetting 0 [ 699.867574][ T5932] usb 4-1: string descriptor 0 read error: -22 [ 699.875176][ T5932] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 699.885876][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.898375][ T5953] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 699.910013][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.939094][ T5932] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 699.947389][ T5953] usb 3-1: Product: syz [ 699.957235][ T5953] usb 3-1: Manufacturer: syz [ 699.972537][ T5953] usb 3-1: SerialNumber: syz [ 699.990299][ T5953] usb 3-1: config 0 descriptor?? [ 700.060142][T25409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 700.170546][ T5932] usb 4-1: USB disconnect, device number 105 [ 700.816021][T25428] loop3: detected capacity change from 0 to 1 [ 700.829970][T25427] sctp: [Deprecated]: syz.3.8760 (pid 25427) Use of int in max_burst socket option. [ 700.829970][T25427] Use struct sctp_assoc_value instead [ 700.834666][T25428] Dev loop3: unable to read RDB block 1 [ 700.858383][T25428] loop3: AHDI p1 [ 700.863195][T25428] loop3: partition table partially beyond EOD, truncated [ 700.904534][ T5234] Dev loop3: unable to read RDB block 1 [ 700.924078][ T5234] loop3: AHDI p1 [ 700.928326][ T5234] loop3: partition table partially beyond EOD, truncated [ 701.063367][ T5953] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 701.091257][ T5953] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 701.111151][ T5953] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 701.118924][ T5953] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 701.196907][ T5953] usb 3-1: USB disconnect, device number 112 [ 701.350908][T25447] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 63 [ 701.395655][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 701.747403][T25457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8774'. [ 701.839955][T25457] chnl_net:caif_netlink_parms(): no params data found [ 702.377304][ T30] audit: type=1326 audit(1754663123.700:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25471 comm="syz.4.8781" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f748678ebe9 code=0x0 [ 702.407829][T25473] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 703.121224][ T30] audit: type=1326 audit(1754663124.440:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25493 comm="syz.0.8790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7801f8ebe9 code=0x7ffc0000 [ 703.241378][ T30] audit: type=1326 audit(1754663124.440:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25493 comm="syz.0.8790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7801f8ebe9 code=0x7ffc0000 [ 703.340250][ T30] audit: type=1326 audit(1754663124.460:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25493 comm="syz.0.8790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f7801f8ebe9 code=0x7ffc0000 [ 703.463837][ T30] audit: type=1326 audit(1754663124.460:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25493 comm="syz.0.8790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7801f8ebe9 code=0x7ffc0000 [ 703.552161][ T30] audit: type=1326 audit(1754663124.460:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25493 comm="syz.0.8790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f7801f8ebe9 code=0x7ffc0000 [ 703.627103][ T30] audit: type=1326 audit(1754663124.520:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25493 comm="syz.0.8790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7801f8ebe9 code=0x7ffc0000 [ 703.680299][ T30] audit: type=1326 audit(1754663124.520:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25493 comm="syz.0.8790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7801f8ebe9 code=0x7ffc0000 [ 703.727250][ T30] audit: type=1326 audit(1754663125.000:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25517 comm="syz.2.8800" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff30038ebe9 code=0x0 [ 704.521011][T25541] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 704.901255][ T5956] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 705.071484][ T5956] usb 2-1: Using ep0 maxpacket: 8 [ 705.092327][ T5956] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 705.141336][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.169780][ T5956] usb 2-1: config 0 descriptor?? [ 705.401688][ T5956] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 706.191588][ T5953] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 706.216704][ T5956] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 706.231658][ T5956] asix 