last executing test programs: 7.048589586s ago: executing program 0 (id=1846): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000065a12083a41000370400000000", @ANYRES32=0x0, @ANYBLOB="8305050000000000200012800800010067726500140002800800050008000000080006000a"], 0x40}, 0x1, 0x0, 0x0, 0x2400004c}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r3}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140fe800000000000000000000000000001fe80000000000000000000000000000220e620e600"], 0x64) 6.827515119s ago: executing program 0 (id=1850): io_uring_setup(0x522, &(0x7f0000000040)={0x0, 0x3cb1, 0x2, 0xfffffffc, 0x20002f4}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/95) 6.679124805s ago: executing program 1 (id=1854): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x18, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x4205, 0x8, 0x0, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 4.189799112s ago: executing program 2 (id=1860): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280"], 0x48}}, 0x0) syz_usb_connect(0x5, 0x33, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) pidfd_send_signal(0xffffffffffffffff, 0x30, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x406, r3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0x40003001}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write$sndseq(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x3, @tick, {}, {0x5}, @result={0x3, 0xbb7}}, {0x9, 0x3, 0xa, 0x14, @time={0x2, 0x7ff}, {0x85, 0x80}, {0x10, 0x5}, @queue={0xae, {0xf2, 0x5}}}, {0x6, 0x5, 0x8, 0x6, @tick=0x8, {0x5, 0x4}, {0x0, 0x6}, @note={0x1, 0xf1, 0x8, 0xf4, 0x744}}], 0x54) 4.113421124s ago: executing program 2 (id=1861): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000003c0)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2, 0x1}}, 0x10) 4.040267893s ago: executing program 2 (id=1862): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000600)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_bpf={0x38, 0x1a, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) socketpair(0x3, 0x1, 0x1000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000340)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003600010000000000fcdbdf250701f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket(0x11, 0x2, 0x10001) recvfrom(r4, 0x0, 0x0, 0x40010100, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'team0\x00', 0x0}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000080)=0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x100001, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0x8, 0x3, 0x40004, 0x7ffffffffffffe, 0x6a9, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x44, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000002c0)={'vlan0\x00', @random="64938edd95d9"}) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) 3.789880818s ago: executing program 0 (id=1863): syz_open_dev$vcsa(0x0, 0x1, 0x102) dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) connect$unix(r0, 0x0, 0x0) 3.789580612s ago: executing program 0 (id=1864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x30, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xc, 0xfff3}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc054}, 0x8080) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 3.639500273s ago: executing program 1 (id=1865): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000500)=""/68, 0x0, 0x60000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) 3.614836629s ago: executing program 0 (id=1867): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 3.611258934s ago: executing program 1 (id=1868): syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x202, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000001380)=[{&(0x7f0000000340)="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", 0x261}], 0x1) 3.469823258s ago: executing program 1 (id=1869): fanotify_init(0x2, 0x80000) openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) unshare(0x6a060000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001840)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udplite\x00') sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) 3.302440738s ago: executing program 1 (id=1871): io_uring_setup(0x522, &(0x7f0000000040)={0x0, 0x3cb1, 0x2, 0xfffffffc, 0x20002f4}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/95) 3.139344645s ago: executing program 2 (id=1872): syz_open_dev$vcsa(0x0, 0x1, 0x102) dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) connect$unix(r0, 0x0, 0x0) 3.107385237s ago: executing program 2 (id=1873): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x18, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x4205, 0x8, 0x0, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 2.809943304s ago: executing program 0 (id=1875): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000080)=[{r1, 0x9280}], 0x1, 0x77e) 2.620110283s ago: executing program 3 (id=1877): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 2.480046555s ago: executing program 3 (id=1878): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000065a12083a4100037040000000000", @ANYRES32=0x0, @ANYBLOB="8305050000000000200012800800010067726500140002800800050008000000080006000a"], 0x40}, 0x1, 0x0, 0x0, 0x2400004c}, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r3}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140fe800000000000000000000000000001fe80000000000000000000000000000220e620e600"], 0x64) 2.349919815s ago: executing program 3 (id=1879): r0 = socket(0x2d, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x6, 0x7fff7ffc}]}) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x7f, 0xd, 0xef, 0x4}, {0x6, 0xff, 0x8, 0xfff}, {0x2a73, 0x1, 0x3, 0x3a}]}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) userfaultfd(0x1) write$tun(r3, 0x0, 0x4a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'macvlan1\x00', {0x2, 0x0, @loopback=0x7f000000}}) connect$inet6(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.235271181s ago: executing program 3 (id=1880): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom$inet6(r0, &(0x7f0000000640)=""/248, 0xffffff1f, 0x40010002, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb0", 0x3}], 0x1) 1.329618312s ago: executing program 3 (id=1881): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0xc0010015}]}) 1.329272854s ago: executing program 3 (id=1882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}, {&(0x7f0000000440)="93156be5c0f2770567", 0x9}], 0x2}, 0x0) 216.281714ms ago: executing program 1 (id=1883): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x100}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) 0s ago: executing program 2 (id=1884): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) socket$kcm(0x2, 0x5, 0x106) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x2000009}, {0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x32}, 0x7fffffff}, 0xffffffffffffffff, 0x80d}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0xffff}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/43, 0x2b}], 0x1, 0x42, 0x116d) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r5 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x96e, 0xb, 0x3fc}) kernel console output (not intermixed with test programs): 002: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 97.086797][ T10] usb 6-1: USB disconnect, device number 5 [ 97.127064][ T7888] fido_id[7888]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/6-1/report_descriptor': No such file or directory [ 97.286916][ T7902] netlink: 164 bytes leftover after parsing attributes in process `syz.2.782'. [ 97.295926][ T7902] block nbd0: reconnected socket [ 97.296050][ T7902] block nbd0: reconnected socket [ 97.296079][ T7902] nbd: socks must be embedded in a SOCK_ITEM attr [ 97.297922][ T67] block nbd0: Receive control failed (result -32) [ 97.298234][ T6932] block nbd0: Receive control failed (result -32) [ 97.356773][ T7904] input: syz1 as /devices/virtual/input/input6 [ 97.438641][ T7910] openvswitch: netlink: IPv6 tunnel dst address is zero [ 97.497488][ T7913] syzkaller0: entered promiscuous mode [ 97.499422][ T7913] syzkaller0: entered allmulticast mode [ 97.792439][ T30] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 97.961016][ T30] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.962580][ T30] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.962604][ T30] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.962639][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.181094][ T30] usb 5-1: GET_CAPABILITIES returned 0 [ 98.181155][ T30] usbtmc 5-1:16.0: can't read capabilities [ 98.395774][ T10] usb 5-1: USB disconnect, device number 6 [ 99.018189][ T7945] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.257882][ T7966] block nbd1: server does not support multiple connections per device. [ 99.266602][ T7966] block nbd1: shutting down sockets [ 99.390743][ T7966] syzkaller1: entered promiscuous mode [ 99.390811][ T7966] syzkaller1: entered allmulticast mode [ 99.532810][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 99.662323][ T5818] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 99.683073][ T10] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 99.684081][ T10] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 99.684121][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.685081][ T10] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 99.685094][ T10] usb 8-1: Manufacturer: syz [ 99.691812][ T10] usb 8-1: config 0 descriptor?? [ 99.743026][ T10] rc_core: IR keymap rc-hauppauge not found [ 99.743084][ T10] Registered IR keymap rc-empty [ 99.745452][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 99.748890][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input7 [ 99.843087][ T5818] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.844268][ T5818] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.844292][ T5818] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.844324][ T5818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.913691][ T3271] usb 8-1: USB disconnect, device number 5 [ 100.062876][ T5818] usb 7-1: GET_CAPABILITIES returned 0 [ 100.062982][ T5818] usbtmc 7-1:16.0: can't read capabilities [ 100.276661][ T35] usb 7-1: USB disconnect, device number 5 [ 100.452410][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 100.602517][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 100.603869][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 100.604814][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 100.606621][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.606634][ T10] usb 5-1: Product: syz [ 100.606641][ T10] usb 5-1: Manufacturer: syz [ 100.606648][ T10] usb 5-1: SerialNumber: syz [ 100.615702][ T10] usb 5-1: config 0 descriptor?? [ 100.620053][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 100.620085][ T10] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 100.836926][ T7985] netlink: 'syz.3.811': attribute type 1 has an invalid length. [ 100.837025][ T7985] netlink: 200 bytes leftover after parsing attributes in process `syz.3.811'. [ 100.846492][ T7985] netlink: 48 bytes leftover after parsing attributes in process `syz.3.811'. [ 101.235505][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 101.248138][ T7998] block nbd1: server does not support multiple connections per device. [ 101.248378][ T7998] block nbd1: shutting down sockets [ 101.318301][ T7998] syzkaller1: entered promiscuous mode [ 101.318388][ T7998] syzkaller1: entered allmulticast mode [ 101.635282][ T8018] syzkaller0: entered promiscuous mode [ 101.637620][ T8018] syzkaller0: entered allmulticast mode [ 101.669042][ T10] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 101.669122][ T10] em28xx 5-1:0.0: board has no eeprom [ 102.080048][ T8040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.836'. [ 102.146605][ T1167] IPVS: starting estimator thread 0... [ 102.242670][ T8043] IPVS: using max 45 ests per chain, 108000 per kthread [ 102.501462][ T8060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.845'. [ 102.568071][ T8066] netlink: 'syz.3.848': attribute type 10 has an invalid length. [ 102.600187][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'. [ 102.688187][ T8064] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 102.740919][ T7979] em28xx 5-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 102.796450][ T10] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 102.796563][ T10] em28xx 5-1:0.0: dvb set to bulk mode. [ 102.797441][ T1039] em28xx 5-1:0.0: Binding DVB extension [ 102.811416][ T10] usb 5-1: USB disconnect, device number 7 [ 102.829155][ T10] em28xx 5-1:0.0: Disconnecting em28xx [ 102.913469][ T1039] em28xx 5-1:0.0: Registering input extension [ 102.914658][ T10] em28xx 5-1:0.0: Closing input extension [ 102.977851][ T10] em28xx: Freeing device [ 103.470720][ T43] audit: type=1326 audit(1788486674.117:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.858" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 103.470809][ T43] audit: type=1326 audit(1788486674.117:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.858" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 103.470855][ T43] audit: type=1326 audit(1788486674.117:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.858" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 103.470876][ T43] audit: type=1326 audit(1788486674.117:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.858" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 103.470896][ T43] audit: type=1326 audit(1788486674.117:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.858" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 103.470916][ T43] audit: type=1326 audit(1788486674.117:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.858" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 103.470936][ T43] audit: type=1326 audit(1788486674.117:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.858" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 103.470955][ T43] audit: type=1326 audit(1788486674.117:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.858" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 103.471223][ T43] audit: type=1326 audit(1788486674.117:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.858" exe="/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 103.471444][ T43] audit: type=1326 audit(1788486674.117:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.858" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 103.617921][ T8101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.861'. [ 103.727207][ T8107] netlink: 164 bytes leftover after parsing attributes in process `syz.3.864'. [ 103.739892][ T8107] block nbd0: reconnected socket [ 103.739997][ T8107] block nbd0: reconnected socket [ 103.740196][ T8107] nbd: socks must be embedded in a SOCK_ITEM attr [ 103.741310][ T67] block nbd0: Receive control failed (result -32) [ 103.741541][ T6932] block nbd0: Receive control failed (result -32) [ 104.092977][ T8125] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 104.094225][ T8125] syzkaller0: entered promiscuous mode [ 104.094245][ T8125] syzkaller0: entered allmulticast mode [ 104.210922][ T8130] netlink: 180 bytes leftover after parsing attributes in process `syz.1.872'. [ 104.472317][ T5889] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 104.595065][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.876'. [ 104.624950][ T5889] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 104.625858][ T5889] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6E, changing to 0xE [ 104.625876][ T5889] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 28719, setting to 64 [ 104.627480][ T5889] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.627493][ T5889] usb 8-1: Product: syz [ 104.627500][ T5889] usb 8-1: Manufacturer: syz [ 104.627507][ T5889] usb 8-1: SerialNumber: syz [ 104.640709][ T5889] usb 8-1: config 0 descriptor?? [ 105.061542][ T8179] process 'syz.0.887' launched './file2' with NULL argv: empty string added [ 105.077467][ T8129] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 105.085890][ T1039] usb 8-1: USB disconnect, device number 6 [ 105.962447][ T50] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 106.104236][ T8202] sg_write: data in/out 461547/217 bytes for SCSI command 0x0-- guessing data in; [ 106.104236][ T8202] program syz.2.896 not setting count