last executing test programs: 2m44.480511665s ago: executing program 1 (id=3405): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x7, 0x401}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x1, r1, 0x0, 0x6, 0x100000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x6, r1, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000}) 2m44.359662425s ago: executing program 1 (id=3406): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000000)) 2m43.981623596s ago: executing program 1 (id=3414): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x88582) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8080078fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x7]}}) socket$nl_audit(0x10, 0x3, 0x9) close(0x3) 2m43.833718821s ago: executing program 1 (id=3417): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m43.001519013s ago: executing program 1 (id=3431): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 2m42.397227831s ago: executing program 1 (id=3432): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x8, 0x0, {0x1}}) io_uring_enter(r1, 0x351a, 0x100, 0x0, 0x0, 0x0) 2m42.054865461s ago: executing program 32 (id=3432): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x8, 0x0, {0x1}}) io_uring_enter(r1, 0x351a, 0x100, 0x0, 0x0, 0x0) 2m7.311911232s ago: executing program 4 (id=3870): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000600060009000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m6.727410236s ago: executing program 4 (id=3877): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x6, 0xeeee8000, 0xc, r2, 0x4}) 2m6.152002615s ago: executing program 4 (id=3885): r0 = inotify_init() mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x5000009) lchown(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 2m5.971808113s ago: executing program 4 (id=3888): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) 2m4.945616566s ago: executing program 4 (id=3898): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m4.441667753s ago: executing program 4 (id=3902): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) epoll_create1(0x0) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) 2m4.003337953s ago: executing program 33 (id=3902): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) epoll_create1(0x0) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) 6.565161944s ago: executing program 0 (id=5205): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) clock_gettime(0xffffffea, 0x0) 6.540238105s ago: executing program 0 (id=5206): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.429032763s ago: executing program 0 (id=5220): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x4, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @global=@item_4={0x3, 0x1, 0xa, "1914d838"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) 3.533569717s ago: executing program 0 (id=5240): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/99, 0x63}], 0x1, &(0x7f0000000400)=""/185, 0xb9}, 0xbf}], 0x1, 0x12120, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) 3.35777954s ago: executing program 3 (id=5242): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e978e345482212cf7cd37be", 0xd}, {&(0x7f0000000000)="ece600", 0x3}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/14, 0xe}, {&(0x7f0000000280)=""/240, 0xf0}], 0x2}, 0x3}], 0x1, 0x2120, 0x0) 3.30053875s ago: executing program 2 (id=5243): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xfffffffffffff14b, 0x10000, 0x4, 0x0, 0x10000, 0x0, 0x4002004c1, 0x2, 0x9, 0x0, 0x1, 0x0, 0x401, 0x0, 0x9, 0x100000091], 0x2, 0x4400}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 3.168817111s ago: executing program 2 (id=5244): r0 = userfaultfd(0x80001) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) set_mempolicy(0x2, &(0x7f00000001c0)=0x6c76, 0x7) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) 2.909022215s ago: executing program 2 (id=5247): connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c000280080001407f"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 2.800208132s ago: executing program 2 (id=5250): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x2, 0xaf1, 0xffffffff, 0x7fffffff, 0x8}, 0x14) 2.578200869s ago: executing program 0 (id=5254): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x40015b0b, 0x0) syz_usb_disconnect(r0) 2.390919569s ago: executing program 3 (id=5257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x46}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.212789561s ago: executing program 2 (id=5258): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x1, "42341f9b1000007e4f00"}) syz_open_pts(r1, 0x103100) close_range(r0, 0xffffffffffffffff, 0x0) 2.188875146s ago: executing program 3 (id=5259): r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xffffffff7ffffce8, 0xa]}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x100000001) 1.717685169s ago: executing program 3 (id=5262): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x8, 0x0, 0x4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="9d33", 0x2}], 0x1}}], 0x1, 0x480e1) close(0x3) 1.547731003s ago: executing program 3 (id=5263): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x2) 1.454312736s ago: executing program 3 (id=5265): syz_usb_connect(0x1, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005040000000600150005"], 0x4c}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.377031795s ago: executing program 2 (id=5266): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) 1.229074091s ago: executing program 5 (id=5268): socket$kcm(0x10, 0x2, 0x0) socket(0x15, 0x5, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x1000, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.16704703s ago: executing program 6 (id=5269): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a40)="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", 0x241}], 0x1}}], 0x1, 0x80) 1.016463791s ago: executing program 5 (id=5270): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0xfc2a5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 976.900191ms ago: executing program 6 (id=5271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 724.330389ms ago: executing program 6 (id=5272): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4c000}, 0xc0) 591.967965ms ago: executing program 0 (id=5273): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0) r0 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 527.188082ms ago: executing program 5 (id=5274): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(r0, &(0x7f0000005780)='./file0\x00', 0x9400002f) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) 439.505806ms ago: executing program 6 (id=5275): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0xfffffff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 294.499938ms ago: executing program 6 (id=5276): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='o', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={r2}, &(0x7f0000000100)=0x8) 292.623746ms ago: executing program 5 (id=5277): pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x115) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file1\x00', 0x16000f57) write$P9_RVERSION(r1, &(0x7f00000001c0)=ANY=[], 0x15) splice(r0, 0x0, r2, 0x0, 0x50f5d137, 0xd) 170.810385ms ago: executing program 6 (id=5278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xc000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x1e, 0x0, 0x0) mremap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x4000, 0x3, &(0x7f0000fee000/0x4000)=nil) 105.298743ms ago: executing program 5 (id=5279): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 0s ago: executing program 5 (id=5280): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) kernel console output (not intermixed with test programs): -1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.096080][ T5920] usb 4-1: config 0 has no interface number 0 [ 389.115943][ T5920] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 389.133831][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.152523][ T10] usb 6-1: USB disconnect, device number 10 [ 389.163355][ T5920] usb 4-1: Product: syz [ 389.173520][ T5920] usb 4-1: Manufacturer: syz [ 389.176333][ T10] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 389.183656][ T5920] usb 4-1: SerialNumber: syz [ 389.197760][ T5920] usb 4-1: config 0 descriptor?? [ 389.427004][ T5920] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 389.466340][ T5920] uvcvideo 4-1:0.105: No valid video chain found. [ 389.493895][ T5920] usb 4-1: USB disconnect, device number 46 [ 389.906196][ T5917] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 390.077632][ T5917] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 390.100724][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.134348][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.155087][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 390.231305][ T5917] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 390.255743][ T5917] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 390.263891][ T5917] usb 3-1: Manufacturer: syz [ 390.284783][ T5917] usb 3-1: config 0 descriptor?? [ 390.443742][ T5919] psmouse serio7: Failed to reset mouse on : -5 [ 390.600614][T15805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4010'. [ 390.726570][ T5917] appleir 0003:05AC:8243.0039: unknown main item tag 0x0 [ 390.766850][ T5917] appleir 0003:05AC:8243.0039: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 391.007390][ T5917] usb 3-1: USB disconnect, device number 63 [ 391.037012][T15813] fido_id[15813]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 391.174496][T15826] ALSA: mixer_oss: invalid OSS volume 'y:' [ 391.195746][T15826] ALSA: mixer_oss: invalid OSS volume 'Shared_Clean:' [ 391.202566][T15826] ALSA: mixer_oss: invalid OSS volume 'Sha' [ 391.239574][T15828] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4019'. [ 392.315692][ T5917] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 392.478749][ T5917] usb 7-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 392.495055][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.526987][ T5917] usb 7-1: config 0 descriptor?? [ 392.600257][T15867] syzkaller1: entered promiscuous mode [ 392.607988][T15867] syzkaller1: entered allmulticast mode [ 392.754960][ T5917] kaweth 7-1:0.0: Firmware present in device. [ 392.943374][ T5917] kaweth 7-1:0.0: Statistics collection: 0 [ 392.955162][ T5917] kaweth 7-1:0.0: Multicast filter limit: 0 [ 392.970526][ T5917] kaweth 7-1:0.0: MTU: 0 [ 392.985074][ T5917] kaweth 7-1:0.0: Read MAC address 00:00:00:00:00:00 [ 393.150521][T15884] vlan2: entered promiscuous mode [ 393.157431][T15884] team0: entered promiscuous mode [ 393.162706][T15884] team_slave_0: entered promiscuous mode [ 393.169284][T15884] team_slave_1: entered promiscuous mode [ 393.192567][T15884] vlan2: entered allmulticast mode [ 393.197916][T15884] team0: entered allmulticast mode [ 393.203278][T15884] team_slave_0: entered allmulticast mode [ 393.213041][T15884] team_slave_1: entered allmulticast mode [ 393.223397][T15888] netlink: 'syz.0.4044': attribute type 12 has an invalid length. [ 393.231370][T15888] netlink: 'syz.0.4044': attribute type 29 has an invalid length. [ 393.252046][T15888] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4044'. [ 393.261540][T15888] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4044'. [ 393.355944][T15892] input: syz0 as /devices/virtual/input/input89 [ 393.544659][ T5917] kaweth 7-1:0.0: Error setting receive