last executing test programs: 5.929872636s ago: executing program 1 (id=1965): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000000)={0x1, 0x200, 0x7, 0x3ff, 0x7ac, 0x52ba}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.202349573s ago: executing program 1 (id=1978): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2d516fb6, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000000)={0x1, 0x100, 0x42, 0x7f, 0x5, 0x4}) 2.360042006s ago: executing program 4 (id=1985): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40282, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x3) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="60cd06", 0x3}], 0x1, 0x0, 0x0) 2.178449293s ago: executing program 4 (id=1986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) close(0x3) 2.107480216s ago: executing program 4 (id=1989): r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000003300)=[{{&(0x7f00000006c0)=@hci={0x1f, 0xdd86, 0x4}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000540)="e0c93367be72a52524e3b278a010", 0xe}], 0x1}}], 0x1, 0x200400c1) 1.978351906s ago: executing program 4 (id=1991): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc29a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB=' \v@'], 0x0, 0x0, 0x0, 0x0}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x80000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3ff) 1.95586525s ago: executing program 0 (id=1992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf4}, 0x1, 0x0, 0x0, 0x85}, 0x0) 1.910123949s ago: executing program 3 (id=1993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.861648945s ago: executing program 0 (id=1994): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f0000000040)="3f031c000302140006001e0089e9aaa911d7c2290f0089061327c9167c643c4a1b7880610cc941db769d97c87f36fb99a7b47c8074088386b2d4f950910bfa", 0x3f, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.770406518s ago: executing program 0 (id=1995): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c28975e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 1.770222099s ago: executing program 0 (id=1996): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs={0x4, 0x0, 0xf, "0d07193755f8b08c1b14b816f0d99e"}}) 1.735386258s ago: executing program 3 (id=1997): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010101}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) r3 = epoll_create1(0x80000) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x0, 0x1000000000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0002004}) close_range(r0, 0xffffffffffffffff, 0x0) 1.672688586s ago: executing program 3 (id=1998): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040000001200ec0a"], 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x59, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.554437472s ago: executing program 1 (id=1999): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="58010000100033060000000000000000fe80000000000000c4000000efa73bb2758c6a1ebc480380000000bbac1e0001000000000000000000000000000007ff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010102000000000000000000000000000004d232000000ac1e0101000000000000000000000000fcffffffffffffff00000000000000000b000000000000000500000000000000fcffffffffffffff000000000000000001000000000000000c000000000000000000000000000000ff7f0000000000000000000000000000b8ad000000000000050000000000000001000000000000000000000002000400b00000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017"], 0x158}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1.496921376s ago: executing program 2 (id=2000): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r0 = syz_kvm_add_vcpu$x86(0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r2, &(0x7f0000010140)={0x2020}, 0x2036) write$FUSE_NOTIFY_STORE(r1, 0x0, 0x28) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000a00)={[0x0, 0x8, 0x18000000, 0x97b, 0xc, 0x7ff, 0x9, 0x0, 0x100000001, 0x7fff, 0xffffffff8956eda2, 0xd, 0x6, 0x7, 0x3, 0x50b2], 0xeeee8000, 0x10082}) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000) socket$inet6_tcp(0xa, 0x1, 0x0) 1.46940429s ago: executing program 0 (id=2001): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x1, 0xe, 0xffd2, 0xffc8}, 0xb, [0x8, 0x5, 0x9, 0x0, 0x7, 0xfcb, 0x9512, 0x1cb7, 0x7fff, 0xdf, 0x9, 0x9, 0x3, 0x6d9ff4c1, 0x4, 0x6, 0x7f, 0x3fff80, 0x2, 0x4, 0x7f, 0x8, 0x5582, 0x0, 0x7f, 0x5, 0x7, 0xffff, 0x7, 0xfffffffd, 0x42c57ecb, 0x4, 0x6, 0x9, 0x3, 0x1, 0x1800, 0x83, 0x3, 0x200, 0x1, 0xff, 0x4, 0xffff, 0x4, 0xbd, 0x7, 0x800, 0x7, 0x8001, 0x856f, 0x4, 0x0, 0x1, 0x5, 0x0, 0x80000000, 0xfff, 0x1, 0x1, 0x6, 0x10000000, 0x1, 0x80], [0x1, 0x9, 0x7d4f, 0xfffffffa, 0xf, 0x7fff, 0x5, 0x5, 0x1, 0x400, 0x9, 0x4, 0x7, 0x4, 0x401, 0x5, 0x6, 0x3, 0x2, 0x6, 0xc, 0x1, 0x0, 0xe1, 0x0, 0xfff, 0x0, 0x1000, 0x80, 0x2, 0x500, 0x1, 0x3, 0x1, 0x400, 0x7, 0x3, 0x7fffffff, 0x5, 0x3, 0xf167, 0x5, 0x4, 0x1, 0xffffffff, 0x9, 0x1, 0x40, 0x0, 0xffffffff, 0xfffffc76, 0x1000, 0xa6d4, 0x3fec, 0x4, 0x7ff, 0xb, 0x7, 0x4, 0x2, 0x4, 0x9, 0x8], [0x1, 0x2, 0x20, 0xffffffff, 0x100, 0x7, 0xaff, 0x7f, 0xe, 0x9, 0xe, 0x3, 0x3, 0x8001, 0x43c, 0x3, 0x1, 0x7, 0x842, 0x9, 0x68, 0x37, 0x4, 0x80000000, 0xb64, 0x9, 0x3, 0x400, 0x1, 0x2, 0x98400000, 0x3ff, 0x80000001, 0xffff7994, 0x8, 0x0, 0x76e, 0xaa, 0x1, 0x2, 0x2, 0x5, 0x1000, 0x6, 0x7ff, 0x5c51, 0x3, 0xe, 0x9, 0x9, 0xcf, 0x401, 0x6, 0x3, 0xa4, 0x9, 0x800, 0x401, 0x75b8, 0x1000, 0x8, 0xec9, 0xe0c, 0xd98], [0x1, 0x6, 0x2e, 0x2, 0xffffff00, 0x1, 0x6, 0xd, 0x0, 0x10, 0xfffffffd, 0x6, 0xffff68c9, 0x8, 0x2, 0x7, 0x7, 0xfffff001, 0x6, 0x5, 0x5, 0x406, 0x2, 0x3, 0x2, 0x2, 0x6, 0x9, 0x1, 0x4, 0x81, 0x7, 0x2, 0x3, 0x1, 0x8000, 0x0, 0x0, 0x2865, 0x0, 0x9, 0x6, 0x100, 0xffffff7f, 0x7, 0x7c, 0x2, 0x1, 0x1, 0x1, 0x5, 0xa0, 0xf, 0x9, 0x6, 0x5, 0xff, 0xfffffffc, 0x520ce55b, 0x4d28, 0x3, 0x2, 0x34d6, 0xfffffffd]}, 0x45c) 1.250434362s ago: executing program 3 (id=2002): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.250248495s ago: executing program 0 (id=2003): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb01"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020) 1.055894204s ago: executing program 3 (id=2004): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x12, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xb2e, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0x7fffffff, 0x2, 0xa5f2b87a, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x83, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x80000008, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x8, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x1, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x81, 0x13e5, 0x1, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x9, 0x2, 0x76c4, 0xfffffffd, 0x4, 0x401, 0x10000, 0xd, 0x2, 0x9, 0x20010, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x1ff, 0x9, 0x1000, 0x0, 0x7ffffffc, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x9, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x1000, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x5, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x9, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5eb, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x0, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0xb, 0x101, 0x1ff, 0x8, 0x3, 0x6, 0x100005, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) read$FUSE(r1, &(0x7f0000000840)={0x2020}, 0x2020) 742.583744ms ago: executing program 1 (id=2005): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a", 0x79}], 0x1}}], 0x1, 0x20000001) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, 0x1}, 0x5c) 682.425752ms ago: executing program 3 (id=2006): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400d06"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x0, 0x0, 0xb, "7e7b16a6169b1a112ed33e"}, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x3}}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 573.278681ms ago: executing program 1 (id=2007): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) unshare(0x20020000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r3, &(0x7f00000001c0)='./file0\x00', 0x200) close_range(r0, 0xffffffffffffffff, 0x0) 428.48223ms ago: executing program 1 (id=2008): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0) 370.403763ms ago: executing program 2 (id=2009): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000062c0)='system.posix_acl_default\x00', 0x0, 0x54, 0x1) read$FUSE(r1, &(0x7f0000002b00)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000000100)="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", 0x2000, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 350.059137ms ago: executing program 2 (id=2010): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000840)={0x1, 0x0, @pic={0x69, 0xfe, 0xe1, 0x4, 0x7, 0xd9, 0x0, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x1, 0x9, 0x58, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6a, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x10008, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) 230.461111ms ago: executing program 2 (id=2011): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000002580)=""/4096, 0x1000}], 0x5}, 0x5e}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffff22cb}], 0x4, 0x2, 0x0) 119.495657ms ago: executing program 2 (id=2012): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 119.276993ms ago: executing program 4 (id=2013): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000600)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 50.931368ms ago: executing program 2 (id=2014): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x1, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000100", "2809e8dbe108598948224aee4afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x4, 0x2000000000001]}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000cc0)='/sys/kernel/address_bits', 0x40000, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) 0s ago: executing program 4 (id=2015): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001640)={0xbe4, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xbd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xbcc, 0x3, "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"}]}]}, 0xbe4}, 0x1, 0x0, 0x0, 0x40010}, 0x400c0) sendmsg$unix(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)='uY', 0x2}], 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) kernel console output (not intermixed with test programs): ig 1 has an invalid descriptor of length 1, skipping remainder of the config [ 184.994266][ T978] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.028581][ T978] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.037975][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.058071][ T978] usb 4-1: Product: syz [ 185.080442][ T978] usb 4-1: Manufacturer: syz [ 185.098836][ T978] usb 4-1: SerialNumber: syz [ 185.352358][ T5836] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 185.469175][ T7411] syzkaller1: entered promiscuous mode [ 185.475441][ T7411] syzkaller1: entered allmulticast mode [ 185.526122][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 185.535123][ T5836] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 185.547384][ T5836] usb 2-1: config 0 has no interfaces? [ 185.554316][ T5836] usb 2-1: config 0 has no interfaces? [ 185.561432][ T5836] usb 2-1: config 0 has no interfaces? [ 185.571239][ T5836] usb 2-1: config 0 has no interfaces? [ 185.577971][ T5836] usb 2-1: config 0 has no interfaces? [ 185.585000][ T5836] usb 2-1: config 0 has no interfaces? [ 185.593283][ T5836] usb 2-1: config 0 has no interfaces? [ 185.600278][ T5836] usb 2-1: config 0 has no interfaces? [ 185.607243][ T5836] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 185.616639][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 185.625032][ T5836] usb 2-1: SerialNumber: syz [ 185.634193][ T5836] usb 2-1: config 0 descriptor?? [ 186.038226][ T5836] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 186.068128][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'. [ 186.302247][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 186.314860][ T5836] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.336221][ T5836] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.397008][ T5836] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.432412][ T5836] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.455987][ T5836] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 186.466538][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.684939][ T5897] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 186.694787][ T5836] usb 1-1: GET_CAPABILITIES returned 0 [ 186.700924][ T5836] usbtmc 1-1:16.0: can't read capabilities [ 186.861961][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 186.902378][ T5897] usb 5-1: config 0 has an invalid interface number: 9 but max is 2 [ 186.902406][ T5897] usb 5-1: config 0 has an invalid interface number: 9 but max is 2 [ 186.902423][ T5897] usb 5-1: config 0 has an invalid interface number: 157 but max is 2 [ 186.902464][ T5897] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 186.945756][ T5897] usb 5-1: config 0 has no interface number 0 [ 186.945803][ T5897] usb 5-1: config 0 has no interface number 1 [ 186.945872][ T5897] usb 5-1: config 0 interface 9 has no altsetting 0 [ 186.945889][ T5897] usb 5-1: config 0 interface 9 has no altsetting 1 [ 186.945907][ T5897] usb 5-1: config 0 interface 157 has no altsetting 0 [ 186.948643][ T5897] usb 5-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice=89.a0 [ 186.948662][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.948673][ T5897] usb 5-1: Product: syz [ 186.948681][ T5897] usb 5-1: Manufacturer: syz [ 186.948689][ T5897] usb 5-1: SerialNumber: syz [ 186.957675][ T5897] usb 5-1: config 0 descriptor?? [ 186.973064][ T7427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.973335][ T7427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.167803][ T5897] usb 5-1: selecting invalid altsetting 1 [ 187.167874][ T5897] sierra 5-1:0.9: Sierra USB modem converter detected [ 187.189170][ T5897] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 187.212444][ T5897] usb 5-1: USB disconnect, device number 17 [ 187.223744][ T5897] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 187.304019][ T981] usb 1-1: USB disconnect, device number 23 [ 187.357750][ T978] usb 4-1: 0:2 : does not exist [ 187.369907][ T5897] sierra 5-1:0.9: device disconnected [ 187.513094][ T978] usb 4-1: USB disconnect, device number 23 [ 187.690304][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.184749][ T5836] usb 2-1: USB disconnect, device number 18 [ 188.467156][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'. [ 188.481982][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'. [ 188.526862][ T7461] netlink: 'syz.1.341': attribute type 15 has an invalid length. [ 188.571952][ T981] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 188.742181][ T981] usb 3-1: Using ep0 maxpacket: 16 [ 188.769784][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.785115][ T981] usb 3-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 188.796902][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.829142][ T7466] fuse: Bad value for 'fd' [ 188.836928][ T981] usb 3-1: config 0 descriptor?? [ 189.299457][ T5929] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 189.508239][ T981] semitek 0003:1EA7:0907.0007: item fetching failed at offset 0/2 [ 189.566604][ T981] semitek 0003:1EA7:0907.0007: probe with driver semitek failed with error -22 [ 189.581484][ T981] usb 3-1: USB disconnect, device number 27 [ 189.598929][ T7481] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.348'. [ 189.675980][ T7481] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `] Iq!>s*!)