last executing test programs: 6.11859464s ago: executing program 3 (id=905): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='ext4_ext_show_extent\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r2, 0x0, &(0x7f0000000000), 0x800) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) fallocate(r3, 0x0, 0x5, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r4, 0x0, 0x3b}]) ptrace$poke(0x5, 0xffffffffffffffff, 0x0, 0x1d) 5.612789858s ago: executing program 3 (id=909): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x2, 0x0) 4.84730963s ago: executing program 1 (id=913): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x7, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x9, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x3, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6d, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0xfffffff9, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x0, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x6, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e9, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70c, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x791bfd1ea2b89f05, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.515162842s ago: executing program 3 (id=914): r0 = socket(0xa, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe64, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005a40)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x1}, 0x1c, 0x0}}], 0x1, 0x20008000) 4.481869397s ago: executing program 4 (id=915): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x31, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0) ioctl$TCSETS(r0, 0x89f0, &(0x7f0000000100)={0xfffffff8, 0x0, 0x0, 0x7ff, 0x0, "0000005f9ed6280000000000edfc001900"}) 4.480352525s ago: executing program 0 (id=916): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000a80)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000054d564b"]) 4.233414697s ago: executing program 0 (id=917): memfd_create(&(0x7f0000000000)='l2\xaa*\xaa\xaa\xabI\xf9\xbf\x83f|\xc3\x86\x15\xac\xbb\xed\xbf%\xd8\xee)\x17\xaa\x0f\xaalR\x96\xe6!\xd7k\x02o\xffSE', 0x6) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) 4.076663628s ago: executing program 0 (id=918): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x34000041) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x434}, 0x1, 0x0, 0x0, 0x10}, 0x40000) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/253, 0xfd}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f00000007c0)=""/230, 0xe6}], 0x3}, 0x10000}, {{&(0x7f0000000580)=@caif=@dbg, 0x80, &(0x7f0000002d00)=[{0x0}, {&(0x7f00000008c0)=""/152, 0x98}, {0x0}, {0x0}, {&(0x7f0000001a80)=""/247, 0xf7}, {&(0x7f0000001b80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002c40)=""/143, 0x8f}], 0x8}, 0xfffffffc}], 0x2, 0x100, &(0x7f0000002e00)={0x77359400}) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) umount2(&(0x7f0000000000)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xa, 0x110, 0xffffffffffffffff, 0x80000000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x9afe, 0x7fff, 0x34363248, 0x1, 0x5, [{0x5fb, 0xd}, {0x4, 0x4}, {0xb, 0x6}, {0x7, 0xe853}, {0x400, 0x3}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x7}], 0x9, 0x8, 0x2, 0x1, 0x7}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32004bd50014000000110001"], 0x7c}}, 0x0) r1 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [{0x20, ')+'}, {0x20, '[k'}, {0x20, 'no&\x80\x85\xfe\x19\x17y\xb2\x82\x81AR\x86lo-\xc5hX\xbbt\b\x86xookie'}], 0xa, '\vT'}, 0x33) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000640)=""/223, 0xdf}], 0x10000000000000c0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x3}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x8080000, 0xb, 0xfffffffb, 0xfffffffe, 0x0, [{0xc, 0x3, 0x8, '\x00', 0xb4}, {0x83, 0x1d, 0x4, '\x00', 0x4b}, {0xf9, 0xc, 0x9, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x8}, {0x8, 0x10, 0x8, '\x00', 0x1}, {0x2, 0x7, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x6d, '\x00', 0xe9}, {0xe, 0x4, 0xa5, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x1, 0x9, 0x10, '\x00', 0x8}, {0x0, 0x0, 0x2, '\x00', 0x7}, {0x1, 0x8a, 0x5, '\x00', 0x4}, {0x4, 0xf1, 0x6, '\x00', 0xb2}, {0x7, 0x4, 0x6, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0xd}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xec, 0x3, 0x8}, {0x1f, 0x2, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x56, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x7}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x4, 0x8, 0xfa, '\x00', 0x42}]}}) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000000000000000000000000004000000ca8ac3a6"], &(0x7f00000000c0)=0x28) socket$inet6_tcp(0xa, 0x1, 0x0) 3.932907385s ago: executing program 1 (id=919): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) acct(&(0x7f00000005c0)='./file0/file0\x00') write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x40, 0x0, 0x0, 0x2f, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x20000101, {0x200000000000000, 0x4, 0x7, 0xfffffffffffffffe, 0xa003, 0x1ff, {0xffffffffffffffff, 0x20000000000200, 0x6, 0x2, 0x4, 0x800000002, 0x804, 0x9, 0xfffffffe, 0x6000, 0x0, 0x0, 0x0, 0x1ff, 0x4c3a4d6e}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.740660317s ago: executing program 4 (id=920): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0x20) read(r0, &(0x7f00000000c0)=""/66, 0x42) connect$qrtr(r0, &(0x7f0000000180)={0x2a, 0x1}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) write$binfmt_script(r1, 0x0, 0x0) 3.699470206s ago: executing program 0 (id=921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x34000041) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x434}, 0x1, 0x0, 0x0, 0x10}, 0x40000) recvmmsg(r0, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/253, 0xfd}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f00000007c0)=""/230, 0xe6}], 0x3}, 0x10000}, {{&(0x7f0000000580)=@caif=@dbg, 0x80, &(0x7f0000002d00)=[{0x0}, {&(0x7f00000008c0)=""/152, 0x98}, {0x0}, {0x0}, {&(0x7f0000001a80)=""/247, 0xf7}, {&(0x7f0000001b80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002c40)=""/143, 0x8f}], 0x8}, 0xfffffffc}], 0x2, 0x100, &(0x7f0000002e00)={0x77359400}) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xa, 0x110, 0xffffffffffffffff, 0x80000000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x9afe, 0x7fff, 0x34363248, 0x1, 0x5, [{0x5fb, 0xd}, {0x4, 0x4}, {0xb, 0x6}, {0x7, 0xe853}, {0x400, 0x3}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x7}], 0x9, 0x8, 0x2, 0x1, 0x7}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32004bd50014000000110001"], 0x7c}}, 0x0) r3 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0', [{0x20, ')+'}, {0x20, '[k'}, {0x20, 'no&\x80\x85\xfe\x19\x17y\xb2\x82\x81AR\x86lo-\xc5hX\xbbt\b\x86xookie'}], 0xa, '\vT'}, 0x33) readv(r3, &(0x7f0000000740)=[{&(0x7f0000000640)=""/223, 0xdf}], 0x10000000000000c0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x3}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x8080000, 0xb, 0xfffffffb, 0xfffffffe, 0x0, [{0xc, 0x3, 0x8, '\x00', 0xb4}, {0x83, 0x1d, 0x4, '\x00', 0x4b}, {0xf9, 0xc, 0x9, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x8}, {0x8, 0x10, 0x8, '\x00', 0x1}, {0x2, 0x7, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x6d, '\x00', 0xe9}, {0xe, 0x4, 0xa5, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x1, 0x9, 0x10, '\x00', 0x8}, {0x0, 0x0, 0x2, '\x00', 0x7}, {0x1, 0x8a, 0x5, '\x00', 0x4}, {0x4, 0xf1, 0x6, '\x00', 0xb2}, {0x7, 0x4, 0x6, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0xd}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xec, 0x3, 0x8}, {0x1f, 0x2, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x56, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x7}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x4, 0x8, 0xfa, '\x00', 0x42}]}}) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000000000000000000000000004000000ca8ac3a6"], &(0x7f00000000c0)=0x28) socket$inet6_tcp(0xa, 0x1, 0x0) 3.37319613s ago: executing program 3 (id=923): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x403, {0x1, 0x7, 0x0, '\x00', {0x1, 0xad4, 0x8, 0x8, 0x0, r2, 0x5000, '\x00', 0x1, 0x8, 0x100000000, 0x3, {0x6, 0x6}, {0x20000000000004}, {0x100000000, 0xc}, {0x8, 0xa02}, 0x4, 0x80000b, 0x4, 0x3}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1}, 0x50) 3.302346826s ago: executing program 4 (id=924): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.048474113s ago: executing program 2 (id=926): mkdir(&(0x7f0000000400)='./file0\x00', 0x99) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) unlink(&(0x7f0000000040)='./bus\x00') mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) 2.818343942s ago: executing program 2 (id=927): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r5], 0x4) 2.817615513s ago: executing program 1 (id=928): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2, @in=@multicast2, 0x0, 0x20, 0x1, 0x0, 0xa, 0x20, 0x0, 0x6, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x40000008, 0x0, 0x7fffffffffffffff, 0x6, 0xffffffff}, {0x0, 0x0, 0x1, 0x1}, 0x0, 0x4}, {{@in=@private=0xa010101, 0xffffffff, 0x62}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x0, 0x3, 0x0, 0xfffffffe, 0x6}}, 0xe8) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8d}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x2, 0x0, @ioapic={0xeeee0000, 0x20008, 0xba2, 0x8c5f, 0x0, [{0x46, 0x3, 0x1}, {0x0, 0xe, 0x6, '\x00', 0xf8}, {0x60, 0x3, 0x0, '\x00', 0xbd}, {0x7, 0x4, 0x9, '\x00', 0xd}, {0x5, 0x9, 0x4, '\x00', 0x5}, {0x3, 0x40, 0x71, '\x00', 0x5}, {0x7, 0xf, 0xfd, '\x00', 0xf9}, {0x7, 0xc6, 0x1, '\x00', 0x5}, {0x7, 0xfb, 0x7, '\x00', 0x2}, {0xfe, 0x1, 0x6, '\x00', 0x4}, {0x1, 0x4e, 0x0, '\x00', 0x2}, {0x9, 0x30, 0x5, '\x00', 0x3}, {0xfa, 0x2, 0x8, '\x00', 0x7}, {0x80, 0x2, 0x80, '\x00', 0x4}, {0x1, 0x8, 0x3, '\x00', 0x6}, {0x7, 0xf1, 0x8, '\x00', 0x4}, {0x2, 0x7, 0x8, '\x00', 0x3}, {0x5, 0x6, 0x9, '\x00', 0x48}, {0x90, 0x0, 0x81, '\x00', 0x26}, {0xa, 0xff, 0x5}, {0x0, 0x4, 0x3, '\x00', 0x6a}, {0x7, 0x35, 0x7a, '\x00', 0x7}, {0x4, 0x7, 0x5, '\x00', 0xf}, {0x8, 0x2, 0x0, '\x00', 0x2}]}}) 2.672308572s ago: executing program 3 (id=929): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/19, 0x13}}], 0x1, 0x45833af92e4b38ff, 0x0) 2.337483039s ago: executing program 2 (id=930): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xfff1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.190611134s ago: executing program 1 (id=931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x34000041) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x434}, 0x1, 0x0, 0x0, 0x10}, 0x40000) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/253, 0xfd}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f00000007c0)=""/230, 0xe6}], 0x3}, 0x10000}, {{&(0x7f0000000580)=@caif=@dbg, 0x80, &(0x7f0000002d00)=[{0x0}, {&(0x7f00000008c0)=""/152, 0x98}, {0x0}, {0x0}, {&(0x7f0000001a80)=""/247, 0xf7}, {&(0x7f0000001b80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002c40)=""/143, 0x8f}], 0x8}, 0xfffffffc}], 0x2, 0x100, &(0x7f0000002e00)={0x77359400}) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) umount2(&(0x7f0000000000)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xa, 0x110, 0xffffffffffffffff, 0x80000000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x9afe, 0x7fff, 0x34363248, 0x1, 0x5, [{0x5fb, 0xd}, {0x4, 0x4}, {0xb, 0x6}, {0x7, 0xe853}, {0x400, 0x3}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x7}], 0x9, 0x8, 0x2, 0x1, 0x7}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32004bd50014000000110001"], 0x7c}}, 0x0) r1 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [{0x20, ')+'}, {0x20, '[k'}, {0x20, 'no&\x80\x85\xfe\x19\x17y\xb2\x82\x81AR\x86lo-\xc5hX\xbbt\b\x86xookie'}], 0xa, '\vT'}, 0x33) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000640)=""/223, 0xdf}], 0x10000000000000c0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a300000000008000340000000010900020073797a31000000001400000011000100000000000000000000003fc8094e6bf56a5e4fc9ef59c8000a95e5a86241c5ed8727443f1a0750664ca99a2b357c5992fb43e32aa0ca011089bf041f25d4b35945c3719185b6c4a8de5e72e9cd0ae22aee05e65dfa134d4983423036ff3dadb31174812a284042b5861aae599ac0d2e24c2e92d6a328607b353ab95f4c9c26e95fb60c486c00243c5c5e4a10eee078af4128a0cc28332c29a55317739f8e6c70c6b546bed7"], 0x98}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x3}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x8080000, 0xb, 0xfffffffb, 0xfffffffe, 0x0, [{0xc, 0x3, 0x8, '\x00', 0xb4}, {0x83, 0x1d, 0x4, '\x00', 0x4b}, {0xf9, 0xc, 0x9, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x8}, {0x8, 0x10, 0x8, '\x00', 0x1}, {0x2, 0x7, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x6d, '\x00', 0xe9}, {0xe, 0x4, 0xa5, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x1, 0x9, 0x10, '\x00', 0x8}, {0x0, 0x0, 0x2, '\x00', 0x7}, {0x1, 0x8a, 0x5, '\x00', 0x4}, {0x4, 0xf1, 0x6, '\x00', 0xb2}, {0x7, 0x4, 0x6, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0xd}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xec, 0x3, 0x8}, {0x1f, 0x2, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x56, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x7}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x4, 0x8, 0xfa, '\x00', 0x42}]}}) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000000000000000000000000004000000ca8ac3a6"], &(0x7f00000000c0)=0x28) socket$inet6_tcp(0xa, 0x1, 0x0) 1.768784226s ago: executing program 1 (id=932): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') rmdir(&(0x7f0000000000)='./file0\x00') 1.751018347s ago: executing program 2 (id=933): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000300)="f3420f09f226450f23a6f045f71c1c48b800000100000000000f23c00f21f835010008000f23f8c421a9f9a132430000c401656207650f787a3ac4e3d15fa500e0ffff00f30f090f0f41c296", 0x4c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.733371624s ago: executing program 4 (id=934): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r2, 0x32d7, 0x0, 0x46, 0x0, 0x0) 1.42573143s ago: executing program 1 (id=935): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 1.425057094s ago: executing program 2 (id=936): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='ext4_ext_show_extent\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r2, 0x0, &(0x7f0000000000), 0x800) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f00000020c0), 0x0, &(0x7f0000002100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) fallocate(r3, 0x0, 0x5, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r4, 0x0, 0x3b}]) ptrace$poke(0x5, 0xffffffffffffffff, 0x0, 0x1d) 1.077834591s ago: executing program 0 (id=937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x34000041) recvmmsg(r0, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/253, 0xfd}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f00000007c0)=""/230, 0xe6}], 0x3}, 0x10000}, {{&(0x7f0000000580)=@caif=@dbg, 0x80, &(0x7f0000002d00)=[{0x0}, {&(0x7f00000008c0)=""/152, 0x98}, {0x0}, {0x0}, {&(0x7f0000001a80)=""/247, 0xf7}, {&(0x7f0000001b80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002c40)=""/143, 0x8f}], 0x8}, 0xfffffffc}], 0x2, 0x100, &(0x7f0000002e00)={0x77359400}) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xa, 0x110, 0xffffffffffffffff, 0x80000000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x9afe, 0x7fff, 0x34363248, 0x1, 0x5, [{0x5fb, 0xd}, {0x4, 0x4}, {0xb, 0x6}, {0x7, 0xe853}, {0x400, 0x3}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x7}], 0x9, 0x8, 0x2, 0x1, 0x7}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32004bd50014000000110001"], 0x7c}}, 0x0) r3 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0', [{0x20, ')+'}, {0x20, '[k'}, {0x20, 'no&\x80\x85\xfe\x19\x17y\xb2\x82\x81AR\x86lo-\xc5hX\xbbt\b\x86xookie'}], 0xa, '\vT'}, 0x33) readv(r3, &(0x7f0000000740)=[{&(0x7f0000000640)=""/223, 0xdf}], 0x10000000000000c0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x3}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x8080000, 0xb, 0xfffffffb, 0xfffffffe, 0x0, [{0xc, 0x3, 0x8, '\x00', 0xb4}, {0x83, 0x1d, 0x4, '\x00', 0x4b}, {0xf9, 0xc, 0x9, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x8}, {0x8, 0x10, 0x8, '\x00', 0x1}, {0x2, 0x7, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x6d, '\x00', 0xe9}, {0xe, 0x4, 0xa5, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x1, 0x9, 0x10, '\x00', 0x8}, {0x0, 0x0, 0x2, '\x00', 0x7}, {0x1, 0x8a, 0x5, '\x00', 