filter [ 393.551966][ T5917] kaweth 7-1:0.0: probe with driver kaweth failed with error -5 [ 393.582726][ T5917] usb 7-1: USB disconnect, device number 2 [ 393.965816][ T5917] IPVS: starting estimator thread 0... [ 394.055839][T15909] IPVS: using max 34 ests per chain, 81600 per kthread [ 394.215934][ T5919] misc userio: Buffer overflowed, userio client isn't keeping up [ 394.467147][ T3014] tipc: Subscription rejected, illegal request [ 394.699324][T15939] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4066'. [ 395.312493][ T5919] input: PS/2 Generic Mouse as /devices/serio7/input/input88 [ 395.555972][ T5919] psmouse serio7: Failed to enable mouse on [ 396.818743][ T5919] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 396.999116][ T5919] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 397.027947][ T5919] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.050635][ T5919] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 397.078978][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 397.100451][ T5919] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.123802][ T5919] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 397.142018][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 397.154007][ T5919] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.176371][ T5919] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 397.202950][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 397.225274][ T5919] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.242080][ T5919] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 397.274511][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 397.324554][ T5919] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.345694][ T5919] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 397.375737][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 397.401247][ T5919] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.433608][ T5919] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 397.487194][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 397.504967][ T5919] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.545878][ T5919] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 397.580104][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 397.615366][ T5919] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.651540][ T5919] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 397.670176][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 397.718522][ T5919] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 397.755645][ T5919] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 397.764147][ T5919] usb 3-1: Product: syz [ 397.788263][ T5919] usb 3-1: Manufacturer: syz [ 397.792913][ T5919] usb 3-1: SerialNumber: syz [ 397.842855][ T5919] usb 3-1: config 0 descriptor?? [ 397.926797][ T5919] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 398.236422][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 398.243902][ T10] usb 3-1: USB disconnect, device number 64 [ 398.256027][ T10] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 398.410676][ T30] audit: type=1326 audit(1764844233.421:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16068 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d058f749 code=0x7ffc0000 [ 398.458447][ T30] audit: type=1326 audit(1764844233.441:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16068 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d058f749 code=0x7ffc0000 [ 398.481271][ T30] audit: type=1326 audit(1764844233.441:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16068 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fb8d058f749 code=0x7ffc0000 [ 398.508215][ T30] audit: type=1326 audit(1764844233.441:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16068 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d058f749 code=0x7ffc0000 [ 398.531899][ T30] audit: type=1326 audit(1764844233.441:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16068 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d058f749 code=0x7ffc0000 [ 398.760710][ T10] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 398.816807][T16085] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4105'. [ 398.937844][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.958011][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 398.984062][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 399.014845][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.031473][ T10] usb 6-1: Product: syz [ 399.040558][ T10] usb 6-1: Manufacturer: syz [ 399.051817][ T10] usb 6-1: SerialNumber: syz [ 399.283056][T16085] team0 (unregistering): Port device team_slave_0 removed [ 399.295235][ T10] usb 6-1: 0:2 : does not exist [ 399.314528][T16085] team0 (unregistering): Port device team_slave_1 removed [ 399.330297][ T10] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 399.397919][ T10] usb 6-1: USB disconnect, device number 11 [ 399.459303][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.742004][T16118] syzkaller1: entered promiscuous mode [ 399.758641][ T5919] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 399.775756][T16118] syzkaller1: entered allmulticast mode [ 399.936216][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 399.947684][ T5919] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 399.958375][T16129] syzkaller1: entered promiscuous mode [ 399.963897][T16129] syzkaller1: entered allmulticast mode [ 399.987356][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.995681][ T5920] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 400.009796][ T5919] usb 3-1: config 0 descriptor?? [ 400.152371][ T5920] usb 7-1: Using ep0 maxpacket: 32 [ 400.160261][ T5920] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 400.172571][ T5920] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 400.203966][ T5920] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 400.217953][ T5920] usb 7-1: config 1 has no interface number 0 [ 400.224459][ T5920] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 400.241105][ T5919] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 400.247833][ T5920] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 400.247878][ T5920] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 400.247898][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.289599][ T5920] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 400.365910][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 400.399842][ T5919] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 400.409365][ T5919] usb 3-1: media controller created [ 400.442894][T16148] netlink: 'syz.3.4130': attribute type 3 has an invalid length. [ 400.456696][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 400.472959][T16148] netlink: 'syz.3.4130': attribute type 1 has an invalid length. [ 400.497843][ T5920] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 400.505890][T16148] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4130'. [ 400.594607][ T5919] DVB: Unable to find symbol dib7000p_attach() [ 400.609015][ T5919] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 400.706613][ T5919] rc_core: IR keymap rc-dib0700-rc5 not found [ 400.712886][ T5919] Registered IR keymap rc-empty [ 400.723253][ T5919] dvb-usb: could not initialize remote control. [ 400.741441][ T5919] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 400.780375][ T5919] usb 3-1: USB disconnect, device number 65 [ 400.864901][ T5919] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 400.914729][ T10] usb 7-1: USB disconnect, device number 3 [ 400.928576][ T10] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 401.038683][T16170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.214256][T16180] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4144'. [ 401.648186][T16198] xt_CT: No such helper "snmp_trap" [ 401.727732][T16204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4152'. [ 402.572499][ T5919] hid-generic 0003:0003:0000.003A: unknown main item tag 0x0 [ 402.581630][ T5919] hid-generic 0003:0003:0000.003A: unknown main item tag 0x0 [ 402.590484][ T5919] hid-generic 0003:0003:0000.003A: unknown main item tag 0x0 [ 402.599590][ T5919] hid-generic 0003:0003:0000.003A: unknown main item tag 0x0 [ 402.607110][ T5919] hid-generic 0003:0003:0000.003A: unknown main item tag 0x0 [ 402.614601][ T5919] hid-generic 0003:0003:0000.003A: unknown main item tag 0x0 [ 402.623845][ T5919] hid-generic 0003:0003:0000.003A: unknown main item tag 0x0 [ 402.631694][ T5919] hid-generic 0003:0003:0000.003A: unknown main item tag 0x0 [ 402.639427][ T5919] hid-generic 0003:0003:0000.003A: unknown main item tag 0x0 [ 402.647385][ T5919] hid-generic 0003:0003:0000.003A: unknown main item tag 0x0 [ 402.659923][ T5919] hid-generic 0003:0003:0000.003A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 402.739082][T16249] fido_id[16249]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 403.203056][T16278] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 403.246711][ T5919] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 403.378350][ T5910] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 403.426332][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 403.437495][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.488035][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.540765][ T5919] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 403.553605][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.555738][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 403.579884][ T5919] usb 4-1: config 0 descriptor?? [ 403.590685][ T5910] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 403.615787][ T5910] usb 1-1: config 0 has no interface number 0 [ 403.638096][ T5910] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 403.675811][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.683844][ T5910] usb 1-1: Product: syz [ 403.695633][ T5910] usb 1-1: Manufacturer: syz [ 403.700262][ T5910] usb 1-1: SerialNumber: syz [ 403.713924][ T5910] usb 1-1: config 0 descriptor?? [ 403.728486][ T5910] smsc95xx v2.0.0 [ 404.208573][ T5919] ft260 0003:0403:6030.003B: chip code: 6424 8183 [ 404.551897][ T5910] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 404.620122][ T5920] usb 4-1: USB disconnect, device number 47 [ 404.763651][ T5910] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 404.806508][ T5910] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 404.844793][ T5910] usb 1-1: USB disconnect, device number 35 [ 405.221139][T16347] syzkaller1: entered promiscuous mode [ 405.248736][T16347] syzkaller1: entered allmulticast mode [ 405.767521][T16366] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4222'. [ 405.833824][T16366] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4222'. [ 405.847217][ T57] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 405.988805][ T5910] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 406.027542][ T57] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.050155][ T57] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x77, changing to 0x7 [ 406.061796][ T57] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x7 has invalid maxpacket 5035, setting to 64 [ 406.073457][ T57] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 406.084974][ T57] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 406.100372][ T57] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 406.111563][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.122629][ T57] usb 4-1: Product: syz [ 