2-1:0.0: probe with driver asix failed with error -71 [ 706.248774][ T5956] usb 2-1: USB disconnect, device number 116 [ 706.355772][ T5953] usb 3-1: Using ep0 maxpacket: 16 [ 706.377965][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.400358][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.420722][ T5953] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 706.437959][ T5953] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 706.449031][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.477453][ T5953] usb 3-1: config 0 descriptor?? [ 706.835758][T25596] syzkaller1: entered promiscuous mode [ 706.844531][T25596] syzkaller1: entered allmulticast mode [ 706.935012][ T5953] hid_parser_main: 33 callbacks suppressed [ 706.935037][ T5953] shield 0003:0955:7214.008E: unknown main item tag 0x0 [ 706.971143][ T5953] shield 0003:0955:7214.008E: unknown main item tag 0x0 [ 706.988759][ T5953] shield 0003:0955:7214.008E: unknown main item tag 0x0 [ 707.011154][ T5953] shield 0003:0955:7214.008E: unknown main item tag 0x0 [ 707.028910][ T5953] shield 0003:0955:7214.008E: unknown main item tag 0x0 [ 707.090821][ T5953] input: HID 0955:7214 Haptics as /devices/virtual/input/input93 [ 707.113011][T25585] random: crng reseeded on system resumption [ 707.236613][ T5953] shield 0003:0955:7214.008E: Registered Thunderstrike controller [ 707.301952][ T5953] shield 0003:0955:7214.008E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 707.408353][ T5932] shield 0003:0955:7214.008E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 707.431244][ T5953] usb 3-1: USB disconnect, device number 113 [ 707.474595][ T5932] shield 0003:0955:7214.008E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 707.495068][ T43] thermal thermal_zone0: Temperature check failed (-19) [ 707.558454][ T5932] shield 0003:0955:7214.008E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 707.585851][ T5932] shield 0003:0955:7214.008E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 708.621392][ T5868] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 708.813790][ T5868] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 708.837926][ T5868] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.871208][ T5868] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 708.920774][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.072162][ T5953] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 709.176539][ T5868] usb 3-1: usb_control_msg returned -32 [ 709.221698][ T5868] usbtmc 3-1:16.0: can't read capabilities [ 709.233816][ T5953] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.281096][ T5953] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 709.321322][ T5953] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 709.341720][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.364038][ T5953] usb 1-1: config 0 descriptor?? [ 709.395153][ T5953] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 709.407832][ T5953] dvb-usb: bulk message failed: -22 (3/0) [ 709.432109][ T5953] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 709.451701][ T5953] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 709.459812][ T5953] usb 1-1: media controller created [ 709.484680][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 709.553081][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 709.568942][ T5953] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 709.609185][ T5953] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input94 [ 709.675593][ T5953] dvb-usb: schedule remote query interval to 150 msecs. [ 709.710249][ T5953] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 709.861342][ T5953] dvb-usb: bulk message failed: -22 (1/0) [ 709.877842][ T5953] dvb-usb: error while querying for an remote control event. [ 709.969250][T25643] syzkaller1: entered promiscuous mode [ 709.981337][T25643] syzkaller1: entered allmulticast mode [ 710.061193][ T5953] dvb-usb: bulk message failed: -22 (1/0) [ 710.071895][ T5868] usb 1-1: USB disconnect, device number 106 [ 710.088568][ T5953] dvb-usb: error while querying for an remote control event. [ 710.160845][ T5868] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 710.494840][T25655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8857'. [ 710.729693][ C0] ------------[ cut here ]------------ [ 710.736587][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 710.748861][ C0] WARNING: CPU: 0 PID: 25663 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 710.761290][ C0] Modules linked in: [ 710.765596][ C0] CPU: 0 UID: 0 PID: 25663 Comm: syz.3.8861 