\+` [ 189.753685][ T5929] usb 2-1: not running at top speed; connect to a high speed hub [ 189.773651][ T5929] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 189.801597][ T5929] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 189.922420][ T5929] usb 2-1: config 1 has no interface number 1 [ 190.019819][ T5929] usb 2-1: config 1 interface 2 has no altsetting 0 [ 190.054307][ T5929] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.108243][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.161142][ T7484] openvswitch: netlink: IPv4 tun info is not correct [ 190.193374][ T5929] usb 2-1: Product: syz [ 190.215548][ T5929] usb 2-1: Manufacturer: syz [ 190.242510][ T5929] usb 2-1: SerialNumber: syz [ 190.412078][ T43] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 190.548681][ T5838] Bluetooth: hci0: Malformed LE Event: 0x02 [ 190.582501][ T5929] usb 2-1: 2:1 : sample bitwidth 10 in over sample bytes 1 [ 190.590119][ T5929] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 190.600310][ T5929] usb 2-1: selecting invalid altsetting 0 [ 190.621990][ T5897] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 190.632742][ T5929] usb 2-1: USB disconnect, device number 19 [ 190.712163][ T978] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 190.743673][ T43] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 190.752246][ T43] usb 5-1: config 0 has an invalid interface number: 3 but max is 2 [ 190.770954][ T43] usb 5-1: config 0 has no interface number 0 [ 190.783058][ T43] usb 5-1: config 0 has no interface number 1 [ 190.789014][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.802736][ T43] usb 5-1: too many endpoints for config 0 interface 3 altsetting 255: 255, using maximum allowed: 30 [ 190.826629][ T5897] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 190.842359][ T5897] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 190.853741][ T43] usb 5-1: config 0 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 190.872020][ T5897] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 190.882122][ T5897] usb 1-1: config 0 has no interface number 0 [ 190.891382][ T43] usb 5-1: config 0 interface 3 has no altsetting 0 [ 190.898094][ T978] usb 3-1: Using ep0 maxpacket: 8 [ 190.907124][ T978] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 190.917781][ T5897] usb 1-1: config 0 has no interface number 1 [ 190.924040][ T43] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 190.933792][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.943314][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.951758][ T978] usb 3-1: Product: syz [ 190.956065][ T978] usb 3-1: Manufacturer: syz [ 190.962003][ T5897] usb 1-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 190.971411][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.982029][ T978] usb 3-1: SerialNumber: syz [ 190.991510][ T43] usb 5-1: config 0 descriptor?? [ 190.997413][ T5897] usb 1-1: Product: syz [ 191.002911][ T978] usb 3-1: config 0 descriptor?? [ 191.012342][ T5897] usb 1-1: Manufacturer: syz [ 191.026648][ T5897] usb 1-1: SerialNumber: syz [ 191.053543][ T5897] usb 1-1: config 0 descriptor?? [ 191.083701][ T5897] cdc_acm 1-1:0.51: probe with driver cdc_acm failed with error -22 [ 191.225441][ T978] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 191.240654][ T43] usb 5-1: Could not set interface, error -71 [ 191.282909][ T43] usb 5-1: selecting invalid altsetting 0 [ 191.330657][ T7498] fuse: Unknown parameter '0x0000000000000004' [ 191.353555][ T43] usb 5-1: Could not set interface, error -22 [ 191.365561][ T5929] usb 1-1: USB disconnect, device number 24 [ 191.393029][ T43] usb 5-1: USB disconnect, device number 18 [ 191.640269][ T7489] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 191.642800][ T7508] tipc: Started in network mode [ 191.661705][ T7508] tipc: Node identity 3ab3e9193388, cluster identity 4711 [ 191.670551][ T7508] tipc: Enabled bearer , priority 0 [ 191.701503][ T7508] syzkaller0: entered promiscuous mode [ 191.708045][ T7508] syzkaller0: entered allmulticast mode [ 191.795473][ T7508] tipc: Resetting bearer [ 191.864737][ T7507] tipc: Resetting bearer [ 191.905147][ T7513] loop3: detected capacity change from 0 to 1 [ 191.919899][ T5853] Dev loop3: unable to read RDB block 1 [ 191.932098][ T5853] loop3: unable to read partition table [ 191.945268][ T5853] loop3: partition table beyond EOD, truncated [ 191.966279][ T7513] Dev loop3: unable to read RDB block 1 [ 191.983034][ T7507] tipc: Disabling bearer [ 191.989489][ T7513] loop3: unable to read partition table [ 192.008768][ T7513] loop3: partition table beyond EOD, [ 192.008815][ T7515] bridge_slave_0: default FDB implementation only supports local addresses [ 192.027658][ T7513] truncated [ 192.033224][ T7513] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 192.110759][ T5207] Dev loop3: unable to read RDB block 1 [ 192.165741][ T5207] loop3: unable to read partition table [ 192.203884][ T5207] loop3: partition table beyond EOD, truncated [ 192.533215][ T43] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 192.714884][ T43] usb 4-1: not running at top speed; connect to a high speed hub [ 192.729581][ T43] usb 4-1: config 1 interface 0 altsetting 112 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 192.746684][ T978] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 192.799896][ T43] usb 4-1: config 1 interface 0 has no altsetting 0 [ 192.839018][ T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.40 [ 192.855258][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.866125][ T43] usb 4-1: Product: 䠊 [ 192.870327][ T43] usb 4-1: Manufacturer: 渕䠌娥㦐粟魞鞖䳶≌ퟹ罜Q䚽稏ワ涬켓櫴簶膀Ɡ翓₲췢𚕪쫎錄쯨짭Ȇ웬澼⥤蛺趁퉢삫꽁⣱ﴳ䟁兌迄ၭ륺ꑌ戛䘁웱ᇓ㖄偱ꤛ碲 [ 192.891149][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.898511][ T43] usb 4-1: SerialNumber: ﳿ [ 192.912978][ T7518] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 193.009062][ T7540] fuse: Unknown parameter '0x0000000000000004' [ 193.062019][ T981] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 193.228010][ T981] usb 2-1: Using ep0 maxpacket: 8 [ 193.235891][ T43] usbhid 4-1:1.0: can't add hid device: -71 [ 193.240847][ T981] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 193.253740][ T43] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 193.257611][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.274234][ T981] usb 2-1: Product: syz [ 193.294846][ T981] usb 2-1: Manufacturer: syz [ 193.308640][ T981] usb 2-1: SerialNumber: syz [ 193.327821][ T43] usb 4-1: USB disconnect, device number 24 [ 193.453935][ T981] usb 2-1: config 0 descriptor?? [ 193.654958][ T5836] usb 3-1: USB disconnect, device number 28 [ 193.673284][ T981] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 193.742155][ T5929] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 193.918405][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 193.930599][ T5929] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 193.940598][ T7563] loop6: detected capacity change from 0 to 7 [ 193.948678][ T5929] usb 1-1: config 0 has no interface number 0 [ 193.958189][ T7563] Dev loop6: unable to read RDB block 7 [ 193.964267][ T7563] loop6: unable to read partition table [ 193.970798][ T7563] loop6: partition table beyond EOD, truncated [ 193.981214][ T7563] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 194.002232][ T5929] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 194.011329][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.052182][ T5929] usb 1-1: Product: syz [ 194.076533][ T5929] usb 1-1: Manufacturer: syz [ 194.118207][ T5929] usb 1-1: SerialNumber: syz [ 194.128880][ T5929] usb 1-1: config 0 descriptor?? [ 194.144716][ T5929] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 194.352563][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.359103][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.461761][ T5929] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 194.565207][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 7 [ 194.589088][ T5929] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 194.692649][ T978] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 194.772460][ T7555] netlink: 'syz.0.368': attribute type 12 has an invalid length. [ 194.963314][ T978] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 194.977175][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 195.121941][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 195.198614][ T978] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.237817][ T978] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.247188][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.258170][ T978] usb 5-1: config 0 descriptor?? [ 195.307807][ T981] gspca_sunplus: reg_r err -71 [ 195.312979][ T981] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 195.343196][ T981] usb 2-1: USB disconnect, device number 20 [ 195.458185][ T7573] netlink: 100 bytes leftover after parsing attributes in process `syz.2.374'. [ 195.698564][ T978] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 196.135606][ T7581] fuse: Unknown parameter '0x0000000000000004' [ 196.699587][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 196.711373][ T5836] usb 1-1: USB disconnect, device number 25 [ 196.725136][ T5836] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 196.775077][ T5836] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 196.842582][ T5836] quatech2 1-1:0.51: device disconnected [ 197.422013][ T5929] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 197.542739][ T5836] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 197.598309][ T5929] usb 3-1: device descriptor read/64, error -71 [ 197.714674][ T7608] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 197.811004][ T5836] usb 1-1: config 0 has no interfaces? [ 197.824064][ T5836] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 197.834953][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.868519][ T5929] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 197.879685][ T7608] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 197.897861][ T5836] usb 1-1: Product: syz [ 197.903162][ T5836] usb 1-1: Manufacturer: syz [ 197.903182][ T5836] usb 1-1: SerialNumber: syz [ 197.948538][ T5836] usb 1-1: config 0 descriptor?? [ 198.032223][ T5929] usb 3-1: device descriptor read/64, error -71 [ 198.195004][ T5929] usb usb3-port1: attempt power cycle [ 198.320367][ T7606] program syz.0.383 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.335017][ T7606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.348708][ T7606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.642166][ T5929] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 198.668564][ T5929] usb 3-1: device descriptor read/8, error -71 [ 198.912045][ T5929] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 198.932950][ T5929] usb 3-1: device descriptor read/8, error -71 [ 199.044412][ T5929] usb usb3-port1: unable to enumerate USB device [ 199.302737][ T5950] usb 5-1: reset high-speed USB device number 19 using dummy_hcd [ 199.696695][ T7625] fuse: Unknown parameter '0x0000000000000004' [ 199.741793][ T7620] macsec1: entered promiscuous mode [ 199.812380][ T5897] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 199.984861][ T5897] usb 2-1: config 0 has no interfaces? [ 199.994450][ T5897] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 200.005514][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.016909][ T5897] usb 2-1: Product: syz [ 200.021269][ T5897] usb 2-1: Manufacturer: syz [ 200.030428][ T5897] usb 2-1: SerialNumber: syz [ 200.051670][ T5897] usb 2-1: config 0 descriptor?? [ 200.332498][ T5897] usb 2-1: USB disconnect, device number 21 [ 200.436430][ T978] usb 5-1: USB disconnect, device number 19 [ 200.470386][ T5929] usb 1-1: USB disconnect, device number 26 [ 200.621017][ T978] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 200.795675][ T978] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 200.819935][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.860328][ T978] usb 5-1: config 0 descriptor?? [ 200.872713][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880586e3c00: rx timeout, send abort [ 201.122186][ T7636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.134609][ T7636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.153129][ T978] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 201.357281][ T7636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.382045][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880586e3c00: abort rx timeout. Force session deactivation [ 201.382979][ T7636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.460562][ T7664] fuse: Unknown parameter '0x0000000000000004' [ 201.512615][ T978] [drm:udl_init] *ERROR* Selecting channel failed [ 201.748188][ T5905] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 201.757363][ T978] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 201.798676][ T978] [drm] Initialized udl on minor 2 [ 201.828894][ T978] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 201.895092][ T978] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 201.912514][ T5905] usb 3-1: device descriptor read/64, error -71 [ 201.956409][ T5896] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 201.969120][ T978] usb 5-1: USB disconnect, device number 20 [ 201.996924][ T5896] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 202.191912][ T5905] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 202.192789][ T5897] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 202.331982][ T5905] usb 3-1: device descriptor read/64, error -71 [ 202.393329][ T5897] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 202.409138][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.421375][ T5897] usb 1-1: config 0 descriptor?? [ 202.434966][ T5897] cp210x 1-1:0.0: cp210x converter detected [ 202.445543][ T981] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 202.465008][ T5905] usb usb3-port1: attempt power cycle [ 202.624034][ T981] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 202.646603][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.676404][ T981] usb 4-1: config 0 descriptor?? [ 202.698899][ T981] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 202.804038][ T5836] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 202.827347][ T5905] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 202.862600][ T5905] usb 3-1: device descriptor read/8, error -71 [ 202.900881][ T981] gp8psk: usb in 128 operation failed. [ 203.044651][ T5836] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 203.055213][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.067629][ T5836] usb 5-1: config 0 descriptor?? [ 203.077412][ T5836] usb 5-1: selecting invalid altsetting 1 [ 203.083352][ T5836] flexcop_usb: set interface failed. [ 203.089078][ T5836] b2c2_flexcop_usb 5-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 203.145730][ T981] gp8psk: FW Version = 68.248.173 (0x44f8ad) Build 2048/49/50 [ 203.162049][ T5905] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 203.192874][ T5905] usb 3-1: device descriptor read/8, error -71 [ 203.309023][ T5905] usb usb3-port1: unable to enumerate USB device [ 203.352141][ T981] gp8psk: usb in 149 operation failed. [ 203.375660][ T981] gp8psk: failed to get FPGA version [ 203.395945][ T981] gp8psk: usb in 138 operation failed. [ 203.397816][ T43] usb 5-1: USB disconnect, device number 21 [ 203.420179][ T981] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 203.464809][ T981] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 203.500542][ T981] usb 4-1: USB disconnect, device number 25 [ 204.071380][ T7706] fuse: Unknown parameter '0x0000000000000004' [ 204.177985][ T7709] netlink: 'syz.3.415': attribute type 10 has an invalid length. [ 204.188883][ T7709] bond0: left promiscuous mode [ 204.193840][ T5836] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 204.194162][ T7709] bond_slave_0: left promiscuous mode [ 204.209085][ T7709] bond_slave_1: left promiscuous mode [ 204.364418][ T5836] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 204.379220][ T5836] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 204.391250][ T5836] usb 2-1: can't read configurations, error -61 [ 204.462053][ T43] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 204.532019][ T5836] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 