last executing test programs: 14.128378142s ago: executing program 3 (id=2298): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x54, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = socket(0x1d, 0x2, 0x6) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x80, 0x16, 0x8b, "4f9367d3e65d663bdb63110ae37713b1574e06ec4f1f798d5ce8c44fdd671650f54da2e475e8ba699c65b323916c033257a926b44d4a1992d85aaf9b732a20dfde1233d300c464c37580d8ae5df25472f568da5ce5a1e5dda46412590e433bb723d4ece219ded9dab60892e28d6e8858a3f663e33f44f614542d2679efd5cf65adf4aae02484508b1030ff"}, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x800008d, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12.151733666s ago: executing program 3 (id=2305): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) 11.139554685s ago: executing program 3 (id=2308): timer_create(0x8, 0x0, &(0x7f0000002700)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/vlan/vlan0\x00') r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002700), 0x2081) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000002740)={0x0, 0x4, 0x1}) 9.880392212s ago: executing program 3 (id=2310): r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5.92642734s ago: executing program 0 (id=2322): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000500)={0xc, @pix={0xd3b, 0x3, 0x384c4150, 0x5, 0x4, 0x5, 0x1, 0x2, 0x0, 0x1, 0x1, 0x3}}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00"}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000007d00000818110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000008000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) 4.75986341s ago: executing program 2 (id=2324): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x45dc, 0x4) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) 4.75774677s ago: executing program 0 (id=2325): socket(0x11, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00", 0x28}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r7, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 4.599822283s ago: executing program 2 (id=2326): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000080), 0x84, &(0x7f0000000200)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x65]}}]}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1fff, 0x200000001, 'none\x00', 0x9, 0x821, 0x80}, 0x2c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x48, &(0x7f0000001600), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000cb734b273e157ce99927de02", @ANYRES32, @ANYBLOB="faffff82b5ade696cf8f54000000000002000000", @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="00000000000000000000000000004e6800000000000000009fbdd50002fbae185c6fc2123f669376efa44d95c715109c66723dcb702fd90dc3192553d2668b0bfdfb7e455e8f9775c0e9906292882d526bd1af04d752e51437ab8637dcc10d2e5e40e88f3da5cf557ee9672c3c3edeb8b6"], 0x50) prlimit64(0x0, 0x3, &(0x7f0000000000)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 3.99473213s ago: executing program 2 (id=2327): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) 3.580659252s ago: executing program 2 (id=2329): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) mq_notify(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x3, 0x2, @thr={&(0x7f00000001c0)="fc48", &(0x7f0000000300)}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fedbdf250300000008000600ac1414bb08000b00", @ANYRES32=0x0, @ANYBLOB="060001004e23000006ba354192"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x840, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 3.512178377s ago: executing program 0 (id=2330): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbc36}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="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", 0x1a4, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 3.299520564s ago: executing program 1 (id=2331): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi3\x00', 0x48003, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcmda12\x00', [0x4f26, 0x4, 0x3, 0x2, 0x8, 0xcc9, 0xf, 0xff, 0x45, 0x0, 0xef3, 0x4, 0x6, 0xffffffff, 0x3, 0x101, 0x1004, 0x1a449, 0x3, 0x40000007, 0x9d, 0xfff, 0x4, 0x20001e58, 0xf, 0x9c36, 0x3c, 0x0, 0x5, 0x7f, 0x4]}) r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x10000, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x20}, 0x100}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r2, 0x8b2c, &(0x7f0000000040)) write$dsp(r1, &(0x7f0000000080)="68185ad8ef87dd6d9d452a7218c3c46a0febd876338e44f7b0a049341e9f1348bf6c04f4a7a3c5062fd0312343b65c015d2752fb658f9be6e84ca4075448cabf68792a51f6d490f074feddbfb06757f19df0de0837cd46a1589197b831a485eec7baac2122cfce1c53b0d85debb9aa39dcf9a351348c65dd174f41e4f753eb8e89adf5e12a06136a514ca46b6c7e38669f5aee7210f769afd15df5320c2b91561711ee004d86d93a4c0b7db3eb207bef13fc467c50702fcc18aa977e6fa35003b9645102e33671c3888c624d57c7174759a92385f4d2387e3fc0846e1281d861f3c6d38579e9415785aaed5e9e2e94c1cb60ef72", 0xf4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) fsmount(r3, 0x1, 0x1) 3.289749045s ago: executing program 2 (id=2332): add_key(0x0, 0x0, &(0x7f0000000140)="b4e81fa315c945757593e1a2a830de23811bf587184192defb08f6937654590d985211e3fde72d52594ee1ab255e15eee3ecff7c51301270b35a81fbc3213e9cceeab9061b30eebc057c2cb5df4f4e2487686c8e6b4cc70261097d9cc08cbb2ee0ae472896754d0e3db2983ecd5c68d54f7cd9fbafbaa4", 0x77, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000380)="0f01764a652e36f2f0fe040f0e0f30baf80c66b81e17898f66efbafc0cedd9fa3eff580376870f015a000f01f6", 0x2d}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.848440509s ago: executing program 3 (id=2333): r0 = socket$netlink(0x10, 0x3, 0xa) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x161002, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[]) sendmsg$NFT_BATCH(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\n'], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x40000, 0xd, 0xfffffffffffffffe, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) r6 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) r7 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000000)={0x1, r7}) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000005c0)={0x0, r7}) 2.84210425s ago: executing program 1 (id=2334): bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x8004) 2.467091898s ago: executing program 2 (id=2335): syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2"], 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x83, &(0x7f0000000000), 0x8) 1.953620678s ago: executing program 0 (id=2336): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000080), 0x84, &(0x7f0000000200)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x65]}}]}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1fff, 0x200000001, 'none\x00', 0x9, 0x821, 0x80}, 0x2c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x48, &(0x7f0000001600), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000cb734b273e157ce99927de02", @ANYRES32, @ANYBLOB="faffff82b5ade696cf8f54000000000002000000", @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="00000000000000000000000000004e6800000000000000009fbdd50002fbae185c6fc2123f669376efa44d95c715109c66723dcb702fd90dc3192553d2668b0bfdfb7e455e8f9775c0e9906292882d526bd1af04d752e51437ab8637dcc10d2e5e40e88f3da5cf557ee9672c3c3edeb8b6"], 0x50) prlimit64(0x0, 0x3, &(0x7f0000000000)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1.700310698s ago: executing program 1 (id=2337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) 1.03689124s ago: executing program 0 (id=2338): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) 1.011407642s ago: executing program 1 (id=2339): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e26, 0xfffffffe, @empty, 0xa}, 0x1c, 0x0}}], 0x1, 0x200880c0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f00000020c0)=""/171, &(0x7f0000000000)=0xab) 692.130116ms ago: executing program 1 (id=2340): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) mq_notify(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x3, 0x2, @thr={&(0x7f00000001c0)="fc48", &(0x7f0000000300)}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fedbdf250300000008000600ac1414bb08000b00", @ANYRES32=0x0, @ANYBLOB="060001004e23000006ba354192"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x840, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 439.301246ms ago: executing program 0 (id=2341): r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 36.513497ms ago: executing program 3 (id=2342): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x8000000000000001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x9464}, 0x0, 0x0) 0s ago: executing program 1 (id=2343): r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e"], 0xaf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x6, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a90000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c2008000240000000000c00010052415445455354000900020073797a3200000000140000001100010000000000000000000100000a0f854275ffe2d5b7bf53fd18ad956a85d847add8d3"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdba) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): : -22 [ 133.391588][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.530418][ T5812] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.735560][ T5812] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.759041][ T5812] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 133.769596][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 133.792283][ T5812] usb 4-1: Product: syz [ 133.798315][ T5812] usb 4-1: Manufacturer: syz [ 133.806886][ T5812] usb 4-1: SerialNumber: syz [ 133.910427][ T5834] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.036637][ T5812] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 134.120387][ T5834] usb 2-1: Using ep0 maxpacket: 8 [ 134.133147][ T5834] usb 2-1: config 0 interface 0 has no altsetting 0 [ 134.149141][ T5834] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 134.158621][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.166785][ T5834] usb 2-1: Product: syz [ 134.171749][ T5834] usb 2-1: Manufacturer: syz [ 134.176653][ T5834] usb 2-1: SerialNumber: syz [ 134.186520][ T5834] usb 2-1: config 0 descriptor?? [ 134.423128][ T5834] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 134.850679][ T5834] gspca_sonixj: reg_w1 err -71 [ 134.882118][ T5834] sonixj: probe of 2-1:0.0 failed with error -71 [ 134.914732][ T5834] usb 2-1: USB disconnect, device number 4 [ 135.558820][ T5805] usb 4-1: USB disconnect, device number 3 [ 135.620032][ T5805] usblp0: removed [ 139.577413][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 145.963617][ T6232] Driver unsupported XDP return value 0 on prog (id 34) dev N/A, expect packet loss! [ 146.592235][ T5834] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 146.843505][ T5834] usb 2-1: not running at top speed; connect to a high speed hub [ 146.870965][ T5834] usb 2-1: config 5 has an invalid interface number: 148 but max is 0 [ 146.922562][ T5834] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 146.952956][ T5834] usb 2-1: config 5 has no interface number 0 [ 146.973261][ T5834] usb 2-1: config 5 interface 148 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 147.010501][ T5834] usb 2-1: config 5 interface 148 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.057768][ T5834] usb 2-1: config 5 interface 148 has no altsetting 0 [ 147.073248][ T5834] usb 2-1: New USB device found, idVendor=05ac, idProduct=d181, bcdDevice=b4.a2 [ 147.095483][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.150547][ T5834] usb 2-1: Product: syz [ 147.155684][ T5834] usb 2-1: Manufacturer: syz [ 147.169617][ T5834] usb 2-1: SerialNumber: syz [ 147.603748][ T5834] ipheth 2-1:5.148: Unable to find endpoints [ 147.641567][ T5834] usb 2-1: USB disconnect, device number 5 [ 150.078305][ T6263] Bluetooth: MGMT ver 1.22 [ 150.393942][ T6266] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 151.464099][ T6280] program syz.0.122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.515252][ T6282] program syz.0.122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.578946][ T5774] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 152.579631][ T5770] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.186567][ T6344] netlink: 'syz.1.141': attribute type 58 has an invalid length. [ 158.231036][ T6344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.141'. [ 161.833367][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 162.268550][ T6368] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 163.940189][ T5770] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 165.563213][ T6400] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 171.731022][ T6454] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 172.588556][ T5770] Bluetooth: hci3: unexpected event for opcode 0x203b [ 173.495906][ T6469] syz.0.180 uses obsolete (PF_INET,SOCK_PACKET) [ 175.556845][ T6487] Bluetooth: MGMT ver 1.22 [ 176.227597][ T27] audit: type=1326 audit(1765835864.307:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698638f749 code=0x7ffc0000 [ 176.340428][ T27] audit: type=1326 audit(1765835864.317:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698638f749 code=0x7ffc0000 [ 176.380184][ T27] audit: type=1326 audit(1765835864.317:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698638f749 code=0x7ffc0000 [ 176.429364][ T27] audit: type=1326 audit(1765835864.317:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f698638f749 code=0x7ffc0000 [ 176.457060][ T27] audit: type=1326 audit(1765835864.317:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698638f749 code=0x7ffc0000 [ 176.490924][ T27] audit: type=1326 audit(1765835864.317:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698638f749 code=0x7ffc0000 [ 176.517200][ T27] audit: type=1326 audit(1765835864.317:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698638f749 code=0x7ffc0000 [ 176.549985][ T27] audit: type=1326 audit(1765835864.317:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f698638f749 code=0x7ffc0000 [ 176.574787][ T27] audit: type=1326 audit(1765835864.317:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698638f749 code=0x7ffc0000 [ 176.609692][ T27] audit: type=1326 audit(1765835864.317:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698638f749 code=0x7ffc0000 [ 178.283195][ T6499] lo speed is unknown, defaulting to 1000 [ 178.289363][ T6499] lo speed is unknown, defaulting to 1000 [ 178.298158][ T6499] lo speed is unknown, defaulting to 1000 [ 178.311494][ T6499] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 178.332117][ T6499] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 178.615823][ T6505] kAFS: unable to lookup cell 'Þ({^ú@' [ 179.606227][ T6499] lo speed is unknown, defaulting to 1000 [ 179.670072][ T6499] lo speed is unknown, defaulting to 1000 [ 179.819295][ T6499] lo speed is unknown, defaulting to 1000 [ 179.826960][ T6499] lo speed is unknown, defaulting to 1000 [ 180.560635][ T5812] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 180.656981][ T6523] virtio-fs: tag not found [ 180.740452][ T5812] usb 4-1: Using ep0 maxpacket: 8 [ 180.804218][ T5812] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.913350][ T5812] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 180.999988][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.182788][ T5812] usb 4-1: config 0 descriptor?? [ 181.229121][ T5812] usb 4-1: Found UVC 0.00 device (2833:0201) [ 181.259851][ T5812] usb 4-1: No valid video chain found. [ 181.400814][ T28] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 181.468574][ T5812] usb 4-1: USB disconnect, device number 4 [ 181.921120][ T6529] atomic_op ffff888054074998 conn xmit_atomic 0000000000000000 [ 182.564335][ T28] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 182.572606][ T28] usb 1-1: config 1 has no interface number 0 [ 182.579052][ T28] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 182.592029][ T28] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.614370][ T28] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 182.623733][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.633700][ T28] usb 1-1: Product: syz [ 182.638352][ T28] usb 1-1: Manufacturer: syz [ 182.660416][ T28] usb 1-1: SerialNumber: syz [ 182.714335][ T6516] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 182.765330][ T28] usb 1-1: Expected 3 endpoints, found: 2 [ 183.743642][ T28] usb 1-1: USB disconnect, device number 3 [ 184.085512][ T6542] binder: 6540:6542 ioctl 89e3 200000000000 returned -22 [ 193.071092][ T6617] atomic_op ffff88807ef15198 conn xmit_atomic 0000000000000000 [ 194.537770][ T6628] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 194.626201][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.635503][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.584451][ T6638] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.616337][ T6638] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.802736][ T6648] usb usb8: usbfs: process 6648 (syz.0.229) did not claim interface 0 before use [ 196.840179][ T6658] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 200.216900][ T6709] random: crng reseeded on system resumption [ 202.607415][ T6721] syz.3.249: attempt to access beyond end of device [ 202.607415][ T6721] nbd3: rw=0, sector=6, nr_sectors = 2 limit=0 [ 202.620634][ T6721] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 205.070381][ T5880] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 205.293844][ T5880] usb 4-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 205.310612][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.337044][ T5880] pwc: Logitech ViewPort AV 100 webcam detected. [ 205.793417][ T5880] pwc: Failed to set LED on/off time (-71) [ 205.810159][ T27] kauditd_printk_skb: 62 callbacks suppressed [ 205.810176][ T27] audit: type=1800 audit(1765835894.607:74): pid=6763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.263" name="/" dev="fuse" ino=9 res=0 errno=0 [ 205.850467][ T5880] pwc: send_video_command error -71 [ 205.862335][ T5880] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 205.939073][ T5880] Philips webcam: probe of 4-1:127.0 failed with error -71 [ 205.978075][ T5880] usb 4-1: USB disconnect, device number 5 [ 208.310455][ T5832] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 208.523478][ T5832] usb 1-1: config 7 has an invalid interface number: 252 but max is 0 [ 208.567242][ T5832] usb 1-1: config 7 has no interface number 0 [ 208.597011][ T5832] usb 1-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 208.648184][ T5832] usb 1-1: config 7 interface 252 has no altsetting 0 [ 208.768720][ T5832] usb 1-1: string descriptor 0 read error: -22 [ 208.790689][ T5832] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 208.849982][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.873167][ T5832] idmouse 1-1:7.252: Unable to find bulk-in endpoint. [ 209.540446][ T787] usb 1-1: USB disconnect, device number 4 [ 209.671840][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 209.829236][ T6820] netlink: 48 bytes leftover after parsing attributes in process `syz.2.276'. [ 209.862149][ T6820] overlayfs: failed to resolve './file2': -2 [ 215.027224][ T5855] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 215.336883][ T5855] usb 4-1: Using ep0 maxpacket: 8 [ 215.481985][ T5855] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.501054][ T5855] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.529375][ T5855] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.550034][ T5855] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.610302][ T5855] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.660194][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.147814][ T5855] usb 4-1: GET_CAPABILITIES returned 0 [ 216.210084][ T5855] usbtmc 4-1:16.0: can't read capabilities [ 216.392417][ T5855] usb 4-1: USB disconnect, device number 6 [ 217.905629][ T6924] IPv6: Can't replace route, no match found [ 218.142734][ T5832] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 218.152765][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 218.320351][ T5855] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 218.354679][ T5832] usb 3-1: config 0 has no interfaces? [ 218.361691][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 218.376375][ T23] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 218.386182][ T5832] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 218.400330][ T5832] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 218.409006][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.426031][ T5832] usb 3-1: Manufacturer: syz [ 218.431678][ T5832] usb 3-1: SerialNumber: syz [ 218.438764][ T23] usb 4-1: config 0 descriptor?? [ 218.449154][ T5832] usb 3-1: config 0 descriptor?? [ 218.527116][ T5855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.542000][ T5855] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 218.553427][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.572711][ T5855] usb 1-1: config 0 descriptor?? [ 218.675491][ T5832] usb 4-1: USB disconnect, device number 7 [ 219.128229][ T5855] hid-alps 0003:044E:1215.0002: unknown main item tag 0x0 [ 219.139750][ T5855] hid-alps 0003:044E:1215.0002: hidraw0: USB HID v0.00 Device [HID 044e:1215] on usb-dummy_hcd.0-1/input0 [ 219.376013][ T5832] usb 1-1: USB disconnect, device number 5 [ 219.880391][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 220.065772][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.090341][ T23] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 220.123279][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.767041][ T5855] usb 3-1: USB disconnect, device number 4 [ 221.866791][ T23] usb 4-1: config 0 descriptor?? [ 221.895504][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 222.800861][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 222.964165][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 223.318390][ T23] pwc: recv_control_msg error -32 req 02 val 2c00 [ 223.328754][ T23] pwc: recv_control_msg error -32 req 04 val 1000 [ 223.336580][ T23] pwc: recv_control_msg error -32 req 04 val 1300 [ 223.389599][ T23] pwc: recv_control_msg error -32 req 04 val 1400 [ 223.552686][ T27] audit: type=1326 audit(1765835912.357:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698638f749 code=0x7fc00000 [ 223.624244][ T23] pwc: recv_control_msg error -71 req 02 val 2100 [ 223.630891][ T27] audit: type=1326 audit(1765835912.357:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f698638f749 code=0x7fc00000 [ 223.665217][ T23] pwc: recv_control_msg error -71 req 04 val 1500 [ 223.673200][ T23] pwc: recv_control_msg error -71 req 02 val 2500 [ 223.690523][ T27] audit: type=1326 audit(1765835912.357:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698638f749 code=0x7fc00000 [ 223.712803][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.720576][ T23] pwc: recv_control_msg error -71 req 02 val 2400 [ 223.739653][ T23] pwc: recv_control_msg error -71 req 02 val 2600 [ 223.757181][ T23] pwc: recv_control_msg error -71 req 02 val 2900 [ 223.767748][ T27] audit: type=1326 audit(1765835912.357:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698638f749 code=0x7fc00000 [ 223.791277][ T23] pwc: recv_control_msg error -71 req 02 val 2800 [ 223.801403][ T27] audit: type=1326 audit(1765835912.357:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698638f749 code=0x7fc00000 [ 223.826152][ T23] pwc: recv_control_msg error -71 req 04 val 1100 [ 223.834703][ T27] audit: type=1326 audit(1765835912.357:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.0.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698638f749 code=0x7fc00000 [ 223.857147][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 224.001533][ T23] pwc: Registered as video103. [ 224.021670][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 224.980774][ T23] usb 4-1: USB disconnect, device number 8 [ 228.350488][ T5855] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 228.866123][ T5855] usb 2-1: Using ep0 maxpacket: 32 [ 229.080442][ T5855] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 229.178718][ T5855] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 229.370374][ T5855] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 229.379417][ T5855] usb 2-1: config 1 has no interface number 0 [ 229.387568][ T5855] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.550564][ T5855] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 229.572219][ T5855] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 229.590425][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.608687][ T5855] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 230.509489][ T5855] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 230.778147][ T5832] usb 2-1: USB disconnect, device number 6 [ 230.807280][ T5832] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 241.741492][ T5774] Bluetooth: hci3: command 0x0c1a tx timeout [ 244.810351][ T28] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 245.011656][ T28] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 245.038070][ T28] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.047806][ T28] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.079512][ T28] usb 3-1: config 0 interface 0 has no altsetting 0 [ 245.135023][ T28] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.157603][ T28] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.187079][ T28] usb 3-1: config 0 interface 0 has no altsetting 0 [ 245.199063][ T28] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.211876][ T28] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.236415][ T28] usb 3-1: config 0 interface 0 has no altsetting 0 [ 245.248376][ T28] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.257921][ T28] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.289049][ T28] usb 3-1: config 0 interface 0 has no altsetting 0 [ 245.299421][ T28] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.308783][ T28] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.333360][ T28] usb 3-1: config 0 interface 0 has no altsetting 0 [ 245.349243][ T28] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.363765][ T28] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.395051][ T28] usb 3-1: config 0 interface 0 has no altsetting 0 [ 245.440043][ T28] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.460049][ T28] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.491553][ T28] usb 3-1: config 0 interface 0 has no altsetting 0 [ 245.509066][ T28] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.520979][ T28] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.552696][ T28] usb 3-1: config 0 interface 0 has no altsetting 0 [ 245.570160][ T28] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 245.585384][ T28] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 245.612726][ T28] usb 3-1: Product: syz [ 245.627263][ T28] usb 3-1: Manufacturer: syz [ 245.638602][ T28] usb 3-1: SerialNumber: syz [ 245.687134][ T28] usb 3-1: config 0 descriptor?? [ 245.747298][ T28] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 245.990883][ T5855] usb 3-1: USB disconnect, device number 5 [ 246.012488][ T5855] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 246.996986][ T5774] Bluetooth: hci0: Malformed LE Event: 0x0d [ 249.338354][ T5834] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 250.889384][ T7171] netlink: 48 bytes leftover after parsing attributes in process `syz.2.388'. [ 251.292728][ T5834] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 251.317244][ T5834] usb 1-1: config 0 has no interface number 0 [ 251.324058][ T5834] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 251.360264][ T5834] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 251.388481][ T5834] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 251.418389][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.483620][ T5834] usb 1-1: config 0 descriptor?? [ 251.489588][ T7165] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 251.697473][ T5834] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 252.182911][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 252.231558][ T5834] usb 1-1: USB disconnect, device number 6 [ 253.294145][ T7194] binder_alloc: 7193: pid 7193 spamming oneway? 2 buffers allocated for a total size of 5120 [ 253.317392][ T7194] binder_alloc: 7193: pid 7193 spamming oneway? 3 buffers allocated for a total size of 5128 [ 254.650612][ T7201] random: crng reseeded on system resumption [ 256.141856][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.148636][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.662485][ T7248] affs: No valid root block on device nullb0 [ 258.802202][ T7248] IPv6: NLM_F_CREATE should be specified when creating new route [ 265.935468][ T7312] overlayfs: failed to resolve './file1': -2 [ 266.261509][ T7316] affs: No valid root block on device nullb0 [ 266.932743][ T7315] IPv6: NLM_F_CREATE should be specified when creating new route [ 268.333225][ T7335] trusted_key: encrypted_key: key user:syz not found [ 270.053259][ T7353] netlink: 20 bytes leftover after parsing attributes in process `syz.1.438'. [ 270.074764][ T7353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'. [ 271.025351][ T7365] overlayfs: failed to resolve './file1': -2 [ 275.283968][ T7401] overlayfs: failed to resolve './file0': -2 [ 278.431136][ T7438] overlayfs: failed to resolve './file0': -2 [ 280.005569][ T7454] binder: 7451:7454 ioctl c0306201 0 returned -14 [ 282.222805][ T7465] overlayfs: failed to resolve './file0': -2 [ 284.943197][ T7495] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 287.253123][ T7520] trusted_key: encrypted_key: insufficient parameters specified [ 287.940949][ T7523] overlayfs: failed to resolve './file0': -2 [ 290.291586][ T7548] trusted_key: encrypted_key: insufficient parameters specified [ 291.155864][ T7553] overlayfs: failed to resolve './file0': -2 [ 296.467066][ T7596] trusted_key: encrypted_key: insufficient parameters specified [ 300.640329][ T5855] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 300.830344][ T5855] usb 2-1: Using ep0 maxpacket: 8 [ 300.882205][ T5855] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 88, changing to 10 [ 300.946137][ T5855] usb 2-1: config 1 interface 0 has no altsetting 0 [ 301.711556][ T5855] usb 2-1: language id specifier not provided by device, defaulting to English [ 301.904884][ T5855] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 301.926241][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.935133][ T5855] usb 2-1: Product: syz [ 301.939397][ T5855] usb 2-1: Manufacturer: syz [ 301.945081][ T5855] usb 2-1: SerialNumber: syz [ 302.850323][ T5855] usb 2-1: can't set config #1, error -71 [ 302.877191][ T5855] usb 2-1: USB disconnect, device number 7 [ 303.187606][ T7649] syz_tun: entered allmulticast mode [ 303.219119][ T7647] syz_tun: left allmulticast mode [ 303.502498][ T7653] overlayfs: failed to resolve './file1': -2 [ 305.562698][ T7680] overlayfs: failed to resolve './file1': -2 [ 305.661081][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 305.890620][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 305.899215][ T8] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 305.916071][ T8] usb 3-1: config 0 has no interface number 0 [ 305.933440][ T8] usb 3-1: config 0 interface 251 has no altsetting 0 [ 305.941550][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=02ae, bcdDevice=b1.d7 [ 305.951278][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.970451][ T8] usb 3-1: config 0 descriptor?? [ 305.982246][ T8] gspca_main: kinect-2.14.0 probing 045e:02ae [ 307.733982][ T23] usb 3-1: USB disconnect, device number 6 [ 311.410393][ T23] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 311.675652][ T23] usb 1-1: LPM exit latency is zeroed, disabling LPM. [ 311.693499][ T23] usb 