0x4}, {0x4, 0xf1, 0x6, '\x00', 0xb2}, {0x7, 0x4, 0x6, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0xd}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xec, 0x3, 0x8}, {0x1f, 0x2, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x56, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x7}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x4, 0x8, 0xfa, '\x00', 0x42}]}}) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000000000000000000000000004000000ca8ac3a6"], &(0x7f00000000c0)=0x28) socket$inet6_tcp(0xa, 0x1, 0x0) 708.288975ms ago: executing program 2 (id=938): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x7fffffff, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x105, 0xf038, 0xf06, 0x9, 0xcc, 0x5d, 0x1}, 0x9c) 702.979153ms ago: executing program 0 (id=939): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 488.733735ms ago: executing program 4 (id=940): syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) 234.227706ms ago: executing program 3 (id=941): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2, 0x2, 0xdddd1000, 0x1000, &(0x7f0000093000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 4 (id=942): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c000200ff7f000000000008"], 0x30}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) kernel console output (not intermixed with test programs): ] usb 1-1: config 0 descriptor?? [ 120.876782][ T9] usb 3-1: config 166 interface 34 has no altsetting 0 [ 121.154764][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 121.326918][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 121.423669][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25'. [ 121.561081][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.575054][ T978] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 121.616299][ T9] usb 3-1: Product: syz [ 121.620650][ T9] usb 3-1: Manufacturer: syz [ 121.631701][ T978] usb 2-1: config 0 has no interface number 0 [ 121.684932][ T9] usb 3-1: SerialNumber: syz [ 121.693021][ T978] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 121.711099][ T10] usb 1-1: USB disconnect, device number 3 [ 121.738339][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.804358][ T978] usb 2-1: Product: syz [ 121.811602][ T978] usb 2-1: Manufacturer: syz [ 121.866249][ T978] usb 2-1: SerialNumber: syz [ 121.886054][ T978] usb 2-1: config 0 descriptor?? [ 121.907778][ T978] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 121.964243][ T9] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 122.056085][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 122.074965][ T6025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27'. [ 122.086826][ T6025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.140532][ T978] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 122.173445][ T9] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 122.215352][ T978] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 122.265112][ T24] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 122.280659][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.317351][ T24] usb 4-1: Product: syz [ 122.349447][ T24] usb 4-1: Manufacturer: syz [ 122.379542][ T24] usb 4-1: SerialNumber: syz [ 122.433790][ T24] usb 4-1: config 0 descriptor?? [ 122.442607][ T9] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5 [ 122.474155][ T5827] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 122.553018][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 122.596062][ T9] usb 3-1: Found UVC 0.00 device syz (0bda:0138) [ 122.612633][ T9] usb 3-1: No valid video chain found. [ 122.613418][ T5930] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.642597][ T9] usb 3-1: USB disconnect, device number 2 [ 122.661261][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.680334][ T24] usb 4-1: ignoring: probably an ADSL modem [ 122.702913][ T5827] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 122.739425][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.749821][ T1209] usb 2-1: USB disconnect, device number 2 [ 122.764592][ T5827] usb 5-1: config 0 descriptor?? [ 122.786034][ T1209] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 122.810034][ T1209] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 122.839827][ T1209] quatech2 2-1:0.51: device disconnected [ 122.878603][ T5930] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 122.892305][ T5930] usb 1-1: config 0 has no interface number 0 [ 122.900307][ T5930] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.912974][ T5930] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.925251][ T5930] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.941592][ T5930] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 122.951674][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.968342][ T5930] usb 1-1: config 0 descriptor?? [ 123.094671][ T24] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 123.191787][ T5827] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 123.235672][ T5827] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input5 [ 123.257074][ T6034] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 123.300877][ T6034] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 123.326805][ T10] usb 4-1: USB disconnect, device number 3 [ 123.409372][ T5930] hid (null): report_id 35660 is invalid [ 123.497399][ T5827] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 123.650920][ T5930] input: HID 28bd:0042 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0042.0002/input/input6 [ 123.724211][ T10] usb 5-1: USB disconnect, device number 2 [ 123.824873][ T5930] uclogic 0003:28BD:0042.0002: input,hidraw1: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.0-1/input1 [ 123.943024][ T5930] usb 1-1: USB disconnect, device number 4 [ 123.974213][ T6042] fido_id[6042]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 124.095951][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 124.210920][ T6047] fido_id[6047]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 124.315874][ T9] usb 3-1: config 0 has an invalid interface number: 93 but max is 0 [ 124.347035][ T9] usb 3-1: config 0 has no interface number 0 [ 124.375996][ T9] usb 3-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 124.396388][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.416920][ T9] usb 3-1: Product: syz [ 124.421278][ T9] usb 3-1: Manufacturer: syz [ 124.443167][ T978] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.482106][ T6057] netlink: 104 bytes leftover after parsing attributes in process `syz.4.38'. [ 124.492109][ T9] usb 3-1: SerialNumber: syz [ 124.516229][ T9] usb 3-1: config 0 descriptor?? [ 124.748339][ T978] usb 4-1: Using ep0 maxpacket: 16 [ 124.838990][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 124.853981][ T9] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 124.871248][ T978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.194879][ T978] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 125.207306][ T9] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 125.220032][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.233623][ T9] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 125.255388][ T978] usb 4-1: config 0 descriptor?? [ 125.275778][ T9] usb 3-1: media controller created [ 125.327828][ T978] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 125.341072][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.642945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 125.717218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 125.751182][ T5193] bcm5974 4-1:0.0: could not read from device [ 125.846693][ T6050] bcm5974 4-1:0.0: could not read from device [ 126.196319][ T5193] bcm5974 4-1:0.0: could not read from device [ 126.231999][ T5193] bcm5974 4-1:0.0: could not read from device [ 126.243437][ T5914] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.254616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 126.287939][ T978] usb 4-1: USB disconnect, device number 4 [ 126.292609][ T5193] bcm5974 4-1:0.0: could not read from device [ 126.305512][ T9] DVB: Unable to find symbol dib7000p_attach() [ 126.314767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 126.330334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 126.422494][ T9] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 126.476962][ T9] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 126.503029][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 126.515358][ T9] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 126.570617][ T5914] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 126.590762][ T5914] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.605550][ T9] usb 3-1: media controller created [ 126.617848][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.632950][ T5914] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.648191][ T5914] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.674263][ T5914] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.693560][ T9] dib0700: the master dib7090 has to be initialized first [ 126.701021][ T9] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 126.734399][ T6072] xt_CT: No such helper "snmp" [ 126.735917][ T5914] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 126.754386][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.774350][ T6079] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 3, id = 0 [ 126.786494][ T5930] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 126.997692][ T5930] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 127.006606][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 127.022910][ T5930] usb 1-1: config 7 has no interface number 0 [ 127.025486][ T5914] usb 2-1: GET_CAPABILITIES returned 0 [ 127.053671][ T9] Registered IR keymap rc-empty [ 127.057925][ T5930] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 127.068973][ T9] dvb-usb: could not initialize remote control. [ 127.075161][ T6084] team0: Device gtp0 is of different type [ 127.092873][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.096017][ T5914] usbtmc 2-1:16.0: can't read capabilities [ 127.121402][ T9] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 127.135511][ T5930] usb 1-1: Product: syz [ 127.135536][ T5930] usb 1-1: Manufacturer: syz [ 127.135553][ T5930] usb 1-1: SerialNumber: syz [ 127.210401][ T9] usb 3-1: USB disconnect, device number 3 [ 127.253407][ T5914] usb 2-1: USB disconnect, device number 3 [ 127.410833][ T9] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 127.725641][ T6092] vlan2: entered promiscuous mode [ 127.734344][ T6092] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 127.744827][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 127.759116][ T6092] vlan2: entered allmulticast mode [ 127.765467][ T6092] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 127.778458][ T6092] team0: Device vlan2 is up. Set it down before adding it as a team port [ 127.803140][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 127.913799][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 127.940477][ T9] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 127.962984][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 128.051396][ T5930] as10x_usb: device has been detected [ 128.053014][ T9] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 128.069802][ T24] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 128.157824][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 128.158773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 128.252942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 128.256297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 128.306884][ T5930] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 128.346451][ T9] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 128.426023][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 128.460812][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 128.507650][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.626392][ T24] usb 4-1: Product: syz [ 128.723200][ T24] usb 4-1: Manufacturer: syz [ 128.736200][ T9] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 128.747786][ T24] usb 4-1: SerialNumber: syz [ 128.780449][ T24] usb 4-1: config 0 descriptor?? [ 128.794537][ T9] usb 3-1: Product: syz [ 128.873187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 129.033289][ T9] usb 3-1: Manufacturer: syz [ 129.048920][ T9] usb 3-1: SerialNumber: syz [ 129.057759][ T5930] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 129.066251][ T9] usb 3-1: config 0 descriptor?? [ 129.105403][ T9] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 129.130209][ T9] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 129.354166][ T5930] as10x_usb: error during firmware upload part1 [ 129.459095][ T5930] Registered device Elgato EyeTV DTT Deluxe [ 129.534979][ T24] usb 4-1: USB disconnect, device number 5 [ 129.698914][ T6104] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.753401][ T5930] usb 1-1: USB disconnect, device number 5 [ 129.819811][ T5966] usb 3-1: USB disconnect, device number 4 [ 129.894536][ T5966] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 129.922517][ T5930] Unregistered device Elgato EyeTV DTT Deluxe [ 129.958290][ T5930] as10x_usb: device has been disconnected [ 130.089729][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.732938][ T1209] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 130.788821][ T6122] ip6_vti0: entered promiscuous mode [ 131.263475][ T1209] usb 4-1: Using ep0 maxpacket: 8 [ 131.294984][ T1209] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.523443][ T1209] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.573236][ T1209] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.611959][ T1209] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.710895][ T1209] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.818659][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.208921][ T6138] random: crng reseeded on system resumption [ 132.271278][ T1209] usb 4-1: GET_CAPABILITIES returned 0 [ 132.301077][ T1209] usbtmc 4-1:16.0: can't read capabilities [ 132.444227][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.67'. [ 132.955931][ T6143] Restarting kernel threads ... [ 132.973709][ T1209] usb 4-1: USB disconnect, device number 6 [ 133.002951][ T6143] Done restarting kernel threads. [ 134.155570][ T6164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.271237][ T6171] unknown channel width for channel at 909000KHz? [ 136.251893][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.89'. [ 136.548668][ T5966] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 136.955544][ T5966] usb 2-1: config 0 has no interfaces? [ 136.983465][ T5966] usb 2-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 137.013062][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.069326][ T5966] usb 2-1: config 0 descriptor?? [ 137.302329][ T6219] netlink: 24 bytes leftover after parsing attributes in process `syz.4.96'. [ 137.695831][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 137.843040][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.100'. [ 138.017652][ T978] usb 2-1: USB disconnect, device number 4 [ 138.053010][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 138.066574][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 138.285614][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.496994][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 138.531597][ T9] pvrusb2: ********** [ 138.563722][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 138.600660][ T9] pvrusb2: Important functionality might not be entirely working. [ 138.667443][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 138.749821][ T9] pvrusb2: ********** [ 139.301019][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.309489][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.333187][ T5930] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 139.369924][ T2343] pvrusb2: Invalid write control endpoint [ 139.700570][ T5930] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 139.725661][ T978] usb 4-1: USB disconnect, device number 7 [ 139.827821][ T5930] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 139.943355][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.068032][ T5930] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 140.107088][ T2343] pvrusb2: Invalid write control endpoint [ 140.127885][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 