204.623353][ T43] usb 4-1: too many configurations: 204, using maximum allowed: 8 [ 204.634503][ T43] usb 4-1: config index 0 descriptor too short (expected 13257, got 41) [ 204.653567][ T43] usb 4-1: config 139 has too many interfaces: 47, using maximum allowed: 32 [ 204.677328][ T43] usb 4-1: config 139 has an invalid descriptor of length 90, skipping remainder of the config [ 204.693982][ T5836] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 204.712832][ T43] usb 4-1: config 139 has 0 interfaces, different from the descriptor's value: 47 [ 204.727115][ T5836] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 204.746911][ T5836] usb 2-1: can't read configurations, error -61 [ 204.756806][ T43] usb 4-1: config index 1 descriptor too short (expected 13257, got 41) [ 204.774217][ T43] usb 4-1: config 139 has too many interfaces: 47, using maximum allowed: 32 [ 204.798339][ T43] usb 4-1: config 139 has an invalid descriptor of length 90, skipping remainder of the config [ 204.828899][ T43] usb 4-1: config 139 has 0 interfaces, different from the descriptor's value: 47 [ 204.846843][ T5836] usb usb2-port1: attempt power cycle [ 204.859248][ T43] usb 4-1: config index 2 descriptor too short (expected 13257, got 41) [ 204.875925][ T43] usb 4-1: config 139 has too many interfaces: 47, using maximum allowed: 32 [ 204.898453][ T43] usb 4-1: config 139 has an invalid descriptor of length 90, skipping remainder of the config [ 204.937829][ T5897] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 204.964157][ T5897] cp210x 1-1:0.0: querying part number failed [ 205.003521][ T43] usb 4-1: config 139 has 0 interfaces, different from the descriptor's value: 47 [ 205.017651][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 205.042508][ T5897] usb 1-1: cp210x converter now attached to ttyUSB0 [ 205.101467][ T43] usb 4-1: config index 3 descriptor too short (expected 13257, got 41) [ 205.130203][ T43] usb 4-1: config 139 has too many interfaces: 47, using maximum allowed: 32 [ 205.148163][ T43] usb 4-1: config 139 has an invalid descriptor of length 90, skipping remainder of the config [ 205.182936][ T5897] usb 1-1: USB disconnect, device number 27 [ 205.201003][ T43] usb 4-1: config 139 has 0 interfaces, different from the descriptor's value: 47 [ 205.230721][ T7717] block device autoloading is deprecated and will be removed. [ 205.245178][ T7717] syz.2.417: attempt to access beyond end of device [ 205.245178][ T7717] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 205.265982][ T5897] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 205.268285][ T5836] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 205.316020][ T43] usb 4-1: config index 4 descriptor too short (expected 13257, got 41) [ 205.345935][ T5897] cp210x 1-1:0.0: device disconnected [ 205.347372][ T5836] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 205.358525][ T43] usb 4-1: config 139 has too many interfaces: 47, using maximum allowed: 32 [ 205.370308][ T5836] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 205.385704][ T5836] usb 2-1: can't read configurations, error -61 [ 205.386946][ T43] usb 4-1: config 139 has an invalid descriptor of length 90, skipping remainder of the config [ 205.425324][ T43] usb 4-1: config 139 has 0 interfaces, different from the descriptor's value: 47 [ 205.487995][ T43] usb 4-1: config index 5 descriptor too short (expected 13257, got 41) [ 205.499366][ T43] usb 4-1: config 139 has too many interfaces: 47, using maximum allowed: 32 [ 205.581970][ T5836] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 205.612856][ T43] usb 4-1: config 139 has an invalid descriptor of length 90, skipping remainder of the config [ 205.614611][ T5836] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 205.632200][ T43] usb 4-1: config 139 has 0 interfaces, different from the descriptor's value: 47 [ 205.644802][ T5836] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 205.653166][ T43] usb 4-1: config index 6 descriptor too short (expected 13257, got 41) [ 205.657668][ T5836] usb 2-1: can't read configurations, error -61 [ 205.663514][ T5897] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 205.686131][ T43] usb 4-1: config 139 has too many interfaces: 47, using maximum allowed: 32 [ 205.710800][ T43] usb 4-1: config 139 has an invalid descriptor of length 90, skipping remainder of the config [ 205.769309][ T5836] usb usb2-port1: unable to enumerate USB device [ 205.783201][ T43] usb 4-1: config 139 has 0 interfaces, different from the descriptor's value: 47 [ 205.799257][ T43] usb 4-1: config index 7 descriptor too short (expected 13257, got 41) [ 205.811450][ T43] usb 4-1: config 139 has too many interfaces: 47, using maximum allowed: 32 [ 205.822096][ T43] usb 4-1: config 139 has an invalid descriptor of length 90, skipping remainder of the config [ 205.866997][ T5897] usb 1-1: Using ep0 maxpacket: 32 [ 205.883592][ T5897] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 205.892029][ T5897] usb 1-1: config 0 has no interface number 0 [ 205.898401][ T43] usb 4-1: config 139 has 0 interfaces, different from the descriptor's value: 47 [ 205.909694][ T5897] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 205.920909][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.930732][ T5897] usb 1-1: Product: syz [ 205.935596][ T5897] usb 1-1: Manufacturer: syz [ 205.940339][ T43] usb 4-1: New USB device found, idVendor=04d8, idProduct=0e83, bcdDevice=83.9c [ 205.950123][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=110 [ 205.958942][ T43] usb 4-1: Product: syz [ 205.964825][ T5897] usb 1-1: SerialNumber: syz [ 205.975648][ T43] usb 4-1: Manufacturer: syz [ 205.984513][ T5897] usb 1-1: config 0 descriptor?? [ 205.989760][ T43] usb 4-1: SerialNumber: syz [ 206.000632][ T5897] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 206.202510][ T5897] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 206.226151][ T43] usb 4-1: USB disconnect, device number 26 [ 206.272492][ T5897] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 206.617105][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 206.654172][ T7725] netlink: 'syz.0.419': attribute type 30 has an invalid length. [ 206.682566][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 206.692853][ T7725] netlink: 'syz.0.419': attribute type 30 has an invalid length. [ 206.709429][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 206.721552][ T43] usb 1-1: USB disconnect, device number 28 [ 206.731333][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 206.742663][ T153] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.776934][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 206.778188][ T153] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.811245][ T43] quatech2 1-1:0.51: device disconnected [ 206.849061][ T153] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.928488][ T153] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.135707][ T7746] fuse: Unknown parameter 'fd0x0000000000000004' [ 207.523709][ T5836] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 207.642426][ T7754] loop2: detected capacity change from 0 to 7 [ 207.755851][ T5836] usb 5-1: config 0 has no interfaces? [ 207.768140][ T5836] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 207.777630][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.799484][ T7754] loop2: [ 207.803029][ T5836] usb 5-1: Product: syz [ 207.807791][ T7754] loop2: partition table partially beyond EOD, truncated [ 207.815657][ T5836] usb 5-1: Manufacturer: syz [ 207.821754][ T5836] usb 5-1: SerialNumber: syz [ 207.856564][ T5836] usb 5-1: config 0 descriptor?? [ 208.011928][ T5905] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 208.193878][ T5905] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 208.202941][ T5905] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 208.221075][ T5905] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 208.285100][ T5905] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 208.300689][ T5905] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 208.455350][ T5905] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 208.466831][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 208.498326][ T5905] usb 1-1: Product: syz [ 208.539648][ T5905] usb 1-1: Manufacturer: syz [ 208.571927][ T43] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 208.636821][ T5905] cdc_wdm 1-1:1.0: skipping garbage [ 208.644405][ T5905] cdc_wdm 1-1:1.0: skipping garbage [ 208.656184][ T5905] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 208.685217][ T5905] cdc_wdm 1-1:1.0: Unknown control protocol [ 208.876648][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 208.900968][ T7769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.910302][ T7769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.929662][ T43] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 208.945396][ T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.965684][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.985667][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 209.092059][ T43] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.137117][ T43] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 209.170680][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.424478][ T43] usb 3-1: usb_control_msg returned -32 [ 209.684353][ T43] usbtmc 3-1:16.0: can't read capabilities [ 210.085601][ T5836] usb 5-1: USB disconnect, device number 22 [ 210.438505][ T7778] netlink: 20 bytes leftover after parsing attributes in process `syz.4.432'. [ 210.529848][ T7778] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 210.635973][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 210.642710][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 210.649148][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 210.655757][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 210.662118][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 210.668724][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 210.675126][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 210.681720][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 210.689148][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 210.695758][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 210.703322][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 210.709998][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 210.716413][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 210.723106][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 210.729406][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 210.735990][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 210.742298][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 210.748878][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 210.755135][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 210.761899][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 210.768052][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 210.776807][ T5896] usb 1-1: USB disconnect, device number 29 [ 211.019605][ T7787] netlink: 'syz.0.436': attribute type 10 has an invalid length. [ 211.094889][ T7787] netlink: 40 bytes leftover after parsing attributes in process `syz.0.436'. [ 211.141739][ T7787] dummy0: entered promiscuous mode [ 211.169693][ T7787] bridge0: port 3(dummy0) entered blocking state [ 211.343487][ T7787] bridge0: port 3(dummy0) entered disabled state [ 211.362177][ T7787] dummy0: entered allmulticast mode [ 211.498607][ T7787] bridge0: port 3(dummy0) entered blocking state [ 211.506495][ T7787] bridge0: port 3(dummy0) entered forwarding state [ 211.874229][ T7801] fuse: Unknown parameter 'fd0x0000000000000004' [ 211.971459][ T5836] usb 3-1: USB disconnect, device number 37 [ 212.527386][ T5836] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 212.572954][ T7825] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.442'. [ 212.591516][ T7825] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.442'. [ 212.712013][ T5836] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 212.726100][ T5836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.741943][ T5836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.763572][ T5836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 212.805006][ T5836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.814439][ T5836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.836871][ T5836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 212.913402][ T5836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.971918][ T5836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.024015][ T5836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 213.050746][ T5836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.066790][ T5836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.096417][ T5836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 213.140569][ T5836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.150211][ T5836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.161845][ T5836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 213.176858][ T5836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.189682][ T5836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.231720][ T5836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 213.267730][ T5836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.277060][ T5836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.288716][ T5836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 213.350338][ T5836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.380576][ T5836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.479149][ T5836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 213.530165][ T5836] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 213.554188][ T5836] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 213.630603][ T5836] usb 5-1: Product: syz [ 213.782124][ T5836] usb 5-1: Manufacturer: syz [ 213.794616][ T5836] usb 5-1: SerialNumber: syz [ 213.802553][ T5897] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 213.861651][ T5836] usb 5-1: config 0 descriptor?? [ 213.975939][ T5836] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 214.021434][ T5897] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 214.036743][ T5897] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 214.047994][ T5897] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 214.201592][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.275649][ T7821] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 214.292084][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 214.313980][ T5836] usb 5-1: USB disconnect, device number 23 [ 214.351626][ T5897] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 214.353184][ T5836] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 214.704011][ T5905] usb 4-1: USB disconnect, device number 27 [ 215.057938][ T7843] fuse: Unknown parameter 'fd0x0000000000000004' [ 216.041963][ T5836] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 216.201969][ T5836] usb 3-1: Using ep0 maxpacket: 8 [ 216.225295][ T5836] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 216.234873][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.247740][ T5836] usb 3-1: Product: syz [ 216.259882][ T5836] usb 3-1: Manufacturer: syz [ 216.274220][ T5836] usb 3-1: SerialNumber: syz [ 216.290261][ T5836] usb 3-1: config 0 descriptor?? [ 216.305246][ T5836] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 216.402217][ T5897] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 216.612070][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 216.671195][ T5897] usb 4-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=99.db [ 216.691015][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.812476][ T5897] usb 4-1: config 0 descriptor?? [ 216.872939][ T5897] pwc: Logitech ViewPort AV 100 webcam detected. [ 217.071530][ T5897] pwc: Failed to set LED on/off time (-71) [ 217.081227][ T5897] pwc: send_video_command error -71 [ 217.097926][ T5897] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 217.171296][ T5897] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 217.210151][ T5897] usb 4-1: USB disconnect, device number 28 [ 217.287141][ T7875] ptrace attach of "./syz-executor exec"[5852] was attempted by "./syz-executor exec"[7875] [ 217.353495][ T7861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.432020][ T7861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.612190][ T5836] gspca_sonixj: reg_w1 err -110 [ 217.651990][ T5836] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 218.175898][ T5836] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 218.322191][ T30] audit: type=1326 audit(1753957774.573:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.4.461" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa01378e9a9 code=0x0 [ 218.471922][ T5836] usb 4-1: Using ep0 maxpacket: 16 [ 218.483373][ T5836] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 218.526522][ T5836] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 218.575648][ T5836] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.611255][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.645126][ T5836] usb 4-1: Product: syz [ 218.649329][ T5836] usb 4-1: Manufacturer: syz [ 218.688381][ T5836] usb 4-1: SerialNumber: syz [ 218.741852][ T5905] usb 3-1: USB disconnect, device number 38 [ 218.978640][ T7881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.988907][ T7881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.119928][ T5836] usb 4-1: USB disconnect, device number 29 [ 219.254084][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.451929][ T5905] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 219.613549][ T5905] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.762287][ T5905] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 219.795780][ T5905] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.805101][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.813891][ T5905] usb 5-1: Product: syz [ 219.818765][ T5905] usb 5-1: Manufacturer: syz [ 219.823853][ T5905] usb 5-1: SerialNumber: syz [ 219.829485][ T7909] netlink: 20 bytes leftover after parsing attributes in process `syz.3.467'. [ 219.862273][ T7909] 8021q: VLANs not supported on gre0 [ 220.099319][ T7907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.140333][ T7907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.185116][ T7907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.242107][ T7907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.310128][ T5905] usb 5-1: USB disconnect, device number 24 [ 220.912192][ T5897] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 221.046425][ T7927] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.054298][ T7927] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.122850][ T5897] usb 4-1: device descriptor read/64, error -71 [ 221.262035][ T5836] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 221.362900][ T5897] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 221.438739][ T7927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.497400][ T5836] usb 1-1: config 0 has no interfaces? [ 221.536201][ T7927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.551951][ T5897] usb 4-1: device descriptor read/64, error -71 [ 221.612297][ T5836] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 221.657864][ T7964] netlink: 40 bytes leftover after parsing attributes in process `syz.4.479'. [ 221.666446][ T5897] usb usb4-port1: attempt power cycle [ 221.670454][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.698227][ T5836] usb 1-1: Product: syz [ 221.709886][ T5836] usb 1-1: Manufacturer: syz [ 221.727118][ T5836] usb 1-1: SerialNumber: syz [ 222.011925][ T5897] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 222.059715][ T5836] usb 1-1: config 0 descriptor?? [ 222.085721][ T5897] usb 4-1: device descriptor read/8, error -71 [ 222.234643][ T7927] erspan1: left allmulticast mode [ 222.294688][ T7943] program syz.0.476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.452120][ T1151] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.495061][ T1151] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.505171][ T1151] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.521977][ T5897] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 222.542867][ T5897] usb 4-1: device descriptor read/8, error -71 [ 222.577305][ T1151] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.652386][ T5897] usb usb4-port1: unable to enumerate USB device [ 222.961092][ T30] audit: type=1800 audit(1753957779.233:86): pid=7989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.485" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 223.112014][ T7966] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 223.117031][ T7998] random: crng reseeded on system resumption [ 223.241912][ T5913] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 223.304865][ T7966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.323347][ T7966] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 223.336274][ T7966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.351087][ T7966] usb 2-1: config 0 descriptor?? [ 223.404849][ T5913] usb 5-1: config 0 has an invalid interface number: 33 but max is 0 [ 223.430086][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.441180][ T5913] usb 5-1: config 0 has no interface number 0 [ 223.448740][ T5913] usb 5-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 223.459746][ T5913] usb 5-1: config 0 interface 33 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 223.470634][ T5913] usb 5-1: config 0 interface 33 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 223.484178][ T5913] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 223.493885][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.502848][ T5913] usb 5-1: Product: syz [ 223.507255][ T5913] usb 5-1: Manufacturer: syz [ 223.512916][ T5913] usb 5-1: SerialNumber: syz [ 223.520638][ T5913] usb 5-1: config 0 descriptor?? [ 223.526874][ T7990] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 223.537565][ T5913] hdpvr 5-1:0.33: Could not find bulk-in endpoint [ 223.544791][ T5913] hdpvr 5-1:0.33: probe with driver hdpvr failed with error -12 [ 223.580499][ T7985] syzkaller0: entered promiscuous mode [ 223.589013][ T7985] syzkaller0: entered allmulticast mode [ 223.820546][ T7966] nintendo 0003:057E:200E.0009: item fetching failed at offset 3/7 [ 223.838954][ T7966] nintendo 0003:057E:200E.0009: HID parse failed [ 223.868686][ T7966] nintendo 0003:057E:200E.0009: probe - fail = -22 [ 223.881313][ T7966] nintendo 0003:057E:200E.0009: probe with driver nintendo failed with error -22 [ 223.980995][ T7966] usb 1-1: USB disconnect, device number 30 [ 224.089796][ T7967] usb 2-1: USB disconnect, device number 26 [ 224.188637][ T8015] fuse: Bad value for 'fd' [ 224.872214][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 225.066780][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 225.079201][ T9] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 225.094536][ T9] usb 3-1: config 0 has no interface number 0 [ 225.105687][ T9] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.120541][ T9] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.131152][ T9] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 225.141104][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.156344][ T9] usb 3-1: config 0 descriptor?? [ 225.872214][ T5913] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 225.887546][ T8041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.902674][ T8041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.014113][ T9] usb 5-1: USB disconnect, device number 25 [ 226.071403][ T5836] usb 3-1: USB disconnect, device number 39 [ 226.082034][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 226.098770][ T5913] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 226.144989][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.193958][ T5913] usb 2-1: Product: syz [ 226.202952][ T5913] usb 2-1: Manufacturer: syz [ 226.231783][ T5913] usb 2-1: SerialNumber: syz [ 226.296124][ T5913] r8152-cfgselector 2-1: Unknown version 0x0000 [ 226.302701][ T5913] r8152-cfgselector 2-1: config 0 descriptor?? [ 226.311713][ T8059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.559060][ T5913] r8152-cfgselector 2-1: Unknown version 0x0000 [ 226.572936][ T5913] r8152-cfgselector 2-1: bad CDC descriptors [ 226.693850][ T5836] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 226.771385][ T8045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.781524][ T8045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.793608][ T8045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.831270][ T8076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.842062][ T8045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.893615][ T5836] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 226.902908][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.910967][ T5836] usb 3-1: Product: syz [ 226.966836][ T5836] usb 3-1: Manufacturer: syz [ 226.971612][ T5836] usb 3-1: SerialNumber: syz [ 226.998871][ T8076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.999772][ T5836] usb 3-1: config 0 descriptor?? [ 227.161477][ T5836] ch341 3-1:0.0: ch341-uart converter detected [ 227.513444][ T8087] netlink: 'syz.3.506': attribute type 10 has an invalid length. [ 227.521947][ T8087] netlink: 40 bytes leftover after parsing attributes in process `syz.3.506'. [ 227.533530][ T8087] batman_adv: batadv0: Adding interface: vlan1 [ 227.539759][ T8087] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.575309][ T8087] batman_adv: batadv0: Interface activated: vlan1 [ 228.662890][ T5836] usb 3-1: failed to send control message: -110 [ 228.675069][ T5836] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 228.675543][ T5897] r8152-cfgselector 2-1: USB disconnect, device number 27 [ 228.862968][ T8099] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 229.036126][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 229.465143][ T5836] usb 3-1: USB disconnect, device number 40 [ 229.472624][ T5836] ch341 3-1:0.0: device disconnected [ 230.162084][ T5836] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 230.321989][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 230.348149][ T5836] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 230.376547][ T5836] usb 5-1: config 0 has no interface number 0 [ 230.438503][ T5836] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 230.473807][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.527323][ T5836] usb 5-1: Product: syz [ 230.571052][ T5836] usb 5-1: Manufacturer: syz [ 230.581438][ T5836] usb 5-1: SerialNumber: syz [ 230.595257][ T5836] usb 5-1: config 0 descriptor?? [ 230.624778][ T5836] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 230.845386][ T5836] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 230.897332][ T5836] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 230.953161][ T7966] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 230.967575][ T8139] bridge: RTM_NEWNEIGH with invalid ether address [ 230.978885][ T8139] bridge: RTM_NEWNEIGH with invalid ether address [ 231.115145][ T7966] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.142539][ T5929] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 231.148157][ T7966] usb 3-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 231.161301][ T7966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.183370][ T7966] usb 3-1: config 0 descriptor?? [ 231.243947][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 231.244445][ T7967] usb 5-1: USB disconnect, device number 26 [ 231.283344][ T7967] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 231.301890][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 231.320366][ T7967] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 231.321903][ T5929] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 231.342138][ T5929] usb 1-1: config 0 has no interface number 0 [ 231.348314][ T5929] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.359429][ T5929] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.369366][ T5929] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 231.378508][ T5836] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 231.381683][ T7967] quatech2 5-1:0.51: device disconnected [ 231.386332][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.388998][ T5929] usb 1-1: config 0 descriptor?? [ 231.552038][ T5836] usb 4-1: Using ep0 maxpacket: 16 [ 231.559311][ T5836] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 231.568729][ T5836] usb 4-1: config 0 has no interface number 0 [ 231.575414][ T5836] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.586813][ T5836] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.597032][ T5836] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 231.606236][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.618886][ T5836] usb 4-1: config 0 descriptor?? [ 231.751998][ T5913] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 231.906279][ T5913] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 231.918839][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.929930][ T5913] usb 2-1: config 0 has no interface number 0 [ 231.936851][ T5913] usb 2-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 231.968826][ T5913] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 231.994844][ T5913] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.019954][ T5913] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 232.030305][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.064115][ T5913] usb 2-1: config 0 descriptor?? [ 232.098491][ T5913] hso 2-1:0.1: Failed to find BULK IN ep [ 232.109655][ T8156] vlan2: entered allmulticast mode [ 232.115327][ T8156] veth1: entered allmulticast mode [ 232.150049][ T8156] netlink: 36 bytes leftover after parsing attributes in process `syz.4.527'. [ 232.258019][ T5836] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.000B/input/input12 [ 232.322976][ T5913] usb 2-1: USB disconnect, device number 28 [ 232.465898][ T5836] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.000B/input/input13 [ 232.706683][ T5836] uclogic 0003:28BD:0071.000B: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.3-1/input1 [ 232.832791][ T5836] usb 4-1: USB disconnect, device number 34 [ 233.381691][ T8170] fido_id[8170]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 233.528347][ T5929] usbhid 1-1:0.1: can't add hid device: -71 [ 233.539423][ T5929] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 233.580528][ T5929] usb 1-1: USB disconnect, device number 31 [ 233.968778][ T7966] usbhid 3-1:0.0: can't add hid device: -71 [ 233.987922][ T7966] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 234.137337][ T7966] usb 3-1: USB disconnect, device number 41 [ 234.184980][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 234.622017][ T7966] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 234.851958][ T7966] usb 3-1: Using ep0 maxpacket: 16 [ 234.851959][ T5836] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 234.894100][ T7966] usb 3-1: config 0 has no interfaces? [ 234.908983][ T7966] usb 3-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 234.937229][ T7966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.956473][ T7966] usb 3-1: Product: syz [ 234.962862][ T7966] usb 3-1: Manufacturer: syz [ 234.968357][ T7966] usb 3-1: SerialNumber: syz [ 235.000432][ T7966] usb 3-1: config 0 descriptor?? [ 235.012059][ T5836] usb 5-1: Using ep0 maxpacket: 8 [ 235.041510][ T5836] usb 5-1: unable to get BOS descriptor or descriptor too short [ 235.114187][ T5836] usb 5-1: config 4 interface 0 has no altsetting 0 [ 235.147039][ T5836] usb 5-1: string descriptor 0 read error: -22 [ 235.165412][ T5836] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 235.203875][ T5836] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 235.232453][ T5836] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 235.276390][ T5836] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 