1-1: config 0 has no interfaces? [ 311.712576][ T23] usb 1-1: string descriptor 0 read error: -22 [ 311.734215][ T23] usb 1-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice= 7.1c [ 311.792498][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.860558][ T23] usb 1-1: config 0 descriptor?? [ 312.133221][ T23] usb 1-1: USB disconnect, device number 7 [ 315.429286][ T7795] netlink: 36 bytes leftover after parsing attributes in process `syz.1.581'. [ 315.460502][ T7795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.581'. [ 316.440373][ T5855] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 316.680693][ T5855] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.691689][ T5855] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 316.718776][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.736067][ T5855] usb 2-1: config 0 descriptor?? [ 316.755179][ T5855] pwc: Askey VC010 type 2 USB webcam detected. [ 317.169470][ T5855] pwc: recv_control_msg error -32 req 02 val 2b00 [ 317.180736][ T5855] pwc: recv_control_msg error -32 req 02 val 2700 [ 317.205192][ T5855] pwc: recv_control_msg error -32 req 02 val 2c00 [ 317.218725][ T5855] pwc: recv_control_msg error -32 req 04 val 1000 [ 317.232347][ T5855] pwc: recv_control_msg error -32 req 04 val 1300 [ 317.257694][ T5855] pwc: recv_control_msg error -32 req 04 val 1400 [ 317.271466][ T5855] pwc: recv_control_msg error -32 req 02 val 2000 [ 317.289139][ T5855] pwc: recv_control_msg error -32 req 02 val 2100 [ 317.300278][ T5855] pwc: recv_control_msg error -32 req 04 val 1500 [ 317.328967][ T5855] pwc: recv_control_msg error -32 req 02 val 2500 [ 317.505648][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.515571][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.585897][ T5855] pwc: recv_control_msg error -71 req 02 val 2600 [ 317.650778][ T5855] pwc: recv_control_msg error -71 req 02 val 2900 [ 317.747413][ T5855] pwc: recv_control_msg error -71 req 02 val 2800 [ 317.982275][ T5855] pwc: recv_control_msg error -71 req 04 val 1100 [ 318.206729][ T5855] pwc: recv_control_msg error -71 req 04 val 1200 [ 318.249067][ T5855] pwc: Registered as video103. [ 318.273467][ T5855] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 318.477941][ T5855] usb 2-1: USB disconnect, device number 8 [ 325.787080][ T7866] xt_ipcomp: unknown flags 1D [ 329.656500][ T7900] netlink: 2132 bytes leftover after parsing attributes in process `syz.2.614'. [ 330.085015][ T7903] xt_ipcomp: unknown flags 1D [ 330.776805][ T7911] netlink: 256 bytes leftover after parsing attributes in process `syz.3.618'. [ 330.804897][ T7911] netlink: 72 bytes leftover after parsing attributes in process `syz.3.618'. [ 333.603282][ T7938] xt_ipcomp: unknown flags 1D [ 333.670513][ T5834] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 333.893845][ T5834] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 333.910311][ T5834] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 333.930291][ T5834] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 333.965993][ T5834] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 334.046893][ T5834] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 334.172678][ T5834] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 334.184276][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 334.196683][ T5834] usb 4-1: Product: syz [ 334.203183][ T5834] usb 4-1: Manufacturer: syz [ 334.251613][ T5834] cdc_wdm 4-1:1.0: skipping garbage [ 334.256885][ T5834] cdc_wdm 4-1:1.0: skipping garbage [ 334.265484][ T5834] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 334.271965][ T5834] cdc_wdm 4-1:1.0: Unknown control protocol [ 335.269387][ T8] usb 4-1: USB disconnect, device number 9 [ 337.571179][ T7971] xt_ipcomp: unknown flags 1D [ 341.641659][ T7997] ======================================================= [ 341.641659][ T7997] WARNING: The mand mount option has been deprecated and [ 341.641659][ T7997] and is ignored by this kernel. Remove the mand [ 341.641659][ T7997] option from the mount to silence this warning. [ 341.641659][ T7997] ======================================================= [ 355.041866][ T5832] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 356.042788][ T5832] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.096487][ T5832] usb 3-1: config 0 has no interfaces? [ 356.106859][ T5832] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 356.300879][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.672524][ T5832] usb 3-1: config 0 descriptor?? [ 356.924475][ T5832] usb 3-1: USB disconnect, device number 7 [ 364.111878][ T28] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 364.516271][ T28] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 364.545756][ T28] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 364.574422][ T28] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 364.592134][ T28] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 364.613468][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 364.642542][ T28] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 364.672157][ T28] usb 2-1: string descriptor 0 read error: -22 [ 364.693508][ T28] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 364.719642][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.752581][ T28] usb 2-1: config 0 descriptor?? [ 364.758670][ T8191] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 364.953746][ T28] hub 2-1:0.0: bad descriptor, ignoring hub [ 365.023953][ T28] hub: probe of 2-1:0.0 failed with error -5 [ 365.166738][ T28] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 365.567385][ C0] usb_acecad 2-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -1 [ 365.729781][ C1] usb_acecad 2-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -1 [ 365.739627][ T28] usb 2-1: USB disconnect, device number 9 [ 367.146579][ T8222] overlayfs: missing 'lowerdir' [ 372.056170][ T8272] overlayfs: missing 'lowerdir' [ 372.677641][ T8280] trusted_key: encrypted_key: key user:syz not found [ 373.924625][ T8301] overlayfs: missing 'lowerdir' [ 377.764510][ T5774] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 377.856317][ T8344] overlayfs: missing 'lowerdir' [ 378.947883][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.957547][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.213608][ T8369] overlayfs: missing 'lowerdir' [ 382.683089][ T8397] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 382.720068][ T8397] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 386.550270][ T28] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 387.207669][ T28] usb 4-1: Using ep0 maxpacket: 8 [ 387.219442][ T28] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 387.231403][ T28] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 3 [ 387.590463][ T28] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=f4.40 [ 387.599761][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.629414][ T28] usb 4-1: Product: syz [ 387.640241][ T28] usb 4-1: Manufacturer: syz [ 387.647991][ T28] usb 4-1: SerialNumber: syz [ 387.990269][ T28] usb 4-1: interface 1 not found [ 388.018199][ T28] usb 4-1: USB disconnect, device number 10 [ 388.578068][ T8445] netlink: 'syz.2.784': attribute type 12 has an invalid length. [ 389.050265][ T787] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 389.264409][ T787] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 389.292806][ T787] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 389.317758][ T787] usb 2-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 389.359570][ T787] usb 2-1: config 0 interface 0 has no altsetting 0 [ 389.505137][ T787] usb 2-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 389.518426][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.535945][ T787] usb 2-1: config 0 descriptor?? [ 389.552278][ T8451] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 389.859837][ T787] usbhid 2-1:0.0: can't add hid device: -71 [ 389.918008][ T787] usbhid: probe of 2-1:0.0 failed with error -71 [ 390.037673][ T787] usb 2-1: USB disconnect, device number 10 [ 390.680206][ T787] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 391.260464][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 391.269673][ T787] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 391.279698][ T787] usb 2-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 391.293420][ T787] usb 2-1: config 0 interface 0 has no altsetting 0 [ 391.300419][ T787] usb 2-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 391.309687][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.326891][ T787] usb 2-1: config 0 descriptor?? [ 391.834431][ T787] plantronics 0003:047F:C055.0003: unknown main item tag 0x0 [ 391.843435][ T787] plantronics 0003:047F:C055.0003: unknown main item tag 0x0 [ 391.854722][ T787] plantronics 0003:047F:C055.0003: unknown main item tag 0x0 [ 391.862273][ T787] plantronics 0003:047F:C055.0003: unknown main item tag 0x0 [ 391.869904][ T787] plantronics 0003:047F:C055.0003: unknown main item tag 0x0 [ 391.878773][ T787] plantronics 0003:047F:C055.0003: No inputs registered, leaving [ 391.939299][ T787] plantronics 0003:047F:C055.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:c055] on usb-dummy_hcd.1-1/input0 [ 392.596622][ T787] usb 2-1: USB disconnect, device number 11 [ 392.914504][ T8484] fido_id[8484]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 393.000399][ T28] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 393.190444][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 393.202558][ T28] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 393.251531][ T28] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 393.287594][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.317605][ T28] usb 4-1: Product: syz [ 393.335339][ T28] usb 4-1: Manufacturer: syz [ 393.349608][ T28] usb 4-1: SerialNumber: syz [ 393.395764][ T28] usb 4-1: config 0 descriptor?? [ 395.718139][ T5805] usb 4-1: USB disconnect, device number 11 [ 398.610404][ T5834] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 398.951265][ T5834] usb 3-1: Using ep0 maxpacket: 32 [ 399.052777][ T5834] usb 3-1: config 0 has an invalid interface number: 24 but max is 0 [ 399.242265][ T5834] usb 3-1: config 0 has no interface number 0 [ 399.375171][ T5834] usb 3-1: config 0 interface 24 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 399.639851][ T5834] usb 3-1: config 0 interface 24 has no altsetting 0 [ 399.678213][ T5834] usb 3-1: New USB device found, idVendor=00db, idProduct=dce6, bcdDevice=d9.01 [ 399.718369][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.780307][ T5834] usb 3-1: Product: syz [ 399.805203][ T5834] usb 3-1: Manufacturer: syz [ 399.827636][ T5834] usb 3-1: SerialNumber: syz [ 399.862311][ T5834] usb 3-1: config 0 descriptor?? [ 400.750357][ T787] usb 3-1: USB disconnect, device number 8 [ 401.333759][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.823'. [ 406.185642][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.834'. [ 411.876416][ T8674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.845'. [ 412.990979][ T5805] IPVS: starting estimator thread 0... [ 413.190389][ T8679] IPVS: using max 20 ests per chain, 48000 per kthread [ 424.740286][ T5832] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 425.050430][ T5832] usb 2-1: Using ep0 maxpacket: 16 [ 425.059942][ T5832] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 425.069337][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.077410][ T5832] usb 2-1: Product: syz [ 425.081685][ T5832] usb 2-1: Manufacturer: syz [ 425.086418][ T5832] usb 2-1: SerialNumber: syz [ 425.095102][ T5832] usb 2-1: config 0 descriptor?? [ 425.103862][ T5832] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 425.312632][ T5832] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 425.321627][ T5832] visor: probe of 2-1:0.0 failed with error -71 [ 425.332338][ T5832] usb 2-1: USB disconnect, device number 12 [ 429.480435][ T8856] hub 6-0:1.0: USB hub found [ 429.489999][ T8856] hub 6-0:1.0: 1 port detected [ 433.119355][ T8888] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 434.865164][ T5770] Bluetooth: hci3: command 0x0c1a tx timeout [ 435.895848][ T8922] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 440.370601][ T5832] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 440.405973][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.451429][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.610434][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 440.622157][ T5832] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 440.782126][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.803773][ T5832] usb 1-1: config 0 descriptor?? [ 440.833429][ T5832] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 441.706889][ T5832] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 441.729064][ T5832] usb 1-1: USB disconnect, device number 8 [ 454.580458][ T28] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 454.767344][ T28] usb 2-1: Using ep0 maxpacket: 32 [ 454.791446][ T28] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 454.820245][ T28] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 454.849575][ T28] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 454.879365][ T28] usb 2-1: config 1 has no interface number 0 [ 454.906179][ T28] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 454.929654][ T28] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 454.950798][ T28] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 454.960057][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.124455][ T28] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 455.555423][ T28] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 455.675656][ T9088] capability: warning: `syz.3.988' uses deprecated v2 capabilities in a way that may be insecure [ 455.999428][ T787] usb 2-1: USB disconnect, device number 13 [ 456.017296][ T787] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 456.885770][ T9107] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 459.976048][ T9138] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 462.093210][ T5770] Bluetooth: hci2: unexpected cc 0x203c length: 9 > 1 [ 462.101903][ T5770] Bluetooth: hci2: unexpected event for opcode 0x203c [ 463.753524][ T9173] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 464.400543][ T5834] IPVS: starting estimator thread 0... [ 464.821759][ T9193] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 465.600840][ T9189] IPVS: using max 32 ests per chain, 76800 per kthread [ 466.306133][ T9207] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 470.342149][ T9237] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 473.404039][ T9267] xt_hashlimit: overflow, try lower: 3/0 [ 474.301139][ T9275] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 476.656893][ T9296] fuse: Unknown parameter 'grou00000000000000000000' [ 481.320258][ T28] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 481.690949][ T28] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.508481][ T28] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 482.520615][ T28] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 178, changing to 11 [ 482.532412][ T28] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 59152, setting to 1024 [ 482.555494][ T28] usb 1-1: string descriptor 0 read error: -71 [ 482.578946][ T28] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 482.610234][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.638677][ T28] usb 1-1: can't set config #1, error -71 [ 482.666356][ T28] usb 1-1: USB disconnect, device number 9 [ 483.980241][ T28] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 484.431386][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.467797][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.487400][ T28] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 484.505834][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.546837][ T28] usb 3-1: config 0 descriptor?? [ 484.981471][ T28] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 484.991818][ T28] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 485.004258][ T28] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0004/input/input12 [ 485.105190][ T28] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 485.189622][ T5770] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 485.260443][ T5812] usb 3-1: USB disconnect, device number 9 [ 486.541735][ T9378] fido_id[9378]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 488.701648][ T9407] warning: `syz.1.1091' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 489.859455][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 489.869529][ T9418] netlink: set zone limit has 8 unknown bytes [ 498.490287][ T5855] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 498.861082][ T5855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 498.891707][ T5855] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a0f, bcdDevice= 0.00 [ 498.901461][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.931220][ T5855] usb 1-1: config 0 descriptor?? [ 498.937341][ T9495] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 499.396645][ T5855] hid-generic 0003:1B1C:0A0F.0005: item fetching failed at offset 4/5 [ 499.431483][ T5855] hid-generic: probe of 0003:1B1C:0A0F.0005 failed with error -22 [ 499.778029][ T23] usb 1-1: USB disconnect, device number 10 [ 501.822599][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.828954][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.480388][ T9558] tipc: Started in network mode [ 503.488637][ T9558] tipc: Node identity e6d34ff13315, cluster identity 4711 [ 503.502011][ T9558] tipc: Enabled bearer , priority 0 [ 503.521436][ T9558] syzkaller0: entered promiscuous mode [ 503.529696][ T9558] syzkaller0: entered allmulticast mode [ 503.606297][ T9558] tipc: Resetting bearer [ 503.630787][ T9556] tipc: Resetting bearer [ 503.675409][ T9556] tipc: Disabling bearer [ 504.855681][ T27] audit: type=1326 audit(1765836199.651:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.2.