and/or reply_len properly [ 106.143486][ T50] usb 8-1: Using ep0 maxpacket: 32 [ 106.144171][ T50] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 106.146239][ T50] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.146268][ T50] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.149775][ T50] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 106.149802][ T50] usb 8-1: Product: syz [ 106.149816][ T50] usb 8-1: Manufacturer: syz [ 106.149830][ T50] usb 8-1: SerialNumber: syz [ 106.175900][ T50] input: appletouch as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/input/input9 [ 106.386945][ T1039] usb 8-1: USB disconnect, device number 7 [ 106.424355][ T1039] appletouch 8-1:1.0: input: appletouch disconnected [ 106.678156][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.899'. [ 106.809205][ T8227] netlink: 48 bytes leftover after parsing attributes in process `syz.1.903'. [ 106.993042][ T8235] netlink: 164 bytes leftover after parsing attributes in process `syz.3.906'. [ 107.007075][ T8235] block nbd0: reconnected socket [ 107.007229][ T8235] block nbd0: reconnected socket [ 107.007244][ T8235] nbd: socks must be embedded in a SOCK_ITEM attr [ 107.008145][ T67] block nbd0: Receive control failed (result -32) [ 107.009406][ T6932] block nbd0: Receive control failed (result -32) [ 107.065587][ T8239] netlink: 56 bytes leftover after parsing attributes in process `syz.0.907'. [ 107.133948][ T8239] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.135591][ T8239] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.215618][ T8239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.324591][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.913'. [ 107.409986][ T8247] syzkaller0: entered promiscuous mode [ 107.410067][ T8247] syzkaller0: entered allmulticast mode [ 107.412495][ T5790] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.412522][ T5790] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.412539][ T5790] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.412556][ T5790] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.588777][ T8271] block nbd0: reconnected socket [ 107.588868][ T8271] block nbd0: reconnected socket [ 107.588877][ T8271] nbd: socks must be embedded in a SOCK_ITEM attr [ 107.597495][ T8272] netlink: 48 bytes leftover after parsing attributes in process `syz.2.917'. [ 108.350898][ T67] block nbd0: Receive control failed (result -32) [ 108.352800][ T6932] block nbd0: Receive control failed (result -32) [ 108.845953][ T8267] netlink: 164 bytes leftover after parsing attributes in process `syz.3.918'. [ 108.999591][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.922'. [ 109.099134][ T8302] syzkaller0: entered promiscuous mode [ 109.099194][ T8302] syzkaller0: entered allmulticast mode [ 109.155078][ T1167] IPVS: starting estimator thread 0... [ 109.262681][ T8306] IPVS: using max 44 ests per chain, 105600 per kthread [ 109.535204][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.936'. [ 109.551450][ T8336] netlink: 24 bytes leftover after parsing attributes in process `syz.0.937'. [ 109.728853][ T8349] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 109.865259][ T8354] ipvlan2: entered allmulticast mode [ 109.865603][ T8354] syz_tun: entered allmulticast mode [ 110.078092][ T1159] IPVS: starting estimator thread 0... [ 110.163888][ T8369] IPVS: using max 43 ests per chain, 103200 per kthread [ 110.672372][ T5834] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 110.833072][ T5834] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 110.834112][ T5834] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 110.834133][ T5834] usb 6-1: config 0 has no interface number 0 [ 110.834165][ T5834] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.834187][ T5834] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.834217][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.836565][ T5834] usb 6-1: config 0 descriptor?? [ 110.842419][ T10] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 111.003041][ T10] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.004175][ T10] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.004200][ T10] usb 8-1: config 0 has no interface number 0 [ 111.004234][ T10] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 111.004257][ T10] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 111.004289][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.011341][ T10] usb 8-1: config 0 descriptor?? [ 111.012115][ T8403] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 111.023932][ T10] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 111.233098][ T5818] usb 8-1: USB disconnect, device number 8 [ 111.257898][ T8390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.258594][ T8390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.262005][ T5834] usbhid 6-1:0.1: can't add hid device: -71 [ 111.262099][ T5834] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 111.270657][ T5834] usb 6-1: USB disconnect, device number 6 [ 112.244599][ T8431] syzkaller0: entered promiscuous mode [ 112.246783][ T8431] syzkaller0: entered allmulticast mode [ 113.988153][ T8457] input: syz1 as /devices/virtual/input/input10 [ 114.382610][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 114.438637][ T63] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 114.440114][ T8484] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 114.542443][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 114.545053][ T10] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 114.550720][ T10] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 114.555057][ T10] usb 6-1: config 0 has no interface number 0 [ 114.561269][ T8496] syzkaller0: entered promiscuous mode [ 114.561395][ T8496] syzkaller0: entered allmulticast mode [ 114.571906][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.575347][ T10] usb 6-1: Product: syz [ 114.577290][ T10] usb 6-1: Manufacturer: syz [ 114.579284][ T10] usb 6-1: SerialNumber: syz [ 114.590042][ T10] usb 6-1: config 0 descriptor?? [ 114.607851][ T10] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 114.815364][ T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 114.830188][ T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 115.003560][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 115.014796][ T3271] usb 6-1: USB disconnect, device number 7 [ 115.045947][ T3271] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 115.064189][ T3271] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 115.065413][ T3271] quatech2 6-1:0.51: device disconnected [ 115.238388][ T8531] syzkaller0: entered promiscuous mode [ 115.238473][ T8531] syzkaller0: entered allmulticast mode [ 115.542421][ T5889] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 115.625430][ T30] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 115.714194][ T5889] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.715179][ T5889] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.715203][ T5889] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.715232][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.794463][ T30] usb 7-1: Using ep0 maxpacket: 16 [ 115.795936][ T30] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 115.800906][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 115.805703][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.805720][ T30] usb 7-1: Product: syz [ 115.805728][ T30] usb 7-1: Manufacturer: syz [ 115.805735][ T30] usb 7-1: SerialNumber: syz [ 115.807535][ T30] usb 7-1: config 0 descriptor?? [ 115.820212][ T30] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 115.820264][ T30] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 115.859013][ T8555] __nla_validate_parse: 8 callbacks suppressed [ 115.859370][ T8555] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1009'. [ 115.929443][ T5889] usb 5-1: GET_CAPABILITIES returned 0 [ 115.929532][ T5889] usbtmc 5-1:16.0: can't read capabilities [ 115.983423][ T8563] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1012'. [ 116.131211][ T3271] usb 5-1: USB disconnect, device number 8 [ 116.419614][ T30] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 116.595386][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1020'. [ 116.679032][ T8596] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1022'. [ 116.835756][ T30] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 116.835824][ T30] em28xx 7-1:0.0: board has no eeprom [ 117.122350][ T30] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 117.126673][ T30] em28xx 7-1:0.0: dvb set to bulk mode. [ 117.134458][ T50] em28xx 7-1:0.0: Binding DVB extension [ 117.142643][ T30] usb 7-1: USB disconnect, device number 6 [ 117.152530][ T30] em28xx 7-1:0.0: Disconnecting em28xx [ 117.184306][ T50] em28xx 7-1:0.0: Registering input extension [ 117.187305][ T30] em28xx 7-1:0.0: Closing input extension [ 117.220581][ T30] em28xx: Freeing device [ 117.356676][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 117.356788][ T43] audit: type=1326 audit(1788486688.007:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26fec code=0x7ffc0000 [ 117.356841][ T43] audit: type=1326 audit(1788486688.007:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26fec code=0x7ffc0000 [ 117.363896][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1029'. [ 117.387531][ T43] audit: type=1326 audit(1788486688.037:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f26fec code=0x7ffc0000 [ 117.396648][ T43] audit: type=1326 audit(1788486688.047:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26fec code=0x7ffc0000 [ 117.396733][ T43] audit: type=1326 audit(1788486688.047:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26fec code=0x7ffc0000 [ 117.414897][ T43] audit: type=1326 audit(1788486688.067:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f26fec code=0x7ffc0000 [ 117.422486][ T43] audit: type=1326 audit(1788486688.067:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26fec code=0x7ffc0000 [ 117.422613][ T43] audit: type=1326 audit(1788486688.077:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26fec code=0x7ffc0000 [ 117.438044][ T43] audit: type=1326 audit(1788486688.087:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf7f26fec code=0x7ffc0000 [ 117.438124][ T43] audit: type=1326 audit(1788486688.087:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.3.1031" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26fec code=0x7ffc0000 [ 118.055446][ T8641] syzkaller0: entered promiscuous mode [ 118.062490][ T8641] syzkaller0: entered allmulticast mode [ 118.183658][ T8651] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1040'. [ 120.110102][ T8671] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1045'. [ 120.193175][ T8676] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 120.223195][ T8676] syzkaller0: entered promiscuous mode [ 120.223275][ T8676] syzkaller0: entered allmulticast mode [ 120.333461][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'. [ 120.884834][ T8719] syzkaller0: entered promiscuous mode [ 120.884922][ T8719] syzkaller0: entered allmulticast mode [ 121.082461][ T30] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 121.243418][ T30] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.244991][ T30] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.245026][ T30] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.245070][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.479035][ T30] usb 5-1: GET_CAPABILITIES returned 0 [ 121.479122][ T30] usbtmc 5-1:16.0: can't read capabilities [ 121.689824][ T30] usb 5-1: USB disconnect, device number 9 [ 122.016901][ T8764] syzkaller0: entered promiscuous mode [ 122.016960][ T8764] syzkaller0: entered allmulticast mode [ 122.136164][ T8770] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 122.139812][ T8770] syzkaller0: entered promiscuous mode [ 122.139906][ T8770] syzkaller0: entered allmulticast mode [ 122.279967][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'. [ 122.388198][ T8777] bond_slave_0: left promiscuous mode [ 122.390921][ T8777] bond_slave_0: left allmulticast mode [ 122.407566][ T8777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.492544][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.492682][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.492739][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.492784][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.985493][ T8817] syzkaller1: entered promiscuous mode [ 122.985640][ T8817] syzkaller1: entered allmulticast mode [ 123.182301][ T5834] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 123.352503][ T5834] usb 8-1: Using ep0 maxpacket: 16 [ 123.353212][ T5834] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 123.354251][ T5834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 123.356035][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.356049][ T5834] usb 8-1: Product: syz [ 123.356056][ T5834] usb 8-1: Manufacturer: syz [ 123.356064][ T5834] usb 8-1: SerialNumber: syz [ 123.366779][ T5834] usb 8-1: config 0 descriptor?? [ 123.369398][ T5834] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 123.369423][ T5834] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 123.979955][ T5834] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 124.410352][ T5834] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 124.411602][ T5834] em28xx 8-1:0.0: board has no eeprom [ 124.892097][ T8936] syzkaller0: entered promiscuous mode [ 124.892148][ T8936] syzkaller0: entered allmulticast mode [ 125.476399][ T8820] em28xx 8-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 125.535794][ T5834] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 125.535904][ T5834] em28xx 8-1:0.0: dvb set to bulk mode. [ 125.538409][ T5834] usb 8-1: USB disconnect, device number 9 [ 125.541493][ T5834] em28xx 8-1:0.0: Disconnecting em28xx [ 125.541565][ T35] em28xx 8-1:0.0: Binding DVB extension [ 125.574656][ T35] em28xx 8-1:0.0: Registering input extension [ 125.574817][ T5834] em28xx 8-1:0.0: Closing input extension [ 125.636249][ T5834] em28xx: Freeing device [ 127.042338][ T50] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 127.073426][ T5818] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 127.202743][ T50] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 127.203666][ T50] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 127.203687][ T50] usb 5-1: config 0 has no interface number 0 [ 127.203716][ T50] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 127.203736][ T50] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 40227, setting to 64 [ 127.203767][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.206206][ T50] usb 5-1: config 0 descriptor?? [ 127.228340][ T5818] usb 8-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 127.233643][ T5818] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 127.240273][ T5818] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.244451][ T5818] usb 8-1: Product: syz [ 127.246653][ T5818] usb 8-1: Manufacturer: syz [ 127.246716][ T5818] usb 8-1: SerialNumber: syz [ 127.322328][ T1039] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 127.469093][ T50] usb 5-1: USB disconnect, device number 10 [ 127.482290][ T1039] usb 6-1: Using ep0 maxpacket: 16 [ 127.485847][ T1039] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 127.487143][ T1039] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 127.490192][ T1039] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.490213][ T1039] usb 6-1: Product: syz [ 127.490225][ T1039] usb 6-1: Manufacturer: syz [ 127.490237][ T1039] usb 6-1: SerialNumber: syz [ 127.494827][ T1039] usb 6-1: config 0 descriptor?? [ 127.501303][ T1039] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 127.501338][ T1039] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 127.585249][ T5818] usb 8-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 127.634208][ T5818] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 127.639054][ T5818] usb 8-1: USB disconnect, device number 10 [ 127.664098][ T5905] udevd[5905]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.106833][ T1039] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 128.122739][ T8969] syzkaller0: entered promiscuous mode [ 128.125122][ T8969] syzkaller0: entered allmulticast mode [ 128.551560][ T1039] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 128.551667][ T1039] em28xx 6-1:0.0: board has no eeprom [ 128.642355][ T1039] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 128.642450][ T1039] em28xx 6-1:0.0: dvb set to bulk mode. [ 128.643361][ T10] em28xx 6-1:0.0: Binding DVB extension [ 128.652540][ T1039] usb 6-1: USB disconnect, device number 8 [ 128.653499][ T1039] em28xx 6-1:0.0: Disconnecting em28xx [ 128.696229][ T10] em28xx 6-1:0.0: Registering input extension [ 128.698590][ T1039] em28xx 6-1:0.0: Closing input extension [ 128.724760][ T1039] em28xx: Freeing device [ 129.082073][ T8985] input: syz1 as /devices/virtual/input/input17 [ 130.074396][ T9018] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1170'. [ 130.163947][ T5834] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 130.196727][ T9023] syzkaller0: entered promiscuous mode [ 130.196817][ T9023] syzkaller0: entered allmulticast mode [ 130.315601][ T5834] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 130.328189][ T5834] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.328267][ T5834] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.328335][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.557731][ T5834] usb 6-1: usb_control_msg returned -71 [ 130.557817][ T5834] usbtmc 6-1:16.0: can't read capabilities [ 130.570049][ T5834] usb 6-1: USB disconnect, device number 9 [ 132.218977][ T9056] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1178'. [ 132.283860][ T9060] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1179'. [ 132.783247][ T9083] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1189'. [ 132.894021][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.894082][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.082369][ T5834] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 133.253061][ T5834] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 133.253927][ T5834] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 133.253954][ T5834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.254716][ T5834] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 133.254727][ T5834] usb 7-1: Manufacturer: syz [ 133.260793][ T5834] usb 7-1: config 0 descriptor?? [ 133.324169][ T5834] rc_core: IR keymap rc-hauppauge not found [ 133.324238][ T5834] Registered IR keymap rc-empty [ 133.325126][ T5834] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 133.326193][ T5834] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input18 [ 133.389769][ T9092] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1192'. [ 133.397985][ T9092] block nbd0: reconnected socket [ 133.398137][ T9092] block nbd0: reconnected socket [ 133.399714][ T9092] nbd: socks must be embedded in a SOCK_ITEM attr [ 133.400904][ T6932] block nbd0: Receive control failed (result -32) [ 133.401253][ T67] block nbd0: Receive control failed (result -32) [ 133.483802][ T30] usb 7-1: USB disconnect, device number 7 [ 133.752723][ T9112] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1198'. [ 134.052402][ T5818] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 134.202634][ T5818] usb 6-1: Using ep0 maxpacket: 16 [ 134.203523][ T5818] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 134.205107][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.205142][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.205161][ T5818] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 134.205196][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.209981][ T5818] usb 6-1: config 0 descriptor?? [ 134.402388][ T30] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 134.582371][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 134.584572][ T30] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 134.585921][ T30] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.585939][ T30] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.588002][ T30] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 134.588017][ T30] usb 7-1: Product: syz [ 134.588025][ T30] usb 7-1: Manufacturer: syz [ 134.588032][ T30] usb 7-1: SerialNumber: syz [ 134.596708][ T30] input: appletouch as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input19 [ 134.720813][ T9117] syzkaller1: entered promiscuous mode [ 134.720903][ T9117] syzkaller1: entered allmulticast mode [ 134.731163][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1201'. [ 134.800556][ T30] usb 7-1: USB disconnect, device number 8 [ 134.825746][ T30] appletouch 7-1:1.0: input: appletouch disconnected [ 134.910656][ T5818] usbhid 6-1:0.0: can't add hid device: -71 [ 134.910802][ T5818] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 134.920586][ T5818] usb 6-1: USB disconnect, device number 10 [ 135.558833][ T9149] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1213'. [ 135.595176][ T9149] block nbd0: reconnected socket [ 135.595256][ T9149] block nbd0: reconnected socket [ 135.595287][ T9149] nbd: socks must be embedded in a SOCK_ITEM attr [ 135.597312][ T67] block nbd0: Receive control failed (result -32) [ 135.597360][ T6932] block nbd0: Receive control failed (result -32) [ 135.840958][ T9156] netlink: 'syz.3.1216': attribute type 1 has an invalid length. [ 135.844879][ T9156] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1216'. [ 135.861670][ T9156] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1216'. [ 136.763225][ T9179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'. [ 136.768698][ T9179] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1224'. [ 136.774262][ T9179] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1224'. [ 136.867909][ T9182] netlink: 'syz.2.1225': attribute type 1 has an invalid length. [ 136.867964][ T9182] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1225'. [ 136.979754][ T9185] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1225'. [ 137.102050][ T9189] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1226'. [ 137.119185][ T9189] block nbd0: reconnected socket [ 137.119320][ T9189] block nbd0: reconnected socket [ 137.119674][ T9189] nbd: socks must be embedded in a SOCK_ITEM attr [ 137.120730][ T67] block nbd0: Receive control failed (result -32) [ 137.122489][ T6932] block nbd0: Receive control failed (result -32) [ 137.328217][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1230'. [ 137.401065][ T9209] program syz.3.1233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.480030][ T9213] pim6reg: entered allmulticast mode [ 137.491089][ T9213] pim6reg: left allmulticast mode [ 138.150171][ T9224] block nbd0: reconnected socket [ 138.150348][ T9224] block nbd0: reconnected socket [ 138.150361][ T9224] nbd: socks must be embedded in a SOCK_ITEM attr [ 138.151200][ T6932] block nbd0: Receive control failed (result -32) [ 138.151255][ T6932] block nbd0: Receive control failed (result -32) [ 138.497608][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 138.500411][ T43] audit: type=1326 audit(1788486709.147:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 138.500478][ T43] audit: type=1326 audit(1788486709.147:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 138.508752][ T43] audit: type=1326 audit(1788486709.157:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 138.509046][ T43] audit: type=1326 audit(1788486709.157:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 138.509213][ T43] audit: type=1326 audit(1788486709.157:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 138.509569][ T43] audit: type=1326 audit(1788486709.157:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 138.509838][ T43] audit: type=1326 audit(1788486709.157:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 138.511258][ T43] audit: type=1326 audit(1788486709.157:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 138.511576][ T43] audit: type=1326 audit(1788486709.157:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 138.511740][ T43] audit: type=1326 audit(1788486709.157:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9246 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7fec code=0x7ffc0000 [ 138.594686][ T9252] block nbd0: reconnected socket [ 138.594848][ T9252] block nbd0: reconnected socket [ 138.594912][ T9252] nbd: socks must be embedded in a SOCK_ITEM attr [ 138.596010][ T6932] block nbd0: Receive control failed (result -32) [ 138.596808][ T67] block nbd0: Receive control failed (result -32) [ 139.315278][ T5818] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 139.462440][ T5818] usb 5-1: Using ep0 maxpacket: 8 [ 139.463596][ T5818] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 139.465897][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.465921][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.473816][ T5818] usb 5-1: config 0 descriptor?? [ 139.700953][ T5818] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 139.989589][ T9317] syzkaller1: entered promiscuous mode [ 139.991604][ T9317] syzkaller1: entered allmulticast mode [ 140.796157][ T9347] __nla_validate_parse: 7 callbacks suppressed [ 140.796235][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1286'. [ 140.921371][ T9353] bridge0: port 3(netdevsim0) entered blocking state [ 140.921479][ T9353] bridge0: port 3(netdevsim0) entered disabled state [ 140.922383][ T9353] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 140.924505][ T9353] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 141.527293][ T9374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1297'. [ 141.975493][ T9402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1305'. [ 142.340130][ T25] usb 5-1: USB disconnect, device number 11 [ 143.950346][ T9473] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 144.048743][ T9475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.162871][ T5834] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 144.332780][ T5834] usb 7-1: Using ep0 maxpacket: 16 [ 144.339552][ T5834] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 144.345696][ T5834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 144.351885][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.355840][ T5834] usb 7-1: Product: syz [ 144.358293][ T5834] usb 7-1: Manufacturer: syz [ 144.362170][ T5834] usb 7-1: SerialNumber: syz [ 144.368598][ T5834] usb 7-1: config 0 descriptor?? [ 144.378838][ T5834] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 144.383065][ T5834] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 144.790387][ T50] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 144.790478][ T50] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 144.795002][ T50] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 144.795027][ T50] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 144.795045][ T50] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 144.795064][ T50] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 144.795082][ T50] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 144.795102][ T50] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 144.795120][ T50] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 144.795138][ T50] hid-generic 0006:0008:0001.0003: unknown main item tag 0x0 [ 144.807655][ T50] hid-generic 0006:0008:0001.0003: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 144.826256][ T43] kauditd_printk_skb: 74 callbacks suppressed [ 144.826277][ T43] audit: type=1326 audit(1788486715.477:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.1.1336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 144.826325][ T43] audit: type=1326 audit(1788486715.477:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.1.1336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 144.826974][ T43] audit: type=1326 audit(1788486715.477:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.1.1336" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 144.827002][ T43] audit: type=1326 audit(1788486715.477:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.1.1336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 144.827024][ T43] audit: type=1326 audit(1788486715.477:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.1.1336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 144.827261][ T43] audit: type=1326 audit(1788486715.477:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.1.1336" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 144.827383][ T43] audit: type=1326 audit(1788486715.477:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.1.1336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 144.827407][ T43] audit: type=1326 audit(1788486715.477:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.1.1336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 144.827669][ T43] audit: type=1326 audit(1788486715.477:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.1.1336" exe="/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 144.827709][ T43] audit: type=1326 audit(1788486715.477:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.1.1336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 144.882140][ T9496] fido_id[9496]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 144.990295][ T5834] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 145.272392][ T50] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 145.403351][ T5834] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 145.408640][ T5834] em28xx 7-1:0.0: board has no eeprom [ 145.432467][ T50] usb 6-1: Using ep0 maxpacket: 32 [ 145.433296][ T50] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 145.434256][ T50] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.434280][ T50] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.436262][ T50] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 145.436283][ T50] usb 6-1: Product: syz [ 145.436294][ T50] usb 6-1: Manufacturer: syz [ 145.436307][ T50] usb 6-1: SerialNumber: syz [ 145.449645][ T50] input: appletouch as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input20 [ 145.482657][ T5834] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 145.486406][ T5834] em28xx 7-1:0.0: dvb set to bulk mode. [ 145.492089][ T35] em28xx 7-1:0.0: Binding DVB extension [ 145.504919][ T5834] usb 7-1: USB disconnect, device number 9 [ 145.509095][ T5834] em28xx 7-1:0.0: Disconnecting em28xx [ 145.531308][ T35] em28xx 7-1:0.0: Registering input extension [ 145.534534][ T5834] em28xx 7-1:0.0: Closing input extension [ 145.580988][ T5834] em28xx: Freeing device [ 145.654454][ T50] usb 6-1: USB disconnect, device number 11 [ 145.669327][ T50] appletouch 6-1:1.0: input: appletouch disconnected [ 145.925242][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1348'. [ 146.361375][ T9542] input: syz1 as /devices/virtual/input/input22 [ 147.274104][ T5834] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 147.422903][ T5834] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 147.428550][ T5834] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 147.428637][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.436252][ T5834] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 147.436306][ T5834] usb 5-1: Manufacturer: syz [ 147.443533][ T5834] usb 5-1: config 0 descriptor?? [ 147.522368][ T5834] rc_core: IR keymap rc-hauppauge not found [ 147.522411][ T5834] Registered IR keymap rc-empty [ 147.523086][ T5834] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 147.524168][ T5834] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input23 [ 147.653456][ T30] usb 5-1: USB disconnect, device number 12 [ 147.725053][ T5530] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 147.752376][ T1039] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 147.893939][ T5530] usb 6-1: Using ep0 maxpacket: 8 [ 147.895078][ T5530] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 147.896293][ T5530] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.896332][ T5530] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.901094][ T5530] usb 6-1: config 0 descriptor?? [ 147.922551][ T1039] usb 8-1: Using ep0 maxpacket: 8 [ 147.923607][ T1039] usb 8-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 147.924514][ T1039] usb 8-1: config 0 has no interfaces? [ 147.924542][ T1039] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.933153][ T1039] usb 8-1: config 0 descriptor?? [ 148.114473][ T5530] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 148.137578][ T9579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.138119][ T9579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.143511][ T5530] usb 8-1: USB disconnect, device number 11 [ 148.933386][ T5818] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 