235.341011][ T5836] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 235.359679][ T5836] usb 5-1: media controller created [ 235.401376][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.581927][ T7966] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 235.742233][ T7966] usb 4-1: Using ep0 maxpacket: 32 [ 235.751313][ T7966] usb 4-1: config index 0 descriptor too short (expected 28, got 27) [ 235.764457][ T7966] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.777930][ T7966] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 235.790809][ T7966] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 235.804803][ T7966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.813844][ T7966] usb 4-1: Product: syz [ 235.818057][ T7966] usb 4-1: Manufacturer: syz [ 235.825163][ T7966] usb 4-1: SerialNumber: syz [ 235.834720][ T7966] usb 4-1: config 0 descriptor?? [ 235.862073][ T5913] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 236.014316][ T5913] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.024745][ T5913] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 236.034181][ T5913] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.051948][ T5913] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.064009][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.074528][ T5913] usb 2-1: Product: syz [ 236.078756][ T5913] usb 2-1: Manufacturer: syz [ 236.086065][ T5913] usb 2-1: SerialNumber: syz [ 236.096454][ T5913] cdc_ncm 2-1:1.0: skipping garbage [ 236.106696][ T5913] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 236.114108][ T5913] cdc_ncm 2-1:1.0: bind() failure [ 236.271251][ T8230] fuse: Bad value for 'group_id' [ 236.279800][ T8232] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 236.281767][ T8230] fuse: Bad value for 'group_id' [ 236.297043][ T7966] usb 2-1: USB disconnect, device number 29 [ 236.502588][ T5836] zl10353_read_register: readreg error (reg=127, ret==0) [ 237.376905][ T7963] usb 3-1: USB disconnect, device number 42 [ 237.526678][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054e33800: rx timeout, send abort [ 237.602515][ T7963] usb 5-1: USB disconnect, device number 27 [ 237.649931][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.549'. [ 238.022404][ T7963] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 238.034941][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054e33800: abort rx timeout. Force session deactivation [ 238.114218][ T8260] netlink: 148 bytes leftover after parsing attributes in process `syz.0.555'. [ 238.185221][ T8260] netlink: 148 bytes leftover after parsing attributes in process `syz.0.555'. [ 238.194545][ T7963] usb 5-1: Using ep0 maxpacket: 16 [ 238.205001][ T7963] usb 5-1: unable to get BOS descriptor or descriptor too short [ 238.217844][ T7963] usb 5-1: config 255 has an invalid interface number: 190 but max is 1 [ 238.234666][ T7963] usb 5-1: config 255 has an invalid interface number: 137 but max is 1 [ 238.255589][ T7963] usb 5-1: config 255 has no interface number 0 [ 238.271901][ T7963] usb 5-1: config 255 has no interface number 1 [ 238.295230][ T7963] usb 5-1: config 255 interface 190 has no altsetting 0 [ 238.302354][ T7967] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 238.312682][ T7963] usb 5-1: config 255 interface 137 has no altsetting 0 [ 238.327660][ T7963] usb 5-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=e9.04 [ 238.339127][ T7963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.347589][ T7963] usb 5-1: Product: syz [ 238.351892][ T7963] usb 5-1: Manufacturer: syz [ 238.356563][ T7963] usb 5-1: SerialNumber: syz [ 238.412136][ T7966] usb 4-1: USB disconnect, device number 35 [ 238.424783][ T8267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.557'. [ 238.445559][ T8267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.557'. [ 238.474085][ T7967] usb 2-1: unable to get BOS descriptor or descriptor too short [ 238.498312][ T7967] usb 2-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 238.521446][ T7967] usb 2-1: config 66 interface 0 has no altsetting 0 [ 238.552306][ T8272] netlink: 'syz.0.556': attribute type 10 has an invalid length. [ 238.560343][ T8272] netlink: 40 bytes leftover after parsing attributes in process `syz.0.556'. [ 238.573027][ T8272] team0: entered promiscuous mode [ 238.579860][ T8272] team_slave_0: entered promiscuous mode [ 238.591437][ T8272] team_slave_1: entered promiscuous mode [ 238.601591][ T8272] team0: entered allmulticast mode [ 238.631441][ T8272] team_slave_0: entered allmulticast mode [ 238.639673][ T8272] team_slave_1: entered allmulticast mode [ 238.664001][ T8272] bridge0: port 4(team0) entered blocking state [ 238.671986][ T8272] bridge0: port 4(team0) entered disabled state [ 238.765008][ T8272] bridge0: port 4(team0) entered blocking state [ 238.771493][ T8272] bridge0: port 4(team0) entered forwarding state [ 239.112353][ T7967] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 239.136450][ T7967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.190138][ T7963] usb 5-1: USB disconnect, device number 28 [ 239.200937][ T7967] usb 2-1: Product: syz [ 239.212773][ T7967] usb 2-1: Manufacturer: syz [ 239.217526][ T7967] usb 2-1: SerialNumber: syz [ 239.235857][ T5913] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 239.275305][ T8258] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 239.397874][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 239.410009][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 239.457094][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 239.457652][ T8277] macsec2: entered promiscuous mode [ 239.503842][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 239.525042][ T8277] macvlan1: entered promiscuous mode [ 239.536743][ T5913] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 239.547538][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.562593][ T5913] usb 3-1: Product: syz [ 239.566988][ T5913] usb 3-1: Manufacturer: syz [ 239.574834][ T5913] usb 3-1: SerialNumber: syz [ 239.587021][ T5913] usb 3-1: config 0 descriptor?? [ 239.615761][ T5913] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 239.941291][ T8267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.952571][ T8267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.999222][ T5929] usb 3-1: USB disconnect, device number 43 [ 240.058035][ T7963] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 240.231997][ T5913] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 240.414799][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 240.457603][ T5913] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 240.482945][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 240.499846][ T5913] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 240.514763][ T5913] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 240.526037][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.540700][ T8304] netlink: 40 bytes leftover after parsing attributes in process `syz.4.565'. [ 240.551897][ T5913] usb 4-1: Product: syz [ 240.556086][ T5913] usb 4-1: Manufacturer: syz [ 240.750561][ T5913] usb 4-1: SerialNumber: syz [ 240.758723][ T5913] usb 4-1: config 0 descriptor?? [ 240.766494][ T5913] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 240.972813][ T5913] scsi host1: usb-storage 4-1:0.0 [ 241.024205][ T5913] usb 4-1: USB disconnect, device number 36 [ 241.072177][ T5836] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 241.102233][ T7967] ati_remote2 2-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 241.136892][ T7967] usb 2-1: USB disconnect, device number 30 [ 241.259735][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 241.284173][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 241.338996][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 241.381342][ T5836] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 241.401950][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 241.440259][ T5836] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 241.458234][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.499925][ T5836] usb 3-1: Product: syz [ 241.558249][ T5836] usb 3-1: Manufacturer: syz [ 241.587970][ T5836] usb 3-1: SerialNumber: syz [ 241.619249][ T5836] usb 3-1: config 0 descriptor?? [ 241.791188][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'. [ 242.495868][ T8356] trusted_key: syz.0.575 sent an empty control message without MSG_MORE. [ 242.571921][ T5836] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 242.905460][ T5836] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 242.914994][ T5836] usb 5-1: config 0 has no interface number 0 [ 242.921220][ T5836] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 242.973190][ T5836] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 242.986103][ T5836] usb 5-1: config 0 interface 113 has no altsetting 0 [ 242.997481][ T5836] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 243.006973][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.015821][ T5836] usb 5-1: Product: syz [ 243.020226][ T5836] usb 5-1: Manufacturer: syz [ 243.028276][ T5836] usb 5-1: SerialNumber: syz [ 243.122732][ T5836] usb 5-1: config 0 descriptor?? [ 243.139966][ C0] usb 5-1: NFC: Urb failure (status -71) [ 243.147719][ T5836] usb 5-1: NFC: Unable to get FW version [ 243.161526][ T5836] pn533_usb 5-1:0.113: probe with driver pn533_usb failed with error -90 [ 243.339185][ T5836] usb 5-1: USB disconnect, device number 29 [ 243.688581][ T7963] usb 3-1: USB disconnect, device number 44 [ 243.731150][ T8372] netlink: 'syz.2.579': attribute type 21 has an invalid length. [ 243.749367][ T8372] netlink: 128 bytes leftover after parsing attributes in process `syz.2.579'. [ 243.791201][ T8372] netlink: 'syz.2.579': attribute type 5 has an invalid length. [ 243.800846][ T8372] netlink: 'syz.2.579': attribute type 6 has an invalid length. [ 243.852660][ T8372] netlink: 3 bytes leftover after parsing attributes in process `syz.2.579'. [ 243.873338][ T8379] netlink: 'syz.3.581': attribute type 1 has an invalid length. [ 243.885567][ T8372] netlink: 159032 bytes leftover after parsing attributes in process `syz.2.579'. [ 244.027586][ T8379] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.040769][ T8382] vlan2: entered promiscuous mode [ 244.096543][ T8382] bond1: entered promiscuous mode [ 244.132127][ T8382] vlan2: entered allmulticast mode [ 244.137362][ T8382] bond1: entered allmulticast mode [ 244.174887][ T8386] bond1: (slave gretap1): making interface the new active one [ 244.189736][ T8386] gretap1: entered promiscuous mode [ 244.198290][ T8386] gretap1: entered allmulticast mode [ 244.213062][ T8386] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 244.412883][ T5836] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 244.704848][ T5836] usb 3-1: Using ep0 maxpacket: 8 [ 244.759843][ T5836] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.793323][ T5836] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.879698][ T5836] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 244.946348][ T5836] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 244.956623][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.991963][ T5836] usb 3-1: Product: syz [ 245.007197][ T5836] usb 3-1: Manufacturer: syz [ 245.027590][ T5836] usb 3-1: SerialNumber: syz [ 245.049871][ T5836] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 245.085033][ T5836] cdc_ncm 3-1:1.0: bind() failure [ 245.249308][ T5836] cdc_mbim 3-1:1.1: CDC Union missing and no IAD found [ 245.263639][ T5836] cdc_mbim 3-1:1.1: bind() failure [ 245.455159][ T5836] usb 3-1: USB disconnect, device number 45 [ 245.725138][ T8430] netlink: 'syz.3.602': attribute type 10 has an invalid length. [ 245.751364][ T8430] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 246.190006][ T8453] IPVS: length: 220 != 24 [ 246.980202][ T8484] netlink: 156 bytes leftover after parsing attributes in process `syz.0.625'. [ 247.592714][ T8516] netlink: 'syz.2.638': attribute type 21 has an invalid length. [ 248.551564][ T8571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 248.625392][ T8571] vxcan2: entered promiscuous mode [ 248.755817][ T8580] netlink: 'syz.2.665': attribute type 12 has an invalid length. [ 248.976173][ T8590] tipc: Started in network mode [ 248.981084][ T8590] tipc: Node identity 0aabc8ba0462, cluster identity 4711 [ 249.017893][ T8590] tipc: Enabled bearer , priority 0 [ 249.035252][ T8593] syzkaller0: entered promiscuous mode [ 249.040757][ T8593] syzkaller0: entered allmulticast mode [ 249.113803][ T8585] tipc: Resetting bearer [ 249.163654][ T8585] tipc: Disabling bearer [ 249.525124][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.681'. [ 249.857279][ T8637] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.537989][ T8721] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 252.432006][ T8772] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 252.783874][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880563df000: rx timeout, send abort [ 252.792428][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880563df000: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 253.092893][ T8802] tipc: Enabled bearer , priority 0 [ 253.156808][ T8802] syzkaller0: entered promiscuous mode [ 253.174651][ T8802] syzkaller0: entered allmulticast mode [ 253.237147][ T8802] tipc: Resetting bearer [ 253.276654][ T8801] tipc: Resetting bearer [ 253.333305][ T8801] tipc: Disabling bearer [ 253.377804][ T8816] tipc: Started in network mode [ 253.395107][ T8816] tipc: Node identity 42576b7cae5, cluster identity 4711 [ 253.415823][ T8816] tipc: Enabled bearer , priority 0 [ 253.434409][ T8816] syzkaller0: entered promiscuous mode [ 253.449394][ T8816] syzkaller0: entered allmulticast mode [ 253.534611][ T8816] tipc: Resetting bearer [ 253.583658][ T8815] tipc: Resetting bearer [ 253.694453][ T8815] tipc: Disabling bearer [ 253.756604][ T8838] netlink: 'syz.3.775': attribute type 7 has an invalid length. [ 253.809771][ T8838] netlink: 'syz.3.775': attribute type 8 has an invalid length. [ 254.171174][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'. [ 255.788022][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.801498][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.828'. [ 255.811697][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.892538][ T8948] netlink: 'syz.0.830': attribute type 7 has an invalid length. [ 255.912942][ T8948] netlink: 'syz.0.830': attribute type 8 has an invalid length. [ 256.470584][ T8982] netlink: 'syz.0.846': attribute type 7 has an invalid length. [ 256.479449][ T8982] netlink: 'syz.0.846': attribute type 8 has an invalid length. [ 256.496969][ T8983] netlink: 208 bytes leftover after parsing attributes in process `syz.2.847'. [ 256.750408][ T8997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.854'. [ 257.058629][ T9012] netlink: 'syz.0.861': attribute type 7 has an invalid length. [ 257.088218][ T9012] netlink: 'syz.0.861': attribute type 8 has an invalid length. [ 257.638101][ T9045] syzkaller1: entered promiscuous mode [ 257.645447][ T9045] syzkaller1: entered allmulticast mode [ 257.693857][ T9047] bridge0: port 4(team0) entered disabled state [ 257.705529][ T9047] bridge0: port 3(dummy0) entered disabled state [ 257.718280][ T9047] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.729186][ T9047] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.765560][ T9050] netlink: 'syz.4.878': attribute type 7 has an invalid length. [ 257.776097][ T9050] netlink: 'syz.4.878': attribute type 8 has an invalid length. [ 257.965950][ T9061] openvswitch: netlink: Multiple metadata blocks provided [ 258.854667][ T9102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.902'. [ 258.879973][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 258.886481][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 258.894425][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 258.902454][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 259.279622][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.911'. [ 