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249e78f749 code=0x7ffc0000 [ 504.902072][ T27] audit: type=1326 audit(1765836199.681:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.2.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f249e78f749 code=0x7ffc0000 [ 504.934863][ T27] audit: type=1326 audit(1765836199.681:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.2.1145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f249e78f749 code=0x0 [ 504.956647][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.755383][ T9580] tmpfs: Bad value for 'mpol' [ 511.184433][ T9621] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1163'. [ 511.196771][ T9618] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1163'. [ 518.822980][ T5812] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 519.020363][ T5812] usb 3-1: Using ep0 maxpacket: 8 [ 519.079325][ T5812] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.227231][ T5812] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 519.381536][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.426286][ T5812] usb 3-1: config 0 descriptor?? [ 519.454186][ T5812] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 520.311469][ T5812] gspca_vc032x: reg_w err -110 [ 520.316369][ T5812] vc032x: probe of 3-1:0.0 failed with error -110 [ 520.470255][ T5805] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 520.767961][ T5805] usb 4-1: Using ep0 maxpacket: 32 [ 520.853433][ T5805] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 520.879866][ T5805] usb 4-1: config 0 has no interface number 0 [ 520.965427][ T5805] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 521.007744][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.110756][ T5805] usb 4-1: Product: syz [ 521.120742][ T5805] usb 4-1: Manufacturer: syz [ 521.125576][ T5805] usb 4-1: SerialNumber: syz [ 521.137360][ T5805] usb 4-1: config 0 descriptor?? [ 521.158040][ T5805] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 521.198483][ T5805] usb 4-1: selecting invalid altsetting 1 [ 521.218289][ T5805] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 521.243912][ T5805] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 521.262904][ T5805] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 521.280290][ T5805] usb 4-1: media controller created [ 521.362262][ T5805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 521.369312][ T5834] usb 3-1: USB disconnect, device number 10 [ 522.290432][ T5834] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 522.621212][ T9743] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 523.028772][ T5834] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 523.152003][ T5834] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.240518][ T5834] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 523.272646][ T5834] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.342036][ T5805] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 523.349485][ T5805] zl10353_read_register: readreg error (reg=127, ret==-71) [ 523.362695][ T5834] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 523.370308][ T5805] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 523.399872][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 523.516615][ T5834] usb 3-1: Product: syz [ 523.524607][ T5805] usb 4-1: USB disconnect, device number 12 [ 523.526741][ T5834] usb 3-1: Manufacturer: syz [ 523.610489][ T5834] cdc_wdm 3-1:1.0: skipping garbage [ 523.640239][ T5834] cdc_wdm 3-1:1.0: skipping garbage [ 523.663920][ T5834] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 523.669897][ T5834] cdc_wdm 3-1:1.0: Unknown control protocol [ 523.880041][ T9786] can0: slcan on ttyS3. [ 524.073037][ T9785] can0 (unregistered): slcan off ttyS3. [ 524.115256][ C1] cdc_wdm 3-1:1.0: Unexpected error -71 [ 524.122321][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 524.129164][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 524.136353][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 524.143000][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 524.149919][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 524.156564][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 524.162961][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 524.169606][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 524.175925][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 524.182553][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 524.188859][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 524.195574][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 524.202260][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 524.208886][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 524.215251][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 524.222067][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 524.228640][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 524.235269][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 524.242936][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 524.249573][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 524.258367][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 524.267245][ T23] usb 3-1: USB disconnect, device number 11 [ 528.100883][ T9825] trusted_key: encrypted_key: key user:syz not found [ 534.423656][ T9894] trusted_key: encrypted_key: key user:syz not found [ 539.131773][ T9940] trusted_key: encrypted_key: key user:syz not found [ 539.970326][ T9948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1242'. [ 544.258766][ T9981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1252'. [ 545.550367][ T9996] trusted_key: encrypted_key: key user:syz not found [ 548.326263][T10014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1262'. [ 551.629690][T10035] trusted_key: encrypted_key: key user:syz not found [ 552.836564][T10045] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1271'. [ 556.788100][T10074] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1281'. [ 557.285385][T10077] trusted_key: encrypted_key: key user:syz not found [ 561.539985][T10112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1291'. [ 562.032241][T10116] trusted_key: encrypted_key: key user:syz not found [ 563.264007][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.292134][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.920211][ T23] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 567.902154][ T23] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 567.909753][ T23] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 567.923262][ T23] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 567.938663][ T23] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 568.428496][ T23] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 568.439661][ T23] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 568.455255][ T23] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 568.463652][ T23] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 568.475356][ T23] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 568.534595][ T23] usb 2-1: string descriptor 0 read error: -22 [ 568.545643][ T23] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 568.555294][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.597376][ T23] adutux 2-1:168.0: interrupt endpoints not found [ 568.809841][ T5812] usb 2-1: USB disconnect, device number 14 [ 571.608226][T10188] Can't find ip_set type hash [ 571.987963][ T23] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 573.456490][ T23] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 574.040810][T10205] fido_id[10205]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 581.388477][T10261] Can't find ip_set type hash:net, [ 583.916331][T10281] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 595.595379][T10396] kAFS: No cell specified [ 597.360358][ T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 597.649521][ T23] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 597.754337][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.835385][ T23] usb 1-1: Product: syz [ 597.872537][ T23] usb 1-1: Manufacturer: syz [ 597.893081][ T23] usb 1-1: SerialNumber: syz [ 597.933848][ T23] usb 1-1: config 0 descriptor?? [ 597.953533][ T23] hso 1-1:0.0: Not our interface [ 597.959074][ T23] usb-storage 1-1:0.0: USB Mass Storage device detected [ 599.333717][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'. [ 600.802622][ T5832] usb 1-1: USB disconnect, device number 11 [ 619.942751][ T5832] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 621.087211][ T5832] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 621.098672][ T5832] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 621.113525][ T5832] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 621.122978][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.150156][ T5832] usb 4-1: config 0 descriptor?? [ 621.172738][ T5832] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 621.989058][T10608] misc userio: The device must be registered before sending interrupts [ 623.203675][ T8] usb 4-1: USB disconnect, device number 13 [ 624.613978][T10627] Malformed UNC in devname [ 624.613978][T10627] [ 624.621557][T10627] CIFS: VFS: Malformed UNC in devname [ 625.244801][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.271304][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.560187][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 626.855245][ T8] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 626.867535][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.876200][ T8] usb 2-1: Product: syz [ 626.884762][ T8] usb 2-1: Manufacturer: syz [ 626.903429][ T8] usb 2-1: SerialNumber: syz [ 627.371966][ T8] usb 2-1: config 0 descriptor?? [ 627.475627][ T8] hso 2-1:0.0: Not our interface [ 627.510732][ T8] usb-storage 2-1:0.0: USB Mass Storage device detected [ 628.718019][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1441'. [ 629.863787][ T5812] usb 2-1: USB disconnect, device number 15 [ 636.100459][ T8671] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 637.671000][ T8671] usb 1-1: device descriptor read/all, error -71 [ 643.462615][T10774] Malformed UNC in devname [ 643.462615][T10774] [ 643.469375][T10774] CIFS: VFS: Malformed UNC in devname [ 648.754869][T10815] Malformed UNC in devname [ 648.754869][T10815] [ 648.762032][T10815] CIFS: VFS: Malformed UNC in devname [ 649.506599][T10823] syz_tun: entered allmulticast mode [ 650.239058][T10824] netlink: 'syz.2.1497': attribute type 3 has an invalid length. [ 651.644541][T10817] syz.0.1495: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 651.676658][T10817] CPU: 1 PID: 10817 Comm: syz.0.1495 Not tainted syzkaller #0 [ 651.684199][T10817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 651.694346][T10817] Call Trace: [ 651.697679][T10817] [ 651.700652][T10817] dump_stack_lvl+0x16c/0x230 [ 651.705396][T10817] ? show_regs_print_info+0x20/0x20 [ 651.710654][T10817] ? load_image+0x3b0/0x3b0 [ 651.715207][T10817] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 651.721750][T10817] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 651.728294][T10817] warn_alloc+0x210/0x300 [ 651.732679][T10817] ? zone_watermark_ok_safe+0x230/0x230 [ 651.738365][T10817] ? _raw_spin_unlock+0x28/0x40 [ 651.743259][T10817] ? __vb2_queue_alloc+0x794/0x1410 [ 651.748601][T10817] __vmalloc_node_range+0x662/0x1320 [ 651.753968][T10817] ? free_vm_area+0x50/0x50 [ 651.758530][T10817] vmalloc_user+0x74/0x80 [ 651.762921][T10817] ? vb2_vmalloc_alloc+0xef/0x330 [ 651.767999][T10817] vb2_vmalloc_alloc+0xef/0x330 [ 651.772954][T10817] ? __copy_timestamp+0x1f0/0x1f0 [ 651.778031][T10817] __vb2_queue_alloc+0x794/0x1410 [ 651.783133][T10817] vb2_core_reqbufs+0xa57/0x1140 [ 651.788133][T10817] ? vb2_verify_memory_type+0x570/0x570 [ 651.793732][T10817] ? vb2_reqbufs+0x360/0x5a0 [ 651.798372][T10817] v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 651.803803][T10817] __video_do_ioctl+0xcbd/0xdd0 [ 651.808714][T10817] ? video_ioctl2+0x30/0x30 [ 651.813268][T10817] ? __might_fault+0xc6/0x120 [ 651.817980][T10817] ? __might_fault+0xaa/0x120 [ 651.822711][T10817] video_usercopy+0x838/0x1330 [ 651.827547][T10817] ? video_ioctl2+0x30/0x30 [ 651.832091][T10817] ? v4l_printk_ioctl+0x160/0x160 [ 651.837189][T10817] v4l2_ioctl+0x18a/0x1e0 [ 651.841558][T10817] ? v4l2_poll+0x2b0/0x2b0 [ 651.846016][T10817] __se_sys_ioctl+0xfd/0x170 [ 651.850801][T10817] do_syscall_64+0x55/0xb0 [ 651.855252][T10817] ? clear_bhb_loop+0x40/0x90 [ 651.860057][T10817] ? clear_bhb_loop+0x40/0x90 [ 651.864823][T10817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 651.870770][T10817] RIP: 0033:0x7f698638f749 [ 651.875335][T10817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.895175][T10817] RSP: 002b:00007f69871e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 651.903631][T10817] RAX: ffffffffffffffda RBX: 00007f69865e5fa0 RCX: 00007f698638f749 [ 651.911723][T10817] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 651.919721][T10817] RBP: 00007f6986413f91 R08: 0000000000000000 R09: 0000000000000000 [ 651.927730][T10817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.936054][T10817] R13: 00007f69865e6038 R14: 00007f69865e5fa0 R15: 00007ffd716375b8 [ 651.944187][T10817] [ 651.961381][T10817] Mem-Info: [ 651.965058][T10817] active_anon:11196 inactive_anon:0 isolated_anon:0 [ 651.965058][T10817] active_file:17707 inactive_file:40473 isolated_file:0 [ 651.965058][T10817] unevictable:768 dirty:123 writeback:0 [ 651.965058][T10817] slab_reclaimable:10291 slab_unreclaimable:92998 [ 651.965058][T10817] mapped:28162 shmem:7101 pagetables:579 [ 651.965058][T10817] sec_pagetables:0 bounce:0 [ 651.965058][T10817] kernel_misc_reclaimable:0 [ 651.965058][T10817] free:1328625 free_pcp:9574 free_cma:0 [ 652.030956][T10817] Node 0 active_anon:44784kB inactive_anon:0kB