406.127392][ T57] usb 4-1: Manufacturer: syz [ 406.132108][ T57] usb 4-1: SerialNumber: syz [ 406.146289][ T5910] usb 6-1: Using ep0 maxpacket: 32 [ 406.157540][ T5910] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 406.167614][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.188863][ T5910] usb 6-1: config 0 descriptor?? [ 406.408812][ T5910] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 406.442182][ T5910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 406.474656][ T5910] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 406.496526][ T5910] usb 6-1: media controller created [ 406.532578][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 406.575298][T16385] netlink: 216 bytes leftover after parsing attributes in process `syz.6.4231'. [ 406.596498][T16385] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4231'. [ 406.617708][ T5910] az6027: usb out operation failed. (-71) [ 406.648124][ T5910] az6027: usb out operation failed. (-71) [ 406.654378][ T5910] stb0899_attach: Driver disabled by Kconfig [ 406.662725][ T5910] az6027: no front-end attached [ 406.662725][ T5910] [ 406.684848][ T5910] az6027: usb out operation failed. (-71) [ 406.697115][ T5910] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 406.729252][ T5910] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input91 [ 406.782828][ T5910] dvb-usb: schedule remote query interval to 400 msecs. [ 406.813816][ T5910] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 406.844210][ T5910] usb 6-1: USB disconnect, device number 12 [ 407.010588][ T5910] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 407.223633][ T57] cdc_ncm 4-1:1.0: bind() failure [ 407.249532][ T57] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 407.275176][ T57] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 407.296722][ T57] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 407.334426][ T57] usb 4-1: USB disconnect, device number 48 [ 407.413007][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4239'. [ 407.429877][T16404] bond_slave_0: entered promiscuous mode [ 407.436477][T16404] bond_slave_1: entered promiscuous mode [ 407.460433][T16404] macvlan2: entered promiscuous mode [ 407.476990][T16404] bond0: entered promiscuous mode [ 407.506704][T16404] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 407.970305][T16431] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4251'. [ 408.092184][T16433] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4252'. [ 408.164351][T16435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4253'. [ 408.205783][T16435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4253'. [ 408.265018][T16435] geneve2: entered promiscuous mode [ 408.280717][T16435] geneve2: entered allmulticast mode [ 408.699454][T16458] veth0_to_batadv: entered promiscuous mode [ 408.711874][T16458] macvtap1: entered allmulticast mode [ 408.717655][T16458] veth0_to_batadv: entered allmulticast mode [ 408.726686][T16458] batman_adv: batadv0: Adding interface: macvtap1 [ 408.733244][T16458] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.767527][T16458] batman_adv: batadv0: Interface activated: macvtap1 [ 408.837950][T16460] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 409.053665][T16472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4270'. [ 409.291873][T16482] dummy0: entered promiscuous mode [ 409.300463][T16482] bond0: entered promiscuous mode [ 409.307534][T16482] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 409.320582][T16482] hsr1: entered allmulticast mode [ 409.326270][T16482] dummy0: entered allmulticast mode [ 409.355734][T16482] bond0: entered allmulticast mode [ 409.507335][T16492] syzkaller1: entered promiscuous mode [ 409.512857][T16492] syzkaller1: entered allmulticast mode [ 411.726291][ T10] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 411.895687][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 411.901565][ T5889] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 411.936737][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 411.955770][ T10] usb 3-1: config 0 has no interface number 0 [ 411.978990][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 411.988163][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.027862][ T10] usb 3-1: Product: syz [ 412.032075][ T10] usb 3-1: Manufacturer: syz [ 412.055666][ T10] usb 3-1: SerialNumber: syz [ 412.071680][ T10] usb 3-1: config 0 descriptor?? [ 412.108510][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.130733][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.152270][ T10] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 412.172785][ T10] usb 3-1: selecting invalid altsetting 1 [ 412.185687][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 412.198839][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 412.213801][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 412.236063][ T5889] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 412.246043][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.266860][ T5889] usb 1-1: config 0 descriptor?? [ 412.272799][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 412.297379][ T10] usb 3-1: media controller created [ 412.562177][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 412.596335][ T10] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 412.603411][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 412.611831][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 412.676523][ T5910] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 412.700537][ T10] usb 3-1: USB disconnect, device number 66 [ 412.708039][ T5889] plantronics 0003:047F:FFFF.003C: ignoring exceeding usage max [ 412.769935][ T5889] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 412.838784][ T5910] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 412.859188][ T5910] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.885807][ T5910] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 412.916250][ T5910] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 412.929950][ T5910] usb 7-1: Manufacturer: syz [ 412.958837][ T5910] usb 7-1: config 0 descriptor?? [ 413.041080][ T5910] rc_core: IR keymap rc-hauppauge not found [ 413.058781][ T5910] Registered IR keymap rc-empty [ 413.064820][ T5910] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 413.111611][ T5910] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input92 [ 413.671793][T16619] delete_channel: no stack [ 413.820424][T16590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.851621][T16590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.897133][ T5910] usb 7-1: USB disconnect, device number 4 [ 414.351915][T16645] kAFS: unable to lookup cell '(,c¾ûL' [ 414.361181][T16645] kAFS: unable to lookup cell '.,' [ 414.539505][T16652] __nla_validate_parse: 1 callbacks suppressed [ 414.539523][T16652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4348'. [ 414.603289][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4348'. [ 414.642248][T16652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4348'. [ 414.735560][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4348'. [ 414.817910][ T57] usb 1-1: USB disconnect, device number 36 [ 414.849996][T16652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4348'. [ 415.010675][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4348'. [ 415.195702][ T57] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 415.358803][ T57] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 415.375230][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 415.386630][ T5920] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 415.394423][ T57] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 415.407814][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 415.419192][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 415.431297][ T57] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 415.439908][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 415.452255][ T57] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 415.465450][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 415.465481][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 415.491089][ T57] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 415.491134][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 415.491158][ T57] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 415.491178][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 415.491199][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 415.502089][ T57] usb 6-1: string descriptor 0 read error: -22 [ 415.502211][ T57] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 415.502233][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.524530][ T57] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 415.566111][ T5920] usb 7-1: Using ep0 maxpacket: 8 [ 415.616983][ T5920] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 415.617008][ T5920] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 415.618896][ T5920] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 415.628434][ T10] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 415.675277][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.675303][ T5920] usb 7-1: Product: syz [ 415.675316][ T5920] usb 7-1: Manufacturer: syz [ 415.675331][ T5920] usb 7-1: SerialNumber: syz [ 415.681026][ T5920] usblp0: Disabling reads from problematic bidirectional printer [ 415.775663][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 415.784763][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 415.784793][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.787875][ T10] usb 3-1: config 0 descriptor?? [ 415.800835][ T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input93 [ 415.831084][ T5888] usb 6-1: USB disconnect, device number 13 [ 415.903573][ T5920] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 416.118211][ T5191] bcm5974 3-1:0.0: could not read from device [ 416.131593][ T5191] bcm5974 3-1:0.0: could not read from device [ 416.144651][ T10] usb 3-1: USB disconnect, device number 67 [ 416.182132][ T5920] usb 7-1: USB disconnect, device number 5 [ 416.196983][ T5920] usblp0: removed [ 416.235979][T16710] syzkaller1: entered promiscuous mode [ 416.236001][T16710] syzkaller1: entered allmulticast mode [ 416.628047][T16717] kvm: kvm [16716]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 417.155737][ T5888] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 417.316092][ T5888] usb 6-1: Using ep0 maxpacket: 8 [ 417.336992][ T5888] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 417.356933][ T5888] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 417.370188][ T5888] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 417.408345][ T5888] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 417.428762][ T5888] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.451354][ T5888] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 417.460767][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.684248][ T5888] usb 6-1: GET_CAPABILITIES returned 0 [ 417.692840][ T5888] usbtmc 6-1:16.0: can't read capabilities [ 417.919510][ T5889] usb 6-1: USB disconnect, device number 14 [ 418.512170][T16800] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 419.391092][T16825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4401'. [ 419.715021][T16826] delete_channel: no stack [ 419.932767][T16842] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4412'. [ 420.057925][T16846] kvm: MWAIT instruction emulated as NOP! [ 421.048943][ T5889] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 421.155963][ T5888] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 421.245736][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 421.269866][ T5889] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.281176][ T5889] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.293090][ T5889] usb 6-1: config 0 interface 0 has no altsetting 0 [ 421.300871][ T5889] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 421.311321][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.326150][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 421.342821][ T5888] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 421.362614][ T5888] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 421.377466][ T5889] usb 6-1: config 0 descriptor?? [ 421.415455][ T5888] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 421.451520][ T5888] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 421.484109][ T5888] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.497581][ T5888] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 421.508606][T16894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 421.520077][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.544557][T16894] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 421.765032][ T5888] usb 4-1: usb_control_msg returned -32 [ 421.770834][ T5888] usbtmc 4-1:16.0: can't read capabilities [ 421.804314][ T5889] hid_parser_main: 9 callbacks suppressed [ 421.804335][ T5889] apple 0003:05AC:0247.003D: unknown main item tag 0x0 [ 421.828632][ T5889] apple 0003:05AC:0247.003D: unknown main item tag 0x0 [ 421.835547][ T5889] apple 0003:05AC:0247.003D: unknown main item tag 0x0 [ 421.843564][ T5889] apple 0003:05AC:0247.003D: unknown main item tag 0x0 [ 421.859759][ T5889] apple 0003:05AC:0247.003D: unknown main item tag 0x0 [ 421.871584][ T5889] apple 0003:05AC:0247.003D: unknown main item tag 0x0 [ 421.894112][ T5889] apple 0003:05AC:0247.003D: unknown main item tag 0x0 [ 421.906135][ T5889] apple 0003:05AC:0247.003D: unknown main item tag 0x0 [ 421.918022][ T5889] apple 0003:05AC:0247.003D: unknown main item tag 0x0 [ 421.925014][ T5889] apple 0003:05AC:0247.003D: unknown main item tag 0x0 [ 421.941874][ T5889] apple 0003:05AC:0247.003D: unexpected long global item [ 421.951196][ T5889] apple 0003:05AC:0247.003D: parse failed [ 421.957920][ T5889] apple 0003:05AC:0247.003D: probe with driver apple failed with error -22 [ 422.029370][ T5910] usb 6-1: USB disconnect, device number 15 [ 422.656124][ T5889] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 422.725559][T16948] netlink: 'syz.2.4451': attribute type 11 has an invalid length. [ 422.762344][ T5888] usb 4-1: USB disconnect, device number 49 [ 422.830820][ T5889] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 422.844335][ T5889] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 422.860564][ T5889] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 422.878067][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.891475][T16929] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 422.899267][T16929] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 422.948864][ T5889] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 423.075979][ T5903] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 423.154704][ T5889] usb 1-1: USB disconnect, device number 37 [ 423.255710][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 423.263525][ T5903] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 423.275069][ T5903] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 423.286247][ T5903] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 423.302550][ T5903] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.332311][ T5903] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 423.346617][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.596596][ T5903] usb 3-1: usb_control_msg returned -32 [ 423.605877][ T5903] usbtmc 3-1:16.0: can't read capabilities [ 423.801935][T16973] input: syz0 as /devices/virtual/input/input94 [ 423.992063][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 424.543718][ T3484] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.597065][ T5903] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 424.762805][ T3484] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.773928][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 424.787033][ T5903] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.803867][ T5903] usb 4-1: config 0 interface 0 has no altsetting 0 [ 424.812592][ T5903] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 424.822876][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.857061][ T5903] usb 4-1: config 0 descriptor?? [ 424.869232][ T3484] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.970058][ T3484] netdevsim netdevsim6  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.227362][ T3484] bridge_slave_1: left allmulticast mode [ 425.244091][ T3484] bridge_slave_1: left promiscuous mode [ 425.268617][ T3484] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.307665][ T5903] nzxt-smart2 0003:1E71:2009.003E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 425.323840][ T3484] bridge_slave_0: left allmulticast mode [ 425.339366][ T3484] bridge_slave_0: left promiscuous mode [ 425.352282][ T3484] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.772626][ T5903] usb 4-1: USB disconnect, device number 50 [ 425.843160][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 425.902509][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 425.924967][ T5889] usb 3-1: USB disconnect, device number 68 [ 425.931194][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 425.941731][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 425.950497][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 426.316155][T17024] input: syz1 as /devices/virtual/input/input95 [ 426.395744][ T5889] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 426.575940][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 426.609508][ T5889] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 426.627746][ T5889] usb 3-1: config 1 has no interface number 1 [ 426.633913][ T5889] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 426.672402][ T5889] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 426.697582][ T5889] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 426.747490][ T5889] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 426.775646][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.783706][ T5889] usb 3-1: Product: syz [ 426.795246][ T5889] usb 3-1: Manufacturer: syz [ 426.809534][ T5889] usb 3-1: SerialNumber: syz [ 427.026207][ T3484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.052913][ T3484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.080238][ T3484] bond0 (unregistering): Released all slaves [ 427.246856][ T5889] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 427.733686][ T3484] hsr_slave_0: left promiscuous mode [ 427.758853][ T3484] hsr_slave_1: left promiscuous mode [ 427.775405][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.805698][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.850522][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.881279][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.941692][ T3484] veth1_macvtap: left promiscuous mode [ 427.964058][ T3484] veth0_macvtap: left promiscuous mode [ 427.978062][ T3484] veth1_vlan: left promiscuous mode [ 428.003815][ T3484] veth0_vlan: left promiscuous mode [ 428.036862][ T52] Bluetooth: hci3: command tx timeout [ 428.070905][ T5889] usb 3-1: 2:1: cannot get freq at ep 0x82 [ 428.133607][ T5889] usb 3-1: USB disconnect, device number 69 [ 428.394638][ T5910] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 428.568935][ T5910] usb 6-1: Using ep0 maxpacket: 8 [ 428.577367][ T5910] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 428.588626][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.595731][ T5889] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 428.612293][ T5910] usb 6-1: Product: syz [ 428.623598][ T5910] usb 6-1: Manufacturer: syz [ 428.641015][ T5910] usb 6-1: SerialNumber: syz [ 428.721698][T17076] netlink: 'syz.2.4493': attribute type 11 has an invalid length. [ 428.755748][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 428.763792][ T5889] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 428.772863][ T5889] usb 4-1: config 0 has no interface number 0 [ 428.779653][ T5889] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 428.793137][ T5889] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 428.802796][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.811926][ T5889] usb 4-1: Product: syz [ 428.816713][ T5889] usb 4-1: Manufacturer: syz [ 428.821428][ T5889] usb 4-1: SerialNumber: syz [ 428.832032][ T5889] usb 4-1: config 0 descriptor?? [ 428.848209][ T5889] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 428.860301][ T5889] em28xx 4-1:0.132: Video interface 132 found: [ 428.889809][ T5910] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 429.264265][ T5889] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 429.664176][ T5910] usb 6-1: USB disconnect, device number 16 [ 429.722302][ T5910] usblp0: removed [ 429.911424][T17014] chnl_net:caif_netlink_parms(): no params data found [ 430.116171][ T52] Bluetooth: hci3: command tx timeout [ 430.214533][T17014] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.229007][T17014] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.236480][T17014] bridge_slave_0: entered allmulticast mode [ 430.247830][T17014] bridge_slave_0: entered promiscuous mode [ 430.268852][T17014] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.280155][T17014] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.302370][T17014] bridge_slave_1: entered allmulticast mode [ 430.330431][T17014] bridge_slave_1: entered promiscuous mode [ 430.473010][T17116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4503'. [ 430.493420][T17014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.518543][ T5889] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 430.529775][ T5889] em28xx 4-1:0.132: board has no eeprom [ 430.540126][T17074] em28xx 4-1:0.132: failed to trigger read from i2c address 0x0 (error=-5) [ 430.595778][ T5889] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 430.623586][T17014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.637035][ T5889] em28xx 4-1:0.132: analog set to bulk mode. [ 430.654105][ T5919] em28xx 4-1:0.132: Registering V4L2 extension [ 430.672990][ T5889] usb 4-1: USB disconnect, device number 51 [ 430.711922][ T5889] em28xx 4-1:0.132: Disconnecting em28xx [ 430.950505][T17014] team0: Port device team_slave_0 added [ 430.969601][T17014] team0: Port device team_slave_1 added [ 430.990788][ T5919] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 431.026410][ T5919] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 431.043883][ T5919] em28xx 4-1:0.132: No AC97 audio processor [ 431.056607][ T5919] usb 4-1: Decoder not found [ 431.062073][ T5919] em28xx 4-1:0.132: failed to create media graph [ 431.084388][ T5919] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 431.092910][ T5919] em28xx 4-1:0.132: Remote control support is not available for this card. [ 431.117683][T17014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.124668][T17014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.150621][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.157413][ T5889] em28xx 4-1:0.132: Closing input extension [ 431.171507][ T5889] em28xx 4-1:0.132: Freeing device [ 431.177452][ T5888] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 431.189138][T17014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.203768][T17014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.214482][T17014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.331790][T17014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.351655][ T5888] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 431.363513][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.387071][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.433374][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 431.489254][ T5888] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 431.524947][ T5888] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 431.544646][ T5888] usb 3-1: Manufacturer: syz [ 431.568484][ T5888] usb 3-1: config 0 descriptor?? [ 431.577004][T17014] hsr_slave_0: entered promiscuous mode [ 431.583927][T17014] hsr_slave_1: entered promiscuous mode [ 431.612425][T17014] debugfs: 'hsr0' already exists in 'hsr' [ 431.623053][T17014] Cannot create hsr debugfs directory [ 432.004455][ T5888] hid_parser_main: 839 callbacks suppressed [ 432.004478][ T5888] appleir 0003:05AC:8243.003F: unknown main item tag 0x0 [ 432.062559][ T5888] appleir 0003:05AC:8243.003F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 432.199514][ T52] Bluetooth: hci3: command tx timeout [ 432.256135][ T5888] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 432.280509][ T10] usb 3-1: USB disconnect, device number 70 [ 432.415845][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 432.427587][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.446937][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.499575][ T5888] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 432.520973][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.539877][ T5888] usb 1-1: config 0 descriptor?? [ 432.923161][T17014] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 432.992620][ T5888] savu 0003:1E7D:2D5A.0040: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 433.024204][T17014] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 433.079984][T17014] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 433.138154][T17014] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 433.225325][ T5888] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 433.268445][ T5888] hid-generic 0000:0000:0000.0041: hidraw1: HID v0.00 Device [syz1] on syz0 [ 433.268509][ T5920] usb 1-1: USB disconnect, device number 38 [ 433.587011][T17014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.704040][T17014] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.800237][ T4503] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.807455][ T4503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.908222][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.915423][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.986561][T17232] netlink: 184 bytes leftover after parsing attributes in process `syz.3.4535'. [ 434.275447][T17014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.282536][ T52] Bluetooth: hci3: command tx timeout [ 434.520074][T17014] veth0_vlan: entered promiscuous mode [ 434.594704][T17014] veth1_vlan: entered promiscuous mode [ 434.629919][T17250] input: syz0 as /devices/virtual/input/input96 [ 434.709102][T17014] veth0_macvtap: entered promiscuous mode [ 434.757746][T17014] veth1_macvtap: entered promiscuous mode [ 434.810488][T17014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.875046][T17014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.082261][ T5976] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.123853][ T5976] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.163913][ T5976] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.191963][ T5976] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.474429][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.506701][ T2126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.514565][ T2126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.518167][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.926461][ T5889] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 435.934004][T17292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4472'. [ 435.987886][ T5888] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 436.087793][ T5889] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 436.113723][ T5889] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 436.146456][ T5889] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 436.155688][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 436.173442][ T5888] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.189921][ T5889] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 436.214142][ T5888] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.235761][ T5889] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 436.256155][ T5888] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 436.267629][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.277176][ T5889] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 436.299700][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 436.319031][ T5889] usb 4-1: Product: syz [ 436.333992][ T5889] usb 4-1: Manufacturer: syz [ 436.359445][ T5889] cdc_wdm 4-1:1.0: skipping garbage [ 436.374996][ T5889] cdc_wdm 4-1:1.0: skipping garbage [ 436.386320][ T5889] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 436.405432][ T5889] cdc_wdm 4-1:1.0: Unknown control protocol [ 436.768596][ T5888] mcp2221 0003:04D8:00DD.0042: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 436.965169][ T5888] usb 3-1: USB disconnect, device number 71 [ 436.985330][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 437.177059][ T9] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 437.188820][ T5903] usb 4-1: USB disconnect, device number 52 [ 437.372405][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 437.425117][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.465678][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 437.518981][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 437.566064][ T5983] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 437.566404][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.613773][ T9] usb 1-1: config 0 descriptor?? [ 437.775702][ T5983] usb 6-1: Using ep0 maxpacket: 8 [ 437.803597][ T5983] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 437.837557][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.875427][T17344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4563'. [ 437.899811][ T5983] usb 6-1: config 0 descriptor?? [ 437.992971][ T5983] uvcvideo 6-1:0.0: probe with driver uvcvideo failed with error -22 [ 438.145977][ T10] usb 6-1: USB disconnect, device number 17 [ 438.186203][ T9] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 438.195243][ T9] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 438.218869][ T9] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 438.245847][ T9] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 438.271523][ T9] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 438.310977][ T9] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 438.351462][ T9] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 438.389762][ T9] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 438.458550][ T9] usb 1-1: USB disconnect, device number 39 [ 438.595938][ T5889] psmouse serio8: Failed to reset mouse on : -5 [ 438.622877][T17361] fido_id[17361]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 438.877976][ T30] audit: type=1326 audit(1764844273.891:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.3.4570" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f554298f749 code=0x0 [ 439.355960][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 439.536098][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 439.552868][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 439.591344][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.634416][ T10] usb 6-1: config 0 descriptor?? [ 439.654880][ T10] gspca_main: sq930x-2.14.0 probing 041e:403c [ 439.916188][ T5888] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 440.040958][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.049445][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.077241][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.097885][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 440.129412][ T5888] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 440.149485][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.169116][ T5888] usb 4-1: Product: syz [ 440.187521][ T5888] usb 4-1: Manufacturer: syz [ 440.192165][ T5888] usb 4-1: SerialNumber: syz [ 440.248794][ T5888] usb 4-1: config 0 descriptor?? [ 440.264918][ T5888] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 440.309449][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 440.320202][ T5888] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 440.329036][ T5888] usb 4-1: media controller created [ 440.361065][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 440.424501][ T5888] DVB: Unable to find symbol tda10046_attach() [ 440.430821][ T5888] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 440.440046][ T5888] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 440.659545][ T10] gspca_sq930x: ucbus_write failed -71 [ 440.667862][ T10] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 440.701843][ T10] usb 6-1: USB disconnect, device number 18 [ 441.065972][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 441.233322][ T10] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 441.265686][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.297847][ T10] usb 7-1: config 0 descriptor?? [ 441.344758][ T10] cp210x 7-1:0.0: cp210x converter detected [ 441.491657][ T5888] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 441.524442][ T5888] usb 4-1: USB disconnect, device number 53 [ 441.745136][ T10] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 441.747779][T17423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.761972][T17423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.787246][ T10] usb 7-1: cp210x converter now attached to ttyUSB0 [ 441.935718][ T5888] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 441.988261][ T10] usb 7-1: USB disconnect, device number 6 [ 442.000422][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 442.014471][ T10] cp210x 7-1:0.0: device disconnected [ 442.085701][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 442.094935][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.109732][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.120301][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 442.134673][ T5888] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 442.144041][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.156368][ T5888] usb 1-1: config 0 descriptor?? [ 442.385949][ T5889] misc userio: Buffer overflowed, userio client isn't keeping up [ 442.485734][ T5903] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 442.499654][T17444] vlan2: entered promiscuous mode [ 442.574062][T17433] random: crng reseeded on system resumption [ 442.629619][ T5888] input: HID 0955:7214 Haptics as /devices/virtual/input/input98 [ 442.646721][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 442.664904][ T5903] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 442.684057][ T5903] usb 6-1: config 0 has no interface number 0 [ 442.697382][ T5903] usb 6-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 442.709920][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.718626][ T5903] usb 6-1: Product: syz [ 442.722993][ T5903] usb 6-1: Manufacturer: syz [ 442.728013][ T5903] usb 6-1: SerialNumber: syz [ 442.742740][ T5903] usb 6-1: config 0 descriptor?? [ 442.780547][ T5888] shield 0003:0955:7214.0044: Registered Thunderstrike controller [ 442.781188][ T5903] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 442.792538][ T5888] shield 0003:0955:7214.0044: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 442.818159][ T5903] snd-usb-audio 6-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 442.874650][ T188] shield 0003:0955:7214.0044: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 442.897988][ T5888] usb 1-1: USB disconnect, device number 40 [ 442.900457][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 442.943125][ T188] shield 0003:0955:7214.0044: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 442.985389][ T188] shield 0003:0955:7214.0044: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 443.026270][ T188] shield 0003:0955:7214.0044: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 443.047316][ T5903] usb 6-1: USB disconnect, device number 19 [ 443.447542][ T5889] input: PS/2 Generic Mouse as /devices/serio8/input/input97 [ 443.675767][ T5889] psmouse serio8: Failed to enable mouse on [ 443.905812][ T5889] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 444.089356][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.112382][T17489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4615'. [ 444.122904][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.133623][T17489] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4615'. [ 444.142661][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 444.165929][T17498] veth1_to_bond: entered allmulticast mode [ 444.167843][ T5889] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 444.174178][T17498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4619'. [ 444.181870][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.208992][ T5889] usb 6-1: config 0 descriptor?? [ 444.332195][T17498] veth1_to_bond (unregistering): left allmulticast mode [ 444.413313][T17498] bond0: (slave bond_slave_1): Releasing backup interface [ 444.427628][T17505] netlink: 'syz.3.4622': attribute type 22 has an invalid length. [ 444.437305][T17505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4622'. [ 444.455048][ T4479] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.455258][T17505] netlink: 'syz.3.4622': attribute type 22 has an invalid length. [ 444.464619][ T4479] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.474573][T17505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4622'. [ 444.505711][ T4479] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.524290][ T4479] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.598225][ T5920] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 444.679101][ T5889] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 444.775672][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 444.785916][ T5920] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 108, changing to 10 [ 444.812762][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 444.831948][ T5920] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 444.853136][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.867800][T17523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4628'. [ 444.880985][ T5920] usb 1-1: config 0 descriptor?? [ 445.331165][ T5920] nzxt-smart2 0003:1E71:2009.0046: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 445.441873][ T5903] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 445.606189][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 445.625720][ T5903] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 445.645094][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.664247][ T5903] usb 4-1: Product: syz [ 445.676057][ T5903] usb 4-1: Manufacturer: syz [ 445.686045][ T5903] usb 4-1: SerialNumber: syz [ 445.707986][ T5903] usb 4-1: config 0 descriptor?? [ 445.777657][T17545] kvm: kvm [17544]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0xe3 [ 445.789917][T17545] kvm: kvm [17544]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x63 [ 445.807477][T17545] kvm: kvm [17544]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x423 [ 445.818222][T17545] kvm: kvm [17544]: vcpu0, guest rIP: 0x9145 Unhandled WRMSR(0xc2) = 0x422 [ 445.829890][T17545] kvm: kvm [17544]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x4e9 [ 445.843190][T17545] kvm: kvm [17544]: vcpu0, guest rIP: 0x9145 Unhandled WRMSR(0xc1) = 0x490 [ 445.858926][T17545] kvm: kvm [17544]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x1d9 [ 445.867930][T17545] kvm: kvm [17544]: vcpu0, guest rIP: 0x9145 Unhandled WRMSR(0xc2) = 0x5c9 [ 445.886665][T17545] kvm: kvm [17544]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x7d0 [ 445.896335][T17545] kvm: kvm [17544]: vcpu0, guest rIP: 0x9145 Unhandled WRMSR(0xc2) = 0x715 [ 445.951766][ T5903] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 054 [ 446.157344][ T5983] usb 4-1: USB disconnect, device number 54 [ 446.385751][ T57] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 446.558494][ T57] usb 3-1: Using ep0 maxpacket: 32 [ 446.566385][ T57] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 446.576643][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.593976][ T57] usb 3-1: config 0 descriptor?? [ 446.607728][ T57] gspca_main: sunplus-2.14.0 probing 041e:400b [ 446.645859][ T10] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 446.769733][ T5903] usb 6-1: USB disconnect, device number 20 [ 446.790341][ T5983] usb 1-1: USB disconnect, device number 41 [ 446.809574][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.830817][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.873475][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 446.901490][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.911965][ T10] usb 7-1: Product: syz [ 446.922322][ T10] usb 7-1: Manufacturer: syz [ 446.928435][ T10] usb 7-1: SerialNumber: syz [ 447.161954][ T10] usb 7-1: 0:2 : does not exist [ 447.180234][ T10] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 447.212559][ T10] usb 7-1: USB disconnect, device number 7 [ 447.236935][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031e59800: rx timeout, send abort [ 447.261286][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.737074][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d7abc00: rx timeout, send abort [ 447.747302][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031e59800: abort rx timeout. Force session deactivation [ 447.845911][ T57] gspca_sunplus: reg_w_riv err -71 [ 447.859917][ T57] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 447.884533][ T57] usb 3-1: USB disconnect, device number 72 [ 448.245369][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d7abc00: abort rx timeout. Force session deactivation [ 448.378302][T17612] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 448.972758][T17633] input: syz0 as /devices/virtual/input/input99 [ 449.182685][T17642] loop7: detected capacity change from 0 to 16384 [ 450.226837][T17644] loop7: detected capacity change from 16384 to 0 [ 450.227944][ C1] blk_print_req_error: 25 callbacks suppressed [ 450.227960][ C1] I/O error, dev loop7, sector 8448 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 450.248919][ C1] buffer_io_error: 25 callbacks suppressed [ 450.248936][ C1] Buffer I/O error on dev loop7, logical block 1056, async page read [ 452.302687][T17692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.731745][T17743] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4713'. [ 453.959606][T17754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4719'. [ 454.239161][T17763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4723'. [ 454.277774][T17765] netlink: 'syz.3.4724': attribute type 20 has an invalid length. [ 454.295494][T17765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4724'. [ 454.322782][T17765] netlink: 'syz.3.4724': attribute type 20 has an invalid length. [ 454.349920][T17765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4724'. [ 454.759512][ T5888] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 454.938176][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.957323][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.981281][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 455.036369][ T5888] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 455.059966][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.093501][ T5888] usb 4-1: config 0 descriptor?? [ 455.118074][T17785] netlink: 212324 bytes leftover after parsing attributes in process `syz.5.4733'. [ 455.366547][T17795] loop4: detected capacity change from 0 to 2560 [ 455.403739][T17795] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 455.412826][T17795] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 455.432213][T17795] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 455.444890][T17795] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 455.457145][T17795] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 455.475474][T17795] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 455.493848][T17795] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 455.504287][T17795] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 455.515875][T17795] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 455.524886][T17795] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 455.557891][ T5888] plantronics 0003:047F:FFFF.0047: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 455.609352][ T5889] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 455.795803][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 455.802954][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.828829][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.853661][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 455.886771][ T5889] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 455.915666][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.934400][ T5889] usb 6-1: config 0 descriptor?? [ 455.958542][T17815] vlan2: entered allmulticast mode [ 455.974125][T17815] dummy0: entered allmulticast mode [ 456.376970][T17793] random: crng reseeded on system resumption [ 456.406317][ T5920] usb 4-1: USB disconnect, device number 55 [ 456.482762][ T5889] input: HID 0955:7214 Haptics as /devices/virtual/input/input101 [ 456.628843][ T5889] shield 0003:0955:7214.0048: Registered Thunderstrike controller [ 456.659946][ T5889] shield 0003:0955:7214.0048: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 456.782330][ T10] shield 0003:0955:7214.0048: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 456.817457][ T5889] usb 6-1: USB disconnect, device number 21 [ 456.835453][ T10] shield 0003:0955:7214.0048: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 456.921778][ T10] shield 0003:0955:7214.0048: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 456.976884][ T10] shield 0003:0955:7214.0048: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 457.868866][T17878] netlink: 'syz.2.4769': attribute type 1 has an invalid length. [ 458.027907][T17878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 458.157446][T17881] bond1: (slave