259.874667][ T9153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.926'. [ 260.217567][ T9170] netlink: 'syz.3.934': attribute type 72 has an invalid length. [ 260.888787][ T9204] netlink: 'syz.3.951': attribute type 7 has an invalid length. [ 260.896904][ T9206] netlink: 56 bytes leftover after parsing attributes in process `syz.2.952'. [ 260.917941][ T9204] netlink: 'syz.3.951': attribute type 8 has an invalid length. [ 261.097875][ T9219] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 261.500105][ T9240] tipc: Enabled bearer , priority 0 [ 261.509477][ T9240] syzkaller0: entered promiscuous mode [ 261.515491][ T9240] syzkaller0: entered allmulticast mode [ 261.540129][ T9240] tipc: Resetting bearer [ 261.550079][ T9239] tipc: Resetting bearer [ 261.556287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.556381][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.582836][ T9239] tipc: Disabling bearer [ 261.670898][ T9244] netlink: 'syz.3.967': attribute type 7 has an invalid length. [ 261.679939][ T9244] netlink: 'syz.3.967': attribute type 8 has an invalid length. [ 261.795625][ T9248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.969'. [ 262.039677][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'. [ 262.113019][ T9262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.976'. [ 262.335298][ T9265] netlink: 'syz.3.978': attribute type 7 has an invalid length. [ 262.353960][ T9265] netlink: 'syz.3.978': attribute type 8 has an invalid length. [ 262.414049][ T9274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.982'. [ 262.703877][ T7962] IPVS: starting estimator thread 0... [ 262.811938][ T9294] IPVS: using max 34 ests per chain, 81600 per kthread [ 262.992946][ T9307] netlink: 212924 bytes leftover after parsing attributes in process `syz.4.995'. [ 263.059116][ T9310] netlink: 'syz.0.996': attribute type 7 has an invalid length. [ 263.121926][ T9310] netlink: 'syz.0.996': attribute type 8 has an invalid length. [ 264.200822][ T9365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1020'. [ 264.678184][ T9393] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1034'. [ 264.703759][ T9396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1036'. [ 265.706402][ T9448] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1061'. [ 265.897036][ T9459] tipc: Enabled bearer , priority 0 [ 265.912960][ T9459] syzkaller0: entered promiscuous mode [ 265.939997][ T9459] syzkaller0: entered allmulticast mode [ 265.990159][ T9459] tipc: Resetting bearer [ 266.025611][ T9458] tipc: Resetting bearer [ 266.085913][ T9458] tipc: Disabling bearer [ 266.763484][ T9500] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 267.307156][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'. [ 267.800326][ T9551] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 267.940131][ T9559] pimreg3: entered allmulticast mode [ 268.181900][ T9569] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1118'. [ 268.390343][ T9578] tipc: Enabled bearer , priority 0 [ 268.399394][ T9578] syzkaller0: entered promiscuous mode [ 268.422469][ T9578] syzkaller0: entered allmulticast mode [ 268.460503][ T9578] tipc: Resetting bearer [ 268.509816][ T9576] tipc: Resetting bearer [ 268.589911][ T9576] tipc: Disabling bearer [ 269.042864][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1139'. [ 269.137598][ T9618] openvswitch: netlink: Multiple metadata blocks provided [ 269.271131][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1145'. [ 269.608229][ T9641] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.665261][ T9646] openvswitch: netlink: Multiple metadata blocks provided [ 270.128174][ T9672] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1167'. [ 270.155471][ T9676] openvswitch: netlink: Multiple metadata blocks provided [ 270.390906][ T9686] syzkaller1: entered promiscuous mode [ 270.409049][ T9686] syzkaller1: entered allmulticast mode [ 270.526272][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1178'. [ 270.737617][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1180'. [ 270.900404][ T9710] openvswitch: netlink: Multiple metadata blocks provided [ 270.901013][ T9708] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1184'. [ 270.945384][ T9713] tc_dump_action: action bad kind [ 271.095730][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1191'. [ 271.257400][ T9731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1195'. [ 271.527138][ T9743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1200'. [ 271.821103][ T9760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1209'. [ 271.878254][ T9762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1211'. [ 272.110134][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1215'. [ 272.363601][ T9788] syzkaller1: entered promiscuous mode [ 272.376794][ T9788] syzkaller1: entered allmulticast mode [ 274.182474][ T9890] syz_tun: entered allmulticast mode [ 274.290800][ T9889] syz_tun: left allmulticast mode [ 274.738205][ T9921] syzkaller1: entered promiscuous mode [ 274.754027][ T9921] syzkaller1: entered allmulticast mode [ 275.428200][ T9957] syzkaller1: entered promiscuous mode [ 275.446139][ T9957] syzkaller1: entered allmulticast mode [ 276.105178][ T9987] __nla_validate_parse: 12 callbacks suppressed [ 276.105196][ T9987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1321'. [ 276.233914][T10000] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.248592][T10000] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.803248][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1341'. [ 276.888275][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1342'. [ 276.969749][T10036] tipc: Enabled bearer , priority 0 [ 276.979862][T10036] syzkaller0: entered promiscuous mode [ 276.986699][T10036] syzkaller0: entered allmulticast mode [ 277.008452][T10036] tipc: Resetting bearer [ 277.053383][T10035] tipc: Resetting bearer [ 277.101324][T10035] tipc: Disabling bearer [ 277.221021][T10049] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1351'. [ 277.264812][T10049] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1351'. [ 277.381660][T10057] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1355'. [ 277.486264][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1358'. [ 277.578124][T10070] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 278.130660][T10092] netlink: 212924 bytes leftover after parsing attributes in process `syz.0.1371'. [ 278.462701][T10102] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 279.545725][T10129] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 279.940487][T10143] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1382'. [ 279.965545][T10143] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 280.233585][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1393'. [ 281.893453][T10202] __nla_validate_parse: 1 callbacks suppressed [ 281.893472][T10202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1418'. [ 282.376419][T10217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1425'. [ 282.623801][T10226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1430'. [ 283.189472][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1438'. [ 283.305071][T10250] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 283.330246][T10254] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1442'. [ 283.348944][T10253] macvtap0: entered allmulticast mode [ 283.432386][T10251] macvtap0: left allmulticast mode [ 283.486612][T10259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1444'. [ 283.932371][T10279] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 284.043276][T10282] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1455'. [ 284.240349][T10293] netlink: 212924 bytes leftover after parsing attributes in process `syz.4.1460'. [ 284.310004][T10299] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1463'. [ 284.320427][T10299] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1463'. [ 284.508429][T10306] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 285.319719][T10324] syz_tun: entered allmulticast mode [ 285.428286][T10330] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 285.452394][T10322] syz_tun: left allmulticast mode [ 285.922758][T10354] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 286.008791][T10357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.062932][T10357] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.386565][T10377] pim6reg1: entered promiscuous mode [ 286.405395][T10377] pim6reg1: entered allmulticast mode [ 286.603430][T10383] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 287.019252][T10403] syzkaller1: entered promiscuous mode [ 287.029578][T10403] syzkaller1: entered allmulticast mode [ 287.037243][T10406] pim6reg1: entered promiscuous mode [ 287.043605][T10406] pim6reg1: entered allmulticast mode [ 287.170769][T10413] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 287.329357][T10418] tipc: Started in network mode [ 287.364931][T10418] tipc: Node identity 0a826a0557ba, cluster identity 4711 [ 287.376547][T10418] tipc: Enabled bearer , priority 0 [ 287.385470][T10423] syzkaller0: entered promiscuous mode [ 287.417272][T10423] syzkaller0: entered allmulticast mode [ 287.496563][T10418] tipc: Resetting bearer [ 287.517225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.525890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.557714][T10416] tipc: Resetting bearer [ 287.610820][T10416] tipc: Disabling bearer [ 287.648153][T10433] __nla_validate_parse: 5 callbacks suppressed [ 287.648170][T10433] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1523'. [ 287.992959][T10440] syzkaller1: entered promiscuous mode [ 288.012195][T10440] syzkaller1: entered allmulticast mode [ 289.061236][T10465] syzkaller0: entered promiscuous mode [ 289.079329][T10465] syzkaller0: entered allmulticast mode [ 289.594350][T10475] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1541'. [ 289.862004][T10479] net_ratelimit: 2 callbacks suppressed [ 289.862025][T10479] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 290.134595][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1549'. [ 290.312302][ T30] audit: type=1326 audit(1753957846.563:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.0.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9309b8e9a9 code=0x7ffc0000 [ 290.362483][ T30] audit: type=1326 audit(1753957846.573:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.0.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9309b8e9a9 code=0x7ffc0000 [ 290.441870][ T30] audit: type=1326 audit(1753957846.573:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.0.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9309b8e9a9 code=0x7ffc0000 [ 290.491933][ T30] audit: type=1326 audit(1753957846.573:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.0.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9309b8e9a9 code=0x7ffc0000 [ 290.551924][ T30] audit: type=1326 audit(1753957846.573:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.0.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9309b8e9a9 code=0x7ffc0000 [ 290.581450][T10502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1554'. [ 290.617610][ T30] audit: type=1326 audit(1753957846.573:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.0.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9309b8e9a9 code=0x7ffc0000 [ 290.707968][ T30] audit: type=1326 audit(1753957846.573:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.0.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9309b8e9a9 code=0x7ffc0000 [ 290.776115][T10506] macvtap0: entered allmulticast mode [ 290.785046][ T30] audit: type=1326 audit(1753957846.573:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.0.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9309b8e9a9 code=0x7ffc0000 [ 290.839323][T10508] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 290.859801][T10505] macvtap0: left allmulticast mode [ 290.870836][ T30] audit: type=1326 audit(1753957846.593:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.0.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f9309b8e9a9 code=0x7ffc0000 [ 290.942034][ T30] audit: type=1326 audit(1753957846.593:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.0.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9309b8e9a9 code=0x7ffc0000 [ 291.053429][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1558'. [ 291.550472][T10530] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1566'. [ 291.749065][T10536] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 291.764940][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1569'. [ 291.909502][T10540] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1571'. [ 292.268691][T10550] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1576'. [ 292.343713][T10554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1578'. [ 292.636929][T10562] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 292.677804][T10564] __nla_validate_parse: 1 callbacks suppressed [ 292.677825][T10564] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1583'. [ 292.981046][T10579] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1589'. [ 293.132624][T10586] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1593'. [ 293.815877][T10607] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1601'. [ 294.814822][T10651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1621'. [ 295.010868][T10663] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.404870][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 295.404886][ T30] audit: type=1326 audit(1753957851.683:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10676 comm="syz.1.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eab78e9a9 code=0x7ffc0000 [ 295.491932][ T30] audit: type=1326 audit(1753957851.713:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10676 comm="syz.1.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f5eab78e9a9 code=0x7ffc0000 [ 295.561193][ T30] audit: type=1326 audit(1753957851.713:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10676 comm="syz.1.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eab78e9a9 code=0x7ffc0000 [ 295.567877][T10686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1637'. [ 295.953391][T10700] pim6reg1: entered promiscuous mode [ 295.958746][T10700] pim6reg1: entered allmulticast mode [ 297.871717][T10763] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1671'. [ 297.924418][T10764] syzkaller1: entered promiscuous mode [ 298.110093][T10764] syzkaller1: entered allmulticast mode [ 298.349770][ T30] audit: type=1326 audit(1753957854.623:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.1.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eab78e9a9 code=0x7ffc0000 [ 298.441855][ T30] audit: type=1326 audit(1753957854.623:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.1.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eab78e9a9 code=0x7ffc0000 [ 298.536419][ T30] audit: type=1326 audit(1753957854.653:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.1.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5eab78e9a9 code=0x7ffc0000 [ 298.553150][T10784] macvtap0: entered allmulticast mode [ 298.615989][ T30] audit: type=1326 audit(1753957854.653:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.1.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eab78e9a9 code=0x7ffc0000 [ 298.659359][T10783] macvtap0: left allmulticast mode [ 298.694287][ T30] audit: type=1326 audit(1753957854.653:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.1.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eab78e9a9 code=0x7ffc0000 [ 298.799962][ T30] audit: type=1326 audit(1753957854.653:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.1.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5eab78e9a9 code=0x7ffc0000 [ 298.898435][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1683'. [ 298.902759][ T30] audit: type=1326 audit(1753957854.653:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.1.