active_file:70828kB inactive_file:161696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112648kB dirty:492kB writeback:0kB shmem:26868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11788kB pagetables:2316kB sec_pagetables:0kB all_unreclaimable? no [ 652.120755][T10817] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 652.162843][T10817] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 652.195225][T10817] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 652.202613][T10817] Node 0 DMA32 free:1408420kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:44692kB inactive_anon:0kB active_file:70828kB inactive_file:160380kB unevictable:1536kB writepending:492kB present:3129332kB managed:2589640kB mlocked:0kB bounce:0kB free_pcp:19380kB local_pcp:3728kB free_cma:0kB [ 652.237450][T10817] lowmem_reserve[]: 0 0 1 1 1 [ 652.242756][T10817] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 652.274879][T10817] lowmem_reserve[]: 0 0 0 0 0 [ 652.279822][T10817] Node 1 Normal free:3890464kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19072kB local_pcp:8928kB free_cma:0kB [ 652.328171][T10817] lowmem_reserve[]: 0 0 0 0 0 [ 652.339266][T10817] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 652.471694][T10817] Node 0 DMA32: 1*4kB (M) 12*8kB (ME) 17*16kB (UE) 373*32kB (UME) 745*64kB (UME) 112*128kB (UM) 18*256kB (UM) 45*512kB (UM) 21*1024kB (UME) 10*2048kB (UME) 306*4096kB (UM) = 1397332kB [ 652.502753][T10817] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 652.522432][T10817] Node 1 Normal: 236*4kB (UME) 62*8kB (UME) 48*16kB (UME) 142*32kB (UME) 43*64kB (UME) 8*128kB (UME) 4*256kB (UME) 2*512kB (U) 1*1024kB (E) 1*2048kB (E) 946*4096kB (M) = 3890464kB [ 652.547400][T10817] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 652.557659][T10817] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB [ 652.574895][T10817] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 652.587683][T10817] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 652.630418][T10817] 67276 total pagecache pages [ 652.648119][T10817] 0 pages in swap cache [ 652.661612][T10817] Free swap = 124472kB [ 652.676036][T10817] Total swap = 124996kB [ 652.694104][T10817] 2097051 pages RAM [ 652.707458][T10817] 0 pages HighMem/MovableOnly [ 652.737375][T10817] 416127 pages reserved [ 652.758789][T10817] 0 pages cma reserved [ 653.429617][T10864] syz_tun: entered allmulticast mode [ 653.630518][ T5834] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 653.801204][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 653.859250][ T5834] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 653.895048][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.904621][ T5834] usb 1-1: Product: syz [ 653.908909][ T5834] usb 1-1: Manufacturer: syz [ 653.914675][ T5834] usb 1-1: SerialNumber: syz [ 653.944747][ T5834] usb 1-1: config 0 descriptor?? [ 654.240216][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 654.248212][T10862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.282122][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 654.300529][T10862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.331908][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 654.350598][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.358661][ T8] usb 3-1: Product: syz [ 654.386720][ T8] usb 3-1: Manufacturer: syz [ 654.394107][ T8] usb 3-1: SerialNumber: syz [ 654.402464][ T8] usb 3-1: config 0 descriptor?? [ 654.415245][ T8] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 654.428936][ T8] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 655.093792][ T8] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 655.644083][ T8] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 655.681341][ T8] em28xx 3-1:0.0: board has no eeprom [ 656.412871][ T8] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 656.509022][ T8] em28xx 3-1:0.0: dvb set to bulk mode. [ 656.534185][ T787] em28xx 3-1:0.0: Binding DVB extension [ 656.635419][ T8671] usb 1-1: USB disconnect, device number 14 [ 657.352101][T10866] em28xx 3-1:0.0: writing to i2c device at 0x0 failed (error=-5) [ 657.366481][T10886] binder: 10884:10886 ioctl 4018620d 0 returned -22 [ 657.551100][ T5834] usb 3-1: USB disconnect, device number 12 [ 657.571216][ T5834] em28xx 3-1:0.0: Disconnecting em28xx [ 657.643134][ T787] em28xx 3-1:0.0: Registering input extension [ 657.654949][ T5834] em28xx 3-1:0.0: Closing input extension [ 657.840964][ T5834] em28xx 3-1:0.0: Freeing device [ 660.530147][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 660.933632][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 661.178114][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.216405][ T8] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 661.236628][ T8] usb 3-1: config 1 interface 0 has no altsetting 0 [ 661.248161][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 661.267182][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.275863][ T8] usb 3-1: Product: syz [ 661.290185][ T8] usb 3-1: Manufacturer: syz [ 661.295003][ T8] usb 3-1: SerialNumber: syz [ 661.421673][ T5770] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 661.541253][ T8] usb 3-1: bad CDC descriptors [ 661.581150][ T8] usb 3-1: USB disconnect, device number 13 [ 661.727099][T10922] block device autoloading is deprecated and will be removed. [ 662.791195][ T28] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 662.791285][ T8671] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 663.660336][ T8671] usb 2-1: Using ep0 maxpacket: 16 [ 663.677911][ T8671] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 663.688071][ T28] usb 1-1: Using ep0 maxpacket: 8 [ 664.132559][ T28] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 88, changing to 10 [ 664.145288][ T28] usb 1-1: config 1 interface 0 has no altsetting 0 [ 664.153727][ T28] usb 1-1: language id specifier not provided by device, defaulting to English [ 664.169092][ T8671] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 664.178889][ T8671] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.187316][ T8671] usb 2-1: Product: syz [ 664.192020][ T8671] usb 2-1: Manufacturer: syz [ 664.196662][ T8671] usb 2-1: SerialNumber: syz [ 664.201639][ T28] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 664.220781][ T8671] usb 2-1: config 0 descriptor?? [ 664.231949][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.255543][ T8671] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 664.270111][ T28] usb 1-1: Product: syz [ 664.274332][ T28] usb 1-1: SerialNumber: syz [ 664.280216][ T8671] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 664.555391][ T28] usbhid 1-1:1.0: can't add hid device: -71 [ 664.569832][ T28] usbhid: probe of 1-1:1.0 failed with error -71 [ 664.604318][ T28] usb 1-1: USB disconnect, device number 15 [ 664.873229][ T8671] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 665.390483][ T8671] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 665.398550][ T8671] em28xx 2-1:0.0: board has no eeprom [ 665.970433][ T8671] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 666.030098][ T8671] em28xx 2-1:0.0: dvb set to bulk mode. [ 666.035857][ T5880] em28xx 2-1:0.0: Binding DVB extension [ 666.417692][ T787] usb 2-1: USB disconnect, device number 16 [ 666.436355][ T787] em28xx 2-1:0.0: Disconnecting em28xx [ 666.577258][ T5880] em28xx 2-1:0.0: Registering input extension [ 666.609211][ T787] em28xx 2-1:0.0: Closing input extension [ 666.688753][ T787] em28xx 2-1:0.0: Freeing device [ 666.797316][T10962] ieee802154 phy0 wpan0: encryption failed: -22 [ 666.868704][T10962] [U] [ 666.871938][T10962] [U] [ 666.874649][T10962] [U] [ 666.877499][T10962] [U] [ 666.880238][T10962] [U] [ 666.882965][T10962] [U] [ 666.885721][T10962] [U] [ 666.888475][T10962] [U] [ 666.914215][T10962] [U] [ 666.916958][T10962] [U] [ 666.919649][T10962] [U] [ 667.428931][T10959] [U] [ 671.440968][ T787] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 672.050192][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 672.057598][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 672.067672][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 672.082893][ T787] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 672.096037][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.105624][ T787] usb 1-1: Product: syz [ 672.109807][ T787] usb 1-1: Manufacturer: syz [ 672.133841][ T787] usb 1-1: SerialNumber: syz [ 672.149424][ T787] usb 1-1: config 0 descriptor?? [ 672.172620][ T787] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 672.182208][ T787] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 672.252392][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.263628][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.273798][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 672.298817][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 672.308879][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.915039][ T8] usb 3-1: config 0 descriptor?? [ 674.831605][ T787] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 674.864575][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 674.885459][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 674.917982][ T8] usb 3-1: USB disconnect, device number 14 [ 674.930255][ T787] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 674.961754][ T787] em28xx 1-1:0.0: board has no eeprom [ 675.060770][ T787] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 675.080814][ T787] em28xx 1-1:0.0: dvb set to bulk mode. [ 675.086601][ T5805] em28xx 1-1:0.0: Binding DVB extension [ 675.129275][ T787] usb 1-1: USB disconnect, device number 16 [ 675.167453][ T787] em28xx 1-1:0.0: Disconnecting em28xx [ 675.259764][ T5805] em28xx 1-1:0.0: Registering input extension [ 675.283419][ T787] em28xx 1-1:0.0: Closing input extension [ 675.336908][ T787] em28xx 1-1:0.0: Freeing device [ 675.400306][ T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 675.610488][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1557'. [ 675.612232][ T8] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 675.669280][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.697442][ T8] usb 3-1: config 0 descriptor?? [ 675.700262][T11013] bridge_slave_1: left allmulticast mode [ 675.719722][T11013] bridge_slave_1: left promiscuous mode [ 675.756189][T11013] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.969246][ T8] [drm] vendor descriptor length:26 data:06 5f 00 00 00 00 00 00 00 00 00 [ 676.064522][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 676.069244][T11013] bridge_slave_0: left allmulticast mode [ 676.078489][T11013] bridge_slave_0: left promiscuous mode [ 676.106163][T11013] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.204210][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 676.515801][T11015] binder: 11014:11015 ioctl 4018620d 0 returned -22 [ 676.600529][ T8] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 676.638831][ T8] [drm] Initialized udl on minor 2 [ 676.667831][ T8] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 676.767008][ T8] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 676.809058][ T5805] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 676.823181][ T8] usb 3-1: USB disconnect, device number 15 [ 676.850791][ T5805] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 677.030403][ T5834] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 677.251341][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 677.308329][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.355489][ T5834] usb 4-1: config 0 has no interfaces? [ 677.363539][ T5834] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 677.374675][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.563905][ T5834] usb 4-1: config 0 descriptor?? [ 678.521711][T11031] netlink: 'syz.3.1560': attribute type 10 has an invalid length. [ 678.666516][T11031] team0: Port device dummy0 added [ 678.681670][T11033] netlink: 'syz.3.1560': attribute type 10 has an invalid length. [ 678.795544][T11035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.805973][T11035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.807212][T11033] team0: Port device dummy0 removed [ 678.917925][T11033] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 680.554755][ T5880] usb 4-1: USB disconnect, device number 14 [ 680.860536][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 681.070207][ T8] usb 3-1: device descriptor read/64, error -71 [ 681.140171][ T5880] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 681.511067][ T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 681.540663][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 681.548323][ T5880] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 681.557399][ T5880] usb 4-1: config 0 has no interface number 0 [ 681.580394][ T5880] usb 4-1: config 0 interface 153 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 1023 [ 681.621634][ T5880] usb 4-1: config 0 interface 153 altsetting 1 has an invalid endpoint with address 0x6C, skipping [ 681.640162][ T5880] usb 4-1: config 0 interface 153 altsetting 1 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 681.652116][ T5880] usb 4-1: config 0 interface 153 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 681.667036][ T5880] usb 4-1: config 0 interface 153 has no altsetting 0 [ 681.677447][ T5880] usb 4-1: New USB device found, idVendor=0499, idProduct=1027, bcdDevice=6d.37 [ 681.686960][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.695929][ T5880] usb 4-1: Product: syz [ 681.704086][ T5880] usb 4-1: Manufacturer: syz [ 681.709622][ T5880] usb 4-1: SerialNumber: syz [ 681.738336][ T5880] usb 4-1: config 0 descriptor?? [ 681.750998][T11044] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 681.779005][T11044] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 681.895813][ T8] usb 3-1: device descriptor read/64, error -71 [ 682.025226][ T8] usb usb3-port1: attempt power cycle [ 682.639691][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 682.865087][ T5880] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 682.878774][ T8] usb 3-1: device descriptor read/8, error -71 [ 682.881539][ T5880] usb 4-1: invalid MIDI in EP 0 [ 683.133795][T11058] binder: 11056:11058 ioctl 4018620d 0 returned -22 [ 683.665451][ T5880] snd-usb-audio: probe of 4-1:0.153 failed with error -22 [ 683.701647][ T5880] usb 4-1: USB disconnect, device number 15 [ 683.827572][T11063] udevd[11063]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.153/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.144386][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.152253][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.490275][ T8671] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 687.712725][ T8671] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 687.731432][ T8671] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 687.790354][ T8671] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 687.802056][ T8671] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.870828][T11072] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 688.285507][ T8671] usb 3-1: usb_control_msg returned -32 [ 688.291765][ T8671] usbtmc 3-1:16.0: can't read capabilities [ 688.403610][ T787] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 688.510323][T11072] usb 2-1: Using ep0 maxpacket: 32 [ 688.520260][T11072] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 688.534426][T11072] usb 2-1: config 0 has no interface number 0 [ 688.547503][T11072] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 688.566302][T11072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.579203][ T787] usb 4-1: device descriptor read/64, error -71 [ 688.593361][T11072] usb 2-1: Product: syz [ 688.597798][T11072] usb 2-1: Manufacturer: syz [ 688.603904][T11072] usb 2-1: SerialNumber: syz [ 688.643090][T11072] usb 2-1: config 0 descriptor?? [ 688.657752][T11072] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 