140.277926][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 140.290462][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 140.302547][ T2343] pvrusb2: Device being rendered inoperable [ 140.336543][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 140.351197][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 140.381496][ T2343] pvrusb2: Attached sub-driver cx25840 [ 140.425779][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 140.451448][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 141.126271][ T5930] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 141.149009][ T6273] sg_read: process 48 (syz.3.113) changed security contexts after opening file descriptor, this is not allowed. [ 141.181319][ T5930] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 141.198543][ T5930] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 141.223868][ T5930] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 141.307246][ T5930] usb 2-1: USB disconnect, device number 5 [ 142.388995][ T6287] syz.3.119 (6287) used greatest stack depth: 20088 bytes left [ 142.713563][ T978] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 142.803189][ T5827] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 142.888785][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.128'. [ 142.942899][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 143.059472][ T5827] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 143.146434][ T978] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 143.150183][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 143.253180][ T978] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 143.258422][ T5827] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 143.405538][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 143.418409][ T978] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 143.425635][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 143.459121][ T978] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 143.519116][ T5827] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 143.527924][ T978] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 143.529508][ T978] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 143.543571][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 143.565256][ T5827] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 143.578280][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 143.601732][ T6310] process 'syz.4.129' launched './file0' with NULL argv: empty string added [ 143.614457][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 143.616824][ T5827] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 143.616881][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 143.616911][ T5827] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 143.616939][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 143.616996][ T5827] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 143.626134][ T5827] usb 4-1: string descriptor 0 read error: -22 [ 143.645076][ T978] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 143.708343][ T978] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 143.720979][ T978] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 143.734093][ T978] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 143.750914][ T978] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 143.759740][ T978] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 143.780640][ T5827] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 143.825379][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.866565][ T978] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 143.879310][ T5827] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 143.903497][ T978] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 143.952176][ T978] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 144.053049][ T978] usb 2-1: string descriptor 0 read error: -22 [ 144.060285][ T978] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 144.082662][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.166159][ T978] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 144.220031][ T1209] usb 4-1: USB disconnect, device number 8 [ 144.253517][ T5827] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 144.395372][ T978] usb 2-1: USB disconnect, device number 6 [ 144.414964][ T5827] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 144.448808][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.809575][ T5827] usb 3-1: config 0 descriptor?? [ 144.829127][ T5827] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 145.998279][ T5827] gspca_cpia1: usb_control_msg 02, error -71 [ 146.033124][ T5827] gspca_cpia1: usb_control_msg 05, error -71 [ 146.063160][ T5827] gspca_cpia1: usb_control_msg 04, error -71 [ 146.069441][ T5827] cpia1 3-1:0.0: probe with driver cpia1 failed with error -71 [ 146.134083][ T5827] usb 3-1: USB disconnect, device number 5 [ 146.145244][ T6338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.138'. [ 146.160486][ T6338] netlink: 'syz.1.138': attribute type 7 has an invalid length. [ 146.176914][ T6338] netlink: 'syz.1.138': attribute type 8 has an invalid length. [ 146.186612][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'. [ 146.220217][ T6338] gretap0: entered promiscuous mode [ 146.229869][ T6338] batadv_slave_1: entered promiscuous mode [ 146.929397][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'. [ 147.398915][ T30] audit: type=1326 audit(1755572678.214:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6354 comm="syz.0.146" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f152a78ebe9 code=0x0 [ 147.693041][ T1209] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 147.894143][ T1209] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 147.963907][ T1209] usb 5-1: config 0 has no interface number 0 [ 148.031126][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 148.041524][ T1209] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 148.041630][ T1209] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 148.041867][ T1209] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 148.221883][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.458641][ T1209] usb 5-1: config 0 descriptor?? [ 148.493395][ T6363] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 148.607489][ T6381] capability: warning: `syz.0.154' uses deprecated v2 capabilities in a way that may be insecure [ 148.611549][ T1209] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 148.863853][ T9] usb 5-1: USB disconnect, device number 3 [ 149.472461][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 150.492883][ C1] sd 0:0:1:0: [sda] tag#7419 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 150.504977][ C1] sd 0:0:1:0: [sda] tag#7419 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 150.792170][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 150.933292][ T1209] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 151.112747][ T1209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.152168][ T1209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.174810][ T1209] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 151.184775][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 151.201492][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.213154][ T6426] syz.1.168 uses obsolete (PF_INET,SOCK_PACKET) [ 151.220555][ T1209] usb 4-1: config 0 descriptor?? [ 151.334218][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 151.357572][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 151.393184][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 151.433985][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 151.467915][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 151.484679][ T1209] usb 4-1: string descriptor 0 read error: -71 [ 151.500979][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 151.531807][ T1209] usbhid 4-1:0.0: can't add hid device: -71 [ 151.546297][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 151.558021][ T1209] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 151.594154][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 151.611829][ T1209] usb 4-1: USB disconnect, device number 9 [ 151.634847][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.743952][ T9] usb 3-1: config 0 descriptor?? [ 151.861505][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.173'. [ 151.874887][ T5966] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 151.974519][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 152.103844][ T5966] usb 2-1: Using ep0 maxpacket: 8 [ 152.151000][ T5966] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 152.171215][ T5966] usb 2-1: config 0 has no interface number 0 [ 152.191775][ T5966] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 152.238799][ T5966] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 152.278371][ T9] usb 3-1: USB disconnect, device number 6 [ 152.297015][ T5966] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 152.297058][ T5966] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 152.297109][ T5966] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 152.297134][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.312401][ T5966] usb 2-1: config 0 descriptor?? [ 152.371247][ T9] usblp0: removed [ 152.461882][ T5966] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 152.506115][ T1209] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 152.628212][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 152.701930][ T5929] usb 2-1: USB disconnect, device number 7 [ 152.708277][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 152.725704][ T1209] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 152.756633][ T5929] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 152.757794][ T1209] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.799466][ T1209] usb 4-1: config 0 interface 0 has no altsetting 0 [ 152.837742][ T1209] usb 4-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 152.887069][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.924117][ T1209] usb 4-1: config 0 descriptor?? [ 153.000561][ T6458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.182'. [ 153.198158][ T6463] pim6reg: entered allmulticast mode [ 153.247681][ T6464] pim6reg: left allmulticast mode [ 153.329764][ T6466] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 153.421377][ T1209] pantherlord 0003:0810:0002.0003: unknown global tag 0xc [ 153.428796][ T1209] pantherlord 0003:0810:0002.0003: item 0 4 1 12 parsing failed [ 153.445638][ T1209] pantherlord 0003:0810:0002.0003: parse failed [ 153.464754][ T1209] pantherlord 0003:0810:0002.0003: probe with driver pantherlord failed with error -22 [ 153.615393][ T6466] netlink: 'syz.0.183': attribute type 25 has an invalid length. [ 153.624071][ T6466] netlink: 'syz.0.183': attribute type 7 has an invalid length. [ 153.639769][ T1209] usb 4-1: USB disconnect, device number 10 [ 154.041017][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'. [ 154.303886][ T5914] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 154.584261][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 154.623001][ T5914] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 154.632387][ T5914] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.673264][ T5914] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.723731][ T5914] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.788156][ T5914] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.821871][ T5914] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.864748][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.114960][ T6488] input: syz0 as /devices/virtual/input/input10 [ 155.159905][ T5914] usb 5-1: usb_control_msg returned -32 [ 155.185471][ T5914] usbtmc 5-1:16.0: can't read capabilities [ 155.353794][ T6493] syzkaller1: entered promiscuous mode [ 155.382045][ T6493] syzkaller1: entered allmulticast mode [ 155.433035][ T5929] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 155.543837][ T6500] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 155.574584][ T24] usb 5-1: USB disconnect, device number 4 [ 155.610630][ T6502] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 155.640115][ T5929] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 155.652381][ T6502] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 155.654914][ T5929] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.694194][ T5929] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.727425][ T5929] usb 3-1: config 0 interface 0 has no altsetting 0 [ 155.754587][ T5929] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.783459][ T5929] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.802920][ T5929] usb 3-1: config 0 interface 0 has no altsetting 0 [ 155.815514][ T5929] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.831535][ T5929] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.873158][ T5929] usb 3-1: config 0 interface 0 has no altsetting 0 [ 155.899765][ T5929] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.921759][ T5929] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.951698][ T5929] usb 3-1: config 0 interface 0 has no altsetting 0 [ 155.963134][ T5929] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.973062][ T5929] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.006149][ T5929] usb 3-1: config 0 interface 0 has no altsetting 0 [ 156.027959][ T5929] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.043139][ T5929] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.075614][ T5929] usb 3-1: config 0 interface 0 has no altsetting 0 [ 156.114104][ T5929] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.132083][ T5929] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.186058][ T5929] usb 3-1: config 0 interface 0 has no altsetting 0 [ 156.218667][ T5929] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.230746][ T5929] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.274300][ T5929] usb 3-1: config 0 interface 0 has no altsetting 0 [ 156.289718][ T6515] netlink: 9896 bytes leftover after parsing attributes in process `syz.3.203'. [ 156.299300][ T5929] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 156.320206][ T6515] netlink: del zone limit has 4 unknown bytes [ 156.321776][ T5929] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 156.352882][ T5929] usb 3-1: Product: syz [ 156.360151][ T5929] usb 3-1: Manufacturer: syz [ 156.367888][ T5929] usb 3-1: SerialNumber: syz [ 156.404483][ T5929] usb 3-1: config 0 descriptor?? [ 156.432960][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 156.496920][ T5929] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 156.621448][ T24] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 156.706454][ T24] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 156.718128][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.205'. [ 156.792078][ T24] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 157.008463][ T24] usb 1-1: config 220 has no interface number 2 [ 157.096599][ T24] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 157.229087][ T24] usb 1-1: config 220 interface 0 has no altsetting 0 [ 157.282699][ T24] usb 1-1: config 220 interface 76 has no altsetting 0 [ 157.325417][ T24] usb 1-1: config 220 interface 1 has no altsetting 0 [ 157.362992][ T24] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 157.398646][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.416247][ T5929] usb 3-1: USB disconnect, device number 7 [ 157.423382][ T24] usb 1-1: Product: syz [ 157.427614][ T24] usb 1-1: Manufacturer: syz [ 157.432253][ T24] usb 1-1: SerialNumber: syz [ 157.454330][ T5929] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 157.702243][ T24] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 157.718072][ T24] usb 1-1: No valid video chain found. [ 157.724301][ T24] usb 1-1: selecting invalid altsetting 0 [ 157.754648][ T5928] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 157.781761][ T24] usb 1-1: selecting invalid altsetting 0 [ 157.788547][ T24] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 157.810438][ T24] usb 1-1: USB disconnect, device number 6 [ 157.941336][ T5928] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.959826][ T5928] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.015115][ T5928] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 158.053155][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.319475][ T5928] usb 5-1: usb_control_msg returned -32 [ 158.326475][ T5928] usbtmc 5-1:16.0: can't read capabilities [ 158.526554][ T24] IPVS: starting estimator thread 0... [ 158.539620][ T6541] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 158.623033][ T6545] IPVS: using max 24 ests per chain, 57600 per kthread [ 159.052977][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 159.380338][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 159.463153][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.501422][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 159.522979][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 159.748700][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.841096][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.893443][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.932874][ T9] usb 1-1: config 0 descriptor?? [ 159.949109][ T6550] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 160.377680][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 160.395909][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 160.418385][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 160.442043][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 160.475237][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 160.511717][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 160.547795][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 160.559790][ T5966] usb 5-1: USB disconnect, device number 5 [ 160.608951][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 160.649360][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 160.684552][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 160.692072][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 160.828843][ T9] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 160.872689][ T9] usb 1-1: USB disconnect, device number 7 [ 160.980776][ T5928] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 161.066413][ T6569] fido_id[6569]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 161.153103][ T5928] usb 3-1: Using ep0 maxpacket: 8 [ 161.160410][ T5928] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 161.169078][ T5928] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.182866][ T5928] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.192693][ T5928] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.204349][ T5928] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.217576][ T5928] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 161.226741][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.453794][ T5928] usb 3-1: GET_CAPABILITIES returned 0 [ 161.459488][ T5928] usbtmc 3-1:16.0: can't read capabilities [ 161.694856][ T5928] usb 3-1: USB disconnect, device number 8 [ 162.003172][ T5929] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 162.157919][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 162.189703][ T5929] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.201731][ T5929] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.237986][ T5929] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.258320][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.274341][ T5929] usb 1-1: Product: syz [ 162.278779][ T5929] usb 1-1: Manufacturer: syz [ 162.313159][ T5929] usb 1-1: SerialNumber: syz [ 162.553995][ T5929] usb 1-1: 0:2 : does not exist [ 162.595965][ T5929] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 162.643227][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 162.679790][ T5929] usb 1-1: USB disconnect, device number 8 [ 162.835100][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.883601][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.884576][ T5855] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 162.902714][ T5855] Bluetooth: hci2: Injecting HCI hardware error event [ 162.911194][ T5851] Bluetooth: hci2: hardware error 0x00 [ 162.920742][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 162.994806][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.019859][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.089939][ T9] usb 5-1: config 0 descriptor?? [ 163.550290][ T9] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 163.618913][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0005/input/input11 [ 163.791361][ T6618] ======================================================= [ 163.791361][ T6618] WARNING: The mand mount option has been deprecated and [ 163.791361][ T6618] and is ignored by this kernel. Remove the mand [ 163.791361][ T6618] option from the mount to silence this warning. [ 163.791361][ T6618] ======================================================= [ 163.908626][ T9] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 163.975343][ T9] usb 5-1: USB disconnect, device number 6 [ 164.267942][ T6622] fido_id[6622]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 164.803486][ T5929] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 164.822071][ T6642] loop2: detected capacity change from 0 to 7 [ 164.858449][ T6642] Dev loop2: unable to read RDB block 7 [ 164.885684][ T6642] loop2: unable to read partition table [ 164.931107][ T6642] loop2: partition table beyond EOD, truncated [ 164.945913][ T6642] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 164.985591][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 164.996064][ T5929] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 165.009066][ T5929] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.038215][ T5929] usb 5-1: config 0 has no interface number 0 [ 165.104518][ T5929] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 165.122359][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.131732][ T5851] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 165.144339][ T5929] usb 5-1: Product: syz [ 165.149432][ T5929] usb 5-1: Manufacturer: syz [ 165.154385][ T5929] usb 5-1: SerialNumber: syz [ 165.162592][ T5929] usb 5-1: config 0 descriptor?? [ 165.210819][ T5929] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 165.233045][ T5929] usb 5-1: No valid video chain found. [ 165.272509][ T6654] nullb0: AHDI p1 [ 165.306023][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.255'. [ 165.446706][ T978] usb 5-1: USB disconnect, device number 7 [ 165.679869][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 165.752775][ T6660] syzkaller1: entered promiscuous mode [ 165.768887][ T6660] syzkaller1: entered allmulticast mode [ 165.903955][ T6668] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 165.921312][ T6668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.167829][ T6674] netlink: 16 bytes leftover after parsing attributes in process `syz.3.266'. [ 166.203700][ T5914] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 166.379419][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 166.403880][ T5914] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 166.430623][ T5914] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 166.480099][ T5914] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 166.491359][ T978] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 166.516509][ T5914] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 166.537877][ T5914] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 166.559815][ T5914] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 166.570171][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 166.580571][ T5914] usb 1-1: Product: syz [ 166.585938][ T5914] usb 1-1: Manufacturer: syz [ 166.607401][ T5914] cdc_wdm 1-1:1.0: skipping garbage [ 166.613075][ T5914] cdc_wdm 1-1:1.0: skipping garbage [ 166.629611][ T5914] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 166.643952][ T5914] cdc_wdm 1-1:1.0: Unknown control protocol [ 166.671222][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 166.673720][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 166.688540][ T978] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 166.703460][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.724572][ T978] usb 5-1: config 0 descriptor?? [ 166.872571][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 166.879553][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 166.882959][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 166.887749][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 166.896513][ T5928] usb 1-1: USB disconnect, device number 9 [ 166.898112][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 166.910827][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 166.917270][ T24] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 166.956147][ T978] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 166.957080][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.996153][ T24] usb 3-1: config 0 descriptor?? [ 167.008284][ T978] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 167.059150][ T978] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 167.070223][ T978] usb 5-1: media controller created [ 167.098068][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.162986][ T978] az6027: usb out operation failed. (-71) [ 167.183239][ T978] az6027: usb out operation failed. (-71) [ 167.189418][ T978] stb0899_attach: Driver disabled by Kconfig [ 167.221284][ T978] az6027: no front-end attached [ 167.221284][ T978] [ 167.239416][ T978] az6027: usb out operation failed. (-71) [ 167.260164][ T978] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 167.279474][ T978] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 167.348035][ T978] dvb-usb: schedule remote query interval to 400 msecs. [ 167.383978][ T978] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 167.406479][ T978] usb 5-1: USB disconnect, device number 8 [ 167.549585][ T978] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 167.970932][ T6713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.283'. [ 168.000170][ T6713] netlink: 'syz.4.283': attribute type 7 has an invalid length. [ 168.026500][ T6713] netlink: 'syz.4.283': attribute type 8 has an invalid length. [ 168.045959][ T24] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 168.057337][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.283'. [ 168.091487][ T24] asix 3-1:0.0: probe with driver asix failed with error -71 [ 168.110101][ T6713] gretap0: entered promiscuous mode [ 168.137098][ T6713] batadv_slave_1: entered promiscuous mode [ 168.143282][ T24] usb 3-1: USB disconnect, device number 9 [ 168.171131][ T6713] erspan0: entered promiscuous mode [ 168.190327][ T6713] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 168.209880][ T6713] Cannot create hsr debugfs directory [ 168.282912][ T5914] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 168.298089][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.287'. [ 168.443314][ T978] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 168.471637][ T6727] input: syz0 as /devices/virtual/input/input13 [ 168.483360][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 168.498954][ T5914] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 168.509402][ T5914] usb 1-1: config 179 has no interface number 0 [ 168.539932][ T5914] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 168.576029][ T5914] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 168.607898][ T5914] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 168.643135][ T978] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 168.652266][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.673290][ T5914] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 168.695568][ T5914] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 168.717070][ T5914] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 168.727806][ T978] usb 2-1: config 0 descriptor?? [ 168.737639][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.748539][ T978] cp210x 2-1:0.0: cp210x converter detected [ 168.776221][ T6717] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 168.852507][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'. [ 169.016359][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.294'. [ 169.072145][ T6717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.098410][ T6717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.176848][ T978] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 169.277152][ T978] usb 2-1: cp210x converter now attached to ttyUSB0 [ 169.334985][ T6745] netlink: 'syz.4.297': attribute type 2 has an invalid length. [ 169.371662][ T6745] netlink: 'syz.4.297': attribute type 1 has an invalid length. [ 169.417008][ T6745] netlink: 48 bytes leftover after parsing attributes in process `syz.4.297'. [ 169.418940][ T978] usb 2-1: USB disconnect, device number 8 [ 169.468881][ T978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 169.513731][ T978] cp210x 2-1:0.0: device disconnected [ 169.586568][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 169.594974][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 169.634488][ T5914] usb 1-1: USB disconnect, device number 10 [ 170.685742][ T6769] syzkaller1: entered promiscuous mode [ 170.697719][ T6769] syzkaller1: entered allmulticast mode [ 171.190221][ T6782] syzkaller1: entered promiscuous mode [ 171.219706][ T6782] syzkaller1: entered allmulticast mode [ 171.239630][ T6776] syzkaller1: entered promiscuous mode [ 171.264983][ T6776] syzkaller1: entered allmulticast mode [ 171.611156][ T6790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.641662][ T6793] Bluetooth: MGMT ver 1.23 [ 171.661914][ T6790] bond0: (slave rose0): Enslaving as an active interface with an up link [ 171.978049][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'. [ 172.109469][ T6808] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 172.237257][ T5914] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 172.436078][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 172.494663][ T5914] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 172.535225][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.568887][ T5914] usb 3-1: config 0 descriptor?? [ 172.583613][ T6804] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 172.753246][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 172.970261][ T9] usb 2-1: config index 0 descriptor too short (expected 72, got 10) [ 173.017908][ T9] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 173.102657][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 173.119238][ T5914] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 173.161298][ T9] usb 2-1: string descriptor 0 read error: -71 [ 173.183513][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 173.192664][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.248667][ T9] usb 2-1: can't set config #1, error -71 [ 173.306522][ T9] usb 2-1: USB disconnect, device number 9 [ 173.326660][ T5929] usb 3-1: USB disconnect, device number 10 [ 173.392977][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 173.566228][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 173.584543][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.618771][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 173.642611][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 173.675341][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 173.702329][ T24] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 173.719009][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.776919][ T24] hub 5-1:1.0: bad descriptor, ignoring hub [ 173.806561][ T24] hub 5-1:1.0: probe with driver hub failed with error -5 [ 173.824965][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 173.830752][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 173.867768][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 173.885774][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 174.435753][ T5928] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 174.491500][ T6838] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 174.604734][ T5928] usb 3-1: Using ep0 maxpacket: 8 [ 174.635617][ T5928] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 174.661402][ T5928] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.704849][ T5928] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 174.738511][ T5928] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 174.798495][ T5928] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.824178][ T5928] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 174.883029][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.014731][ T5929] usb 5-1: USB