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eab78e9a9 code=0x7ffc0000 [ 298.940483][T10792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1683'. [ 298.950769][T10792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1683'. [ 301.584488][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1713'. [ 301.680090][T10864] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1715'. [ 301.875453][T10873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1719'. [ 301.962753][T10876] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1720'. [ 302.037955][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 302.037973][ T30] audit: type=1326 audit(1753957858.313:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.1.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eab78e9a9 code=0x7ffc0000 [ 302.076340][ T30] audit: type=1326 audit(1753957858.353:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.1.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eab78e9a9 code=0x7ffc0000 [ 302.150220][ T30] audit: type=1326 audit(1753957858.353:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.1.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f5eab78e9a9 code=0x7ffc0000 [ 302.201264][ T30] audit: type=1326 audit(1753957858.353:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.1.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eab78e9a9 code=0x7ffc0000 [ 302.282030][ T30] audit: type=1326 audit(1753957858.353:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.1.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eab78e9a9 code=0x7ffc0000 [ 302.509322][T10894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1727'. [ 302.690751][ T30] audit: type=1326 audit(1753957858.963:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10897 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5218e9a9 code=0x7ffc0000 [ 302.769769][ T30] audit: type=1326 audit(1753957858.993:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10897 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5218e9a9 code=0x7ffc0000 [ 302.804582][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1732'. [ 302.841937][ T30] audit: type=1326 audit(1753957858.993:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10897 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb5218e9a9 code=0x7ffc0000 [ 303.157843][T10912] tipc: Enabled bearer , priority 0 [ 303.217315][T10912] tipc: Resetting bearer [ 303.380631][ T30] audit: type=1326 audit(1753957858.993:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10897 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5218e9a9 code=0x7ffc0000 [ 303.449619][ T30] audit: type=1326 audit(1753957858.993:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10897 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5218e9a9 code=0x7ffc0000 [ 303.472563][T10911] tipc: Disabling bearer [ 303.662430][T10921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1741'. [ 304.082786][T10934] syzkaller1: entered promiscuous mode [ 304.090933][T10934] syzkaller1: entered allmulticast mode [ 304.103933][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1746'. [ 304.321174][T10940] kvm: kvm [10939]: vcpu0, guest rIP: 0x97 Unhandled WRMSR(0x11e) = 0x0 [ 305.331712][T10970] binder: BINDER_SET_CONTEXT_MGR already set [ 305.356192][T10970] binder: 10969:10970 ioctl 4018620d 200000004a80 returned -16 [ 305.967606][T10980] bridge0: entered allmulticast mode [ 305.995185][T10980] kernel profiling enabled (shift: 17) [ 306.008999][T10980] netlink: 'syz.1.1762': attribute type 16 has an invalid length. [ 306.027517][T10980] netlink: 'syz.1.1762': attribute type 17 has an invalid length. [ 306.036747][T10980] bridge0: left allmulticast mode [ 307.575731][T11069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1803'. [ 307.595860][T11071] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1804'. [ 308.010399][T11092] netlink: 'syz.2.1813': attribute type 11 has an invalid length. [ 309.330078][T11129] netdevsim netdevsim1 : renamed from netdevsim0 [ 310.632108][T11149] tipc: Enabled bearer , priority 0 [ 310.677505][T11149] tipc: Resetting bearer [ 310.735074][T11146] tipc: Disabling bearer [ 310.905839][T11155] loop7: detected capacity change from 0 to 7 [ 310.939070][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.948592][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 310.960852][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.970092][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 311.002225][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.011483][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 311.021817][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.030999][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 311.039183][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.048508][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 311.056669][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.065942][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 311.074664][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.083882][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 311.091908][T11155] ldm_validate_partition_table(): Disk read failed. [ 311.098715][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.107915][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 311.122057][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.131391][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 311.145317][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 311.154520][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 311.165290][T11155] Dev loop7: unable to read RDB block 0 [ 311.192465][T11155] loop7: unable to read partition table [ 311.206266][T11155] loop7: partition table beyond EOD, truncated [ 311.234158][T11155] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 312.080261][T11182] tipc: Cannot configure node identity twice [ 312.103801][T11182] tipc: Cannot configure node identity twice [ 312.944551][T11204] tipc: Enabling of bearer rejected, failed to enable media [ 314.115453][T11234] tipc: Enabling of bearer rejected, failed to enable media [ 314.546697][T11237] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 315.242244][T11268] tipc: Enabling of bearer rejected, failed to enable media [ 316.855772][T11328] kvm: user requested TSC rate below hardware speed [ 316.870149][T11328] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 317.085487][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1911'. [ 317.085936][T11340] input: syz1 as /devices/virtual/input/input16 [ 317.228605][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.235080][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.239499][T11348] netlink: 380 bytes leftover after parsing attributes in process `syz.0.1912'. [ 317.346033][T11354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1915'. [ 317.366248][T11354] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 317.475557][ T5913] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 317.644615][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 317.663712][ T5913] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 317.677052][ T5913] usb 2-1: config 0 has no interface number 0 [ 317.683924][ T5913] usb 2-1: config 0 interface 184 has no altsetting 0 [ 317.714977][ T5913] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 317.729255][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.745854][ T5913] usb 2-1: Product: syz [ 317.757268][ T5913] usb 2-1: Manufacturer: syz [ 317.774832][ T5913] usb 2-1: SerialNumber: syz [ 317.803101][ T5913] usb 2-1: config 0 descriptor?? [ 317.819432][ T5913] smsc75xx v1.0.0 [ 318.113545][ T5836] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 318.291888][ T5836] usb 5-1: Using ep0 maxpacket: 16 [ 318.316223][ T5836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 318.342699][ T5836] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 318.360805][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.369799][ T5836] usb 5-1: Product: syz [ 318.378821][ T5836] usb 5-1: Manufacturer: syz [ 318.384673][ T5836] usb 5-1: SerialNumber: syz [ 318.393865][ T5836] usb 5-1: config 0 descriptor?? [ 318.414612][ T5836] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 318.429084][ T5913] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 318.440569][ T5913] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 318.474432][ T5836] usb 5-1: Detected FT232R [ 318.494340][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1927'. [ 318.505129][T11380] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 318.903115][ T7967] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 319.019265][ T5836] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 319.080390][ T7967] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 319.120042][ T7967] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 319.130312][ T7967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 319.139416][ T7967] usb 4-1: SerialNumber: syz [ 319.508701][ T5836] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 319.542349][ T5836] usb 5-1: USB disconnect, device number 30 [ 319.563204][ T5836] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 319.586974][ T5836] ftdi_sio 5-1:0.0: device disconnected [ 319.614755][ T7967] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 319.650291][ T7967] usb 4-1: USB disconnect, device number 37 [ 319.936087][ T5929] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 320.116158][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 320.134056][ T5929] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 320.156965][ T5929] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 102, changing to 10 [ 320.190799][ T5929] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 24624, setting to 1024 [ 320.229478][ T5929] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 320.246654][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.276338][T11350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.310562][T11350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.409992][T11402] kvm: user requested TSC rate below hardware speed [ 320.418510][T11402] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 320.484388][ T5929] usb 3-1: string descriptor 0 read error: -71 [ 320.531822][T11350] binder: 11349:11350 ioctl 40046205 0 returned -22 [ 320.548154][ T5913] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71 [ 320.585970][ T5913] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71 [ 320.627237][ T5913] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 320.649808][ T5913] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 320.661434][ T5929] usb 3-1: USB disconnect, device number 46 [ 320.669320][ T5913] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 320.677912][ T5836] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 320.726276][ T5913] usb 2-1: USB disconnect, device number 31 [ 320.806017][T11408] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1938'. [ 320.834905][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 320.849793][ T5836] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 320.861700][ T5836] usb 4-1: config 0 has no interface number 0 [ 320.892755][ T5836] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 320.904623][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.913359][ T5836] usb 4-1: Product: syz [ 320.917677][ T5836] usb 4-1: Manufacturer: syz [ 320.922853][ T5836] usb 4-1: SerialNumber: syz [ 320.939230][ T5836] usb 4-1: config 0 descriptor?? [ 320.954140][ T5836] smsc95xx v2.0.0 [ 321.353894][ T5913] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 321.379036][ T5836] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 321.395450][ T5836] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 321.421503][T11431] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1949'. [ 321.535297][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1951'. [ 321.554146][ T5913] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.577081][ T5913] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.588253][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 321.599628][ T5913] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 321.610942][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.632999][ T5913] usb 5-1: config 0 descriptor?? [ 321.642319][ T7967] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 321.792005][T11441] support for cryptoloop has been removed. Use dm-crypt instead. [ 321.802009][ T7967] usb 2-1: Using ep0 maxpacket: 32 [ 321.814206][ T7967] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 321.836397][ T7967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.852531][ T7967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.863239][ T7967] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 321.876951][ T7967] usb 2-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 321.897407][ T7967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.908756][ T7967] usb 2-1: config 0 descriptor?? [ 322.255464][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 322.263443][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 322.271206][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 322.278997][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 322.286503][ T5913] usb 5-1: string descriptor 0 read error: -32 [ 322.295227][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 322.309761][ T5913] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #100: -71 [ 322.324350][ T5913] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 322.335419][ T5913] uclogic 0003:256C:006D.000C: failed probing pen v1 parameters: -71 [ 322.349218][ T5913] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 322.358278][ T5913] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71 [ 322.373627][ T5913] usb 5-1: USB disconnect, device number 31 [ 322.528808][ T7967] usb 2-1: USB disconnect, device number 32 [ 322.799278][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1958'. [ 323.029283][T11454] kvm: pic: single mode not supported [ 323.255341][T11461] tipc: Enabling of bearer rejected, failed to enable media [ 323.504154][ T7962] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 323.671887][ T7962] usb 2-1: Using ep0 maxpacket: 32 [ 323.679230][ T7962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.690771][ T7962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.701054][ T7962] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 323.716600][ T7962] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 323.728789][ T7962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.745571][ T7962] usb 2-1: config 0 descriptor?? [ 324.211983][ T5913] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 324.368710][ T7962] usbhid 2-1:0.0: can't add hid device: -71 [ 324.382211][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 324.382839][ T7962] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 324.390560][ T5913] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 324.398883][ T7962] usb 2-1: USB disconnect, device number 33 [ 324.430389][ T5913] usb 3-1: config 0 has no interface number 0 [ 324.439077][ T5913] usb 3-1: config 0 interface 184 has no altsetting 0 [ 324.457456][ T5913] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 324.486003][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.495240][ T5913] usb 3-1: Product: syz [ 324.499538][ T5913] usb 3-1: Manufacturer: syz [ 324.504254][ T5913] usb 3-1: SerialNumber: syz [ 324.511354][ T5913] usb 3-1: config 0 descriptor?? [ 324.520013][ T5913] smsc75xx v1.0.0 [ 324.638403][ T5836] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000024: -71 [ 324.651314][ T5836] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 324.663120][ T5836] usb 4-1: USB disconnect, device number 38 [ 324.732091][ T7967] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 324.882010][ T7967] usb 5-1: Using ep0 maxpacket: 32 [ 324.889861][ T7967] usb 5-1: unable to get BOS descriptor or descriptor too short [ 324.905985][ T7967] usb 5-1: config 3 has an