geneve3): making interface the new active one [ 458.176024][T17881] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 458.265397][ T3484] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 458.293526][ T3484] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 458.347334][ T143] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 458.382385][ T143] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 458.425323][T17891] kvm: Disabled LAPIC found during irq injection [ 458.943466][ T30] audit: type=1326 audit(1764844293.951:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17906 comm="syz.3.4780" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f55429865e7 code=0x0 [ 459.157055][ T10] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 459.338386][ T10] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 459.348833][ T10] usb 3-1: config 0 has no interface number 0 [ 459.354966][ T10] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 459.369811][ T5888] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 459.399565][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 459.419714][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.439409][ T10] usb 3-1: Product: syz [ 459.440663][T17924] input: syz0 as /devices/virtual/input/input102 [ 459.446507][ T10] usb 3-1: Manufacturer: syz [ 459.470531][ T10] usb 3-1: SerialNumber: syz [ 459.496717][ T10] usb 3-1: config 0 descriptor?? [ 459.527799][ T10] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 459.549225][ T5888] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 459.567496][ T5888] usb 7-1: config 0 interface 0 has no altsetting 0 [ 459.595264][ T5888] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 459.613617][T17903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 459.620801][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 459.641195][ T5888] usb 7-1: Product: syz [ 459.652591][ T5888] usb 7-1: Manufacturer: syz [ 459.671647][ T5888] usb 7-1: SerialNumber: syz [ 459.700892][ T5888] usb 7-1: config 0 descriptor?? [ 459.740081][ T5888] usb 7-1: selecting invalid altsetting 0 [ 460.009714][ T5888] usb 7-1: USB disconnect, device number 8 [ 460.382735][T17950] netlink: 'syz.0.4797': attribute type 8 has an invalid length. [ 460.400553][T17950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4797'. [ 460.441603][T17950] bond0: entered promiscuous mode [ 460.446838][T17950] bond_slave_0: entered promiscuous mode [ 460.457257][T17950] bond_slave_1: entered promiscuous mode [ 460.464999][T17950] gretap0: entered promiscuous mode [ 460.487389][T17950] bond0: left promiscuous mode [ 460.492279][T17950] bond_slave_0: left promiscuous mode [ 460.514829][T17950] bond_slave_1: left promiscuous mode [ 460.531182][T17950] gretap0: left promiscuous mode [ 460.794447][ T5983] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 460.964073][ T5983] usb 4-1: Using ep0 maxpacket: 16 [ 460.983820][ T5983] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 461.025323][ T5983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.070906][ T5983] usb 4-1: Product: syz [ 461.075863][ T5983] usb 4-1: Manufacturer: syz [ 461.080700][ T5983] usb 4-1: SerialNumber: syz [ 461.101841][ T5983] usb 4-1: config 0 descriptor?? [ 461.121153][ T5983] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 461.215945][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 461.405825][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 461.420708][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.448429][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 461.494985][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 461.512837][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.548668][ T10] usb 1-1: Product: syz [ 461.552911][ T10] usb 1-1: Manufacturer: syz [ 461.586150][ T10] usb 1-1: SerialNumber: syz [ 461.804306][ T10] usb 1-1: 0:2 : does not exist [ 461.829658][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 461.904856][ T5920] usb 3-1: USB disconnect, device number 73 [ 461.927210][ T10] usb 1-1: USB disconnect, device number 42 [ 461.972327][ T5920] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 462.031713][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.110294][T17990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4815'. [ 462.124271][T17990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4815'. [ 462.145687][ T188] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 462.201612][ T4479] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.201729][T17990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4815'. [ 462.217089][ T4479] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.238741][T17990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4815'. [ 462.255769][ T4479] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.275747][ T4479] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.317596][ T188] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 462.328421][ T188] usb 6-1: config 0 has no interface number 0 [ 462.337014][ T5983] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 462.346887][ T188] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 462.356790][ T188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.364216][ T5983] usb 4-1: USB disconnect, device number 56 [ 462.365456][ T188] usb 6-1: Product: syz [ 462.385726][ T188] usb 6-1: Manufacturer: syz [ 462.392642][ T188] usb 6-1: SerialNumber: syz [ 462.415994][ T188] usb 6-1: config 0 descriptor?? [ 462.468023][ T5920] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 462.532394][T18000] input: syz1 as /devices/virtual/input/input103 [ 462.628407][ T5920] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 462.638975][ T5920] usb 7-1: config 0 has no interface number 0 [ 462.645330][ T5920] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 462.646048][ T188] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 462.658258][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.673671][ T188] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 462.690964][ T5920] usb 7-1: config 0 descriptor?? [ 462.690978][ T188] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 462.691017][ T188] usb 6-1: media controller created [ 462.718191][ T5920] usb 7-1: selecting invalid altsetting 1 [ 462.746700][ T5920] dvb_ttusb_budget: ttusb_init_controller: error [ 462.750080][ T188] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 462.799188][ T5920] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 462.868666][ T188] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 462.921732][ T5920] DVB: Unable to find symbol cx22700_attach() [ 462.965849][ T188] usb 6-1: USB disconnect, device number 22 [ 463.013904][ T5920] DVB: Unable to find symbol tda10046_attach() [ 463.041921][ T5920] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 463.078160][ T5920] usb 7-1: USB disconnect, device number 9 [ 463.876524][T18051] input: syz0 as /devices/virtual/input/input104 [ 464.326039][ T5983] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 464.485687][ T5983] usb 6-1: Using ep0 maxpacket: 8 [ 464.492650][ T5983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 464.504404][ T5983] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 464.515102][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.525028][ T5983] usb 6-1: config 0 descriptor?? [ 464.545840][ T5888] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 464.566136][ T188] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 464.698059][ T5888] usb 7-1: config 4 has an invalid interface number: 28 but max is 0 [ 464.706363][ T5888] usb 7-1: config 4 has no interface number 0 [ 464.714856][ T5888] usb 7-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 464.724693][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.733684][ T5888] usb 7-1: Product: syz [ 464.738598][ T188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.750348][ T5888] usb 7-1: Manufacturer: syz [ 464.754070][ T5983] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 464.756177][ T5888] usb 7-1: SerialNumber: syz [ 464.775664][ T188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.793770][ T188] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 464.803403][ T188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.818338][ T5888] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:4.28/input/input105 [ 464.830535][ T188] usb 4-1: config 0 descriptor?? [ 464.954394][ T5983] usb 6-1: USB disconnect, device number 23 [ 464.963976][T18060] iowarrior 6-1:0.0: Error -19 while submitting URB [ 465.029187][ T5191] bcm5974 7-1:4.28: could not read from device [ 465.042645][ T5888] bcm5974 7-1:4.28: could not read from device [ 465.058633][ T5191] bcm5974 7-1:4.28: could not read from device [ 465.068900][ T5888] input: failed to attach handler mousedev to device input105, error: -5 [ 465.086086][ T5888] usb 7-1: USB disconnect, device number 10 [ 465.096131][ T5191] bcm5974 7-1:4.28: could not read from device [ 465.276419][ T188] keytouch 0003:0926:3333.0049: fixing up Keytouch IEC report descriptor [ 465.290495][T18087] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4857'. [ 465.297636][ T188] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0049/input/input106 [ 465.420914][ T188] keytouch 0003:0926:3333.0049: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 465.495030][T18075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.503835][ T5983] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 465.506724][T18075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.558955][ T5920] usb 4-1: USB disconnect, device number 57 [ 465.696791][ T5983] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.712611][ T5983] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 465.727265][ T5983] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 465.739297][ T5983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.748865][ T5983] usb 1-1: Product: syz [ 465.753057][ T5983] usb 1-1: Manufacturer: syz [ 465.759083][ T5983] usb 1-1: SerialNumber: syz [ 465.780988][ T5983] cdc_mbim 1-1:1.0: skipping garbage [ 465.993943][T18085] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 466.486105][ T30] audit: type=1326 audit(1764844301.501:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18112 comm="syz.5.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9f58f749 code=0x7fc00000 [ 466.624453][T18085] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 466.632404][ T5983] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 466.649443][ T5983] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 466.678393][ T5983] wwan wwan0: port wwan0mbim0 attached [ 466.724746][ T5983] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, be:e2:90:bd:80:da [ 466.873060][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 466.879826][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 466.886358][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 466.893070][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 466.900797][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 466.907520][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 466.916007][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 466.922745][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 466.930443][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 466.937165][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 466.944778][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 466.951601][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 466.958895][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 466.965618][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 466.972973][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 466.979691][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 466.986659][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 466.993377][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 467.000877][ C1] cdc_mbim 1-1:1.0: nonzero urb status received: -71 [ 467.007615][ C1] cdc_mbim 1-1:1.0: wdm_int_callback - 0 bytes [ 467.021949][T17274] usb 1-1: USB disconnect, device number 43 [ 467.029515][T17274] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 467.107641][ T30] audit: type=1326 audit(1764844302.121:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18112 comm="syz.5.