disconnect, device number 9 [ 175.136214][ T5928] usb 3-1: usb_control_msg returned -32 [ 175.143872][ T5928] usbtmc 3-1:16.0: can't read capabilities [ 175.387093][ T6892] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 175.412284][ T6892] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 175.588866][ T6897] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 175.734459][ T5928] usb 3-1: USB disconnect, device number 11 [ 175.928260][ T6912] input: syz1 as /devices/virtual/input/input14 [ 175.962923][ T5929] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 176.134873][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 176.168785][ T5929] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 176.195044][ T5929] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 176.215002][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 176.237498][ T5929] usb 1-1: Product: syz [ 176.241758][ T5929] usb 1-1: Manufacturer: syz [ 176.253847][ T6920] netlink: 'syz.1.351': attribute type 1 has an invalid length. [ 176.272980][ T5929] usb 1-1: SerialNumber: syz [ 176.280714][ T6920] netlink: 'syz.1.351': attribute type 10 has an invalid length. [ 176.281734][ T5929] usb 1-1: config 0 descriptor?? [ 176.313347][ T6904] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 176.323332][ T6920] netlink: 236 bytes leftover after parsing attributes in process `syz.1.351'. [ 176.424313][ T5827] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 176.596189][ T5827] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.608821][ T5827] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 176.648279][ T5827] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.671085][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.709292][ T5827] usb 5-1: Product: syz [ 176.736155][ T5827] usb 5-1: Manufacturer: syz [ 176.767779][ T5827] usb 5-1: SerialNumber: syz [ 176.786292][ T24] usb 1-1: USB disconnect, device number 11 [ 176.838852][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'. [ 178.006421][ T5827] cdc_ncm 5-1:1.0: bind() failure [ 178.021267][ T6951] nbd: device at index 0 is going down [ 178.157025][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.363'. [ 178.217849][ T5827] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 178.239537][ T5914] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 178.239767][ T5827] cdc_ncm 5-1:1.1: bind() failure [ 178.608525][ T5827] usb 5-1: USB disconnect, device number 10 [ 178.655434][ T30] audit: type=1326 audit(1755572709.484:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6957 comm="syz.0.365" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f152a78ebe9 code=0x0 [ 178.692997][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 178.763022][ T5914] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 178.798781][ T5914] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 178.810346][ T5914] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 178.825478][ T5914] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.842538][ T5914] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 178.855311][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.883100][ T978] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 179.045675][ T978] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 179.056289][ T978] usb 4-1: config 0 interface 0 has no altsetting 0 [ 179.065929][ T978] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 179.075476][ T978] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 179.093065][ T5914] usb 2-1: GET_CAPABILITIES returned 0 [ 179.098662][ T978] usb 4-1: Product: syz [ 179.103087][ T5914] usbtmc 2-1:16.0: can't read capabilities [ 179.109752][ T978] usb 4-1: Manufacturer: syz [ 179.114576][ T978] usb 4-1: SerialNumber: syz [ 179.133942][ T978] usb 4-1: config 0 descriptor?? [ 179.160294][ T978] usb 4-1: selecting invalid altsetting 0 [ 179.203230][ T5827] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 179.785977][ T5914] usb 2-1: USB disconnect, device number 10 [ 179.795667][ T5827] usb 3-1: config 0 interface 0 has no altsetting 0 [ 179.802372][ T5827] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 179.828757][ T978] usb 4-1: USB disconnect, device number 11 [ 179.883938][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.901105][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.911864][ T5827] usb 3-1: config 0 descriptor?? [ 180.528677][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 181.090864][ T5827] video4linux radio48: keene_cmd_set failed (-71) [ 181.150137][ T5827] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 181.228946][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'. [ 181.666778][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'. [ 181.694185][ T5827] usb 3-1: USB disconnect, device number 12 [ 181.994271][ T6991] loop6: detected capacity change from 0 to 63 [ 182.061033][ T6991] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.085182][ T6991] Buffer I/O error on dev loop6, logical block 1, async page read [ 182.108708][ T6991] Buffer I/O error on dev loop6, logical block 2, async page read [ 182.142726][ T6991] Buffer I/O error on dev loop6, logical block 3, async page read [ 182.174206][ T6991] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.214107][ T6991] Buffer I/O error on dev loop6, logical block 1, async page read [ 182.253461][ T6991] Buffer I/O error on dev loop6, logical block 2, async page read [ 182.294070][ T6991] Buffer I/O error on dev loop6, logical block 3, async page read [ 182.329406][ T6991] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.369950][ T6991] Buffer I/O error on dev loop6, logical block 1, async page read [ 182.550347][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'. [ 184.668206][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'. [ 185.762171][ T7038] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 185.982972][ T5929] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 186.055032][ T7044] block nbd4: NBD_DISCONNECT [ 186.061179][ T7044] block nbd4: Disconnected due to user request. [ 186.073007][ T7044] block nbd4: shutting down sockets [ 186.195448][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 186.213249][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.250128][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 186.273839][ T5929] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 186.286891][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.345045][ T5929] usb 3-1: config 0 descriptor?? [ 186.941365][ T5929] HID 045e:07da: Invalid code 65791 type 1 [ 187.011382][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.399'. [ 187.293112][ T5929] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0007/input/input15 [ 187.403609][ T5929] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 187.869032][ T978] usb 3-1: USB disconnect, device number 13 [ 188.646468][ T7089] kernel read not supported for file /Ù“㎀Dg@]¦¢šeñÎh (pid: 7089 comm: syz.2.407) [ 188.679535][ T30] audit: type=1800 audit(1755572719.504:4): pid=7089 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.407" name=D99310E38E804467405DA6A29A65F1CE1868 dev="mqueue" ino=15097 res=0 errno=0 [ 188.894640][ T5928] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 189.087300][ T5928] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 189.119535][ T5928] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.230827][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 189.355840][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 189.573882][ T5928] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 189.632919][ T5928] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 189.662477][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.704025][ T5928] usb 5-1: config 0 descriptor?? [ 189.723841][ T7090] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 190.125603][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 190.682122][ T5928] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 190.815778][ T5928] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 190.818108][ T7113] dvmrp0: entered allmulticast mode [ 191.047002][ T5928] usb 5-1: USB disconnect, device number 11 [ 191.152075][ T7119] fido_id[7119]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 191.413321][ T978] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 191.574983][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 191.592254][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 191.610282][ T978] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 191.632744][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.655468][ T978] usb 2-1: Product: syz [ 191.661722][ T978] usb 2-1: Manufacturer: syz [ 191.706963][ T978] usb 2-1: SerialNumber: syz [ 191.728558][ T978] usb 2-1: config 0 descriptor?? [ 191.802260][ T978] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 191.813088][ T978] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 191.915255][ T5928] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 192.075683][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 192.113274][ T5928] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 192.116218][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'. [ 192.140949][ T7147] veth1_macvtap: left promiscuous mode [ 192.143528][ T5928] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 192.180070][ T5928] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.207518][ T5928] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 192.218080][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 192.233513][ T5928] usb 4-1: Product: syz [ 192.238095][ T5928] usb 4-1: Manufacturer: syz [ 192.243501][ T5928] usb 4-1: SerialNumber: syz [ 192.264867][ T5928] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input17 [ 192.373516][ T978] em28xx 2-1:0.0: chip ID is em2710/2820 [ 192.509343][ T5928] usb 4-1: USB disconnect, device number 12 [ 192.509426][ C1] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 192.575255][ T5928] appletouch 4-1:1.0: input: appletouch disconnected [ 193.000532][ T978] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 193.003519][ T5930] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 193.025891][ T978] em28xx 2-1:0.0: board has no eeprom [ 193.113360][ T978] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 193.121495][ T978] em28xx 2-1:0.0: dvb set to bulk mode. [ 193.127892][ T5966] em28xx 2-1:0.0: Binding DVB extension [ 193.159098][ T978] usb 2-1: USB disconnect, device number 11 [ 193.195384][ T978] em28xx 2-1:0.0: Disconnecting em28xx [ 193.197582][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 193.239700][ T5930] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 193.272497][ T5966] em28xx 2-1:0.0: Registering input extension [ 193.272733][ T5930] usb 3-1: config 0 has no interface number 0 [ 193.281407][ T978] em28xx 2-1:0.0: Closing input extension [ 193.293269][ T5930] usb 3-1: config 0 interface 184 has no altsetting 0 [ 193.305810][ T5930] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 193.316821][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.329208][ T5930] usb 3-1: Product: syz [ 193.333817][ T5930] usb 3-1: Manufacturer: syz [ 193.338710][ T5930] usb 3-1: SerialNumber: syz [ 193.358669][ T5930] usb 3-1: config 0 descriptor?? [ 193.366276][ T978] em28xx 2-1:0.0: Freeing device [ 193.396679][ T5930] smsc75xx v1.0.0 [ 193.583069][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 193.753857][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 193.762418][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.786018][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.797005][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 193.812875][ T24] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 193.822142][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.843967][ T24] usb 5-1: config 0 descriptor?? [ 194.058847][ T7192] ALSA: mixer_oss: invalid OSS volume '' [ 194.065256][ T7192] ALSA: mixer_oss: invalid OSS volume '' [ 194.283579][ T24] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 194.303490][ T24] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 194.311657][ T24] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 194.321819][ T24] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 194.330256][ T24] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 194.348852][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input19 [ 194.435415][ T24] shield 0003:0955:7214.0009: Registered Thunderstrike controller [ 194.456696][ T24] shield 0003:0955:7214.0009: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 194.469806][ T7174] random: crng reseeded on system resumption [ 194.512298][ T7201] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 194.622347][ T5930] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 194.647587][ T5930] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 194.662150][ T5930] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 194.703014][ T5930] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 194.734253][ T5930] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 194.773115][ T5930] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 194.790533][ T5930] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 194.816609][ T24] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 194.817045][ T978] usb 5-1: USB disconnect, device number 12 [ 194.837069][ T5930] usb 3-1: USB disconnect, device number 14 [ 194.847454][ T7206] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.863197][ T24] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 194.902374][ T24] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 195.279897][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 195.528067][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 195.674141][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.801655][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 195.858022][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.897431][ T24] usb 2-1: config 0 descriptor?? [ 196.293695][ T7221] Zero length message leads to an empty skb [ 197.008461][ T24] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 197.017200][ T7222] IPv6: addrconf: prefix option has invalid lifetime [ 197.040367][ T24] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 197.073701][ T24] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 197.080931][ T24] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 197.113836][ T24] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 197.122034][ T24] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 197.325305][ T7228] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.443320][ T24] usb 2-1: USB disconnect, device number 12 [ 197.764067][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.458'. [ 198.785204][ T7264] gtp1: entered promiscuous mode [ 199.223508][ T5930] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 199.291555][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'. [ 199.482909][ T5930] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 199.540747][ T5930] usb 5-1: config 0 interface 0 has no altsetting 0 [ 199.647677][ T5930] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 199.658210][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 199.686334][ T5930] usb 5-1: Product: syz [ 199.697145][ T5930] usb 5-1: Manufacturer: syz [ 199.707722][ T5930] usb 5-1: SerialNumber: syz [ 199.724287][ T5930] usb 5-1: config 0 descriptor?? [ 199.748512][ T5930] usb 5-1: selecting invalid altsetting 0 [ 200.000905][ T5929] usb 5-1: USB disconnect, device number 13 [ 200.449218][ T7294] option changes via remount are deprecated (pid=7293 comm=syz.3.479) [ 200.568170][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.574716][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.024773][ T7313] vivid-000: disconnect [ 201.156747][ T5966] vivid-000: reconnect [ 201.178323][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.485'. [ 201.286231][ T7320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.823000][ T978] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 202.702880][ T978] usb 5-1: Using ep0 maxpacket: 8 [ 202.720010][ T978] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 202.729465][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.758820][ T978] usb 5-1: Product: syz [ 202.780144][ T978] usb 5-1: Manufacturer: syz [ 202.796190][ T978] usb 5-1: SerialNumber: syz [ 202.827742][ T978] usb 5-1: config 0 descriptor?? [ 202.982902][ T5966] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 203.103494][ T978] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 203.176862][ T5966] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 203.199059][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.229861][ T5966] usb 2-1: Product: syz [ 203.240088][ T5966] usb 2-1: Manufacturer: syz [ 203.260462][ T5966] usb 2-1: SerialNumber: syz [ 203.300643][ T5966] usb 2-1: config 0 descriptor?? [ 203.991196][ T7380] random: crng reseeded on system resumption [ 204.323331][ T978] usb write operation failed. (-71) [ 204.359898][ T978] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 204.384463][ T978] dvbdev: DVB: registering new adapter (Terratec H7) [ 204.405157][ T978] usb 5-1: media controller created [ 204.414608][ T978] usb read operation failed. (-71) [ 204.420910][ T978] usb write operation failed. (-71) [ 204.435980][ T978] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 204.450025][ T978] usb 5-1: USB disconnect, device number 14 [ 204.550075][ T5966] usb 2-1: f81604_read: reg: 100e failed: -EPROTO [ 204.583893][ T5966] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 204.607278][ T5966] usb 2-1: USB disconnect, device number 13 [ 204.677713][ T5966] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 204.770794][ T5503] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 204.790090][ T5966] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 204.873391][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 205.032926][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 205.063731][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 205.085128][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 205.094061][ T9] usb 3-1: can't read configurations, error -71 [ 205.678299][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 206.184140][ T7421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.356262][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 206.387216][ T7427] syzkaller1: entered promiscuous mode [ 206.412927][ T7427] syzkaller1: entered allmulticast mode [ 206.555108][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 206.589345][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.628798][ T9] usb 3-1: config 0 descriptor?? [ 206.665657][ T9] gspca_main: spca508-2.14.0 probing 8086:0110 [ 207.086591][ T9] gspca_spca508: reg_read err -71 [ 207.102143][ T9] gspca_spca508: reg_read err -71 [ 207.124357][ T9] gspca_spca508: reg_read err -71 [ 207.143779][ T9] gspca_spca508: reg_read err -71 [ 207.173013][ T9] gspca_spca508: reg write: error -71 [ 207.178567][ T9] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 207.240683][ T9] usb 3-1: USB disconnect, device number 17 [ 207.310763][ T7457] syzkaller1: entered promiscuous mode [ 207.317584][ T5929] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 207.326908][ T7457] syzkaller1: entered allmulticast mode [ 207.473224][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 207.483628][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.509423][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.543844][ T5929] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 207.571208][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.597143][ T5929] usb 4-1: config 0 descriptor?? [ 207.823255][ T5966] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 207.925935][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 207.983423][ T5966] usb 5-1: Using ep0 maxpacket: 8 [ 208.009909][ T5966] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.023947][ T5966] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 208.033996][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.054881][ T5966] usb 5-1: config 0 descriptor?? [ 208.068239][ T5966] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 208.087005][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 208.094312][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 208.105817][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.116384][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.126482][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 208.136809][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 208.147205][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 208.156506][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.169017][ T9] usb 3-1: config 0 descriptor?? [ 208.204922][ T5851] Bluetooth: hci5: urb ffff88814772ea00 submission failed (90) [ 208.250690][ T5929] ft260 0003:0403:6030.000B: chip code: 6424 8183 [ 208.312951][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 208.414731][ T5827] usb 3-1: USB disconnect, device number 18 [ 208.467362][ T10] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.486990][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 208.494548][ T10] usb 2-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 208.504504][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.518021][ T10] usb 2-1: config 0 descriptor?? [ 208.669516][ T5827] usb 4-1: USB disconnect, device number 13 [ 208.944888][ T10] aquacomputer_d5next 0003:0C70:F003.000C: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.1-1/input0 [ 209.158959][ T24] usb 2-1: USB disconnect, device number 14 [ 209.287515][ T5966] gspca_vc032x: reg_w err -71 [ 209.302532][ T5966] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 209.325764][ T5966] usb 5-1: USB disconnect, device number 15 [ 209.517330][ T7487] loop6: detected capacity change from 0 to 524287999 [ 209.558660][ T5861] buffer_io_error: 11 callbacks suppressed [ 209.558683][ T5861] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 209.925436][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.547'. [ 211.353191][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 211.373173][ T5827] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 211.547509][ T5827] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 211.575128][ T7513] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 211.578365][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 211.621007][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.737946][ T10] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 211.747480][ T10] usb 4-1: config 0 has no interface number 0 [ 211.755387][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 211.770423][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 211.771795][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.800727][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 211.800740][ T5827] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 211.802221][ T5827] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 211.823077][ T10] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 211.830796][ T5827] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 211.856932][ T5827] usb 5-1: Manufacturer: syz [ 211.870998][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 211.888902][ T5827] usb 5-1: config 0 descriptor?? [ 211.899086][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.969304][ T10] usb 4-1: config 0 descriptor?? [ 211.998132][ T10] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 212.307556][ T5827] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 212.321016][ T5827] appleir 0003:05AC:8243.000D: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 212.534129][ T10] usb 5-1: USB disconnect, device number 16 [ 213.402905][ T5827] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 213.530407][ T5930] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 213.562980][ T5827] usb 5-1: Using ep0 maxpacket: 8 [ 213.582714][ T5827] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.604224][ T5827] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 213.621287][ T5827] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 213.631339][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.649771][ T5827] usb 5-1: Product: syz [ 213.655378][ T5827] usb 5-1: Manufacturer: syz [ 213.660785][ T5827] usb 5-1: SerialNumber: syz [ 213.672112][ T5827] usb 5-1: config 0 descriptor?? [ 213.695416][ T5930] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 213.713597][ T5930] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 213.724368][ T5930] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 213.735123][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.762930][ T5851] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 213.775207][ T7552] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 213.806857][ T5930] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 214.097056][ T5930] usb 3-1: USB disconnect, device number 19 [ 214.133195][ T10] usb 4-1: USB disconnect, device number 14 [ 214.145190][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 214.167913][ T10] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 214.248119][ T7563] loop2: detected capacity change from 0 to 7 [ 214.273759][ T7563] Dev loop2: unable to read RDB block 7 [ 214.280175][ T7563] loop2: AHDI p1 p2 p3 [ 214.286123][ T7563] loop2: partition table partially beyond EOD, truncated [ 214.294076][ T7563] loop2: p3 start 335544320 is beyond EOD, truncated [ 214.319591][ T5928] usb 5-1: USB disconnect, device number 17 [ 214.342886][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 214.382368][ T24] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 214.402303][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.424415][ T24] usb 2-1: Product: syz [ 214.430399][ T24] usb 2-1: Manufacturer: syz [ 214.439797][ T24] usb 2-1: SerialNumber: syz [ 214.452505][ T24] usb 2-1: config 0 descriptor?? [ 214.467771][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 214.588703][ T7569] loop4: detected capacity change from 0 to 7 [ 214.601342][ T7569] Dev loop4: unable to read RDB block 7 [ 214.607365][ T7569] loop4: unable to read partition table [ 214.613469][ T7569] loop4: partition table beyond EOD, truncated [ 214.620180][ T7569] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 214.885004][ T24] gspca_se401: Frame size: 0x0 1/16th janggu [ 214.921452][ T7577] input: syz1 as /devices/virtual/input/input20 [ 215.097188][ T24] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input21 [ 215.147114][ T24] usb 2-1: USB disconnect, device number 15 [ 215.361445][ T7590] input: syz1 as /devices/virtual/input/input22 [ 215.913579][ T978] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 216.092965][ T978] usb 4-1: Using ep0 maxpacket: 8 [ 216.127633][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 216.151971][ T7610] pim6reg1: entered promiscuous mode [ 216.160435][ T978] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 216.178876][ T7610] pim6reg1: entered allmulticast mode [ 216.185767][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.219425][ T978] usb 4-1: config 0 descriptor?? [ 216.361298][ T7617] syz.1.591 (7617): drop_caches: 4 [ 216.457592][ T978] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 216.954985][ T978] usb 4-1: USB disconnect, device number 15 [ 217.433730][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'. [ 218.099024][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.602'. [ 219.079474][ T978] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 219.332922][ T978] usb 4-1: Using ep0 maxpacket: 32 [ 219.410306][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.442984][ T978] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 219.507569][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.544305][ T978] usb 4-1: config 0 descriptor?? [ 219.586668][ T978] hub 4-1:0.0: USB hub found [ 219.785689][ T978] hub 4-1:0.0: 1 port detected [ 219.841998][ T7669] netlink: 40 bytes leftover after parsing attributes in process `syz.0.611'. [ 219.859723][ T7669] netlink: 40 bytes leftover after parsing attributes in process `syz.0.611'. [ 219.870340][ T7669] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 220.038195][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'. [ 220.145095][ T7671] ptrace attach of "./syz-executor exec"[7677] was attempted by "./syz-executor exec"[7671] [ 220.293533][ T5966] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 220.535134][ T5966] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.546056][ T5966] usb 3-1: config 0 interface 0 has no altsetting 0 [ 220.569047][ T5966] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 220.588655][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.612846][ T5966] usb 3-1: Product: syz [ 220.617217][ T5966] usb 3-1: Manufacturer: syz [ 220.621928][ T5966] usb 3-1: SerialNumber: syz [ 220.636616][ T5966] usb 3-1: config 0 descriptor?? [ 220.660505][ T5966] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 220.672736][ T5966] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 220.683813][ T5966] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 220.692754][ T5966] usb 3-1: media controller created [ 220.720451][ T5966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 220.857847][ T978] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 220.885608][ T978] usb 4-1: USB disconnect, device number 16 [ 221.041564][ T5966] DVB: Unable to find symbol tda10046_attach() [ 221.064619][ T5966] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 221.082950][ T5966] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 221.668249][ T7705] input: syz0 as /devices/virtual/input/input23 [ 221.756031][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 222.054212][ T5966] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 222.083121][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 222.118013][ T5966] usb 3-1: USB disconnect, device number 20 [ 222.272156][ T7714] XFS (nullb0): Invalid superblock magic number [ 222.361983][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 222.409891][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 222.429575][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 222.455141][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 222.534976][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.550500][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.781649][ T24] usb 5-1: config 0 descriptor?? [ 222.853240][ T7710] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.076697][ T30] audit: type=1400 audit(1755572753.904:5): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=7727 comm="syz.2.631" name="map_files" dev="proc" ino=19588 [ 223.391655][ T7736] netlink: 'syz.3.634': attribute type 19 has an invalid length. [ 223.403418][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.634'. [ 223.436840][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 223.446348][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 223.458080][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 223.467138][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 223.475282][ T24] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 223.490164][ T7736] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.499751][ T7736] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.502413][ T24] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 223.508668][ T7736] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.530190][ T7736] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.598667][ T7736] netlink: 'syz.3.634': attribute type 19 has an invalid length. [ 223.678139][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.634'. [ 223.766652][ T7743] macvlan2: entered promiscuous mode [ 223.786886][ T5966] usb 5-1: USB disconnect, device number 18 [ 223.789403][ T7743] macvlan2: entered allmulticast mode [ 223.819571][ T7743] syz_tun: entered promiscuous mode [ 223.831187][ T7743] syz_tun: entered allmulticast mode [ 223.916002][ T7743] team0: Port device macvlan2 added [ 224.373679][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.639'. [ 225.733477][ T978] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 225.883723][ T978] usb 2-1: no configurations [ 225.892921][ T978] usb 2-1: can't read configurations, error -22 [ 226.091951][ T978] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 226.100835][ T30] audit: type=1326 audit(1755572756.934:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7779 comm="syz.3.650" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac8878ebe9 code=0x0 [ 226.139648][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.649'. [ 226.182888][ T5930] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 226.283643][ T978] usb 2-1: no configurations [ 226.288335][ T978] usb 2-1: can't read configurations, error -22 [ 226.303371][ T978] usb usb2-port1: attempt power cycle [ 226.382989][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 226.392687][ T5930] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 226.423716][ T7785] sctp: [Deprecated]: syz.0.653 (pid 7785) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.423716][ T7785] Use struct sctp_sack_info instead [ 226.428773][ T5930] usb 3-1: config 1 has no interface number 0 [ 226.453295][ T5930] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 226.474177][ T5930] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 226.488511][ T5930] usb 3-1: config 1 interface 105 has no altsetting 0 [ 226.499339][ T5930] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 226.508875][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.517272][ T5930] usb 3-1: Product: syz [ 226.521788][ T5930] usb 3-1: Manufacturer: syz [ 226.527258][ T5930] usb 3-1: SerialNumber: syz [ 226.546367][ T7776] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 226.554273][ T7776] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 226.653202][ T978] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 226.700096][ T978] usb 2-1: no configurations [ 226.710209][ T978] usb 2-1: can't read configurations, error -22 [ 226.853156][ T978] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 226.884417][ T978] usb 2-1: no configurations [ 226.889112][ T978] usb 2-1: can't read configurations, error -22 [ 226.905585][ T978] usb usb2-port1: unable to enumerate USB device [ 226.972686][ T7776] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 226.987152][ T7776] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 227.423417][ T5930] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 227.686632][ T5930] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 227.721290][ T5930] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 12:cc:c4:83:8d:9c [ 227.758041][ T5930] usb 3-1: USB disconnect, device number 21 [ 227.783523][ T5930] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 228.059348][ T5930] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 228.069936][ T5930] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 228.107579][ T5930] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 228.705615][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'. [ 228.742896][ T5930] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 228.842892][ T5928] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 228.912940][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 228.925913][ T5930] usb 3-1: config 0 has no interfaces? [ 228.943550][ T5930] usb 3-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=e0.0e [ 228.962738][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.983900][ T5930] usb 3-1: Product: syz [ 228.993934][ T5930] usb 3-1: Manufacturer: syz [ 229.013033][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 229.020846][ T5930] usb 3-1: SerialNumber: syz [ 229.036249][ T5928] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 229.065577][ T5928] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.085323][ T5930] usb 3-1: config 0 descriptor?? [ 229.104552][ T5928] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.142545][ T5928] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 229.190929][ T5928] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.226734][ T5928] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 229.236347][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.526524][ T5928] usb 4-1: GET_CAPABILITIES returned 0 [ 229.542085][ T5928] usbtmc 4-1:16.0: can't read capabilities [ 229.851598][ T7834] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 229.853050][ T5930] usb 4-1: USB disconnect, device number 17 [ 230.463031][ T7859] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 230.849662][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.689'. [ 231.043178][ T5930] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 231.183162][ T5966] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 231.216151][ T5930] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 231.226954][ T5930] usb 5-1: config 160 has no interface number 0 [ 231.233970][ T5930] usb 5-1: config 160 interface 200 has no altsetting 0 [ 231.244383][ T5930] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 231.256705][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.264910][ T5930] usb 5-1: Product: syz [ 231.269145][ T5930] usb 5-1: Manufacturer: syz [ 231.274299][ T5930] usb 5-1: SerialNumber: syz [ 231.333888][ T5966] usb 2-1: Using ep0 maxpacket: 32 [ 231.341493][ T5966] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 231.363404][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 231.375000][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 231.385680][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 231.397478][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 231.435745][ T5966] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 231.452948][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.471035][ T5966] usb 2-1: Product: syz [ 231.475745][ T5966] usb 2-1: Manufacturer: syz [ 231.480574][ T5966] usb 2-1: SerialNumber: syz [ 231.492263][ T5966] usb 2-1: config 0 descriptor?? [ 231.532678][ T10] usb 3-1: USB disconnect, device number 22 [ 231.537245][ T5930] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 231.562958][ T5930] usb 5-1: MIDIStreaming interface descriptor not found [ 231.656196][ T7882] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 231.698298][ T5930] usb 5-1: USB disconnect, device number 19 [ 231.835806][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.938676][ T5966] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 231.958520][ T5966] input input25: Device does not respond to id packet M [ 231.987842][ T5966] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 232.023716][ T5966] input input25: Device does not respond to id packet P [ 232.050997][ T5966] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 232.062455][ T5966] input input25: Device does not respond to id packet B [ 232.284438][ T7897] netlink: 20 bytes leftover after parsing attributes in process `syz.4.698'. [ 232.289894][ T5966] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 232.312522][ T5966] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 232.333115][ T5966] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 232.356511][ T5966] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 232.397651][ T5966] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input25 [ 232.427415][ T7900] netlink: 20 bytes leftover after parsing attributes in process `syz.4.698'. [ 232.480796][ T7900] nbd: device at index 64 is going down [ 232.531157][ T5966] usb 2-1: USB disconnect, device number 20 [ 232.633091][ T7904] netlink: 44 bytes leftover after parsing attributes in process `syz.2.699'. [ 232.933265][ T5861] udevd[5861]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 232.987532][ T5861] udevd[5861]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 233.084372][ T5827] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 233.160168][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880334f2800: rx timeout, send abort [ 233.265230][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.298481][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.339822][ T5827] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.368435][ T5857] Bluetooth: hci3: command 0x0406 tx timeout [ 233.375231][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 233.377711][ T5827] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.442498][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.464732][ T5827] usb 5-1: config 0 descriptor?? [ 233.661410][ T5851] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 233.661546][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880334f3800: rx timeout, send abort [ 233.678585][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880334f2800: abort rx timeout. Force session deactivation [ 233.713201][ T5930] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 233.887587][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 233.908150][ T5930] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 233.925799][ T5827] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 233.955069][ T5930] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 233.972307][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 233.992963][ T5930] usb 2-1: Product: syz [ 233.997216][ T5930] usb 2-1: Manufacturer: syz [ 234.001861][ T5930] usb 2-1: SerialNumber: syz [ 234.051395][ T5930] usb 2-1: config 0 descriptor?? [ 234.073291][ T7932] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 234.082062][ T5930] hub 2-1:0.0: bad descriptor, ignoring hub [ 234.100490][ T5930] hub 2-1:0.0: probe with driver hub failed with error -5 [ 234.176679][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880334f3800: abort rx timeout. Force session deactivation [ 234.603428][ T5966] usb 2-1: reset high-speed USB device number 21 using dummy_hcd [ 234.640124][ T5966] usb 2-1: device reset changed ep0 maxpacket size! [ 234.669650][ T5966] usb 2-1: USB disconnect, device number 21 [ 234.909752][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 235.236636][ T7966] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 235.418929][ T7968] sctp: [Deprecated]: syz.3.724 (pid 7968) Use of int in max_burst socket option deprecated. [ 235.418929][ T7968] Use struct sctp_assoc_value instead [ 235.492892][ T5966] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 235.591456][ T7970] netlink: 'syz.3.725': attribute type 12 has an invalid length. [ 235.616571][ T7970] netlink: 'syz.3.725': attribute type 29 has an invalid length. [ 235.631591][ T7970] netlink: 148 bytes leftover after parsing attributes in process `syz.3.725'. [ 235.641264][ T7970] netlink: 'syz.3.725': attribute type 2 has an invalid length. [ 235.656671][ T5966] usb 2-1: config 0 has an invalid interface number: 90 but max is 0 [ 235.669609][ T5966] usb 2-1: config 0 has no interface number 0 [ 235.676049][ T7970] netlink: 'syz.3.725': attribute type 3 has an invalid length. [ 235.687430][ T7971] netlink: 'syz.3.725': attribute type 12 has an invalid length. [ 235.696103][ T5966] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=de.7f [ 235.714521][ T7971] netlink: 'syz.3.725': attribute type 29 has an invalid length. [ 235.735148][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.743010][ T7971] netlink: 148 bytes leftover after parsing attributes in process `syz.3.725'. [ 235.753772][ T5966] usb 2-1: Product: syz [ 235.758702][ T7971] netlink: 'syz.3.725': attribute type 2 has an invalid length. [ 235.762043][ T5966] usb 2-1: Manufacturer: syz [ 235.773738][ T7971] netlink: 'syz.3.725': attribute type 3 has an invalid length. [ 235.782056][ T5966] usb 2-1: SerialNumber: syz [ 235.800833][ T5966] usb 2-1: config 0 descriptor?? [ 236.030211][ T5966] cdc_subset 2-1:0.90: probe with driver cdc_subset failed with error -71 [ 236.081078][ T5966] usb 2-1: USB disconnect, device number 22 [ 236.246169][ T24] usb 5-1: reset high-speed USB device number 20 using dummy_hcd [ 236.261870][ T24] usb 5-1: device reset changed ep0 maxpacket size! [ 236.283917][ T10] usb 5-1: USB disconnect, device number 20 [ 236.334273][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.728'. [ 236.473034][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 236.585189][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.730'. [ 236.667986][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 236.685041][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 236.731949][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 236.784948][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 236.807453][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.851240][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 236.871860][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.161006][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 237.174822][ T10] usbtmc 5-1:16.0: can't read capabilities [ 237.420146][ T5966] usb 5-1: USB disconnect, device number 21 [ 238.252516][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'. [ 241.613534][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.758'. [ 241.718576][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.760'. [ 242.072199][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 242.475926][ T8085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.766'. [ 244.694059][ T8118] kvm: user requested TSC rate below hardware speed [ 244.731338][ T8118] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3304665512 (6609331024 ns) > initial count (5832947598 ns). Using initial count to start timer. [ 244.819678][ T8126] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.984571][ T8132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.782'. [ 245.872886][ T5930] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 246.046197][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 246.067653][ T5930] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 246.094293][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.116063][ T5930] usb 2-1: Product: syz [ 246.131255][ T5930] usb 2-1: Manufacturer: syz [ 246.134043][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.791'. [ 246.146575][ T5930] usb 2-1: SerialNumber: syz [ 246.191660][ T5930] usb 2-1: config 0 descriptor?? [ 246.473531][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.793'. [ 246.497846][ T5930] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 246.775913][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'. [ 247.327533][ T5930] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 247.448679][ T5930] usb 2-1: USB disconnect, device number 23 [ 247.541211][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.800'. [ 248.404721][ T8187] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 248.717367][ T8187] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 248.734176][ T8187] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 248.742448][ T8187] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 248.792007][ T8187] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 248.794417][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.809'. [ 248.814710][ T8187] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 248.844177][ T8187] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 248.866454][ T8187] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 248.901147][ T8187] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 248.931433][ T8187] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 248.957886][ T8187] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 248.991750][ T8187] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 249.001886][ T8187] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 249.053192][ T8187] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 249.118820][ T8187] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 249.165052][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.810'. [ 249.193835][ T8187] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 249.194036][ T8187] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 249.195878][ T8199] netlink: 'syz.0.811': attribute type 1 has an invalid length. [ 249.201606][ T8187] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 249.239020][ T8199] netlink: 'syz.0.811': attribute type 2 has an invalid length. [ 249.301200][ T8199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.811'. [ 249.439594][ T8204] netlink: 'syz.4.814': attribute type 12 has an invalid length. [ 249.454616][ T8204] netlink: 'syz.4.814': attribute type 29 has an invalid length. [ 249.463652][ T8204] netlink: 148 bytes leftover after parsing attributes in process `syz.4.814'. [ 249.540392][ T8204] netlink: 'syz.4.814': attribute type 2 has an invalid length. [ 249.567954][ T8204] netlink: 'syz.4.814': attribute type 3 has an invalid length. [ 249.580277][ T8207] netlink: 'syz.4.814': attribute type 12 has an invalid length. [ 249.592159][ T8207] netlink: 'syz.4.814': attribute type 29 has an invalid length. [ 249.628421][ T8207] netlink: 148 bytes leftover after parsing attributes in process `syz.4.814'. [ 249.649306][ T8207] netlink: 'syz.4.814': attribute type 