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 710.779268][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 710.789958][ C0] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 710.796564][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 60 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 62 14 94 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 710.817740][ C0] RSP: 0018:ffffc90000007538 EFLAGS: 00010246 [ 710.824315][ C0] RAX: d2ac5de9336a4100 RBX: 000000000000000c RCX: ffff888026005a00 [ 710.833078][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 710.841681][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 710.850207][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88807ba9d028 [ 710.859145][ C0] R13: 0000000000000000 R14: ffff888027328e40 R15: ffff88802732b0d8 [ 710.867911][ C0] FS: 0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 710.878850][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 710.886547][ C0] CR2: 000000110c403fce CR3: 0000000076574000 CR4: 00000000003526f0 [ 710.897406][ C0] Call Trace: [ 710.901376][ C0] [ 710.904440][ C0] rate_control_send_low+0x194/0x7a0 [ 710.910002][ C0] rate_control_get_rate+0x20b/0x5d0 [ 710.917254][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 710.924745][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 710.931961][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 710.938300][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 710.944743][ C0] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 710.950864][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 710.957993][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 710.964949][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 710.970997][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 710.977386][ C0] __ieee80211_beacon_get+0x118e/0x1880 [ 710.983441][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 710.989126][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 710.995656][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 711.002561][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 711.008824][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 711.017924][ C0] __iterate_interfaces+0x2a8/0x590 [ 711.023538][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 711.029793][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 711.038013][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 711.044526][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 711.052502][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 711.058018][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 711.064243][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 711.069921][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 711.076620][ C0] ? read_tsc+0x9/0x20 [ 711.081200][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 711.088656][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 711.094581][ C0] handle_softirqs+0x283/0x870 [ 711.100419][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 711.105246][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 711.110822][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 711.116396][ C0] __irq_exit_rcu+0xca/0x1f0 [ 711.121560][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 711.126854][ C0] irq_exit_rcu+0x9/0x30 [ 711.131755][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 711.137955][ C0] [ 711.141378][ C0] [ 711.144878][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 711.151366][ C0] RIP: 0010:lock_release+0x70/0x3e0 [ 711.156780][ C0] Code: e8 45 f1 08 00 84 c0 75 0d f6 05 be c3 ef 0d 01 0f 84 ad 02 00 00 83 3d 1d 0c 06 0e 00 0f 84 44 02 00 00 65 8b 05 d0 c3 02 11 <85> c0 0f 85 35 02 00 00 65 4c 8b 3c 25 08 f0 9f 92 41 83 bf ec 0a [ 711.178298][ C0] RSP: 0018:ffffc900000f7880 EFLAGS: 00000202 [ 711.184591][ C0] RAX: 0000000000000000 RBX: ffffffff822bd294 RCX: d2ac5de9336a4100 [ 711.192961][ C0] RDX: 0000000000000000 RSI: ffffffff8be32660 RDI: ffffffff8be32620 [ 711.201791][ C0] RBP: dffffc0000000000 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6 [ 711.210160][ C0] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: ffff88801ba8a148 [ 711.218359][ C0] R13: ffffffff822bd294 R14: ffffffff8e139ee0 R15: ffff88813fffb400 [ 711.226890][ C0] ? mod_objcg_mlstate+0x24/0x260 [ 711.232238][ C0] ? mod_objcg_mlstate+0x24/0x260 [ 711.237579][ C0] ? mod_objcg_mlstate+0x24/0x260 [ 711.243213][ C0] ? mod_objcg_mlstate+0x24/0x260 [ 711.248382][ C0] mod_objcg_mlstate+0x1d3/0x260 [ 711.254212][ C0] refill_obj_stock+0x32c/0x850 [ 711.259874][ C0] ? refill_obj_stock+0x116/0x850 [ 711.265294][ C0] __memcg_slab_free_hook+0x127/0x3d0 [ 711.270693][ C0] ? put_files_struct+0x2b3/0x350 [ 711.276435][ C0] kfree+0x255/0x440 [ 711.280904][ C0] put_files_struct+0x2b3/0x350 [ 711.286720][ C0] do_exit+0x66f/0x2300 [ 711.291313][ C0] ? cgroup_freezing+0x20/0x350 [ 711.296733][ C0] ? __pfx_do_exit+0x10/0x10 [ 711.301994][ C0] ? cgroup_freezing+0x20/0x350 [ 711.307692][ C0] ? cgroup_freezing+0x20/0x350 [ 711.312873][ C0] do_group_exit+0x21c/0x2d0 [ 711.318000][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 711.324326][ C0] get_signal+0x1286/0x1340 [ 711.329326][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 711.335196][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 711.341705][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 711.347282][ C0] exit_to_user_mode_loop+0x75/0x110 [ 711.352627][ C0] do_syscall_64+0x2bd/0x3b0 [ 711.357550][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 711.363340][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.370141][ C0] ? clear_bhb_loop+0x60/0xb0 [ 711.375322][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.382174][ C0] RIP: 0033:0x7f0c4618ebe9 [ 711.386795][ C0] Code: Unable to access opcode bytes at 0x7f0c4618ebbf. [ 711.394007][ C0] RSP: 002b:00007f0c470120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 711.403174][ C0] RAX: fffffffffffffe00 RBX: 00007f0c463b5fa8 RCX: 00007f0c4618ebe9 [ 711.411558][ T43] usb 3-1: USB disconnect, device number 114 [ 711.417813][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0c463b5fa8 [ 711.426237][ C0] RBP: 00007f0c463b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 711.434547][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 711.443021][ C0] R13: 00007f0c463b6038 R14: 00007f0c464df940 R15: 00007f0c464dfa28 [ 711.451274][ C0] [ 711.454497][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 711.462242][ C0] CPU: 0 UID: 0 PID: 25663 Comm: syz.3.8861 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 711.474502][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 711.485844][ C0] Call Trace: [ 711.489332][ C0] [ 711.492201][ C0] dump_stack_lvl+0x99/0x250 [ 711.497010][ C0] ? __asan_memcpy+0x40/0x70 [ 711.502248][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 711.507832][ C0] ? __pfx__printk+0x10/0x10 [ 711.512828][ C0] vpanic+0x281/0x750 [ 711.516936][ C0] ? __pfx__printk+0x10/0x10 [ 711.521915][ C0] ? __pfx_vpanic+0x10/0x10 [ 711.527151][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 711.533460][ C0] panic+0xb9/0xc0 [ 711.537265][ C0] ? __pfx_panic+0x10/0x10 [ 711.542233][ C0] __warn+0x31b/0x4b0 [ 711.546523][ C0] ? __rate_control_send_low+0x5df/0x820 [ 711.553132][ C0] ? __rate_control_send_low+0x5df/0x820 [ 711.559409][ C0] report_bug+0x2be/0x4f0 [ 711.564367][ C0] ? __rate_control_send_low+0x5df/0x820 [ 711.570795][ C0] ? __rate_control_send_low+0x5df/0x820 [ 711.576797][ C0] ? __rate_control_send_low+0x5e1/0x820 [ 711.583157][ C0] handle_bug+0x84/0x160 [ 711.588104][ C0] exc_invalid_op+0x1a/0x50 [ 711.593168][ C0] asm_exc_invalid_op+0x1a/0x20 [ 711.598646][ C0] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 711.604981][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 60 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 62 14 94 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 711.627284][ C0] RSP: 0018:ffffc90000007538 EFLAGS: 00010246 [ 711.633444][ C0] RAX: d2ac5de9336a4100 RBX: 000000000000000c RCX: ffff888026005a00 [ 711.641957][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 711.650544][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 711.659289][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88807ba9d028 [ 711.667956][ C0] R13: 0000000000000000 R14: ffff888027328e40 R15: ffff88802732b0d8 [ 711.677155][ C0] ? __rate_control_send_low+0x5de/0x820 [ 711.682825][ C0] rate_control_send_low+0x194/0x7a0 [ 711.688487][ C0] rate_control_get_rate+0x20b/0x5d0 [ 711.694425][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 711.700773][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 711.707647][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 711.713850][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 711.719947][ C0] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 711.726554][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 711.733227][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 711.739592][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 711.745509][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 711.751242][ C0] __ieee80211_beacon_get+0x118e/0x1880 [ 711.757320][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 711.763405][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 711.769260][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 711.775605][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 711.781908][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 711.791184][ C0] __iterate_interfaces+0x2a8/0x590 [ 711.796586][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 711.802935][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 711.810676][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 711.817345][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 711.824390][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 711.829705][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 711.836096][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 711.841394][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 711.847114][ C0] ? read_tsc+0x9/0x20 [ 711.851477][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 711.857796][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 711.863139][ C0] handle_softirqs+0x283/0x870 [ 711.868475][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 711.873451][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 711.878869][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 711.884469][ C0] __irq_exit_rcu+0xca/0x1f0 [ 711.889586][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 711.895320][ C0] irq_exit_rcu+0x9/0x30 [ 711.899927][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 711.906149][ C0] [ 711.909545][ C0] [ 711.912934][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 711.920349][ C0] RIP: 0010:lock_release+0x70/0x3e0 [ 711.926335][ C0] Code: e8 45 f1 08 00 84 c0 75 0d f6 05 be c3 ef 0d 01 0f 84 ad 02 00 00 83 3d 1d 0c 06 0e 00 0f 84 44 02 00 00 65 8b 05 d0 c3 02 11 <85> c0 0f 85 35 02 00 00 65 4c 8b 3c 25 08 f0 9f 92 41 83 bf ec 0a [ 711.947513][ C0] RSP: 0018:ffffc900000f7880 EFLAGS: 00000202 [ 711.954391][ C0] RAX: 0000000000000000 RBX: ffffffff822bd294 RCX: d2ac5de9336a4100 [ 711.963109][ C0] RDX: 0000000000000000 RSI: ffffffff8be32660 RDI: ffffffff8be32620 [ 711.973619][ C0] RBP: dffffc0000000000 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6 [ 711.982260][ C0] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: ffff88801ba8a148 [ 711.991365][ C0] R13: ffffffff822bd294 R14: ffffffff8e139ee0 R15: ffff88813fffb400 [ 712.000394][ C0] ? mod_objcg_mlstate+0x24/0x260 [ 712.007057][ C0] ? mod_objcg_mlstate+0x24/0x260 [ 712.014483][ C0] ? mod_objcg_mlstate+0x24/0x260 [ 712.020079][ C0] ? mod_objcg_mlstate+0x24/0x260 [ 712.027978][ C0] mod_objcg_mlstate+0x1d3/0x260 [ 712.033579][ C0] refill_obj_stock+0x32c/0x850 [ 712.039400][ C0] ? refill_obj_stock+0x116/0x850 [ 712.045332][ C0] __memcg_slab_free_hook+0x127/0x3d0 [ 712.052073][ C0] ? put_files_struct+0x2b3/0x350 [ 712.057715][ C0] kfree+0x255/0x440 [ 712.061971][ C0] put_files_struct+0x2b3/0x350 [ 712.067899][ C0] do_exit+0x66f/0x2300 [ 712.072657][ C0] ? cgroup_freezing+0x20/0x350 [ 712.078899][ C0] ? __pfx_do_exit+0x10/0x10 [ 712.085148][ C0] ? cgroup_freezing+0x20/0x350 [ 712.091896][ C0] ? cgroup_freezing+0x20/0x350 [ 712.097660][ C0] do_group_exit+0x21c/0x2d0 [ 712.102817][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 712.108822][ C0] get_signal+0x1286/0x1340 [ 712.114743][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 712.120973][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 712.128565][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 712.135046][ C0] exit_to_user_mode_loop+0x75/0x110 [ 712.140538][ C0] do_syscall_64+0x2bd/0x3b0 [ 712.146092][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 712.152709][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.159923][ C0] ? clear_bhb_loop+0x60/0xb0 [ 712.165120][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.172867][ C0] RIP: 0033:0x7f0c4618ebe9 [ 712.178194][ C0] Code: Unable to access opcode bytes at 0x7f0c4618ebbf. [ 712.186689][ C0] RSP: 002b:00007f0c470120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 712.196361][ C0] RAX: fffffffffffffe00 RBX: 00007f0c463b5fa8 RCX: 00007f0c4618ebe9 [ 712.205476][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0c463b5fa8 [ 712.214252][ C0] RBP: 00007f0c463b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 712.223045][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 712.232605][ C0] R13: 00007f0c463b6038 R14: 00007f0c464df940 R15: 00007f0c464dfa28 [ 712.241404][ C0] [ 712.245072][ C0] Kernel Offset: disabled [ 712.249752][ C0] Rebooting in 86400 seconds..