688.850225][ T787] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 689.090557][ T787] usb 4-1: device descriptor read/64, error -71 [ 689.217118][T11072] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 689.331476][ T787] usb usb4-port1: attempt power cycle [ 689.529565][T11072] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 689.930303][ T787] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 689.975639][ T787] usb 4-1: device descriptor read/8, error -71 [ 690.199296][ T8671] usb 3-1: USB disconnect, device number 20 [ 690.251133][ T787] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 690.301926][ T787] usb 4-1: device descriptor read/8, error -71 [ 690.470611][ T787] usb usb4-port1: unable to enumerate USB device [ 691.623207][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 691.624513][ T5880] usb 2-1: USB disconnect, device number 17 [ 691.785327][ T5880] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 691.829502][ T5880] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 691.861788][ T5880] quatech2 2-1:0.51: device disconnected [ 692.077600][T11124] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 692.100750][T11124] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 694.320895][T11147] tipc: Started in network mode [ 694.328543][T11147] tipc: Node identity aa9b754de448, cluster identity 4711 [ 694.336496][T11147] tipc: Enabled bearer , priority 0 [ 694.397979][T11147] syzkaller0: entered promiscuous mode [ 694.406723][T11147] syzkaller0: entered allmulticast mode [ 694.416692][T11147] tipc: Resetting bearer [ 694.470403][T11146] tipc: Resetting bearer [ 701.478585][T11146] tipc: Disabling bearer [ 701.487236][ T787] tipc: Node number set to 1322480973 [ 707.011163][ T5834] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 707.220272][ T5834] usb 1-1: Using ep0 maxpacket: 16 [ 707.286152][ T5834] usb 1-1: no configurations [ 707.291015][ T5834] usb 1-1: can't read configurations, error -22 [ 707.460470][ T5834] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 707.671292][ T5834] usb 1-1: Using ep0 maxpacket: 16 [ 707.689870][ T5834] usb 1-1: no configurations [ 707.702733][ T5834] usb 1-1: can't read configurations, error -22 [ 707.722854][ T5834] usb usb1-port1: attempt power cycle [ 708.160254][ T5834] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 708.223246][ T5834] usb 1-1: Using ep0 maxpacket: 16 [ 708.239631][ T5834] usb 1-1: no configurations [ 708.248382][ T5834] usb 1-1: can't read configurations, error -22 [ 708.430514][ T5834] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 708.463974][ T5834] usb 1-1: Using ep0 maxpacket: 16 [ 708.477834][ T5834] usb 1-1: no configurations [ 708.483584][ T5834] usb 1-1: can't read configurations, error -22 [ 708.491808][ T5834] usb usb1-port1: unable to enumerate USB device [ 716.745953][T11334] binder: 11331:11334 ioctl c0306201 0 returned -14 [ 718.010314][ T5812] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 718.212713][ T5812] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 718.238994][ T5812] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 718.267898][ T5812] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 718.301170][ T5812] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 718.333356][ T5812] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 718.366327][ T5812] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 718.380149][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 718.392676][ T5812] usb 2-1: Product: syz [ 718.396971][ T5812] usb 2-1: Manufacturer: syz [ 718.440267][ T5812] cdc_wdm 2-1:1.0: skipping garbage [ 718.460204][ T5812] cdc_wdm 2-1:1.0: skipping garbage [ 718.478220][ T5812] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 718.485801][ T5812] cdc_wdm 2-1:1.0: Unknown control protocol [ 718.794581][ C0] wdm_int_callback: 5 callbacks suppressed [ 718.794603][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 718.796826][ T8671] usb 2-1: USB disconnect, device number 18 [ 718.800459][ C0] wdm_int_callback: 5 callbacks suppressed [ 718.800476][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 718.800493][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 718.807429][T11327] cdc_wdm 2-1:1.0: Tx URB error: -19 [ 721.950130][ T5812] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 722.203056][T11360] binder: 11357:11360 ioctl c0306201 0 returned -14 [ 722.330277][ T5812] usb 2-1: Using ep0 maxpacket: 8 [ 723.068359][ T5812] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.089953][ T5812] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 723.110272][ T5812] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 723.126745][ T5812] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 723.136261][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 723.151004][ T5812] usb 2-1: Product: syz [ 723.155244][ T5812] usb 2-1: Manufacturer: syz [ 723.159873][ T5812] usb 2-1: SerialNumber: syz [ 723.171576][ T5812] usb 2-1: config 0 descriptor?? [ 723.186922][ T5812] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 723.195163][ T5812] radio-si470x: probe of 2-1:0.0 failed with error -5 [ 723.203326][ T5812] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 724.581713][ T28] usb 2-1: USB disconnect, device number 19 [ 727.330159][T11072] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 727.538958][T11072] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 728.361092][T11072] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 728.390359][T11072] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 728.399672][T11072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.413733][T11387] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 728.430354][T11387] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 728.447175][T11402] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 728.458963][T11072] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 728.721772][ T5812] usb 3-1: USB disconnect, device number 21 [ 729.250331][ T787] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 730.491285][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 730.521988][ T787] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 730.566450][ T787] usb 4-1: config 0 has no interface number 0 [ 730.590363][ T787] usb 4-1: config 0 interface 151 has no altsetting 0 [ 730.625733][ T787] usb 4-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=d9.3e [ 730.645791][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.847314][ T787] usb 4-1: Product: syz [ 730.852454][ T787] usb 4-1: Manufacturer: syz [ 730.857115][ T787] usb 4-1: SerialNumber: syz [ 730.873726][ T787] usb 4-1: config 0 descriptor?? [ 730.885453][ T787] gspca_main: sq905c-2.14.0 probing 2770:9051 [ 731.407071][ T787] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 731.431061][ T787] sq905c 4-1:0.151: Get version command failed [ 731.478735][ T787] sq905c: probe of 4-1:0.151 failed with error -110 [ 732.924845][ T8] usb 4-1: USB disconnect, device number 20 [ 738.000135][ T5834] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 738.060150][ T5770] Bluetooth: hci3: command 0x0c1a tx timeout [ 738.232896][ T5834] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 738.255262][ T5834] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 738.279431][ T5834] usb 2-1: config 0 interface 0 has no altsetting 0 [ 738.308631][ T5834] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 738.328702][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 738.340569][ T5834] usb 2-1: Product: syz [ 738.344991][ T5834] usb 2-1: Manufacturer: syz [ 738.349911][ T5834] usb 2-1: SerialNumber: syz [ 738.392378][ T5834] usb 2-1: config 0 descriptor?? [ 738.406881][ T5834] hub 2-1:0.0: bad descriptor, ignoring hub [ 738.413176][ T5834] hub: probe of 2-1:0.0 failed with error -5 [ 738.442047][ T5834] usb 2-1: selecting invalid altsetting 0 [ 739.061789][T11501] usb 2-1: reset high-speed USB device number 20 using dummy_hcd [ 739.235088][T11506] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1703'. [ 739.622631][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1704'. [ 739.918871][ T787] usb 2-1: USB disconnect, device number 20 [ 743.217804][T11539] ucma_write: process 1239 (syz.1.1712) changed security contexts after opening file descriptor, this is not allowed. [ 743.725223][T11548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1715'. [ 743.744667][T11548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1715'. [ 746.188187][T11567] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 747.584574][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.591673][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.463048][T11637] overlayfs: failed to get inode (-116) [ 752.469529][T11637] overlayfs: failed to get inode (-116) [ 752.583191][ T9676] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 753.401420][ T5880] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 753.680458][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 753.765236][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.991970][ T5880] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 754.048867][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.101888][ T5880] usb 3-1: config 0 descriptor?? [ 754.237244][ T27] audit: type=1326 audit(1765836449.021:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11652 comm="syz.0.1745" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f698638f749 code=0x0 [ 754.876988][ T5880] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 755.299544][ T787] usb 3-1: USB disconnect, device number 22 [ 756.440108][ T787] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 756.719376][ T787] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 756.898612][ T787] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 757.210097][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.201736][ T5812] usb 3-1: USB disconnect, device number 23 [ 761.510366][ T5832] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 761.740337][ T5832] usb 4-1: Using ep0 maxpacket: 32 [ 761.754010][ T5832] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 761.820193][ T5832] usb 4-1: config 0 has no interface number 0 [ 761.826779][ T5832] usb 4-1: config 0 interface 184 has no altsetting 0 [ 761.874695][ T5832] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 761.917227][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.955872][ T5832] usb 4-1: Product: syz [ 761.975291][ T5832] usb 4-1: Manufacturer: syz [ 761.995657][ T5832] usb 4-1: SerialNumber: syz [ 762.022930][ T5832] usb 4-1: config 0 descriptor?? [ 762.041130][ T5832] smsc75xx v1.0.0 [ 762.823161][T11727] netlink: 'syz.0.1764': attribute type 1 has an invalid length. [ 762.861225][T11727] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1764'. [ 763.294875][ T5832] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 763.310455][ T5832] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 763.322397][ T5832] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 763.333812][ T5832] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 763.358851][ T5832] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 763.404606][ T5832] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 763.422718][ T5832] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 763.463677][ T5832] usb 4-1: USB disconnect, device number 21 [ 768.302011][T11767] i2c i2c-0: Invalid block write size 34 [ 768.388374][T11768] netlink: 'syz.1.1780': attribute type 5 has an invalid length. [ 769.380950][ T787] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 770.202180][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 770.212070][ T787] usb 2-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 770.221457][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.238610][ T787] usb 2-1: config 0 descriptor?? [ 770.250202][ T5880] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 770.380249][T11490] Bluetooth: hci4: command 0x1003 tx timeout [ 770.380411][ T5770] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 770.560601][ T5880] usb 3-1: Using ep0 maxpacket: 8 [ 770.578261][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.600906][ T5880] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 770.621998][T11790] syz_tun: entered allmulticast mode [ 770.635147][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.665169][ T5880] usb 3-1: config 0 descriptor?? [ 770.685161][ T5880] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 770.813417][ T787] usbhid 2-1:0.0: can't add hid device: -71 [ 770.822117][ T787] usbhid: probe of 2-1:0.0 failed with error -71 [ 770.833264][ T787] usb 2-1: USB disconnect, device number 21 [ 772.590179][T11072] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 772.830088][T11072] usb 4-1: Using ep0 maxpacket: 16 [ 773.092198][ T5880] gspca_vc032x: reg_w err -71 [ 773.102744][ T5880] vc032x: probe of 3-1:0.0 failed with error -71 [ 773.120642][ T5880] usb 3-1: USB disconnect, device number 24 [ 773.120816][T11072] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.144834][T11072] usb 4-1: config 0 has no interfaces? [ 773.154568][T11072] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 773.164409][T11072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.177602][T11072] usb 4-1: config 0 descriptor?? [ 773.453957][T11806] netlink: 'syz.3.1787': attribute type 10 has an invalid length. [ 773.590271][T11808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.651228][T11808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.463761][T11806] bond0: (slave dummy0): Releasing backup interface [ 774.508566][T11806] team0: Port device dummy0 added [ 774.524757][ T5832] usb 4-1: USB disconnect, device number 22 [ 777.555242][ T8] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 778.648174][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.660919][ T8] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 778.671051][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.684095][ T8] usb 1-1: config 0 descriptor?? [ 778.906073][T11626] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 778.980256][ T5812] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 779.136269][ T8] prodikeys 0003:041E:2801.0008: item fetching failed at offset 0/5 [ 779.149519][ T8] prodikeys 0003:041E:2801.0008: hid parse failed [ 779.162431][ T5812] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 779.180678][ T8] prodikeys: probe of 0003:041E:2801.0008 failed with error -22 [ 779.195676][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.237360][ T5812] usb 3-1: config 0 descriptor?? [ 779.268975][T11626] usb 2-1: device descriptor read/64, error -71 [ 779.336820][ T8] usb 1-1: USB disconnect, device number 21 [ 779.494882][ T5812] kaweth 3-1:0.0: Firmware present in device. [ 779.686340][ T5812] kaweth 3-1:0.0: Statistics collection: 0 [ 779.698992][ T5812] kaweth 3-1:0.0: Multicast filter limit: 0 [ 779.708140][ T5812] kaweth 3-1:0.0: MTU: 0 [ 779.716998][ T5812] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 779.880334][T11626] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 779.913565][ T5812] kaweth: probe of 3-1:0.0 failed with error -5 [ 779.943715][ T5812] usb 3-1: USB disconnect, device number 25 [ 780.080338][T11626] usb 2-1: device descriptor read/64, error -71 [ 780.211684][T11626] usb usb2-port1: attempt power cycle [ 781.420194][T11626] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 781.450894][T11626] usb 2-1: device descriptor read/8, error -71 [ 782.130574][ T8] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 782.377386][ T8] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 782.526279][ T8] usb 1-1: config 1 has no interface number 0 [ 782.565866][ T8] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 782.620422][ T8] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 782.667622][ T8] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 