invalid interface number: 141 but max is 1 [ 324.914796][ T7967] usb 5-1: config 3 has an invalid interface number: 246 but max is 1 [ 324.925128][ T7967] usb 5-1: config 3 has no interface number 0 [ 324.933862][ T7967] usb 5-1: config 3 has no interface number 1 [ 324.940104][ T7967] usb 5-1: config 3 interface 141 has no altsetting 0 [ 324.950640][ T7967] usb 5-1: config 3 interface 246 has no altsetting 0 [ 324.965351][ T7967] usb 5-1: Dual-Role OTG device on HNP port [ 324.971633][ T7967] usb 5-1: New USB device found, idVendor=0c12, idProduct=e207, bcdDevice=93.85 [ 324.981091][ T7967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.989804][ T7967] usb 5-1: Product: syz [ 324.994106][ T7967] usb 5-1: Manufacturer: syz [ 324.998712][ T7967] usb 5-1: SerialNumber: syz [ 325.125777][ T5913] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 325.136761][ T5913] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 325.171930][ T5836] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 325.253159][ T7967] usb 5-1: USB disconnect, device number 32 [ 325.342972][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 325.350502][ T5913] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 325.366707][ T5913] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 325.377360][ T5913] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 325.387137][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.399964][ T5913] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 325.408353][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.422811][ T5836] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 325.435742][ T5836] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 325.444975][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.456555][ T5836] usb 2-1: config 0 descriptor?? [ 325.591991][ T7962] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 325.741862][ T7962] usb 4-1: Using ep0 maxpacket: 32 [ 325.770204][ T7962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.782736][ T7962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.794975][ T7962] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 325.808182][ T7962] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 325.818589][ T7962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.836311][ T7962] usb 4-1: config 0 descriptor?? [ 325.839803][T11503] binder: BINDER_SET_CONTEXT_MGR already set [ 325.847824][T11503] binder: 11502:11503 ioctl 4018620d 200000000140 returned -16 [ 325.899264][ T5836] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.000E/input/input18 [ 325.996913][ T5836] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.000E/input/input19 [ 326.075557][ T5836] kye 0003:0458:5011.000E: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 326.271625][ T7962] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000F/input/input20 [ 326.352819][ T7962] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000F/input/input21 [ 326.430278][ T7962] kye 0003:0458:5011.000F: input,hiddev1,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 326.504104][ T7962] usb 4-1: USB disconnect, device number 39 [ 326.586634][T11511] fido_id[11511]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 327.003627][ C1] kye 0003:0458:5011.000E: usb_submit_urb(ctrl) failed: -1 [ 327.287118][T11536] syzkaller0: entered promiscuous mode [ 327.295584][T11536] syzkaller0: entered allmulticast mode [ 327.405575][T11542] bridge0: port 5(bond0) entered blocking state [ 327.412427][T11542] bridge0: port 5(bond0) entered disabled state [ 327.426464][T11542] bond0: entered allmulticast mode [ 327.437976][T11542] bond_slave_0: entered allmulticast mode [ 327.451418][T11542] bond_slave_1: entered allmulticast mode [ 327.457485][ T7963] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 327.476157][T11542] bond0: entered promiscuous mode [ 327.489250][T11542] bond_slave_0: entered promiscuous mode [ 327.526902][T11542] bond_slave_1: entered promiscuous mode [ 327.627290][ T7967] usb 3-1: USB disconnect, device number 47 [ 327.633490][ T7963] usb 5-1: Using ep0 maxpacket: 32 [ 327.644286][ T7963] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.692163][ T7963] usb 5-1: config 0 interface 0 has no altsetting 0 [ 327.714468][ T7963] usb 5-1: New USB device found, idVendor=046d, idProduct=c29a, bcdDevice= 0.00 [ 327.752088][ T7963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.785603][ T5836] usb 2-1: USB disconnect, device number 34 [ 327.793031][ T7963] usb 5-1: config 0 descriptor?? [ 328.216328][ T7963] logitech 0003:046D:C29A.0010: unknown main item tag 0x0 [ 328.222028][T11565] input: syz1 as /devices/virtual/input/input23 [ 328.255078][ T7963] logitech 0003:046D:C29A.0010: unknown main item tag 0x0 [ 328.285376][ T7963] logitech 0003:046D:C29A.0010: unknown main item tag 0x0 [ 328.315730][ T7963] logitech 0003:046D:C29A.0010: unknown main item tag 0x0 [ 328.335830][ T7963] logitech 0003:046D:C29A.0010: unknown main item tag 0x0 [ 328.362116][ T7963] logitech 0003:046D:C29A.0010: hidraw0: USB HID v0.01 Device [HID 046d:c29a] on usb-dummy_hcd.4-1/input0 [ 328.406173][ T7963] logitech 0003:046D:C29A.0010: no inputs found [ 328.457018][ T7963] usb 5-1: USB disconnect, device number 33 [ 328.551222][T11568] fido_id[11568]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 328.762363][ T5913] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 328.932076][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 328.953742][ T5913] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 328.980463][ T5913] usb 4-1: config 0 has no interface number 0 [ 329.001939][ T5913] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 329.025701][ T5913] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 329.042519][ T7967] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 329.059429][ T5913] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 329.069225][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.077477][ T5913] usb 4-1: Product: syz [ 329.081893][ T5913] usb 4-1: Manufacturer: syz [ 329.086504][ T5913] usb 4-1: SerialNumber: syz [ 329.098755][ T5913] usb 4-1: config 0 descriptor?? [ 329.109082][T11572] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 329.132753][T11572] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 329.202190][ T7967] usb 2-1: Using ep0 maxpacket: 16 [ 329.202714][T11594] [ 329.209651][T11594] ====================================================== [ 329.211482][ T7967] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.216753][T11594] WARNING: possible circular locking dependency detected [ 329.216776][T11594] 6.16.0-syzkaller-06699-ge8d780dcd957 #0 Not tainted [ 329.216787][T11594] ------------------------------------------------------ [ 329.216794][T11594] syz.2.2014/11594 is trying to acquire lock: [ 329.216804][T11594] ffff88801b2ff220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 329.264244][T11594] [ 329.264244][T11594] but task is already holding lock: [ 329.271588][T11594] ffff88802499e2c8 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x17f2/0x1d00 [ 329.281603][T11594] [ 329.281603][T11594] which lock already depends on the new lock. [ 329.281603][T11594] [ 329.292193][T11594] [ 329.292193][T11594] the existing dependency chain (in reverse order) is: [ 329.301372][T11594] [ 329.301372][T11594] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 329.310144][T11594] lock_acquire+0x120/0x360 [ 329.315167][T11594] blk_alloc_queue+0x538/0x620 [ 329.320438][T11594] __blk_mq_alloc_disk+0x15c/0x340 [ 329.326071][T11594] loop_add+0x411/0xad0 [ 329.330825][T11594] loop_init+0xd9/0x170 [ 329.335580][T11594] do_one_initcall+0x233/0x820 [ 329.341025][T11594] do_initcall_level+0x104/0x190 [ 329.346591][T11594] do_initcalls+0x59/0xa0 [ 329.351584][T11594] kernel_init_freeable+0x334/0x4a0 [ 329.357320][T11594] kernel_init+0x1d/0x1d0 [ 329.362385][T11594] ret_from_fork+0x3fc/0x770 [ 329.367557][T11594] ret_from_fork_asm+0x1a/0x30 [ 329.372832][T11594] [ 329.372832][T11594] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 329.380123][T11594] lock_acquire+0x120/0x360 [ 329.385235][T11594] fs_reclaim_acquire+0x72/0x100 [ 329.390684][T11594] kmem_cache_alloc_noprof+0x44/0x3c0 [ 329.396655][T11594] __kernfs_iattrs+0xd9/0x320 [ 329.401924][T11594] kernfs_iop_setattr+0xea/0x3f0 [ 329.407378][T11594] notify_change+0xb36/0xe40 [ 329.412674][T11594] do_truncate+0x1a4/0x220 [ 329.417642][T11594] path_openat+0x306c/0x3830 [ 329.422756][T11594] do_filp_open+0x1fa/0x410 [ 329.427774][T11594] do_sys_openat2+0x121/0x1c0 [ 329.432972][T11594] __x64_sys_openat+0x138/0x170 [ 329.438517][T11594] do_syscall_64+0xfa/0x3b0 [ 329.443570][T11594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.450231][T11594] [ 329.450231][T11594] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 329.458914][T11594] validate_chain+0xb9b/0x2140 [ 329.464367][T11594] __lock_acquire+0xab9/0xd20 [ 329.469559][T11594] lock_acquire+0x120/0x360 [ 329.474572][T11594] down_read+0x46/0x2e0 [ 329.479245][T11594] kernfs_iop_getattr+0x9e/0x450 [ 329.484736][T11594] vfs_getattr_nosec+0x2e1/0x430 [ 329.490281][T11594] loop_assign_backing_file+0x222/0x400 [ 329.496366][T11594] lo_ioctl+0x1860/0x1d00 [ 329.501218][T11594] blkdev_ioctl+0x5a8/0x6d0 [ 329.506245][T11594] __se_sys_ioctl+0xf9/0x170 [ 329.511369][T11594] do_syscall_64+0xfa/0x3b0 [ 329.516401][T11594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.522817][T11594] [ 329.522817][T11594] other info that might help us debug this: [ 329.522817][T11594] [ 329.533426][T11594] Chain exists of: [ 329.533426][T11594] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 329.533426][T11594] [ 329.548211][T11594] Possible unsafe locking scenario: [ 329.548211][T11594] [ 329.555660][T11594] CPU0 CPU1 [ 329.561024][T11594] ---- ---- [ 329.566479][T11594] lock(&q->q_usage_counter(io)#24); [ 329.571953][T11594] lock(fs_reclaim); [ 329.578462][T11594] lock(&q->q_usage_counter(io)#24); [ 329.586455][T11594] rlock(&root->kernfs_iattr_rwsem); [ 329.591832][T11594] [ 329.591832][T11594] *** DEADLOCK *** [ 329.591832][T11594] [ 329.599965][T11594] 3 locks held by syz.2.2014/11594: [ 329.605142][T11594] #0: ffff888024ba9400 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0xfbf/0x1d00 [ 329.614111][T11594] #1: ffff88802499e2c8 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x17f2/0x1d00 [ 329.624481][T11594] #2: ffff88802499e300 (&q->q_usage_counter(queue)#21){+.+.}-{0:0}, at: lo_ioctl+0x17f2/0x1d00 [ 329.634916][T11594] [ 329.634916][T11594] stack backtrace: [ 329.640797][T11594] CPU: 0 UID: 0 PID: 11594 Comm: syz.2.2014 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 329.640818][T11594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 329.640837][T11594] Call Trace: [ 329.640845][T11594] [ 329.640853][T11594] dump_stack_lvl+0x189/0x250 [ 329.640872][T11594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.640886][T11594] ? __pfx__printk+0x10/0x10 [ 329.640905][T11594] print_circular_bug+0x2ee/0x310 [ 329.640921][T11594] check_noncircular+0x134/0x160 [ 329.640954][T11594] validate_chain+0xb9b/0x2140 [ 329.640968][T11594] ? tomoyo_path_perm+0x1e3/0x4b0 [ 329.640989][T11594] __lock_acquire+0xab9/0xd20 [ 329.641008][T11594] ? kernfs_iop_getattr+0x9e/0x450 [ 329.641023][T11594] lock_acquire+0x120/0x360 [ 329.641039][T11594] ? kernfs_iop_getattr+0x9e/0x450 [ 329.641056][T11594] down_read+0x46/0x2e0 [ 329.641069][T11594] ? kernfs_iop_getattr+0x9e/0x450 [ 329.641185][T11594] kernfs_iop_getattr+0x9e/0x450 [ 329.641209][T11594] vfs_getattr_nosec+0x2e1/0x430 [ 329.641227][T11594] loop_assign_backing_file+0x222/0x400 [ 329.641248][T11594] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 329.641266][T11594] ? schedule+0x91/0x360 [ 329.641287][T11594] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 329.641307][T11594] lo_ioctl+0x1860/0x1d00 [ 329.641327][T11594] ? __pfx_lo_ioctl+0x10/0x10 [ 329.641347][T11594] ? __lock_acquire+0xab9/0xd20 [ 329.641366][T11594] ? __lock_acquire+0xab9/0xd20 [ 329.641386][T11594] ? __lock_acquire+0xab9/0xd20 [ 329.641406][T11594] ? __lock_acquire+0xab9/0xd20 [ 329.641428][T11594] ? is_bpf_text_address+0x26/0x2b0 [ 329.641448][T11594] ? is_bpf_text_address+0x292/0x2b0 [ 329.641471][T11594] ? is_bpf_text_address+0x26/0x2b0 [ 329.641493][T11594] ? kernel_text_address+0xa5/0xe0 [ 329.641509][T11594] ? __kernel_text_address+0xd/0x40 [ 329.641525][T11594] ? unwind_get_return_address+0x4d/0x90 [ 329.641539][T11594] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 329.641554][T11594] ? arch_stack_walk+0xfc/0x150 [ 329.641572][T11594] ? stack_trace_save+0x9c/0xe0 [ 329.641586][T11594] ? stack_depot_save_flags+0x40/0x900 [ 329.641608][T11594] ? kasan_save_track+0x4f/0x80 [ 329.641625][T11594] ? kasan_save_track+0x3e/0x80 [ 329.641640][T11594] ? kasan_save_free_info+0x46/0x50 [ 329.641654][T11594] ? __kasan_slab_free+0x62/0x70 [ 329.641670][T11594] ? kfree+0x18e/0x440 [ 329.641687][T11594] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 329.641701][T11594] ? security_file_ioctl+0xcb/0x2d0 [ 329.641716][T11594] ? __se_sys_ioctl+0x47/0x170 [ 329.641731][T11594] ? do_syscall_64+0xfa/0x3b0 [ 329.641748][T11594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.641794][T11594] ? __asan_memset+0x22/0x50 [ 329.641811][T11594] ? blk_get_meta_cap+0x140/0x710 [ 329.641826][T11594] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 329.641839][T11594] ? kasan_quarantine_put+0xdd/0x220 [ 329.641858][T11594] ? blkdev_common_ioctl+0xff7/0x2550 [ 329.641874][T11594] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 329.641890][T11594] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 329.641905][T11594] ? do_vfs_ioctl+0xbe8/0x1430 [ 329.641921][T11594] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 329.641941][T11594] ? __lock_acquire+0xab9/0xd20 [ 329.641962][T11594] ? __pfx_lo_ioctl+0x10/0x10 [ 329.641979][T11594] blkdev_ioctl+0x5a8/0x6d0 [ 329.641994][T11594] ? __pfx_blkdev_ioctl+0x10/0x10 [ 329.642007][T11594] ? __fget_files+0x2a/0x420 [ 329.642021][T11594] ? bpf_lsm_file_ioctl+0x9/0x20 [ 329.642038][T11594] ? __pfx_blkdev_ioctl+0x10/0x10 [ 329.642051][T11594] __se_sys_ioctl+0xf9/0x170 [ 329.642074][T11594] do_syscall_64+0xfa/0x3b0 [ 329.642096][T11594] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.642113][T11594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.642126][T11594] ? clear_bhb_loop+0x60/0xb0 [ 329.642141][T11594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.642155][T11594] RIP: 0033:0x7ffb5218e9a9 [ 329.642169][T11594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.642182][T11594] RSP: 002b:00007ffb53006038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.642198][T11594] RAX: ffffffffffffffda RBX: 00007ffb523b5fa0 RCX: 00007ffb5218e9a9 [ 329.642209][T11594] RDX: 0000000000000006 RSI: 0000000000004c06 RDI: 0000000000000003 [ 329.642218][T11594] RBP: 00007ffb52210d69 R08: 0000000000000000 R09: 0000000000000000 [ 329.642227][T11594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.642235][T11594] R13: 0000000000000000 R14: 00007ffb523b5fa0 R15: 00007ffb524dfa28 [ 329.642250][T11594] [ 329.644697][ T7967] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 329.779891][T11572] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 329.786407][ T7967] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 329.806492][T11572] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 329.807339][ T7967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.135780][ T7967] usb 2-1: Product: syz [ 330.139946][ T7967] usb 2-1: Manufacturer: syz [ 330.144603][ T7967] usb 2-1: SerialNumber: syz [ 330.217820][ T5913] asix 4-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 330.228560][ T5913] asix 4-1:0.251: probe with driver asix failed with error -524 [ 330.353970][ T7967] usb 2-1: 0:2 : does not exist [ 330.361483][ T7967] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 330.377557][ T7967] usb 2-1: USB disconnect, device number 35 [ 330.396700][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 330.423215][ T5913] usb 4-1: USB disconnect, device number 40