149.051817][ T9616] kAFS: unable to lookup cell '' [ 149.092507][ T5818] usb 5-1: Using ep0 maxpacket: 32 [ 149.093299][ T5818] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 149.094306][ T5818] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.094329][ T5818] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.095994][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 149.096011][ T5818] usb 5-1: Product: syz [ 149.096021][ T5818] usb 5-1: Manufacturer: syz [ 149.096030][ T5818] usb 5-1: SerialNumber: syz [ 149.109890][ T5818] input: appletouch as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input24 [ 149.319014][ T30] usb 5-1: USB disconnect, device number 13 [ 149.335687][ T9628] nbd: must specify at least one socket [ 149.337494][ T30] appletouch 5-1:1.0: input: appletouch disconnected [ 149.457922][ T9628] syzkaller1: entered promiscuous mode [ 149.458002][ T9628] syzkaller1: entered allmulticast mode [ 149.482553][ T5530] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 149.632406][ T5530] usb 7-1: Using ep0 maxpacket: 16 [ 149.633261][ T5530] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 149.634643][ T5530] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.634677][ T5530] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.634698][ T5530] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 149.634738][ T5530] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.637055][ T5530] usb 7-1: config 0 descriptor?? [ 150.051811][ T9622] syzkaller1: entered promiscuous mode [ 150.051879][ T9622] syzkaller1: entered allmulticast mode [ 150.054983][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1392'. [ 150.133954][ T5530] usbhid 7-1:0.0: can't add hid device: -71 [ 150.134040][ T5530] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 150.140072][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1395'. [ 150.148838][ T5530] usb 7-1: USB disconnect, device number 10 [ 150.308385][ T9646] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1397'. [ 150.317875][ T9646] block nbd0: reconnected socket [ 150.317982][ T9646] block nbd0: reconnected socket [ 150.318011][ T9646] nbd: socks must be embedded in a SOCK_ITEM attr [ 150.318904][ T6932] block nbd0: Receive control failed (result -32) [ 150.319114][ T67] block nbd0: Receive control failed (result -32) [ 150.448426][ T43] kauditd_printk_skb: 12 callbacks suppressed [ 150.448554][ T43] audit: type=1326 audit(1788486721.097:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9651 comm="syz.3.1399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26fec code=0x7ffc0000 [ 150.448617][ T43] audit: type=1326 audit(1788486721.097:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9651 comm="syz.3.1399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26fec code=0x7ffc0000 [ 150.448985][ T43] audit: type=1326 audit(1788486721.097:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9651 comm="syz.3.1399" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f26fec code=0x7ffc0000 [ 150.449327][ T43] audit: type=1326 audit(1788486721.097:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9651 comm="syz.3.1399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26fec code=0x7ffc0000 [ 150.449484][ T43] audit: type=1326 audit(1788486721.097:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9651 comm="syz.3.1399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26fec code=0x7ffc0000 [ 150.449904][ T43] audit: type=1326 audit(1788486721.097:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9651 comm="syz.3.1399" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f26fec code=0x7ffc0000 [ 150.450132][ T43] audit: type=1326 audit(1788486721.097:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9651 comm="syz.3.1399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26fec code=0x7ffc0000 [ 150.450455][ T43] audit: type=1326 audit(1788486721.097:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9651 comm="syz.3.1399" exe="/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf7f26fec code=0x7ffc0000 [ 150.450530][ T43] audit: type=1326 audit(1788486721.097:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9651 comm="syz.3.1399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26fec code=0x7ffc0000 [ 150.450622][ T43] audit: type=1326 audit(1788486721.097:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9651 comm="syz.3.1399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26fec code=0x7ffc0000 [ 150.774311][ T5818] usb 6-1: USB disconnect, device number 12 [ 151.054580][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1404'. [ 151.151742][ T9674] syzkaller0: entered promiscuous mode [ 151.151871][ T9674] syzkaller0: entered allmulticast mode [ 151.153233][ T9676] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1406'. [ 151.179670][ T9676] block nbd0: reconnected socket [ 151.179752][ T9676] block nbd0: reconnected socket [ 151.179802][ T9676] nbd: socks must be embedded in a SOCK_ITEM attr [ 151.182583][ T67] block nbd0: Receive control failed (result -32) [ 151.182845][ T6932] block nbd0: Receive control failed (result -32) [ 151.938035][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'. [ 151.938094][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'. [ 153.324841][ T9714] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1415'. [ 153.342494][ T9714] block nbd0: reconnected socket [ 153.344581][ T9714] block nbd0: reconnected socket [ 153.344616][ T9714] nbd: socks must be embedded in a SOCK_ITEM attr [ 153.350674][ T67] block nbd0: Receive control failed (result -32) [ 153.354556][ T6932] block nbd0: Receive control failed (result -32) [ 153.403434][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1413'. [ 153.490503][ T9725] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1417'. [ 153.550100][ T9729] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1417'. [ 154.254151][ T9736] syzkaller0: entered promiscuous mode [ 154.254256][ T9736] syzkaller0: entered allmulticast mode [ 154.570772][ T9751] block nbd0: reconnected socket [ 154.570927][ T9751] block nbd0: reconnected socket [ 154.571281][ T9751] nbd: socks must be embedded in a SOCK_ITEM attr [ 154.582926][ T1039] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 154.734963][ T1039] usb 6-1: Using ep0 maxpacket: 32 [ 154.735759][ T1039] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 154.736628][ T1039] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.736649][ T1039] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.744641][ T1039] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 154.744665][ T1039] usb 6-1: Product: syz [ 154.744677][ T1039] usb 6-1: Manufacturer: syz [ 154.744688][ T1039] usb 6-1: SerialNumber: syz [ 154.769350][ T1039] input: appletouch as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input25 [ 154.977973][ T1039] usb 6-1: USB disconnect, device number 13 [ 155.032621][ T1039] appletouch 6-1:1.0: input: appletouch disconnected [ 155.328693][ T67] block nbd0: Receive control failed (result -32) [ 155.333008][ T6932] block nbd0: Receive control failed (result -32) [ 155.662731][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1425'. [ 156.207787][ T9748] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1424'. [ 156.385514][ T9771] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1431'. [ 156.491604][ T9776] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1431'. [ 156.709418][ T9786] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1434'. [ 156.731942][ T9786] block nbd0: reconnected socket [ 156.732035][ T9786] block nbd0: reconnected socket [ 156.732080][ T9786] nbd: socks must be embedded in a SOCK_ITEM attr [ 156.733007][ T67] block nbd0: Receive control failed (result -32) [ 156.733211][ T6932] block nbd0: Receive control failed (result -32) [ 156.937736][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1436'. [ 157.049428][ T9796] syzkaller0: entered promiscuous mode [ 157.049531][ T9796] syzkaller0: entered allmulticast mode [ 158.982833][ T9824] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1443'. [ 159.018353][ T9824] block nbd0: reconnected socket [ 159.018904][ T9824] block nbd0: reconnected socket [ 159.018915][ T9824] nbd: socks must be embedded in a SOCK_ITEM attr [ 159.019716][ T67] block nbd0: Receive control failed (result -32) [ 159.019897][ T6932] block nbd0: Receive control failed (result -32) [ 159.177855][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1445'. [ 159.342435][ T9848] syzkaller0: entered promiscuous mode [ 159.342504][ T9848] syzkaller0: entered allmulticast mode [ 161.255093][ T9875] syzkaller0: entered promiscuous mode [ 161.255158][ T9875] syzkaller0: entered allmulticast mode [ 161.325994][ T9881] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1455'. [ 161.337699][ T9881] block nbd0: reconnected socket [ 161.339424][ T9881] block nbd0: reconnected socket [ 161.341122][ T9881] nbd: socks must be embedded in a SOCK_ITEM attr [ 161.344539][ T67] block nbd0: Receive control failed (result -32) [ 161.344657][ T6932] block nbd0: Receive control failed (result -32) [ 161.452369][ T9891] syzkaller0: entered promiscuous mode [ 161.454380][ T9891] syzkaller0: entered allmulticast mode [ 161.478102][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'. [ 161.821199][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'. [ 162.312507][ T9909] syzkaller0: entered promiscuous mode [ 162.312575][ T9909] syzkaller0: entered allmulticast mode [ 162.580924][ T9922] syzkaller0: entered promiscuous mode [ 162.581023][ T9922] syzkaller0: entered allmulticast mode [ 162.657720][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1470'. [ 163.014473][ T35] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 163.072354][ T5530] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 163.172440][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 163.174249][ T35] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 163.176117][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.176198][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.181984][ T35] usb 6-1: config 0 descriptor?? [ 163.212428][ T5530] usb 5-1: device descriptor read/64, error -71 [ 163.393730][ T35] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 163.462417][ T5530] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 163.592396][ T5530] usb 5-1: device descriptor read/64, error -71 [ 163.703393][ T5530] usb usb5-port1: attempt power cycle [ 163.877746][ T9955] syzkaller0: entered promiscuous mode [ 163.877802][ T9955] syzkaller0: entered allmulticast mode [ 164.042670][ T5530] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 164.063197][ T5530] usb 5-1: device descriptor read/8, error -71 [ 164.132542][ T35] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 164.293231][ T35] usb 8-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 164.300065][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.302363][ T5530] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 164.308083][ T35] usb 8-1: Product: syz [ 164.308104][ T35] usb 8-1: Manufacturer: syz [ 164.308115][ T35] usb 8-1: SerialNumber: syz [ 164.320794][ T35] qcserial 8-1:1.0: Qualcomm USB modem converter detected [ 164.323473][ T5530] usb 5-1: device descriptor read/8, error -71 [ 164.335795][ T35] usb 8-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 164.432731][ T5530] usb usb5-port1: unable to enumerate USB device [ 164.593847][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1486'. [ 164.652987][ T9956] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0004/input/input26 [ 164.725067][ T9956] hid-generic 0003:0627:0001.0004: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 164.773084][ T9956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.773695][ T9956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.827407][ T9972] netlink: 'syz.3.1482': attribute type 29 has an invalid length. [ 165.779496][ T5530] usb 8-1: USB disconnect, device number 12 [ 165.788549][ T5530] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 165.789177][ T5530] qcserial 8-1:1.0: device disconnected [ 166.025440][ T35] usb 6-1: USB disconnect, device number 14 [ 166.252440][ T1039] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 166.335680][ T9992] nbd1: detected capacity change from 0 to 32 [ 166.335772][ T67] block nbd1: Receive control failed (result -22) [ 166.344597][ T5114] block nbd1: Dead connection, failed to find a fallback [ 166.344663][ T5114] block nbd1: shutting down sockets [ 166.344756][ T5114] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.344823][ T5114] Buffer I/O error on dev nbd1, logical block 0, async page read [ 166.346472][ T5114] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.346495][ T5114] Buffer I/O error on dev nbd1, logical block 0, async page read [ 166.346803][ T5114] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.346825][ T5114] Buffer I/O error on dev nbd1, logical block 0, async page read [ 166.346885][ T5114] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.346898][ T5114] Buffer I/O error on dev nbd1, logical block 0, async page read [ 166.346947][ T5114] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.346960][ T5114] Buffer I/O error on dev nbd1, logical block 0, async page read [ 166.347027][ T5114] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.347040][ T5114] Buffer I/O error on dev nbd1, logical block 0, async page read [ 166.347095][ T5114] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.347108][ T5114] Buffer I/O error on dev nbd1, logical block 0, async page read [ 166.349538][ T5114] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.349559][ T5114] Buffer I/O error on dev nbd1, logical block 0, async page read [ 166.349594][ T5905] ldm_validate_partition_table(): Disk read failed. [ 166.349674][ T5114] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.349689][ T5114] Buffer I/O error on dev nbd1, logical block 0, async page read [ 166.349742][ T5114] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 166.349755][ T5114] Buffer I/O error on dev nbd1, logical block 0, async page read [ 166.349853][ T5905] Dev nbd1: unable to read RDB block 0 [ 166.350168][ T5905] nbd1: unable to read partition table [ 166.374401][ T5905] ldm_validate_partition_table(): Disk read failed. [ 166.374585][ T5905] Dev nbd1: unable to read RDB block 0 [ 166.374838][ T35] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 166.375287][ T5905] nbd1: unable to read partition table [ 166.403145][ T1039] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 166.404506][ T1039] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 166.404551][ T1039] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.406027][ T1039] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 166.406049][ T1039] usb 5-1: Manufacturer: syz [ 166.410062][ T1039] usb 5-1: config 0 descriptor?? [ 166.462365][ T1039] rc_core: IR keymap rc-hauppauge not found [ 166.462439][ T1039] Registered IR keymap rc-empty [ 166.464938][ T9996] syzkaller1: entered promiscuous mode [ 166.464957][ T9996] syzkaller1: entered allmulticast mode [ 166.465497][ T1039] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 166.470528][ T1039] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input27 [ 166.522460][ T35] usb 6-1: Using ep0 maxpacket: 16 [ 166.522959][ T35] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 166.524399][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 166.526903][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.526925][ T35] usb 6-1: Product: syz [ 166.526937][ T35] usb 6-1: Manufacturer: syz [ 166.526948][ T35] usb 6-1: SerialNumber: syz [ 166.530086][ T35] usb 6-1: config 0 descriptor?? [ 166.535898][ T35] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 166.535934][ T35] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 166.622495][ T1039] usb 5-1: USB disconnect, device number 18 [ 166.701191][ T9999] syzkaller0: entered promiscuous mode [ 166.701304][ T9999] syzkaller0: entered allmulticast mode [ 167.140488][ T35] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 167.552793][ T35] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 167.552839][ T35] em28xx 6-1:0.0: board has no eeprom [ 167.628284][ T35] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 167.628370][ T35] em28xx 6-1:0.0: dvb set to bulk mode. [ 167.640775][ T854] em28xx 6-1:0.0: Binding DVB extension [ 167.645820][ T35] usb 6-1: USB disconnect, device number 15 [ 167.646516][ T35] em28xx 6-1:0.0: Disconnecting em28xx [ 167.664518][ T854] em28xx 6-1:0.0: Registering input extension [ 167.664969][ T35] em28xx 6-1:0.0: Closing input extension [ 167.701442][ T35] em28xx: Freeing device [ 168.179975][T10005] netlink: 'syz.1.1497': attribute type 1 has an invalid length. [ 168.180085][T10005] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1497'. [ 168.251097][T10007] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1497'. [ 168.716763][T10011] syzkaller0: entered promiscuous mode [ 168.716840][T10011] syzkaller0: entered allmulticast mode [ 168.900321][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1500'. [ 168.950229][T10025] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1503'. [ 168.964398][T10025] block nbd0: reconnected socket [ 168.964528][T10025] block nbd0: reconnected socket [ 168.964540][T10025] nbd: socks must be embedded in a SOCK_ITEM attr [ 168.966040][ T6932] block nbd0: Receive control failed (result -32) [ 168.966332][ T67] block nbd0: Receive control failed (result -32) [ 169.042697][ T1039] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 169.182468][ T1039] usb 6-1: device descriptor read/64, error -71 [ 169.232478][ T5818] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 169.252413][ T5530] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 169.392951][ T5818] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 169.393897][ T5818] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 169.393950][ T5818] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.394834][ T5818] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 169.394855][ T5818] usb 8-1: Manufacturer: syz [ 169.397242][ T5818] usb 8-1: config 0 descriptor?? [ 169.402435][ T5530] usb 7-1: Using ep0 maxpacket: 16 [ 169.403450][ T5530] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 169.405290][ T5530] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 169.410691][ T5530] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.410715][ T5530] usb 7-1: Product: syz [ 169.410726][ T5530] usb 7-1: Manufacturer: syz [ 169.410737][ T5530] usb 7-1: SerialNumber: syz [ 169.413323][ T5530] usb 7-1: config 0 descriptor?? [ 169.420221][ T5530] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 169.420253][ T5530] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 169.422362][ T1039] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 169.453337][ T5818] rc_core: IR keymap rc-hauppauge not found [ 169.453407][ T5818] Registered IR keymap rc-empty [ 169.454608][ T5818] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 169.455463][ T5818] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input29 [ 169.552318][ T1039] usb 6-1: device descriptor read/64, error -71 [ 169.604998][ T5818] usb 8-1: USB disconnect, device number 13 [ 169.664180][ T1039] usb usb6-port1: attempt power cycle [ 170.012639][ T1039] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 170.027350][ T67] block nbd2: Receive control failed (result -22) [ 170.035491][ T5530] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 170.038269][ T1039] usb 6-1: device descriptor read/8, error -71 [ 170.041409][T10040] nbd2: detected capacity change from 0 to 32 [ 170.045845][ T4496] block nbd2: Dead connection, failed to find a fallback [ 170.045927][ T4496] block nbd2: shutting down sockets [ 170.054199][ T5905] ldm_validate_partition_table(): Disk read failed. [ 170.058431][ T5905] Dev nbd2: unable to read RDB block 0 [ 170.061829][ T5905] nbd2: unable to read partition table [ 170.070602][ T5905] ldm_validate_partition_table(): Disk read failed. [ 170.075192][ T5905] Dev nbd2: unable to read RDB block 0 [ 170.075915][ T5905] nbd2: unable to read partition table [ 170.159610][T10040] syzkaller1: entered promiscuous mode [ 170.159676][T10040] syzkaller1: entered allmulticast mode [ 170.280290][T10045] syzkaller0: entered promiscuous mode [ 170.280378][T10045] syzkaller0: entered allmulticast mode [ 170.292384][ T1039] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 170.322961][ T1039] usb 6-1: device descriptor read/8, error -71 [ 170.451429][ T1039] usb usb6-port1: unable to enumerate USB device [ 170.455955][ T5530] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 170.467100][ T5530] em28xx 7-1:0.0: board has no eeprom [ 170.532454][ T5530] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 170.532560][ T5530] em28xx 7-1:0.0: dvb set to bulk mode. [ 170.534077][ T1039] em28xx 7-1:0.0: Binding DVB extension [ 170.541465][ T5530] usb 7-1: USB disconnect, device number 11 [ 170.542809][ T5530] em28xx 7-1:0.0: Disconnecting em28xx [ 170.574477][ T1039] em28xx 7-1:0.0: Registering input extension [ 170.575224][ T5530] em28xx 7-1:0.0: Closing input extension [ 170.598416][ T5530] em28xx: Freeing device [ 171.060472][T10048] netlink: 'syz.2.1510': attribute type 1 has an invalid length. [ 171.060526][T10048] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1510'. [ 171.173425][T10051] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1510'. [ 172.099201][T10059] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1513'. [ 172.114873][T10059] block nbd0: reconnected socket [ 172.115013][T10059] block nbd0: reconnected socket [ 172.115340][T10059] nbd: socks must be embedded in a SOCK_ITEM attr [ 172.116997][ T6932] block nbd0: Receive control failed (result -32) [ 172.117154][ T67] block nbd0: Receive control failed (result -32) [ 172.250852][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1514'. [ 172.492445][ T50] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 172.562551][ T5530] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 172.632947][ T1039] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 172.644635][ T50] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 172.645648][ T50] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 172.645674][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.646879][ T50] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 172.646904][ T50] usb 7-1: Manufacturer: syz [ 172.650969][ T50] usb 7-1: config 0 descriptor?? [ 172.692913][ T5530] usb 8-1: device descriptor read/64, error -71 [ 172.712652][ T50] rc_core: IR keymap rc-hauppauge not found [ 172.712727][ T50] Registered IR keymap rc-empty [ 172.713913][ T50] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 172.718597][ T50] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input31 [ 172.762486][ T1039] usb 5-1: device descriptor read/64, error -71 [ 172.859124][ T50] usb 7-1: USB disconnect, device number 12 [ 172.932422][ T5530] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 173.012370][ T1039] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 173.082313][ T5530] usb 8-1: device descriptor read/64, error -71 [ 173.163447][ T1039] usb 5-1: device descriptor read/64, error -71 [ 173.193865][ T5530] usb usb8-port1: attempt power cycle [ 173.227028][T10090] syzkaller0: entered promiscuous mode [ 173.227126][T10090] syzkaller0: entered allmulticast mode [ 173.272611][ T1039] usb usb5-port1: attempt power cycle [ 173.542376][ T5530] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 173.563338][ T5530] usb 8-1: device descriptor read/8, error -71 [ 173.642381][ T1039] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 173.663653][ T1039] usb 5-1: device descriptor read/8, error -71 [ 173.812502][ T5530] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 173.845349][ T5530] usb 8-1: device descriptor read/8, error -71 [ 173.934851][ T1039] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 173.953355][ T5530] usb usb8-port1: unable to enumerate USB device [ 173.956730][ T1039] usb 5-1: device descriptor read/8, error -71 [ 174.072722][ T1039] usb usb5-port1: unable to enumerate USB device [ 174.351557][T10095] nbd: must specify a size in bytes for the device [ 174.979602][T10101] syzkaller1: entered promiscuous mode [ 174.981934][T10101] syzkaller1: entered allmulticast mode [ 175.089831][T10105] netlink: 'syz.1.1525': attribute type 1 has an invalid length. [ 175.089906][T10105] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1525'. [ 175.098599][T10105] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1525'. [ 175.357303][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1526'. [ 175.542398][ T10] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 175.713658][ T10] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 175.721550][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.726439][ T10] usb 7-1: config 0 has no interfaces? [ 175.728705][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.736204][ T10] usb 7-1: config 0 descriptor?? [ 175.792291][ T1039] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 175.864689][T10138] syzkaller0: entered promiscuous mode [ 175.864784][T10138] syzkaller0: entered allmulticast mode [ 175.957284][ T30] usb 7-1: USB disconnect, device number 13 [ 175.976053][ T1039] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 175.981662][ T1039] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 175.985517][ T1039] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.990215][ T1039] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 175.993481][ T1039] usb 5-1: Manufacturer: syz [ 175.997745][ T1039] usb 5-1: config 0 descriptor?? [ 176.082417][ T1039] rc_core: IR keymap rc-hauppauge not found [ 176.085072][ T1039] Registered IR keymap rc-empty [ 176.088038][ T1039] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 176.093824][ T1039] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input32 [ 176.224438][ T5818] usb 5-1: USB disconnect, device number 23 [ 176.327321][T10142] netlink: 'syz.3.1534': attribute type 1 has an invalid length. [ 176.327409][T10142] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1534'. [ 176.382299][T10144] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1534'. [ 177.052584][ T5818] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 177.192847][ T5818] usb 5-1: device descriptor read/64, error -71 [ 177.474035][ T5818] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 177.612643][ T5818] usb 5-1: device descriptor read/64, error -71 [ 177.724202][ T5818] usb usb5-port1: attempt power cycle [ 177.982399][ T1039] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 178.075234][ T5818] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 178.093171][ T5818] usb 5-1: device descriptor read/8, error -71 [ 178.122615][ T1039] usb 7-1: device descriptor read/64, error -71 [ 178.332413][ T5818] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 178.353636][ T5818] usb 5-1: device descriptor read/8, error -71 [ 178.382383][ T1039] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 178.462778][ T5818] usb usb5-port1: unable to enumerate USB device [ 178.512419][ T1039] usb 7-1: device descriptor read/64, error -71 [ 178.522716][ T35] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 178.624794][ T1039] usb usb7-port1: attempt power cycle [ 178.673238][ T35] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 178.674267][ T35] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 178.674289][ T35] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.674304][ T35] usb 8-1: config 0 has no interface number 0 [ 178.674340][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.676649][ T35] usb 8-1: config 0 descriptor?? [ 178.680447][ T35] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 178.883223][ T35] usb 8-1: USB disconnect, device number 18 [ 178.962391][ T1039] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 178.983230][ T1039] usb 7-1: device descriptor read/8, error -71 [ 179.223099][ T1039] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 179.243292][ T1039] usb 7-1: device descriptor read/8, error -71 [ 179.353782][ T1039] usb usb7-port1: unable to enumerate USB device [ 179.745683][T10174] syzkaller0: entered promiscuous mode [ 179.745772][T10174] syzkaller0: entered allmulticast mode [ 180.159339][T10190] netlink: 'syz.1.1549': attribute type 1 has an invalid length. [ 180.164796][T10190] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1549'. [ 180.220276][T10194] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1549'. [ 182.087578][T10212] block nbd0: reconnected socket [ 182.087703][T10212] block nbd0: reconnected socket [ 182.087729][T10212] nbd: socks must be embedded in a SOCK_ITEM attr [ 182.088990][ T67] block nbd0: Receive control failed (result -32) [ 182.089863][ T6932] block nbd0: Receive control failed (result -32) [ 182.092434][ T25] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 182.243487][ T25] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 182.244751][ T25] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 182.244774][ T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.244791][ T25] usb 7-1: config 0 has no interface number 0 [ 182.244828][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.247367][ T25] usb 7-1: config 0 descriptor?? [ 182.252044][ T25] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 182.252341][ T1039] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 182.393944][ T1039] usb 6-1: device descriptor read/64, error -71 [ 182.394085][ T10] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 182.457601][ T5834] usb 7-1: USB disconnect, device number 18 [ 182.543096][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 182.544120][ T10] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 182.544619][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.642319][ T1039] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 182.772366][ T1039] usb 6-1: device descriptor read/64, error -71 [ 182.883715][ T1039] usb usb6-port1: attempt power cycle [ 183.244009][ T1039] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 183.263074][ T1039] usb 6-1: device descriptor read/8, error -71 [ 183.512661][ T1039] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 183.543061][ T1039] usb 6-1: device descriptor read/8, error -71 [ 183.652678][ T1039] usb usb6-port1: unable to enumerate USB device [ 184.020209][T10230] netlink: 'syz.0.1563': attribute type 1 has an invalid length. [ 184.024850][T10230] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1563'. [ 184.042587][T10230] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1563'. [ 184.214585][T10240] block nbd0: reconnected socket [ 184.214711][T10240] block nbd0: reconnected socket [ 184.214722][T10240] nbd: socks must be embedded in a SOCK_ITEM attr [ 184.215863][ T67] block nbd0: Receive control failed (result -32) [ 184.217184][ T6932] block nbd0: Receive control failed (result -32) [ 184.286186][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1565'. [ 184.892388][ T1039] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 185.048918][ T1039] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 185.050408][ T1039] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 185.050430][ T1039] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.050445][ T1039] usb 7-1: config 0 has no interface number 0 [ 185.050482][ T1039] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.068986][ T1039] usb 7-1: config 0 descriptor?? [ 185.071703][ T1039] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 185.158779][ T5818] usb 8-1: USB disconnect, device number 19 [ 185.277550][ T50] usb 7-1: USB disconnect, device number 19 [ 185.444130][T10269] netlink: 'syz.3.1575': attribute type 1 has an invalid length. [ 185.444211][T10269] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1575'. [ 185.497913][T10271] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1575'. [ 186.052991][T10274] block nbd0: reconnected socket [ 186.053096][T10274] block nbd0: reconnected socket [ 186.055892][T10274] nbd: socks must be embedded in a SOCK_ITEM attr [ 186.057073][ T67] block nbd0: Receive control failed (result -32) [ 186.059776][ T6932] block nbd0: Receive control failed (result -32) [ 186.188417][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1577'. [ 186.372491][ T5834] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 186.469624][T10302] block nbd0: reconnected socket [ 186.469690][T10302] block nbd0: reconnected socket [ 186.469731][T10302] nbd: socks must be embedded in a SOCK_ITEM attr [ 186.473887][ T6932] block nbd0: Receive control failed (result -32) [ 186.473950][ T6932] block nbd0: Receive control failed (result -32) [ 186.512305][ T5834] usb 5-1: device descriptor read/64, error -71 [ 186.544298][T10305] syzkaller0: entered promiscuous mode [ 186.546866][T10305] syzkaller0: entered allmulticast mode [ 186.782404][ T5834] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 186.912398][ T5834] usb 5-1: device descriptor read/64, error -71 [ 187.034375][ T5834] usb usb5-port1: attempt power cycle [ 187.358326][T10314] netlink: 'syz.3.1590': attribute type 1 has an invalid length. [ 187.358406][T10314] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1590'. [ 187.402487][ T5834] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 187.413589][T10316] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1590'. [ 187.433073][ T5834] usb 5-1: device descriptor read/8, error -71 [ 187.667633][ T5834] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 187.690843][ T5834] usb 5-1: device descriptor read/8, error -71 [ 187.792821][ T5834] usb usb5-port1: unable to enumerate USB device [ 188.888931][T10344] netlink: 'syz.3.1601': attribute type 1 has an invalid length. [ 188.889007][T10344] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1601'. [ 188.944517][T10347] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1601'. [ 188.969743][T10348] syzkaller0: entered promiscuous mode [ 188.969815][T10348] syzkaller0: entered allmulticast mode [ 190.993449][ T50] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 191.093004][ T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 191.122383][ T50] usb 8-1: device descriptor read/64, error -71 [ 191.170205][T10400] netlink: 'syz.1.1617': attribute type 1 has an invalid length. [ 191.170275][T10400] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1617'. [ 191.174832][T10400] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1617'. [ 191.243103][ T10] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 191.249909][ T10] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 191.254587][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.262000][ T10] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 191.262086][ T10] usb 7-1: Manufacturer: syz [ 191.274643][ T10] usb 7-1: config 0 descriptor?? [ 191.332515][ T10] rc_core: IR keymap rc-hauppauge not found [ 191.332591][ T10] Registered IR keymap rc-empty [ 191.336298][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 191.341177][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input33 [ 191.362262][ T50] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 191.467085][T10408] syzkaller0: entered promiscuous mode [ 191.467165][T10408] syzkaller0: entered allmulticast mode [ 191.486643][ T5818] usb 7-1: USB disconnect, device number 20 [ 191.493346][ T50] usb 8-1: device descriptor read/64, error -71 [ 191.604165][ T50] usb usb8-port1: attempt power cycle [ 191.762004][T10416] block nbd0: reconnected socket [ 191.762130][T10416] block nbd0: reconnected socket [ 191.762809][T10416] nbd: socks must be embedded in a SOCK_ITEM attr [ 191.764159][ T6932] block nbd0: Receive control failed (result -32) [ 191.764505][ T67] block nbd0: Receive control failed (result -32) [ 191.863426][T10422] netlink: 'syz.0.1626': attribute type 1 has an invalid length. [ 191.863496][T10422] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1626'. [ 191.918619][T10424] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1626'. [ 191.942645][ T50] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 191.962930][ T50] usb 8-1: device descriptor read/8, error -71 [ 192.007980][T10430] syzkaller0: entered promiscuous mode [ 192.008120][T10430] syzkaller0: entered allmulticast mode [ 192.202397][ T50] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 192.223038][ T50] usb 8-1: device descriptor read/8, error -71 [ 192.335273][ T50] usb usb8-port1: unable to enumerate USB device [ 192.862458][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 193.032282][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 193.033105][ T10] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 193.034409][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.034434][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.036987][ T10] usb 7-1: config 0 descriptor?? [ 193.336906][T10454] syzkaller0: entered promiscuous mode [ 193.336959][T10454] syzkaller0: entered allmulticast mode [ 193.812660][T10462] netlink: 'syz.0.1642': attribute type 1 has an invalid length. [ 193.812721][T10462] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1642'. [ 193.876213][T10467] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1642'. [ 194.334114][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.334208][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.742343][T10479] syzkaller0: entered promiscuous mode [ 194.742411][T10479] syzkaller0: entered allmulticast mode [ 194.952339][ T5818] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 195.112379][ T5818] usb 5-1: Using ep0 maxpacket: 16 [ 195.113163][ T5818] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 195.114101][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 195.116152][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.116178][ T5818] usb 5-1: Product: syz [ 195.116195][ T5818] usb 5-1: Manufacturer: syz [ 195.116210][ T5818] usb 5-1: SerialNumber: syz [ 195.123056][ T5818] usb 5-1: config 0 descriptor?? [ 195.125059][ T5818] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 195.125079][ T5818] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 195.266454][T10491] syzkaller0: entered promiscuous mode [ 195.266526][T10491] syzkaller0: entered allmulticast mode [ 195.282693][ T30] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 195.412403][ T30] usb 6-1: device descriptor read/64, error -71 [ 195.672295][ T30] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 195.688304][ T10] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 195.694245][ T10] usb 7-1: USB disconnect, device number 21 [ 195.746898][ T5818] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 195.822438][ T30] usb 6-1: device descriptor read/64, error -71 [ 195.931340][ T30] usb usb6-port1: attempt power cycle [ 196.161003][ T5818] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 196.161070][ T5818] em28xx 5-1:0.0: board has no eeprom [ 196.224249][ T5818] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 196.224342][ T5818] em28xx 5-1:0.0: dvb set to bulk mode. [ 196.225433][ T3271] em28xx 5-1:0.0: Binding DVB extension [ 196.232638][ T5818] usb 5-1: USB disconnect, device number 32 [ 196.233751][ T5818] em28xx 5-1:0.0: Disconnecting em28xx [ 196.269478][ T3271] em28xx 5-1:0.0: Registering input extension [ 196.273622][ T30] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 196.277808][ T5818] em28xx 5-1:0.0: Closing input extension [ 196.283046][ T5818] em28xx: Freeing device [ 196.293060][ T30] usb 6-1: device descriptor read/8, error -71 [ 196.542404][ T30] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 196.572955][ T30] usb 6-1: device descriptor read/8, error -71 [ 196.686474][ T30] usb usb6-port1: unable to enumerate USB device [ 197.159242][T10505] syzkaller0: entered promiscuous mode [ 197.159328][T10505] syzkaller0: entered allmulticast mode [ 197.497778][T10522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1659'. [ 198.402494][ T5816] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 198.562371][ T5816] usb 8-1: Using ep0 maxpacket: 16 [ 198.562899][ T5816] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 198.566835][ T5816] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 198.568514][ T5816] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.568528][ T5816] usb 8-1: Product: syz [ 198.568535][ T5816] usb 8-1: Manufacturer: syz [ 198.568542][ T5816] usb 8-1: SerialNumber: syz [ 198.571013][ T5816] usb 8-1: config 0 descriptor?? [ 198.576499][ T5816] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 198.576519][ T5816] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 199.184017][ T5816] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 199.548281][T10555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1670'. [ 199.599027][ T5816] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 199.599110][ T5816] em28xx 8-1:0.0: board has no eeprom [ 199.672914][ T5816] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 199.673001][ T5816] em28xx 8-1:0.0: dvb set to bulk mode. [ 199.674060][ T35] em28xx 8-1:0.0: Binding DVB extension [ 199.680100][ T5816] usb 8-1: USB disconnect, device number 24 [ 199.680825][ T5816] em28xx 8-1:0.0: Disconnecting em28xx [ 199.708546][ T35] em28xx 8-1:0.0: Registering input extension [ 199.708711][ T5816] em28xx 8-1:0.0: Closing input extension [ 199.716534][ T5816] em28xx: Freeing device [ 199.812363][ T5530] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 199.994126][ T5530] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 199.999511][ T5530] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 199.999632][ T5530] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.258365][T10573] syzkaller0: entered promiscuous mode [ 200.258427][T10573] syzkaller0: entered allmulticast mode [ 200.553677][T10580] syzkaller0: entered promiscuous mode [ 200.555682][T10580] syzkaller0: entered allmulticast mode [ 200.616066][T10584] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1680'. [ 200.886857][T10589] block nbd0: reconnected socket [ 200.886975][T10589] block nbd0: reconnected socket [ 200.887296][T10589] nbd: socks must be embedded in a SOCK_ITEM attr [ 200.892667][ T67] block nbd0: Receive control failed (result -32) [ 200.892742][ T67] block nbd0: Receive control failed (result -32) [ 201.182649][ T5530] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 201.333135][ T5530] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 201.334181][ T5530] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 201.334439][ T5530] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.334493][ T5530] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.342118][ T5530] usbtmc 8-1:16.0: bulk endpoints not found [ 202.586134][ T5816] usb 5-1: USB disconnect, device number 33 [ 202.653161][T10610] syzkaller0: entered promiscuous mode [ 202.653219][T10610] syzkaller0: entered allmulticast mode [ 202.699239][T10612] tipc: Started in network mode [ 202.699348][T10612] tipc: Node identity 92baedb85ec2, cluster identity 4711 [ 202.701300][T10612] tipc: Enabled bearer , priority 0 [ 202.703206][T10612] syzkaller0: entered promiscuous mode [ 202.703231][T10612] syzkaller0: entered allmulticast mode [ 202.711743][T10612] tipc: Resetting bearer [ 202.717245][T10611] tipc: Resetting bearer [ 202.735573][T10611] tipc: Disabling bearer [ 202.816596][T10616] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1690'. [ 202.957810][T10620] block nbd0: reconnected socket [ 202.957928][T10620] block nbd0: reconnected socket [ 202.957978][T10620] nbd: socks must be embedded in a SOCK_ITEM attr [ 202.960368][ T6932] block nbd0: Receive control failed (result -32) [ 202.961687][ T67] block nbd0: Receive control failed (result -32) [ 203.352388][ T5816] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 203.513023][ T5816] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 203.513981][ T5816] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 203.514016][ T5816] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.957933][ T5816] usb 8-1: USB disconnect, device number 25 [ 204.057270][T10643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1702'. [ 204.096093][T10645] block nbd0: reconnected socket [ 204.096158][T10645] block nbd0: reconnected socket [ 204.096166][T10645] nbd: socks must be embedded in a SOCK_ITEM attr [ 204.099689][ T67] block nbd0: Receive control failed (result -32) [ 204.099748][ T67] block nbd0: Receive control failed (result -32) [ 204.174498][T10652] syzkaller0: entered promiscuous mode [ 204.174744][T10652] syzkaller0: entered allmulticast mode [ 204.892440][ T5889] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 205.043699][ T5889] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 205.048766][ T5889] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 205.053007][ T5889] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.058171][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.064557][ T5889] usbtmc 5-1:16.0: bulk endpoints not found [ 205.076348][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1712'. [ 205.374872][T10674] block nbd0: reconnected socket [ 205.375051][T10674] block nbd0: reconnected socket [ 205.375066][T10674] nbd: socks must be embedded in a SOCK_ITEM attr [ 205.376366][ T6932] block nbd0: Receive control failed (result -32) [ 205.379636][ T67] block nbd0: Receive control failed (result -32) [ 205.427699][T10676] syzkaller0: entered promiscuous mode [ 205.427764][T10676] syzkaller0: entered allmulticast mode [ 206.089302][ T10] usb 7-1: USB disconnect, device number 22 [ 206.511885][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1721'. [ 206.663091][T10698] block nbd0: reconnected socket [ 206.663203][T10698] block nbd0: reconnected socket [ 206.663215][T10698] nbd: socks must be embedded in a SOCK_ITEM attr [ 206.664507][ T67] block nbd0: Receive control failed (result -32) [ 206.664580][ T67] block nbd0: Receive control failed (result -32) [ 206.733423][T10700] syzkaller0: entered promiscuous mode [ 206.733505][T10700] syzkaller0: entered allmulticast mode [ 207.112378][ T10] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 207.263102][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 207.264140][ T10] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 207.264181][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.647610][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1731'. [ 207.671289][ T5889] usb 5-1: USB disconnect, device number 34 [ 207.731401][T10720] block nbd0: reconnected socket [ 207.731549][T10720] block nbd0: reconnected socket [ 207.731562][T10720] nbd: socks must be embedded in a SOCK_ITEM attr [ 207.732762][ T67] block nbd0: Receive control failed (result -32) [ 207.733014][ T6932] block nbd0: Receive control failed (result -32) [ 207.932589][ T5816] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 208.062424][ T5816] usb 7-1: device descriptor read/64, error -71 [ 208.108824][T10728] syzkaller0: entered promiscuous mode [ 208.108888][T10728] syzkaller0: entered allmulticast mode [ 208.312395][ T5816] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 208.442346][ T5816] usb 7-1: device descriptor read/64, error -71 [ 208.562864][ T5816] usb usb7-port1: attempt power cycle [ 208.789983][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1740'. [ 208.902385][ T5816] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 208.923532][ T5816] usb 7-1: device descriptor read/8, error -71 [ 208.938074][T10744] block nbd0: reconnected socket [ 208.938217][T10744] block nbd0: reconnected socket [ 208.938230][T10744] nbd: socks must be embedded in a SOCK_ITEM attr [ 208.939466][ T67] block nbd0: Receive control failed (result -32) [ 208.939639][ T6932] block nbd0: Receive control failed (result -32) [ 209.082408][T10748] syzkaller0: entered promiscuous mode [ 209.082475][T10748] syzkaller0: entered allmulticast mode [ 209.172375][ T5816] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 209.192842][ T5816] usb 7-1: device descriptor read/8, error -71 [ 209.225715][T10750] syzkaller0: entered promiscuous mode [ 209.225765][T10750] syzkaller0: entered allmulticast mode [ 209.232891][ T35] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 209.313111][ T5816] usb usb7-port1: unable to enumerate USB device [ 209.379349][T10752] syzkaller0: entered promiscuous mode [ 209.379421][T10752] syzkaller0: entered allmulticast mode [ 209.403470][ T35] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 209.404697][ T35] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 209.404740][ T35] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.404779][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.412040][ T35] usbtmc 8-1:16.0: bulk endpoints not found [ 209.774612][T10757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'. [ 209.893242][ T5816] usb 6-1: USB disconnect, device number 28 [ 209.944310][T10763] block nbd0: reconnected socket [ 209.944401][T10763] block nbd0: reconnected socket [ 209.944655][T10763] nbd: socks must be embedded in a SOCK_ITEM attr [ 209.945859][ T67] block nbd0: Receive control failed (result -32) [ 209.946183][ T6932] block nbd0: Receive control failed (result -32) [ 210.054462][T10769] syzkaller0: entered promiscuous mode [ 210.054606][T10769] syzkaller0: entered allmulticast mode [ 210.205084][T10771] syzkaller0: entered promiscuous mode [ 210.205148][T10771] syzkaller0: entered allmulticast mode [ 210.352421][ T5816] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 210.358535][T10773] syzkaller0: entered promiscuous mode [ 210.360991][T10773] syzkaller0: entered allmulticast mode [ 210.532466][ T5816] usb 6-1: Using ep0 maxpacket: 8 [ 210.535219][ T5816] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 210.541009][ T5816] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 210.541076][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.543581][ T5816] usb 6-1: config 0 descriptor?? [ 210.733019][T10775] fuse: Bad value for 'fd' [ 210.756616][ T5816] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 210.766772][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1758'. [ 210.939463][T10784] block nbd0: reconnected socket [ 210.939616][T10784] block nbd0: reconnected socket [ 210.939628][T10784] nbd: socks must be embedded in a SOCK_ITEM attr [ 210.940974][ T6932] block nbd0: Receive control failed (result -32) [ 210.941152][ T6932] block nbd0: Receive control failed (result -32) [ 211.050532][T10788] syzkaller0: entered promiscuous mode [ 211.050687][T10788] syzkaller0: entered allmulticast mode [ 211.072454][ T5889] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 211.222939][ T5889] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 211.223807][ T5889] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 211.223830][ T5889] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.223851][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.230695][ T5889] usbtmc 5-1:16.0: bulk endpoints not found [ 211.290187][T10790] syzkaller0: entered promiscuous mode [ 211.290250][T10790] syzkaller0: entered allmulticast mode [ 211.430307][T10792] syzkaller0: entered promiscuous mode [ 211.430360][T10792] syzkaller0: entered allmulticast mode [ 211.812437][ T5889] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 211.942313][ T5889] usb 7-1: device descriptor read/64, error -71 [ 211.995808][ T50] usb 8-1: USB disconnect, device number 26 [ 212.046783][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1767'. [ 212.190135][ T5889] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 212.312492][ T5889] usb 7-1: device descriptor read/64, error -71 [ 212.328712][T10803] fuse: Bad value for 'fd' [ 212.425225][ T5889] usb usb7-port1: attempt power cycle [ 212.496371][T10806] block nbd0: reconnected socket [ 212.498762][T10806] block nbd0: reconnected socket [ 212.500990][T10806] nbd: socks must be embedded in a SOCK_ITEM attr [ 212.505801][ T6932] block nbd0: Receive control failed (result -32) [ 212.506015][ T67] block nbd0: Receive control failed (result -32) [ 212.592692][T10810] syzkaller0: entered promiscuous mode [ 212.592736][T10810] syzkaller0: entered allmulticast mode [ 212.745697][T10812] syzkaller0: entered promiscuous mode [ 212.748153][T10812] syzkaller0: entered allmulticast mode [ 212.766163][ T5889] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 212.783221][ T5889] usb 7-1: device descriptor read/8, error -71 [ 212.859631][T10814] syzkaller0: entered promiscuous mode [ 212.861725][T10814] syzkaller0: entered allmulticast mode [ 212.881797][ T5530] usb 6-1: USB disconnect, device number 29 [ 213.032380][ T5889] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 213.053485][ T5889] usb 7-1: device descriptor read/8, error -71 [ 213.172805][ T5889] usb usb7-port1: unable to enumerate USB device [ 213.222470][ T10] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 213.383797][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 213.385036][ T10] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 213.385064][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.385077][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 213.385098][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.389118][ T10] usbtmc 8-1:16.0: bulk endpoints not found [ 213.444964][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1776'. [ 213.686673][T10822] fuse: Bad value for 'fd' [ 213.779896][T10825] block nbd0: reconnected socket [ 213.780041][T10825] block nbd0: reconnected socket [ 213.780051][T10825] nbd: socks must be embedded in a SOCK_ITEM attr [ 213.780849][ T67] block nbd0: Receive control failed (result -32) [ 213.781221][ T6932] block nbd0: Receive control failed (result -32) [ 213.828460][ T10] usb 5-1: USB disconnect, device number 35 [ 213.871454][T10829] syzkaller0: entered promiscuous mode [ 213.872127][T10829] syzkaller0: entered allmulticast mode [ 214.036109][T10834] syzkaller0: entered promiscuous mode [ 214.036283][T10834] syzkaller0: entered allmulticast mode [ 214.177934][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1785'. [ 214.884455][T10851] block nbd0: reconnected socket [ 214.884561][T10851] block nbd0: reconnected socket [ 214.884604][T10851] nbd: socks must be embedded in a SOCK_ITEM attr [ 214.896537][ T67] block nbd0: Receive control failed (result -32) [ 214.896602][ T6932] block nbd0: Receive control failed (result -32) [ 215.232405][ T10] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 215.263590][T10862] syzkaller0: entered promiscuous mode [ 215.263656][T10862] syzkaller0: entered allmulticast mode [ 215.403431][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.405924][ T10] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 215.405966][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.405999][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.413725][ T10] usbtmc 5-1:16.0: bulk endpoints not found [ 215.436605][T10864] syzkaller0: entered promiscuous mode [ 215.436673][T10864] syzkaller0: entered allmulticast mode [ 215.892344][ T42] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 215.979152][ T5816] usb 8-1: USB disconnect, device number 27 [ 216.023308][ T42] usb 7-1: device descriptor read/64, error -71 [ 216.282263][ T42] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 216.412351][ T42] usb 7-1: device descriptor read/64, error -71 [ 216.532587][ T42] usb usb7-port1: attempt power cycle [ 216.891301][T10886] syzkaller0: entered promiscuous mode [ 216.891367][T10886] syzkaller0: entered allmulticast mode [ 216.892577][ T42] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 216.923224][ T42] usb 7-1: device descriptor read/8, error -71 [ 217.163255][ T42] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 217.183504][ T42] usb 7-1: device descriptor read/8, error -71 [ 217.292716][ T42] usb usb7-port1: unable to enumerate USB device [ 217.302340][ T30] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 217.463023][ T30] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 217.463972][ T30] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 217.464000][ T30] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.464014][ T30] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 217.464038][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.467041][ T30] usbtmc 6-1:16.0: bulk endpoints not found [ 218.016481][ T42] usb 5-1: USB disconnect, device number 36 [ 218.164900][T10903] syzkaller0: entered promiscuous mode [ 218.164959][T10903] syzkaller0: entered allmulticast mode [ 218.313409][T10907] syzkaller0: entered promiscuous mode [ 218.313453][T10907] syzkaller0: entered allmulticast mode [ 218.549869][T10913] block nbd3: server does not support multiple connections per device. [ 218.552625][T10913] block nbd3: shutting down sockets [ 218.663835][T10916] syzkaller1: entered promiscuous mode [ 218.663878][T10916] syzkaller1: entered allmulticast mode [ 219.849252][T10943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'. [ 220.002439][ T5816] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 220.063284][ T50] usb 6-1: USB disconnect, device number 30 [ 220.132290][ T5816] usb 8-1: device descriptor read/64, error -71 [ 220.152330][ T42] usb 7-1: new low-speed USB device number 35 using dummy_hcd [ 220.313187][ T42] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 220.314119][ T42] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 220.314136][ T42] usb 7-1: config 0 has no interface number 0 [ 220.314154][ T42] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 220.314172][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.316392][ T42] usb 7-1: config 0 descriptor?? [ 220.318769][ T42] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 220.382366][ T5816] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 220.512364][ T5816] usb 8-1: device descriptor read/64, error -71 [ 220.523460][ T42] usb 7-1: USB disconnect, device number 35 [ 220.622933][ T5816] usb usb8-port1: attempt power cycle [ 220.962376][ T5816] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 220.982783][ T5816] usb 8-1: device descriptor read/8, error -71 [ 221.012393][ T35] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 221.173088][ T35] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.177518][ T35] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 221.181182][ T35] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 221.184699][ T35] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 221.189232][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.197441][ T35] usbtmc 5-1:16.0: bulk endpoints not found [ 221.232356][ T5816] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 221.259107][T10970] syzkaller0: entered promiscuous mode [ 221.259211][T10970] syzkaller0: entered allmulticast mode [ 221.262704][ T5816] usb 8-1: device descriptor read/8, error -71 [ 221.375372][ T5816] usb usb8-port1: unable to enumerate USB device [ 221.603363][T10980] syzkaller0: entered promiscuous mode [ 221.603434][T10980] syzkaller0: entered allmulticast mode [ 221.942329][ T10] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 222.093778][ T10] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 222.095280][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.095309][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 222.095323][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 222.095337][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 222.095348][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 222.097076][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 222.097092][ T10] usb 6-1: Product: syz [ 222.097100][ T10] usb 6-1: Manufacturer: syz [ 222.097107][ T10] usb 6-1: SerialNumber: syz [ 222.098774][ T10] usb 6-1: config 0 descriptor?? [ 222.306494][ T10] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 222.306563][ T10] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 222.522315][ T10] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 222.522352][ T10] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 222.522364][ T10] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 222.723119][ T10] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 223.130663][ T10] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 223.130885][ T10] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 223.138040][ T10] usb 6-1: USB disconnect, device number 31 [ 223.142383][ T50] usb 8-1: new low-speed USB device number 32 using dummy_hcd [ 223.303383][ T50] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 223.304309][ T50] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 223.304327][ T50] usb 8-1: config 0 has no interface number 0 [ 223.304346][ T50] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 223.304364][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.306118][ T50] usb 8-1: config 0 descriptor?? [ 223.310590][ T50] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 223.510971][ T5816] usb 8-1: USB disconnect, device number 32 [ 223.794388][ T42] usb 5-1: USB disconnect, device number 37 [ 224.035739][T11002] netlink: 'syz.1.1849': attribute type 1 has an invalid length. [ 224.039249][T11002] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1849'. [ 224.129440][T11013] syzkaller0: entered promiscuous mode [ 224.129515][T11013] syzkaller0: entered allmulticast mode [ 224.292931][ T42] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 224.422374][ T42] usb 5-1: device descriptor read/64, error -71 [ 224.462356][ T5816] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 224.502316][ T35] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 224.613097][ T5816] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 224.614702][ T5816] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.614732][ T5816] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 224.614748][ T5816] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.614785][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.619976][ T5816] usbtmc 6-1:16.0: bulk endpoints not found [ 224.643486][ T35] usb 8-1: device descriptor read/64, error -71 [ 224.662308][ T42] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 224.792321][ T42] usb 5-1: device descriptor read/64, error -71 [ 224.882368][ T35] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 224.902659][ T42] usb usb5-port1: attempt power cycle [ 225.012402][ T35] usb 8-1: device descriptor read/64, error -71 [ 225.122831][ T35] usb usb8-port1: attempt power cycle [ 225.252430][ T42] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 225.273216][ T42] usb 5-1: device descriptor read/8, error -71 [ 225.464476][ T35] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 225.485034][ T35] usb 8-1: device descriptor read/8, error -71 [ 225.522513][ T42] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 225.543844][ T42] usb 5-1: device descriptor read/8, error -71 [ 225.652761][ T42] usb usb5-port1: unable to enumerate USB device [ 225.722438][ T35] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 225.742905][ T35] usb 8-1: device descriptor read/8, error -71 [ 225.782344][ T50] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 225.854519][ T35] usb usb8-port1: unable to enumerate USB device [ 225.933248][ T50] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 225.934231][ T50] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 225.934246][ T50] usb 7-1: config 1 has no interface number 0 [ 225.935816][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.935830][ T50] usb 7-1: Product: syz [ 225.935837][ T50] usb 7-1: Manufacturer: syz [ 225.935845][ T50] usb 7-1: SerialNumber: syz [ 225.943993][ T50] usb 7-1: 3:1 : does not exist [ 225.944016][ T50] usb 7-1: 3:2 : does not exist [ 226.144201][ T3271] usb 7-1: USB disconnect, device number 36 [ 226.865345][T11035] netlink: 'syz.2.1862': attribute type 1 has an invalid length. [ 226.865403][T11035] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1862'. [ 227.145729][T11042] syzkaller0: entered promiscuous mode [ 227.145788][T11042] syzkaller0: entered allmulticast mode [ 227.217206][ T5816] usb 6-1: USB disconnect, device number 32 [ 227.852276][ T5889] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 227.992337][ T5889] usb 6-1: device descriptor read/64, error -71 [ 228.042278][ T5834] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 228.141286][T11083] syzkaller0: entered promiscuous mode [ 228.141355][T11083] syzkaller0: entered allmulticast mode [ 228.193216][ T5834] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 228.194260][ T5834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.194278][ T5834] usb 7-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 228.194290][ T5834] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.194313][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.200387][ T5834] usbtmc 7-1:16.0: bulk endpoints not found [ 228.254172][ T5889] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 228.312338][ T5816] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 228.402335][ T5889] usb 6-1: device descriptor read/64, error -71 [ 228.442365][ T5816] usb 5-1: device descriptor read/64, error -71 [ 228.523287][ T5889] usb usb6-port1: attempt power cycle [ 228.682431][ T5816] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 228.812390][ T5816] usb 5-1: device descriptor read/64, error -71 [ 228.872393][ T5889] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 228.893095][ T5889] usb 6-1: device descriptor read/8, error -71 [ 228.922581][ T5816] usb usb5-port1: attempt power cycle [ 229.142347][ T5889] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 229.163084][ T5889] usb 6-1: device descriptor read/8, error -71 [ 229.272369][ T5816] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 229.282608][ T5889] usb usb6-port1: unable to enumerate USB device [ 229.293067][ T5816] usb 5-1: device descriptor read/8, error -71 [ 229.542498][ T5816] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 229.574220][ T5816] usb 5-1: device descriptor read/8, error -71 [ 229.623396][T11103] syzkaller0: entered promiscuous mode [ 229.623479][T11103] syzkaller0: entered allmulticast mode [ 229.692830][ T5816] usb usb5-port1: unable to enumerate USB device [ 230.866573][ T10] usb 7-1: USB disconnect, device number 37 [ 230.974493][T11113] [ 230.975320][T11113] ====================================================== [ 230.977875][T11113] WARNING: possible circular locking dependency detected [ 230.980054][T11113] syzkaller #0 Not tainted [ 230.981755][T11113] ------------------------------------------------------ [ 230.984086][T11113] syz.2.1884/11113 is trying to acquire lock: [ 230.986641][T11113] ffff88801d6c7180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120 [ 230.991245][T11113] [ 230.991245][T11113] but task is already holding lock: [ 230.994294][T11113] ffff88801d6c72a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 230.998893][T11113] [ 230.998893][T11113] which lock already depends on the new lock. [ 230.998893][T11113] [ 231.003464][T11113] [ 231.003464][T11113] the existing dependency chain (in reverse order) is: [ 231.008123][T11113] [ 231.008123][T11113] -> #9 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 231.011943][T11113] lock_acquire+0x1d1/0x380 [ 231.014083][T11113] down_read+0x99/0x4c0 [ 231.016134][T11113] kernfs_remove_by_name_ns+0x49/0x120 [ 231.018796][T11113] remove_files+0x96/0x1c0 [ 231.021165][T11113] sysfs_remove_group+0x8b/0x1b0 [ 231.024150][T11113] sysfs_remove_groups+0x60/0xb0 [ 231.026729][T11113] __kobject_del+0x89/0x220 [ 231.028890][T11113] kobject_del+0x3f/0x60 [ 231.030889][T11113] free_desc+0x296/0x330 [ 231.032976][T11113] irq_free_descs+0x84/0xc0 [ 231.033215][T11111] faux_driver vgem: [drm] Unknown color mode 55359; guessing buffer size. [ 231.038669][T11113] irq_domain_free_irqs+0x46a/0x5c0 [ 231.041399][T11113] mp_unmap_irq+0xf8/0x130 [ 231.043958][T11113] acpi_unregister_gsi_ioapic+0x40/0x60 [ 231.046961][T11113] acpi_unregister_gsi+0x25/0x40 [ 231.049327][T11113] acpi_pci_irq_disable+0x275/0x360 [ 231.051702][T11113] pcibios_disable_device+0x89/0xb0 [ 231.054026][T11113] do_pci_disable_device+0x9f/0x100 [ 231.056396][T11113] pci_disable_device+0x130/0x270 [ 231.058603][T11113] quirk_usb_early_handoff+0x24b/0x1360 [ 231.061253][T11113] pci_fixup_device+0x334/0x4d0 [ 231.063617][T11113] pci_apply_final_quirks+0x115/0x3e0 [ 231.066693][T11113] do_one_initcall+0x11c/0x6f0 [ 231.069478][T11113] kernel_init_freeable+0x6ea/0x7b0 [ 231.072051][T11113] kernel_init+0x21/0x1e0 [ 231.074135][T11113] ret_from_fork+0x730/0xd60 [ 231.076358][T11113] ret_from_fork_asm+0x1a/0x30 [ 231.078555][T11113] [ 231.078555][T11113] -> #8 (sparse_irq_lock){+.+.}-{4:4}: [ 231.082276][T11113] lock_acquire+0x1d1/0x380 [ 231.085053][T11113] __mutex_lock+0x1a4/0x1bd0 [ 231.087655][T11113] cpuhp_bringup_ap+0x63/0x10e0 [ 231.090106][T11113] cpuhp_invoke_callback+0x3b4/0x9a0 [ 231.092728][T11113] __cpuhp_invoke_callback_range+0x158/0x1d0 [ 231.095471][T11113] _cpu_up+0x3f6/0x960 [ 231.097539][T11113] cpu_up+0x1ba/0x230 [ 231.099456][T11113] cpuhp_bringup_mask+0xf8/0x180 [ 231.101765][T11113] bringup_nonboot_cpus+0xec/0x1b0 [ 231.104132][T11113] smp_init+0x32/0x150 [ 231.106142][T11113] kernel_init_freeable+0x44b/0x7b0 [ 231.108711][T11113] kernel_init+0x21/0x1e0 [ 231.111019][T11113] ret_from_fork+0x730/0xd60 [ 231.113384][T11113] ret_from_fork_asm+0x1a/0x30 [ 231.115606][T11113] [ 231.115606][T11113] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 231.118855][T11113] lock_acquire+0x1d1/0x380 [ 231.121027][T11113] cpus_read_lock+0x42/0x170 [ 231.123465][T11113] static_key_slow_inc+0x12/0x30 [ 231.126092][T11113] nbd_genl_reconnect_sock_cb+0x39f/0x990 [ 231.129248][T11113] nbd_genl_foreach_sock+0x2ab/0x3e0 [ 231.131866][T11113] nbd_genl_reconfigure+0x861/0xde0 [ 231.134269][T11113] genl_family_rcv_msg_doit+0x214/0x300 [ 231.136893][T11113] genl_rcv_msg+0x560/0x800 [ 231.139122][T11113] netlink_rcv_skb+0x159/0x420 [ 231.141303][T11113] genl_rcv+0x28/0x40 [ 231.143209][T11113] netlink_unicast+0x585/0x850 [ 231.145867][T11113] netlink_sendmsg+0x8b0/0xda0 [ 231.148990][T11113] ____sys_sendmsg+0xa4d/0xbe0 [ 231.151305][T11113] ___sys_sendmsg+0x190/0x1e0 [ 231.153578][T11113] __sys_sendmsg+0x160/0x210 [ 231.155716][T11113] __do_fast_syscall_32+0x13a/0x8b0 [ 231.158150][T11113] do_fast_syscall_32+0x32/0x70 [ 231.160642][T11113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.164426][T11113] [ 231.164426][T11113] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 231.167936][T11113] lock_acquire+0x1d1/0x380 [ 231.170042][T11113] __mutex_lock+0x1a4/0x1bd0 [ 231.172253][T11113] nbd_queue_rq+0x42d/0xfa0 [ 231.174303][T11113] blk_mq_dispatch_rq_list+0x428/0x1e60 [ 231.176815][T11113] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 231.179779][T11113] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 231.182853][T11113] blk_mq_run_work_fn+0x135/0x380 [ 231.184975][T11113] process_one_work+0xac7/0x1b10 [ 231.186938][T11113] worker_thread+0x5ef/0xe50 [ 231.189142][T11113] kthread+0x373/0x450 [ 231.190840][T11113] ret_from_fork+0x730/0xd60 [ 231.192728][T11113] ret_from_fork_asm+0x1a/0x30 [ 231.194651][T11113] [ 231.194651][T11113] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 231.197338][T11113] lock_acquire+0x1d1/0x380 [ 231.199221][T11113] __mutex_lock+0x1a4/0x1bd0 [ 231.201374][T11113] nbd_queue_rq+0xba/0xfa0 [ 231.204042][T11113] blk_mq_dispatch_rq_list+0x428/0x1e60 [ 231.206793][T11113] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 231.209447][T11113] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 231.212033][T11113] blk_mq_run_work_fn+0x135/0x380 [ 231.214358][T11113] process_one_work+0xac7/0x1b10 [ 231.216673][T11113] worker_thread+0x5ef/0xe50 [ 231.218743][T11113] kthread+0x373/0x450 [ 231.220814][T11113] ret_from_fork+0x730/0xd60 [ 231.223248][T11113] ret_from_fork_asm+0x1a/0x30 [ 231.225868][T11113] [ 231.225868][T11113] -> #4 (set->srcu){.+.+}-{0:0}: [ 231.228898][T11113] lock_sync+0xb5/0x120 [ 231.230918][T11113] __synchronize_srcu+0xa2/0x300 [ 231.233351][T11113] blk_mq_quiesce_queue+0x149/0x1c0 [ 231.236501][T11113] elevator_switch+0x17b/0x7e0 [ 231.239037][T11113] elevator_change+0x352/0x530 [ 231.241166][T11113] elevator_set_default+0x29e/0x360 [ 231.242953][T11113] blk_register_queue+0x48e/0x630 [ 231.244688][T11113] __add_disk+0x73f/0xe40 [ 231.246174][T11113] add_disk_fwnode+0x118/0x480 [ 231.248299][T11113] nbd_dev_add+0x779/0xb10 [ 231.250621][T11113] nbd_init+0x2c5/0x2e0 [ 231.252677][T11113] do_one_initcall+0x11c/0x6f0 [ 231.254693][T11113] kernel_init_freeable+0x6ea/0x7b0 [ 231.256810][T11113] kernel_init+0x21/0x1e0 [ 231.258639][T11113] ret_from_fork+0x730/0xd60 [ 231.260743][T11113] ret_from_fork_asm+0x1a/0x30 [ 231.262932][T11113] [ 231.262932][T11113] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 231.265977][T11113] lock_acquire+0x1d1/0x380 [ 231.268135][T11113] __mutex_lock+0x1a4/0x1bd0 [ 231.270514][T11113] elevator_change+0x1bc/0x530 [ 231.272946][T11113] elevator_set_none+0x92/0xf0 [ 231.274887][T11113] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 231.277294][T11113] nbd_start_device+0x1a6/0xbd0 [ 231.279424][T11113] nbd_genl_connect+0xfc2/0x1760 [ 231.281668][T11113] genl_family_rcv_msg_doit+0x214/0x300 [ 231.283797][T11113] genl_rcv_msg+0x560/0x800 [ 231.285759][T11113] netlink_rcv_skb+0x159/0x420 [ 231.288189][T11113] genl_rcv+0x28/0x40 [ 231.290102][T11113] netlink_unicast+0x585/0x850 [ 231.292278][T11113] netlink_sendmsg+0x8b0/0xda0 [ 231.294281][T11113] ____sys_sendmsg+0xa4d/0xbe0 [ 231.296128][T11113] ___sys_sendmsg+0x190/0x1e0 [ 231.297799][T11113] __sys_sendmsg+0x160/0x210 [ 231.299602][T11113] __do_fast_syscall_32+0x13a/0x8b0 [ 231.301686][T11113] do_fast_syscall_32+0x32/0x70 [ 231.303440][T11113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.305583][T11113] [ 231.305583][T11113] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 231.308763][T11113] lock_acquire+0x1d1/0x380 [ 231.310782][T11113] blk_alloc_queue+0x610/0x790 [ 231.312648][T11113] blk_mq_alloc_queue+0x174/0x290 [ 231.314604][T11113] __blk_mq_alloc_disk+0x29/0x120 [ 231.316613][T11113] nbd_dev_add+0x491/0xb10 [ 231.318564][T11113] nbd_init+0x2c5/0x2e0 [ 231.320858][T11113] do_one_initcall+0x11c/0x6f0 [ 231.323663][T11113] kernel_init_freeable+0x6ea/0x7b0 [ 231.326094][T11113] kernel_init+0x21/0x1e0 [ 231.328080][T11113] ret_from_fork+0x730/0xd60 [ 231.330157][T11113] ret_from_fork_asm+0x1a/0x30 [ 231.332386][T11113] [ 231.332386][T11113] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 231.335478][T11113] lock_acquire+0x1d1/0x380 [ 231.337999][T11113] fs_reclaim_acquire+0xc4/0x100 [ 231.340975][T11113] kmem_cache_alloc_lru_noprof+0x5f/0x6a0 [ 231.343779][T11113] alloc_inode+0x183/0x250 [ 231.345798][T11113] iget_locked+0x1d9/0x6d0 [ 231.347767][T11113] kernfs_get_inode+0x46/0x470 [ 231.349895][T11113] kernfs_get_tree+0x636/0xbb0 [ 231.352071][T11113] vfs_get_tree+0x92/0x320 [ 231.354131][T11113] path_mount+0x7d0/0x24c0 [ 231.356137][T11113] __x64_sys_mount+0x293/0x310 [ 231.358532][T11113] do_syscall_64+0x121/0x770 [ 231.360936][T11113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.363184][T11113] [ 231.363184][T11113] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 231.365750][T11113] check_prev_add+0xeb/0xe60 [ 231.367732][T11113] __lock_acquire+0x1492/0x1ec0 [ 231.369893][T11113] lock_acquire+0x1d1/0x380 [ 231.371996][T11113] down_write+0x8b/0x1f0 [ 231.374180][T11113] kernfs_remove_by_name_ns+0x51/0x120 [ 231.377457][T11113] sysfs_slab_add+0x14a/0x1a0 [ 231.379697][T11113] do_kmem_cache_create+0x6a2/0x7a0 [ 231.382182][T11113] __kmem_cache_create_args+0x1e3/0x430 [ 231.384637][T11113] bioset_init+0x5ee/0x8a0 [ 231.386663][T11113] mddev_init+0x17c/0x820 [ 231.388592][T11113] md_alloc+0xc7/0x10a0 [ 231.390820][T11113] md_probe+0x73/0xf0 [ 231.393391][T11113] blk_probe_dev+0x149/0x1e0 [ 231.395749][T11113] blk_request_module+0x16/0xc0 [ 231.398003][T11113] blkdev_get_no_open+0x9b/0xf0 [ 231.400081][T11113] bdev_file_open_by_dev+0x70/0x210 [ 231.402677][T11113] swsusp_check+0x72/0x470 [ 231.404978][T11113] software_resume+0x6f/0x330 [ 231.407154][T11113] resume_store+0x248/0x460 [ 231.409473][T11113] kobj_attr_store+0x58/0x80 [ 231.411692][T11113] sysfs_kf_write+0xf2/0x150 [ 231.414227][T11113] kernfs_fop_write_iter+0x3e0/0x5f0 [ 231.417251][T11113] vfs_write+0x6af/0x1050 [ 231.419507][T11113] ksys_write+0x12a/0x250 [ 231.421492][T11113] __do_fast_syscall_32+0x13a/0x8b0 [ 231.423803][T11113] do_fast_syscall_32+0x32/0x70 [ 231.425837][T11113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.428387][T11113] [ 231.428387][T11113] other info that might help us debug this: [ 231.428387][T11113] [ 231.431929][T11113] Chain exists of: [ 231.431929][T11113] &root->kernfs_rwsem --> sparse_irq_lock --> &root->kernfs_supers_rwsem [ 231.431929][T11113] [ 231.436714][T11113] Possible unsafe locking scenario: [ 231.436714][T11113] [ 231.438958][T11113] CPU0 CPU1 [ 231.440616][T11113] ---- ---- [ 231.442286][T11113] rlock(&root->kernfs_supers_rwsem); [ 231.443947][T11113] lock(sparse_irq_lock); [ 231.446011][T11113] lock(&root->kernfs_supers_rwsem); [ 231.448412][T11113] lock(&root->kernfs_rwsem); [ 231.449930][T11113] [ 231.449930][T11113] *** DEADLOCK *** [ 231.449930][T11113] [ 231.452424][T11113] locks held by syz.2.1884/11113: 10, last CPU#3: [ 231.454379][T11113] #0: ffff88802656c2b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 231.457236][T11113] #1: ffff88802865e460 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 231.460950][T11113] #2: ffff888013231480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 231.464405][T11113] #3: ffff88801d7193c8 (kn->active#66){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 231.467486][T11113] #4: ffffffff8eca25c0 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x65/0x330 [ 231.470632][T11113] #5: ffffffff8f9b96e0 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 231.473793][T11113] #6: ffffffff90817b40 (disks_mutex){+.+.}-{4:4}, at: md_alloc+0x3e/0x10a0 [ 231.476928][T11113] #7: ffffffff8f99e920 (bio_slab_lock){+.+.}-{4:4}, at: bioset_init+0x2ad/0x8a0 [ 231.480305][T11113] #8: ffffffff8ef96260 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x44/0x430 [ 231.483350][T11113] #9: ffff88801d6c72a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 231.486741][T11113] [ 231.486741][T11113] stack backtrace: [ 231.488696][T11113] CPU: 3 UID: 0 PID: 11113 Comm: syz.2.1884 Not tainted syzkaller #0 PREEMPT(full) [ 231.491970][T11113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.495516][T11113] Call Trace: [ 231.496570][T11113] [ 231.497481][T11113] dump_stack_lvl+0x100/0x190 [ 231.499019][T11113] print_circular_bug.cold+0x178/0x1be [ 231.500707][T11113] check_noncircular+0x146/0x160 [ 231.502335][T11113] check_prev_add+0xeb/0xe60 [ 231.503748][T11113] __lock_acquire+0x1492/0x1ec0 [ 231.505259][T11113] lock_acquire+0x1d1/0x380 [ 231.506918][T11113] ? kernfs_remove_by_name_ns+0x51/0x120 [ 231.509274][T11113] ? __pfx___might_resched+0x10/0x10 [ 231.511381][T11113] down_write+0x8b/0x1f0 [ 231.513041][T11113] ? kernfs_remove_by_name_ns+0x51/0x120 [ 231.514755][T11113] ? __pfx_down_write+0x10/0x10 [ 231.516267][T11113] kernfs_remove_by_name_ns+0x51/0x120 [ 231.517939][T11113] sysfs_slab_add+0x14a/0x1a0 [ 231.519428][T11113] do_kmem_cache_create+0x6a2/0x7a0 [ 231.521014][T11113] ? __kmem_cache_create_args+0x1c3/0x430 [ 231.522768][T11113] __kmem_cache_create_args+0x1e3/0x430 [ 231.524426][T11113] bioset_init+0x5ee/0x8a0 [ 231.525804][T11113] ? __pfx_bioset_init+0x10/0x10 [ 231.527406][T11113] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 231.529351][T11113] ? percpu_ref_init+0x244/0x3f0 [ 231.531216][T11113] mddev_init+0x17c/0x820 [ 231.532841][T11113] md_alloc+0xc7/0x10a0 [ 231.534320][T11113] md_probe+0x73/0xf0 [ 231.535620][T11113] ? __pfx_md_probe+0x10/0x10 [ 231.537104][T11113] blk_probe_dev+0x149/0x1e0 [ 231.538561][T11113] blk_request_module+0x16/0xc0 [ 231.540102][T11113] blkdev_get_no_open+0x9b/0xf0 [ 231.541611][T11113] bdev_file_open_by_dev+0x70/0x210 [ 231.543250][T11113] swsusp_check+0x72/0x470 [ 231.544645][T11113] software_resume+0x6f/0x330 [ 231.546077][T11113] resume_store+0x248/0x460 [ 231.547559][T11113] ? __pfx_resume_store+0x10/0x10 [ 231.549307][T11113] ? find_held_lock+0x2b/0x80 [ 231.551078][T11113] ? sysfs_file_kobj+0xe4/0x290 [ 231.552859][T11113] ? sysfs_file_kobj+0xe4/0x290 [ 231.554511][T11113] ? __pfx_resume_store+0x10/0x10 [ 231.556633][T11113] kobj_attr_store+0x58/0x80 [ 231.558621][T11113] ? __pfx_kobj_attr_store+0x10/0x10 [ 231.560902][T11113] sysfs_kf_write+0xf2/0x150 [ 231.563438][T11113] kernfs_fop_write_iter+0x3e0/0x5f0 [ 231.566345][T11113] ? __pfx_sysfs_kf_write+0x10/0x10 [ 231.568632][T11113] vfs_write+0x6af/0x1050 [ 231.570344][T11113] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 231.572741][T11113] ? __pfx_vfs_write+0x10/0x10 [ 231.574630][T11113] ? find_held_lock+0x2b/0x80 [ 231.576183][T11113] ksys_write+0x12a/0x250 [ 231.577617][T11113] ? __pfx_ksys_write+0x10/0x10 [ 231.579232][T11113] __do_fast_syscall_32+0x13a/0x8b0 [ 231.581049][T11113] do_fast_syscall_32+0x32/0x70 [ 231.582832][T11113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.585114][T11113] RIP: 0023:0xf7fb7fec [ 231.586478][T11113] Code: Unable to access opcode bytes at 0xf7fb7fc2. [ 231.588485][T11113] RSP: 002b:00000000f545550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 231.591334][T11113] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 231.594618][T11113] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.598133][T11113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 231.602329][T11113] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 231.605666][T11113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 231.608766][T11113] [ 231.628593][T11113] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 231.628644][T11113] block device autoloading is deprecated and will be removed. [ 231.628824][T11113] PM: Image not found (code -5)