782.700562][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.708894][ T8] usb 1-1: Product: syz [ 782.717088][T11626] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 782.766623][ T8] usb 1-1: Manufacturer: syz [ 782.784370][ T8] usb 1-1: SerialNumber: syz [ 782.818675][T11876] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 782.841712][ T8] usb 1-1: Expected 3 endpoints, found: 2 [ 782.956739][T11626] usb 2-1: device not accepting address 25, error -71 [ 782.977630][T11626] usb usb2-port1: unable to enumerate USB device [ 783.172115][ T28] usb 1-1: USB disconnect, device number 22 [ 784.323926][T11890] comedi comedi3: comedi_test: 38 microvolt, 2047 microsecond waveform attached [ 784.630276][T11626] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 784.800370][T11626] usb 2-1: device descriptor read/64, error -71 [ 786.120104][T11626] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 791.510242][T11626] usb 2-1: device descriptor read/64, error -110 [ 791.738913][T11626] usb usb2-port1: attempt power cycle [ 801.770277][ T5832] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 802.720342][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 802.728251][ T5832] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 802.738174][ T5832] usb 3-1: config 0 has no interface number 0 [ 802.744761][ T5832] usb 3-1: config 0 interface 184 has no altsetting 0 [ 802.755963][ T5832] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 802.780172][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.797769][ T5832] usb 3-1: Product: syz [ 802.802298][ T5832] usb 3-1: Manufacturer: syz [ 802.806972][ T5832] usb 3-1: SerialNumber: syz [ 802.823407][ T5832] usb 3-1: config 0 descriptor?? [ 802.842093][ T5832] smsc75xx v1.0.0 [ 804.684122][ T5832] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 804.907220][ T5832] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 805.034812][ T5832] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 805.070304][ T5832] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 805.080314][ T5832] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 805.091510][ T5832] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 805.118862][ T5832] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 805.156851][ T5832] usb 3-1: USB disconnect, device number 26 [ 807.495669][T12064] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1871'. [ 808.650107][ T8] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 808.833247][ T8] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 808.857797][ T8] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 808.904429][ T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 808.933148][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.953423][T12077] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 808.972984][T12077] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 809.023691][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.030293][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.069127][ T8] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 809.260373][ T8] usb 1-1: USB disconnect, device number 23 [ 811.988601][T12122] nvme_fabrics: unknown parameter or missing value 'disconnect aa:aa:aa:aa:aa:10 2' in ctrl creation request [ 813.300122][ T787] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 813.515719][ T787] usb 3-1: too many configurations: 72, using maximum allowed: 8 [ 813.544277][ T787] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 813.561714][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.583391][ T787] usb 3-1: config 0 descriptor?? [ 814.787146][T12141] tmpfs: Unknown parameter 'euid>00000000000000000000' [ 815.229478][ T28] usb 3-1: USB disconnect, device number 27 [ 816.563539][T12165] comedi comedi2: ni_at_a2150: I/O port conflict (0xe,28) [ 824.260113][ T5832] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 824.460077][ T5832] usb 2-1: Using ep0 maxpacket: 16 [ 824.604637][ T5832] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 824.616887][ T5832] usb 2-1: config 0 has no interfaces? [ 824.629325][ T5832] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 824.766197][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.786805][ T5832] usb 2-1: config 0 descriptor?? [ 825.094992][T12245] netlink: 'syz.1.1926': attribute type 10 has an invalid length. [ 825.268324][T12270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.283271][T12270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.420723][T12245] team0: Port device dummy0 added [ 825.610124][ T787] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 825.688359][ T5770] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 825.765368][T12280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.811603][ T787] usb 1-1: too many configurations: 72, using maximum allowed: 8 [ 825.854233][T12280] bond0: (slave rose0): Enslaving as an active interface with an up link [ 825.873757][ T787] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 825.918103][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.954351][ T787] usb 1-1: config 0 descriptor?? [ 826.602051][T12294] tmpfs: Unknown parameter 'euid>00000000000000000000' [ 826.712343][ C0] llc_conn_state_process: llc_conn_service failed [ 826.815256][T12245] syz.1.1926 (12245) used greatest stack depth: 20912 bytes left [ 827.113785][ T27] audit: type=1326 audit(1765836521.911:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12301 comm="syz.2.1942" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f249e78f749 code=0x0 [ 827.208530][ T8] usb 1-1: USB disconnect, device number 24 [ 827.230537][ T28] usb 2-1: USB disconnect, device number 29 [ 827.780371][ T27] audit: type=1326 audit(1765836522.501:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12301 comm="syz.2.1942" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f249e78f749 code=0x0 [ 829.506583][T11072] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 830.118299][T11072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.335332][T11072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.345281][T11072] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 830.356369][T11072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.908020][T11072] usb 4-1: config 0 descriptor?? [ 833.546095][T12348] netlink: 'syz.0.1952': attribute type 10 has an invalid length. [ 833.726722][T11072] usbhid 4-1:0.0: can't add hid device: -71 [ 833.733013][T11072] usbhid: probe of 4-1:0.0 failed with error -71 [ 833.791155][T11072] usb 4-1: USB disconnect, device number 23 [ 834.079343][T12348] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 834.153025][ T9687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.167346][ T9687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.621794][T11072] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 834.892163][T11072] usb 3-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 834.910502][T11072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.933432][T11072] usb 3-1: config 0 descriptor?? [ 834.952722][T11072] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 836.050399][T11072] gspca_zc3xx: reg_w_i err -110 [ 836.055345][T11072] gspca_zc3xx: probe of 3-1:0.0 failed with error -110 [ 837.361569][T11072] usb 3-1: USB disconnect, device number 28 [ 845.031175][ T27] audit: type=1326 audit(1765836539.811:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.3.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4338f749 code=0x7fc00000 [ 850.421446][ T787] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 850.645649][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 850.663604][ T787] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 850.684899][ T787] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 850.721201][ T787] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 850.752442][ T787] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 850.769008][ T787] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 850.832981][ T787] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 850.868574][ T787] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 850.882931][ T787] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 850.930044][ T787] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 850.984291][ T787] usb 2-1: string descriptor 0 read error: -22 [ 850.991186][ T787] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 851.039043][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.086409][ T787] adutux 2-1:168.0: interrupt endpoints not found [ 851.359318][ T787] usb 2-1: USB disconnect, device number 30 [ 852.370145][T11072] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 852.590439][T11072] usb 2-1: Using ep0 maxpacket: 16 [ 852.608938][T11072] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 852.647776][T11072] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 852.675666][T11072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.693949][T11072] usb 2-1: Product: syz [ 852.704591][T11072] usb 2-1: Manufacturer: syz [ 852.717358][T11072] usb 2-1: SerialNumber: syz [ 852.731288][T11072] usb 2-1: config 0 descriptor?? [ 855.977129][ T5832] usb 2-1: USB disconnect, device number 31 [ 857.950448][ T5832] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 858.277539][ T5832] usb 4-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 858.290176][ T5832] usb 4-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 858.323847][ T5832] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 858.334229][ T5832] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 858.347287][ T5832] usb 4-1: Manufacturer: syz [ 858.356018][ T5832] usb 4-1: SerialNumber: syz [ 859.979720][T12603] vcan0: tx address claim with different name [ 860.432603][ T27] audit: type=1804 audit(1765836555.151:88): pid=12607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2019" name="/newroot/502/bus/bus" dev="overlay" ino=2678 res=1 errno=0 [ 860.977541][ T5832] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 861.020549][ T5832] usb 4-1: USB disconnect, device number 24 [ 862.976448][T12634] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2028'. [ 864.238757][T12647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2031'. [ 864.280233][T12647] veth1_to_bridge: entered promiscuous mode [ 868.101316][T12675] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2041'. [ 870.868634][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.878493][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.771710][T12724] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2052'. [ 884.714295][ T5770] Bluetooth: hci0: unexpected cc 0x0c05 length: 5 > 1 [ 884.721528][ T5770] Bluetooth: hci0: unexpected event for opcode 0x0c05 [ 884.749812][T12799] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2077'. [ 888.562416][T12840] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2089'. [ 890.385055][T12857] xt_l2tp: invalid flags combination: 4 [ 890.720139][ T8] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 890.737402][T12867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 890.910283][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 890.927403][ T8] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 890.948233][ T8] usb 3-1: config 127 has no interface number 1 [ 890.959781][ T8] usb 3-1: config 127 interface 0 altsetting 10 has an invalid endpoint with address 0xFF, skipping [ 890.979326][ T8] usb 3-1: config 127 interface 171 has no altsetting 0 [ 890.988638][ T8] usb 3-1: config 127 interface 0 has no altsetting 0 [ 891.009489][ T8] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 891.033665][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.061335][ T8] usb 3-1: Product: syz [ 891.071413][ T8] usb 3-1: Manufacturer: syz [ 891.077135][ T8] usb 3-1: SerialNumber: syz [ 891.321489][ T8] xr_serial 3-1:127.171: xr_serial converter detected [ 891.625866][ T8] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 891.773811][ T8] xr_serial: probe of ttyUSB0 failed with error -71 [ 891.951078][ T8] usb 3-1: USB disconnect, device number 29 [ 892.014573][ T8] xr_serial 3-1:127.171: device disconnected [ 895.367707][T12911] serio: Serial port ptm0 [ 896.205140][ T28] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 896.326418][ T787] IPVS: starting estimator thread 0... [ 896.425296][ T28] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 896.436530][ T28] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 896.483901][T12919] IPVS: sh: FWM 3 0x00000003 - no destination available [ 896.488975][ T28] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 896.506031][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 896.519124][ T28] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 896.519708][T12920] IPVS: using max 17 ests per chain, 40800 per kthread [ 896.528800][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.594296][ T28] usb 2-1: Product: syz [ 896.608527][ T28] usb 2-1: Manufacturer: syz [ 896.614921][ T28] usb 2-1: SerialNumber: syz [ 896.675215][ T28] usb 2-1: config 0 descriptor?? [ 898.191016][ T5812] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 898.237241][ T8] usb 2-1: USB disconnect, device number 32 [ 898.422251][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.456173][ T5812] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 898.478071][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.511295][ T5812] usb 4-1: config 0 descriptor?? [ 899.543635][ T5812] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 899.565084][ T5812] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0009/input/input17 [ 899.803963][ T5812] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 899.862163][ T5812] usb 4-1: USB disconnect, device number 25 [ 899.953775][T12916] udevd[12916]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 900.047113][T12949] fido_id[12949]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 900.709283][T12965] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2126'. [ 908.751963][ T5812] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 909.006329][ T5812] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 909.050517][ T5812] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.245830][ T5812] usb 2-1: config 0 has no interface number 0 [ 909.294298][ T5812] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 909.457587][ T5812] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 909.574824][ T5812] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 909.599140][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.613375][ T5812] usb 2-1: Product: syz [ 909.617806][ T5812] usb 2-1: Manufacturer: syz [ 909.624297][ T5812] usb 2-1: SerialNumber: syz [ 909.648775][ T5812] usb 2-1: config 0 descriptor?? [ 909.794561][T13026] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2136'. [ 910.132319][T13038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2149'. [ 910.292700][ T5812] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.117/input/input18 [ 910.500266][ T5812] usb 2-1: USB disconnect, device number 33 [ 910.719687][T13029] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 912.184193][ T5770] Bluetooth: hci0: command 0x0c1a tx timeout [ 916.660513][ T787] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 916.900054][ T787] usb 1-1: Using ep0 maxpacket: 8 [ 916.982533][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.013434][ T787] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 917.053786][ T787] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 917.087288][ T787] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 917.096932][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 917.107743][ T787] usb 1-1: Product: syz [ 917.116199][ T787] usb 1-1: Manufacturer: syz [ 917.121774][ T787] usb 1-1: SerialNumber: syz [ 917.139209][ T787] usb 1-1: config 0 descriptor?? [ 917.152958][ T787] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 917.165650][ T787] radio-si470x: probe of 1-1:0.0 failed with error -5 [ 917.173861][ T787] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 919.838080][ T787] usb 1-1: USB disconnect, device number 25 [ 923.550488][T13132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2179'. [ 925.864012][ T5805] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 926.080142][ T5805] usb 4-1: unable to get BOS descriptor or descriptor too short [ 926.218611][ T5805] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 926.277845][ T5805] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 926.391468][ T5805] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 926.404822][ T5805] usb 4-1: config 129 has no interface number 0 [ 926.460421][ T5805] usb 4-1: config 129 has no interface number 1 [ 926.470128][ T5805] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 926.483978][ T5805] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 926.495790][ T5805] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 926.510108][ T5805] usb 4-1: config 129 interface 135 has no altsetting 0 [ 926.520023][ T5805] usb 4-1: config 129 interface 5 has no altsetting 0 [ 926.538014][ T5805] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 926.547423][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.559872][ T5805] usb 4-1: Product: syz [ 926.566921][ T5805] usb 4-1: Manufacturer: syz [ 926.572444][ T5805] usb 4-1: SerialNumber: syz [ 926.717795][T13163] syzkaller0: entered promiscuous mode [ 926.725303][T13163] syzkaller0: entered allmulticast mode [ 926.868082][ T5805] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 926.969195][ T5805] usb 4-1: MIDIStreaming interface descriptor not found [ 927.615870][ T5805] usb 4-1: USB disconnect, device number 26 [ 928.556611][T13180] udevd[13180]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 932.308568][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.319707][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 940.274246][T13284] netlink: 'syz.2.2228': attribute type 39 has an invalid length. [ 940.480757][T13284] hsr_slave_1 (unregistering): left promiscuous mode [ 944.434924][T13319] kernel read not supported for file /eth0 (pid: 13319 comm: syz.2.2237) [ 944.450047][ T27] audit: type=1804 audit(1765836639.231:89): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2237" name="eth0" dev="mqueue" ino=32795 res=1 errno=0 [ 944.523018][ T27] audit: type=1800 audit(1765836639.251:90): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2237" name="eth0" dev="mqueue" ino=32795 res=0 errno=0 [ 945.807031][T13331] IPVS: sh: FWM 3 0x00000003 - no destination available [ 946.306413][ T787] IPVS: starting estimator thread 0... [ 946.430539][T13332] IPVS: using max 18 ests per chain, 43200 per kthread [ 952.698830][T13405] binder: 13404:13405 unknown command 0 [ 953.479132][T13405] binder: 13404:13405 ioctl c0306201 200000004a40 returned -22 [ 954.910116][ T5805] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 955.100118][ T5805] usb 1-1: Using ep0 maxpacket: 32 [ 955.122691][ T5805] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 955.163406][ T5805] usb 1-1: config 0 has no interface number 0 [ 955.770085][ T5805] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 955.858084][ T5805] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 955.869303][ T5805] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 955.886173][ T5805] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 955.910020][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.940089][ T5805] usb 1-1: Product: syz [ 955.944603][ T5805] usb 1-1: Manufacturer: syz [ 955.949487][ T5805] usb 1-1: SerialNumber: syz [ 955.961312][ T5805] usb 1-1: config 0 descriptor?? [ 955.977222][T13419] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 956.005197][ T5805] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input19 [ 956.118329][T13432] netlink: set zone limit has 8 unknown bytes [ 956.304948][ T5805] usb 1-1: USB disconnect, device number 26 [ 975.954430][T13601] Bluetooth: MGMT ver 1.22 [ 976.125124][T13607] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 977.103535][T13613] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2328'. [ 978.996912][T13644] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 979.198889][ T5832] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 979.384375][ T5832] usb 3-1: device descriptor read/64, error -71 [ 979.700177][ T5832] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 979.820913][T13653] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2339'. [ 979.870137][ T5832] usb 3-1: device descriptor read/64, error -71 [ 980.003341][ T5832] usb usb3-port1: attempt power cycle [ 980.490065][ T5832] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 980.540915][ T5832] usb 3-1: device descriptor read/8, error -71 [ 980.939098][ C0] ------------[ cut here ]------------ [ 980.944698][ C0] WARNING: CPU: 0 PID: 13661 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 980.954982][ C0] Modules linked in: [ 980.958924][ C0] CPU: 0 PID: 13661 Comm: syz.3.2342 Not tainted syzkaller #0 [ 980.966469][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 980.976717][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 980.983124][ C0] Code: 24 4c 89 e7 e8 0e 25 db f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 59 f6 9d f7 0f 0b e9 f6 f7 ff ff e8 4d f6 9d f7 <0f> 0b e9 48 fb ff ff e8 41 f6 9d f7 48 c7 c7 e0 96 23 8e 4c 89 e6 [ 981.003026][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 981.009257][ C0] RAX: ffffffff89e79a73 RBX: ffffffff89e78876 RCX: ffff88807ecf3c00 [ 981.017416][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 981.025704][ C0] RBP: 0000000000000000 R08: ffff88807ecf3c00 R09: 0000000000000003 [ 981.033853][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805ccb63c0 [ 981.041970][ C0] R13: dffffc0000000000 R14: ffff88805ccb68b0 R15: ffff88807d2c2024 [ 981.050073][ C0] FS: 00007f3e441786c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 981.059111][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 981.065788][ C0] CR2: 0000200000002000 CR3: 000000007388c000 CR4: 00000000003506f0 [ 981.073865][ C0] Call Trace: [ 981.077253][ C0] [ 981.080165][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 981.085920][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 981.091494][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 981.098428][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 981.104170][ C0] __iterate_interfaces+0x243/0x500 [ 981.109627][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 981.116042][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 981.123355][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 981.129775][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 981.136891][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 981.142240][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 981.147707][ C0] ? hw_scan_work+0xf40/0xf40 [ 981.152460][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 981.157842][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 981.164163][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 981.169396][ C0] handle_softirqs+0x280/0x820 [ 981.174223][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 981.179079][ C0] ? do_softirq+0x180/0x180 [ 981.183689][ C0] __irq_exit_rcu+0xc7/0x190 [ 981.188387][ C0] ? irq_exit_rcu+0x20/0x20 [ 981.193164][ C0] irq_exit_rcu+0x9/0x20 [ 981.197549][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 981.203291][ C0] [ 981.206499][ C0] [ 981.209477][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 981.215660][ C0] RIP: 0010:snd_rawmidi_write+0x398/0xb10 [ 981.221558][ C0] Code: 48 8d 7b 18 be 04 00 00 00 e8 44 ea af f9 b8 01 00 00 00 87 43 18 48 8b 7c 24 18 e8 f2 04 44 02 bf b8 0b 00 00 e8 68 e9 43 02 <49> 89 c5 48 8b 7c 24 48 48 8d b4 24 c0 00 00 00 e8 c3 48 37 f9 48 [ 981.241401][ C0] RSP: 0018:ffffc90004e4fa00 EFLAGS: 00000246 [ 981.247551][ C0] RAX: 0000000000000bb8 RBX: ffff88807ecf3c00 RCX: 0000000000080000 [ 981.255652][ C0] RDX: ffffc9000d12a000 RSI: 000000000007e5a9 RDI: 000000000007e5aa [ 981.263902][ C0] RBP: ffffc90004e4fbb0 R08: ffffffff8e4a212f R09: 1ffffffff1c94425 [ 981.271992][ C0] R10: dffffc0000000000 R11: fffffbfff1c94426 R12: ffffffff882d161d [ 981.280085][ C0] R13: ffff88805de11c30 R14: ffff8880251d3640 R15: dffffc0000000000 [ 981.288156][ C0] ? snd_rawmidi_write+0x34d/0xb10 [ 981.293455][ C0] ? snd_rawmidi_read+0x6c0/0x6c0 [ 981.298834][ C0] ? do_task_dead+0xd0/0xd0 [ 981.303543][ C0] ? end_current_label_crit_section+0x149/0x170 [ 981.310029][ C0] ? common_file_perm+0x198/0x1f0 [ 981.315172][ C0] ? fsnotify_perm+0x5d/0x5e0 [ 981.320155][ C0] ? security_file_permission+0x79/0xa0 [ 981.325790][ C0] do_iter_write+0x50e/0xc70 [ 981.330460][ C0] ? snd_rawmidi_read+0x6c0/0x6c0 [ 981.335559][ C0] ? vfs_iter_write+0xa0/0xa0 [ 981.340299][ C0] ? __import_iovec+0x3fa/0x860 [ 981.345208][ C0] ? import_iovec+0x73/0xa0 [ 981.349794][ C0] do_writev+0x252/0x410 [ 981.354196][ C0] ? do_readv+0x3e0/0x3e0 [ 981.358660][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 981.364763][ C0] ? lock_chain_count+0x20/0x20 [ 981.369686][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 981.374967][ C0] do_syscall_64+0x55/0xb0 [ 981.379476][ C0] ? clear_bhb_loop+0x40/0x90 [ 981.384255][ C0] ? clear_bhb_loop+0x40/0x90 [ 981.389092][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 981.395099][ C0] RIP: 0033:0x7f3e4338f749 [ 981.399581][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 981.419609][ C0] RSP: 002b:00007f3e44178038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 981.428159][ C0] RAX: ffffffffffffffda RBX: 00007f3e435e5fa0 RCX: 00007f3e4338f749 [ 981.436391][ C0] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000006 [ 981.444484][ C0] RBP: 00007f3e43413f91 R08: 0000000000000000 R09: 0000000000000000 [ 981.452636][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.460893][ C0] R13: 00007f3e435e6038 R14: 00007f3e435e5fa0 R15: 00007ffc82a75728 [ 981.469014][ C0] [ 981.472108][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 981.479405][ C0] CPU: 0 PID: 13661 Comm: syz.3.2342 Not tainted syzkaller #0 [ 981.486869][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 981.497205][ C0] Call Trace: [ 981.500572][ C0] [ 981.503419][ C0] dump_stack_lvl+0x16c/0x230 [ 981.508125][ C0] ? show_regs_print_info+0x20/0x20 [ 981.513339][ C0] ? load_image+0x3b0/0x3b0 [ 981.518023][ C0] panic+0x2c0/0x710 [ 981.521933][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 981.526439][ C0] __warn+0x2e0/0x470 [ 981.530433][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 981.536160][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 981.541875][ C0] report_bug+0x2be/0x4f0 [ 981.546196][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 981.551915][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 981.557637][ C0] ? __ieee80211_beacon_get+0x1235/0x1600 [ 981.563356][ C0] handle_bug+0xcf/0x120 [ 981.567616][ C0] exc_invalid_op+0x1a/0x50 [ 981.572239][ C0] asm_exc_invalid_op+0x1a/0x20 [ 981.577212][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 981.583654][ C0] Code: 24 4c 89 e7 e8 0e 25 db f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 59 f6 9d f7 0f 0b e9 f6 f7 ff ff e8 4d f6 9d f7 <0f> 0b e9 48 fb ff ff e8 41 f6 9d f7 48 c7 c7 e0 96 23 8e 4c 89 e6 [ 981.603382][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 981.609632][ C0] RAX: ffffffff89e79a73 RBX: ffffffff89e78876 RCX: ffff88807ecf3c00 [ 981.617611][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 981.625680][ C0] RBP: 0000000000000000 R08: ffff88807ecf3c00 R09: 0000000000000003 [ 981.633910][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805ccb63c0 [ 981.642145][ C0] R13: dffffc0000000000 R14: ffff88805ccb68b0 R15: ffff88807d2c2024 [ 981.650289][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 981.655840][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 981.661605][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 981.667406][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 981.672952][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 981.678765][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 981.685528][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 981.691165][ C0] __iterate_interfaces+0x243/0x500 [ 981.696373][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 981.702695][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 981.710214][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 981.716533][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 981.723746][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 981.729065][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 981.734741][ C0] ? hw_scan_work+0xf40/0xf40 [ 981.739448][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 981.744563][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 981.750635][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 981.755828][ C0] handle_softirqs+0x280/0x820 [ 981.760710][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 981.765471][ C0] ? do_softirq+0x180/0x180 [ 981.769986][ C0] __irq_exit_rcu+0xc7/0x190 [ 981.774573][ C0] ? irq_exit_rcu+0x20/0x20 [ 981.779069][ C0] irq_exit_rcu+0x9/0x20 [ 981.783312][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 981.789026][ C0] [ 981.791956][ C0] [ 981.794965][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 981.800961][ C0] RIP: 0010:snd_rawmidi_write+0x398/0xb10 [ 981.806692][ C0] Code: 48 8d 7b 18 be 04 00 00 00 e8 44 ea af f9 b8 01 00 00 00 87 43 18 48 8b 7c 24 18 e8 f2 04 44 02 bf b8 0b 00 00 e8 68 e9 43 02 <49> 89 c5 48 8b 7c 24 48 48 8d b4 24 c0 00 00 00 e8 c3 48 37 f9 48 [ 981.826414][ C0] RSP: 0018:ffffc90004e4fa00 EFLAGS: 00000246 [ 981.832494][ C0] RAX: 0000000000000bb8 RBX: ffff88807ecf3c00 RCX: 0000000000080000 [ 981.840552][ C0] RDX: ffffc9000d12a000 RSI: 000000000007e5a9 RDI: 000000000007e5aa [ 981.849058][ C0] RBP: ffffc90004e4fbb0 R08: ffffffff8e4a212f R09: 1ffffffff1c94425 [ 981.857223][ C0] R10: dffffc0000000000 R11: fffffbfff1c94426 R12: ffffffff882d161d [ 981.865293][ C0] R13: ffff88805de11c30 R14: ffff8880251d3640 R15: dffffc0000000000 [ 981.873356][ C0] ? snd_rawmidi_write+0x34d/0xb10 [ 981.878506][ C0] ? snd_rawmidi_read+0x6c0/0x6c0 [ 981.883646][ C0] ? do_task_dead+0xd0/0xd0 [ 981.888536][ C0] ? end_current_label_crit_section+0x149/0x170 [ 981.894786][ C0] ? common_file_perm+0x198/0x1f0 [ 981.899813][ C0] ? fsnotify_perm+0x5d/0x5e0 [ 981.904577][ C0] ? security_file_permission+0x79/0xa0 [ 981.910121][ C0] do_iter_write+0x50e/0xc70 [ 981.914724][ C0] ? snd_rawmidi_read+0x6c0/0x6c0 [ 981.919828][ C0] ? vfs_iter_write+0xa0/0xa0 [ 981.924514][ C0] ? __import_iovec+0x3fa/0x860 [ 981.929366][ C0] ? import_iovec+0x73/0xa0 [ 981.933872][ C0] do_writev+0x252/0x410 [ 981.938125][ C0] ? do_readv+0x3e0/0x3e0 [ 981.942477][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 981.948551][ C0] ? lock_chain_count+0x20/0x20 [ 981.953400][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 981.959036][ C0] do_syscall_64+0x55/0xb0 [ 981.963538][ C0] ? clear_bhb_loop+0x40/0x90 [ 981.968243][ C0] ? clear_bhb_loop+0x40/0x90 [ 981.972946][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 981.978839][ C0] RIP: 0033:0x7f3e4338f749 [ 981.983346][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 982.003259][ C0] RSP: 002b:00007f3e44178038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 982.011699][ C0] RAX: ffffffffffffffda RBX: 00007f3e435e5fa0 RCX: 00007f3e4338f749 [ 982.019711][ C0] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000006 [ 982.027690][ C0] RBP: 00007f3e43413f91 R08: 0000000000000000 R09: 0000000000000000 [ 982.035749][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 982.043745][ C0] R13: 00007f3e435e6038 R14: 00007f3e435e5fa0 R15: 00007ffc82a75728 [ 982.051809][ C0] [ 982.055301][ C0] Kernel Offset: disabled [ 982.059671][ C0] Rebooting in 86400 seconds..