2 has an invalid length. [ 249.686270][ T8207] netlink: 'syz.4.814': attribute type 3 has an invalid length. [ 250.407333][ T8216] overlayfs: failed to resolve './file0': -2 [ 251.160011][ T8232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.823'. [ 251.477377][ T8238] kvm: MWAIT instruction emulated as NOP! [ 251.871822][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.831'. [ 252.884209][ T8279] kvm: apic: phys broadcast and lowest prio [ 254.224013][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 254.571233][ T9] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 254.599072][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.618673][ T9] usb 2-1: Product: syz [ 254.628080][ T9] usb 2-1: Manufacturer: syz [ 254.638251][ T9] usb 2-1: SerialNumber: syz [ 254.670925][ T9] usb 2-1: config 0 descriptor?? [ 254.708378][ T9] ch341 2-1:0.0: ch341-uart converter detected [ 254.992050][ T8316] syzkaller0: entered promiscuous mode [ 255.016381][ T8316] syzkaller0: entered allmulticast mode [ 255.925496][ T9] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 256.129500][ T24] usb 2-1: USB disconnect, device number 24 [ 256.148820][ T24] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 256.174314][ T24] ch341 2-1:0.0: device disconnected [ 256.554287][ T8354] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 257.450247][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 257.641570][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.652933][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.663463][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 257.676927][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.690273][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.708924][ T9] usb 2-1: config 0 descriptor?? [ 258.164937][ T9] plantronics 0003:047F:FFFF.0010: reserved main item tag 0xd [ 258.172535][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 258.383788][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.874'. [ 258.997905][ T9] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 259.185198][ T9] usb 2-1: USB disconnect, device number 25 [ 259.357075][ T8389] fido_id[8389]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 259.661660][ T8400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.880'. [ 259.822986][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 259.992958][ T5827] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 260.008507][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.039926][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 260.077018][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.099374][ T9] usb 2-1: config 0 descriptor?? [ 260.179259][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 260.213007][ T5827] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 260.250094][ T5827] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.293509][ T5827] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.341750][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 260.346435][ T5827] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 260.367552][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 260.376085][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.408438][ T5827] usb 4-1: Product: syz [ 260.412695][ T5827] usb 4-1: Manufacturer: syz [ 260.422572][ T9] usb 2-1: USB disconnect, device number 26 [ 260.457796][ T5827] usb 4-1: SerialNumber: syz [ 260.946600][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 260.948979][ T5827] usb 4-1: 0:2 : does not exist [ 260.980805][ T8428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.892'. [ 261.121905][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 261.129920][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.156851][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 261.187918][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.291811][ T8432] overlayfs: failed to resolve './file1': -2 [ 261.372515][ T9] usb 2-1: config 0 descriptor?? [ 261.856342][ T9] kye 0003:0458:5016.0011: control desc unexpectedly large [ 261.922647][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0011/input/input26 [ 261.986615][ T5827] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 261.995016][ T8443] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 262.017240][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.032861][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.117953][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0011/input/input27 [ 262.175405][ T5827] usb 4-1: USB disconnect, device number 18 [ 262.242115][ T9] kye 0003:0458:5016.0011: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 262.317698][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.639145][ T5827] usb 2-1: USB disconnect, device number 27 [ 262.954677][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.904'. [ 263.113650][ T5914] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 263.228637][ T8465] overlayfs: failed to resolve './file1': -2 [ 263.457722][ T5914] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 263.470719][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.481703][ T5914] usb 3-1: Product: syz [ 263.489973][ T5914] usb 3-1: Manufacturer: syz [ 263.545753][ T5914] usb 3-1: SerialNumber: syz [ 263.585656][ T5914] usb 3-1: config 0 descriptor?? [ 263.993099][ T8482] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 264.017130][ T8482] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 264.504860][ T8478] ptrace attach of "./syz-executor exec"[8487] was attempted by "./syz-executor exec"[8478] [ 265.034665][ T5914] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 265.078567][ T5914] usb 3-1: USB disconnect, device number 23 [ 265.120353][ T5914] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 265.308329][ T5914] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 265.687294][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.921'. [ 266.275051][ T8503] block device autoloading is deprecated and will be removed. [ 266.704759][ T8533] kvm: Disabled LAPIC found during irq injection [ 268.310726][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.937'. [ 268.458470][ T5827] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 268.686065][ T5827] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.716971][ T5827] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 268.745954][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.782420][ T5827] usb 2-1: config 0 descriptor?? [ 268.837391][ T5827] pwc: Askey VC010 type 2 USB webcam detected. [ 269.267896][ T5827] pwc: recv_control_msg error -32 req 02 val 2b00 [ 269.288643][ T5827] pwc: recv_control_msg error -32 req 02 val 2700 [ 269.344627][ T5827] pwc: recv_control_msg error -32 req 02 val 2c00 [ 269.352105][ T5827] pwc: recv_control_msg error -32 req 04 val 1000 [ 269.456134][ T8574] [ 269.458544][ T8574] ====================================================== [ 269.465603][ T8574] WARNING: possible circular locking dependency detected [ 269.472777][ T8574] 6.16.0-syzkaller #0 Not tainted [ 269.477840][ T8574] ------------------------------------------------------ [ 269.484900][ T8574] syz.4.942/8574 is trying to acquire lock: [ 269.490832][ T8574] ffff888024b9f988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 269.501909][ T8574] [ 269.501909][ T8574] but task is already holding lock: [ 269.509322][ T8574] ffff888024b9fa30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0 [ 269.518955][ T8574] [ 269.518955][ T8574] which lock already depends on the new lock. [ 269.518955][ T8574] [ 269.529380][ T8574] [ 269.529380][ T8574] the existing dependency chain (in reverse order) is: [ 269.538423][ T8574] [ 269.538423][ T8574] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 269.546282][ T8574] lock_acquire+0x120/0x360 [ 269.551335][ T8574] __mutex_lock+0x182/0xe80 [ 269.556384][ T8574] refcount_dec_and_mutex_lock+0x30/0xa0 [ 269.562564][ T8574] nbd_config_put+0x2c/0x790 [ 269.567703][ T8574] nbd_release+0xfe/0x140 [ 269.572584][ T8574] bdev_release+0x533/0x650 [ 269.577718][ T8574] blkdev_release+0x15/0x20 [ 269.582773][ T8574] __fput+0x449/0xa70 [ 269.587309][ T8574] fput_close_sync+0x119/0x200 [ 269.592641][ T8574] __x64_sys_close+0x7f/0x110 [ 269.598145][ T8574] do_syscall_64+0xfa/0x3b0 [ 269.603294][ T8574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.609725][ T8574] [ 269.609725][ T8574] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 269.617583][ T8574] lock_acquire+0x120/0x360 [ 269.622650][ T8574] __mutex_lock+0x182/0xe80 [ 269.627696][ T8574] __del_gendisk+0x129/0x9e0 [ 269.632832][ T8574] del_gendisk+0xe8/0x160 [ 269.637710][ T8574] nbd_dev_remove_work+0x47/0xe0 [ 269.643195][ T8574] process_scheduled_works+0xade/0x17b0 [ 269.649286][ T8574] worker_thread+0x8a0/0xda0 [ 269.654423][ T8574] kthread+0x70e/0x8a0 [ 269.659031][ T8574] ret_from_fork+0x3fc/0x770 [ 269.664155][ T8574] ret_from_fork_asm+0x1a/0x30 [ 269.669464][ T8574] [ 269.669464][ T8574] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 269.677937][ T8574] validate_chain+0xb9b/0x2140 [ 269.683254][ T8574] __lock_acquire+0xab9/0xd20 [ 269.688471][ T8574] lock_acquire+0x120/0x360 [ 269.693526][ T8574] down_write+0x96/0x1f0 [ 269.698415][ T8574] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 269.704691][ T8574] nbd_start_device+0x16c/0xac0 [ 269.710102][ T8574] nbd_genl_connect+0x135b/0x18f0 [ 269.715678][ T8574] genl_family_rcv_msg_doit+0x215/0x300 [ 269.721775][ T8574] genl_rcv_msg+0x60e/0x790 [ 269.726817][ T8574] netlink_rcv_skb+0x205/0x470 [ 269.732125][ T8574] genl_rcv+0x28/0x40 [ 269.736778][ T8574] netlink_unicast+0x75c/0x8e0 [ 269.742108][ T8574] netlink_sendmsg+0x805/0xb30 [ 269.747422][ T8574] __sock_sendmsg+0x21c/0x270 [ 269.752642][ T8574] ____sys_sendmsg+0x505/0x830 [ 269.757958][ T8574] ___sys_sendmsg+0x21f/0x2a0 [ 269.763181][ T8574] __x64_sys_sendmsg+0x19b/0x260 [ 269.768668][ T8574] do_syscall_64+0xfa/0x3b0 [ 269.773731][ T8574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.780168][ T8574] [ 269.780168][ T8574] other info that might help us debug this: [ 269.780168][ T8574] [ 269.790495][ T8574] Chain exists of: [ 269.790495][ T8574] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 269.790495][ T8574] [ 269.804696][ T8574] Possible unsafe locking scenario: [ 269.804696][ T8574] [ 269.812179][ T8574] CPU0 CPU1 [ 269.817555][ T8574] ---- ---- [ 269.822934][ T8574] lock(&nbd->config_lock); [ 269.827547][ T8574] lock(&disk->open_mutex); [ 269.834677][ T8574] lock(&nbd->config_lock); [ 269.841836][ T8574] lock(&set->update_nr_hwq_lock); [ 269.847053][ T8574] [ 269.847053][ T8574] *** DEADLOCK *** [ 269.847053][ T8574] [ 269.855233][ T8574] 3 locks held by syz.4.942/8574: [ 269.860356][ T8574] #0: ffffffff8f5701f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 269.868575][ T8574] #1: ffffffff8f570008 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 269.877588][ T8574] #2: ffff888024b9fa30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0 [ 269.887781][ T8574] [ 269.887781][ T8574] stack backtrace: [ 269.893710][ T8574] CPU: 1 UID: 0 PID: 8574 Comm: syz.4.942 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 269.893746][ T8574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.893764][ T8574] Call Trace: [ 269.893789][ T8574] [ 269.893799][ T8574] dump_stack_lvl+0x189/0x250 [ 269.893826][ T8574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.893846][ T8574] ? __pfx__printk+0x10/0x10 [ 269.893869][ T8574] ? print_lock_name+0xde/0x100 [ 269.893892][ T8574] print_circular_bug+0x2ee/0x310 [ 269.893915][ T8574] check_noncircular+0x134/0x160 [ 269.893938][ T8574] validate_chain+0xb9b/0x2140 [ 269.893969][ T8574] __lock_acquire+0xab9/0xd20 [ 269.893989][ T8574] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 269.894013][ T8574] lock_acquire+0x120/0x360 [ 269.894027][ T8574] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 269.894054][ T8574] ? kernfs_add_one+0xf0/0x520 [ 269.894080][ T8574] down_write+0x96/0x1f0 [ 269.894102][ T8574] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 269.894125][ T8574] ? __pfx_down_write+0x10/0x10 [ 269.894146][ T8574] ? kernfs_add_one+0xf0/0x520 [ 269.894169][ T8574] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 269.894194][ T8574] ? sysfs_add_file_mode_ns+0x238/0x300 [ 269.894211][ T8574] ? sysfs_add_file_mode_ns+0x259/0x300 [ 269.894231][ T8574] nbd_start_device+0x16c/0xac0 [ 269.894255][ T8574] ? __nla_parse+0x40/0x60 [ 269.894275][ T8574] ? device_create_file+0xf4/0x1c0 [ 269.894302][ T8574] nbd_genl_connect+0x135b/0x18f0 [ 269.894327][ T8574] ? __pfx_nbd_genl_connect+0x10/0x10 [ 269.894353][ T8574] ? __nla_parse+0x40/0x60 [ 269.894376][ T8574] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 269.894400][ T8574] genl_family_rcv_msg_doit+0x215/0x300 [ 269.894422][ T8574] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 269.894451][ T8574] genl_rcv_msg+0x60e/0x790 [ 269.894472][ T8574] ? __pfx_genl_rcv_msg+0x10/0x10 [ 269.894489][ T8574] ? __pfx_nbd_genl_connect+0x10/0x10 [ 269.894516][ T8574] netlink_rcv_skb+0x205/0x470 [ 269.894541][ T8574] ? __pfx_genl_rcv_msg+0x10/0x10 [ 269.894558][ T8574] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 269.894589][ T8574] ? down_read+0x1ad/0x2e0 [ 269.894611][ T8574] genl_rcv+0x28/0x40 [ 269.894626][ T8574] netlink_unicast+0x75c/0x8e0 [ 269.894652][ T8574] netlink_sendmsg+0x805/0xb30 [ 269.894681][ T8574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.894709][ T8574] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 269.894738][ T8574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.894763][ T8574] __sock_sendmsg+0x21c/0x270 [ 269.894785][ T8574] ____sys_sendmsg+0x505/0x830 [ 269.894815][ T8574] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.894845][ T8574] ? import_iovec+0x74/0xa0 [ 269.894870][ T8574] ___sys_sendmsg+0x21f/0x2a0 [ 269.894898][ T8574] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.894939][ T8574] ? __fget_files+0x2a/0x420 [ 269.894960][ T8574] ? __fget_files+0x3a0/0x420 [ 269.894984][ T8574] __x64_sys_sendmsg+0x19b/0x260 [ 269.895013][ T8574] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.895044][ T8574] ? rcu_is_watching+0x15/0xb0 [ 269.895066][ T8574] ? do_syscall_64+0xbe/0x3b0 [ 269.895087][ T8574] do_syscall_64+0xfa/0x3b0 [ 269.895106][ T8574] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.895125][ T8574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.895143][ T8574] ? clear_bhb_loop+0x60/0xb0 [ 269.895163][ T8574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.895180][ T8574] RIP: 0033:0x7f0a9678ebe9 [ 269.895203][ T8574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.895219][ T8574] RSP: 002b:00007f0a976d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.895238][ T8574] RAX: ffffffffffffffda RBX: 00007f0a969b5fa0 RCX: 00007f0a9678ebe9 [ 269.895252][ T8574] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 269.895264][ T8574] RBP: 00007f0a96811e19 R08: 0000000000000000 R09: 0000000000000000 [ 269.895275][ T8574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.895286][ T8574] R13: 00007f0a969b6038 R14: 00007f0a969b5fa0 R15: 00007ffc92e95e48 [ 269.895306][ T8574] [ 269.895381][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.295335][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.386516][ T8574] nbd1: detected capacity change from 0 to 1125899906842687 [ 270.396215][ T8576] nbd: couldn't find device at index 0 [ 270.457783][ T5851] block nbd1: Receive control failed (result -104) [ 270.571144][ T5827] pwc: recv_control_msg error -71 req 04 val 1400 [ 270.578474][ T5827] pwc: recv_control_msg error -71 req 02 val 2000 [ 270.585796][ T5827] pwc: recv_control_msg error -71 req 02 val 2100 [ 270.592627][ T5827] pwc: recv_control_msg error -71 req 04 val 1500 [ 270.599775][ T5827] pwc: recv_control_msg error -71 req 02 val 2500 [ 270.606883][ T5827] pwc: recv_control_msg error -71 req 02 val 2400 [ 270.613895][ T5827] pwc: recv_control_msg error -71 req 02 val 2600 [ 270.620761][ T5827] pwc: recv_control_msg error -71 req 02 val 2900 [ 270.627653][ T5827] pwc: recv_control_msg error -71 req 02 val 2800 [ 270.634698][ T5827] pwc: recv_control_msg error -71 req 04 val 1100 [ 270.641574][ T5827] pwc: recv_control_msg error -71 req 04 val 1200 [ 270.650359][ T5827] pwc: Registered as video103. [ 270.656495][ T5827] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 270.669685][ T5827] usb 2-1: USB disconnect, device number 28