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc9f58f749 code=0x7fc00000 [ 467.237825][T17274] wwan wwan0: port wwan0mbim0 disconnected [ 467.344778][T18147] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4880'. [ 467.419631][T18147] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4880'. [ 467.720505][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 467.990830][T18179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4890'. [ 468.066106][T18179] xfrm1: entered promiscuous mode [ 468.090968][T18179] xfrm1: entered allmulticast mode [ 468.118448][T18179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4890'. [ 468.249637][T18188] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 469.150724][ T30] audit: type=1326 audit(1764844304.161:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18221 comm="syz.2.4902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5acaf8f749 code=0x7fc00000 [ 469.284460][T18236] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4906'. [ 469.460812][T18236] bond0 (unregistering): left promiscuous mode [ 469.469619][T18236] bond0 (unregistering): Released all slaves [ 469.808272][ T30] audit: type=1326 audit(1764844304.821:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18221 comm="syz.2.4902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5acaf8f749 code=0x7fc00000 [ 469.912916][T18254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.928242][T18254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.935993][ T5889] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 469.966146][T18254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.994558][T18254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.107685][ T5889] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.136334][T18260] netlink: 'syz.5.4916': attribute type 1 has an invalid length. [ 470.401728][T18260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.435738][ T5889] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 470.451946][ T5889] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 470.470021][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 470.482410][ T5889] usb 4-1: SerialNumber: syz [ 470.496796][T18262] bond1: (slave ip6gretap1): making interface the new active one [ 470.538760][T18262] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 470.722858][ T5889] usb 4-1: 0:2 : does not exist [ 470.769597][ T5889] usb 4-1: USB disconnect, device number 58 [ 470.856581][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 471.391368][ T30] audit: type=1326 audit(1764844306.401:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18291 comm="syz.0.4930" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8d058f749 code=0x0 [ 471.429504][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 471.588093][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 471.598889][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 471.609058][ T9] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 471.639308][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 471.658239][ T9] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 471.675819][ T9] usb 6-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 471.684111][ T9] usb 6-1: Product: syz [ 471.694317][ T9] usb 6-1: Manufacturer: syz [ 471.715364][ T9] usb 6-1: SerialNumber: syz [ 471.736109][ T9] usb 6-1: config 0 descriptor?? [ 472.150948][ T9] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 472.552385][ T9] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 472.556153][T17274] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 472.745442][T17274] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 47, changing to 4 [ 472.764701][T17274] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x81 has invalid maxpacket 42203, setting to 1023 [ 472.776300][T17274] usb 1-1: config 0 interface 0 has no altsetting 0 [ 472.790077][T17274] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 472.799569][T17274] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 472.805298][ T9] usb 6-1: USB disconnect, device number 24 [ 472.810834][T17274] usb 1-1: Product: syz [ 472.818638][T17274] usb 1-1: Manufacturer: syz [ 472.823329][T17274] usb 1-1: SerialNumber: syz [ 472.844331][T17274] usb 1-1: config 0 descriptor?? [ 472.869610][T17274] usb 1-1: selecting invalid altsetting 0 [ 473.117088][T18321] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 473.139051][ T9] usb 1-1: USB disconnect, device number 44 [ 473.145920][ T5889] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 473.335735][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 473.352223][ T5889] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 473.364845][ T5889] usb 3-1: config 1 has no interface number 0 [ 473.384300][ T5889] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 473.416564][ T5889] usb 3-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 1224, setting to 1024 [ 473.462740][ T5889] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 473.475860][ T5889] usb 3-1: config 1 interface 105 has no altsetting 0 [ 473.492810][ T5889] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 473.525414][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.542691][ T5889] usb 3-1: Product: syz [ 473.550633][ T5889] usb 3-1: Manufacturer: syz [ 473.557968][ T5889] usb 3-1: SerialNumber: syz [ 473.568905][T18341] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 473.580352][T18341] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 474.002427][T18341] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 474.015180][T18385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 474.035990][T18341] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 474.061961][T18385] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 474.501911][T18404] binder: 18403:18404 ioctl c0306201 200000000480 returned -14 [ 474.567537][T18407] loop4: detected capacity change from 0 to 2559 [ 474.624581][T18407] buffer_io_error: 312 callbacks suppressed [ 474.624596][T18407] Buffer I/O error on dev loop4, logical block 0, async page read [ 474.662859][ T5889] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 474.707148][T18407] Buffer I/O error on dev loop4, logical block 0, async page read [ 474.714322][ T5889] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 474.720255][T18407] Buffer I/O error on dev loop4, logical block 3, async page read [ 474.772315][ T5889] aqc111 3-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e2:9f:ee:77:08:9e [ 474.775464][T18409] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 474.835535][ T5889] usb 3-1: USB disconnect, device number 74 [ 474.837349][T18407] loop4: unable to read partition table [ 474.873542][ T5889] aqc111 3-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 474.880881][T18407] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾¢·˜) failed (rc=-5) [ 474.915485][T18409] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 474.923193][ T5841] Buffer I/O error on dev loop4, logical block 319, async page read [ 474.948738][T18409] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 474.979274][ T5889] aqc111 3-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 475.006014][T18409] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 475.012587][ T5889] aqc111 3-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 475.024010][ T5889] aqc111 3-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 475.033781][T18409] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 475.083854][T18409] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 475.193412][ T10] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 475.221164][ T10] hid-generic 0000:0000:0000.004A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 475.525938][ T10] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 475.605868][ T5903] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 475.678009][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.696584][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 475.707722][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 475.725658][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 475.733723][ T10] usb 6-1: SerialNumber: syz [ 475.752095][ T10] usb 6-1: 0:2 : does not exist [ 475.786612][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 475.836434][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.863867][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.893990][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 475.927093][ T5903] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 475.938769][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.017709][ T5910] usb 6-1: USB disconnect, device number 25 [ 476.048152][ T5903] usb 3-1: config 0 descriptor?? [ 476.530382][T18451] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 476.540907][ T5903] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.004B/input/input107 [ 476.637614][ T5903] appleir 0003:05AC:8241.004B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 476.656962][T18456] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4983'. [ 476.723751][ T5903] usb 3-1: USB disconnect, device number 75 [ 476.897697][T18459] fido_id[18459]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 477.855665][ T5910] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 478.039594][ T5910] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 478.072604][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.094499][T18494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4999'. [ 478.109417][ T5910] usb 4-1: config 0 descriptor?? [ 478.118072][ T5910] cp210x 4-1:0.0: cp210x converter detected [ 478.530744][ T5910] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 478.579082][ T5910] usb 4-1: cp210x converter now attached to ttyUSB0 [ 478.623500][T18510] syzkaller1: entered promiscuous mode [ 478.639803][T18510] syzkaller1: entered allmulticast mode [ 478.749404][ T10] usb 4-1: USB disconnect, device number 59 [ 478.770540][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 478.790337][ T10] cp210x 4-1:0.0: device disconnected [ 479.575729][ T30] audit: type=1326 audit(1764844314.581:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18549 comm="syz.5.5021" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc9f58f749 code=0x0 [ 479.835712][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 479.855777][T18564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 479.980086][T18568] netlink: 'syz.2.5030': attribute type 4 has an invalid length. [ 479.988020][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 479.999465][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 480.012253][ T10] usb 4-1: config 0 has no interface number 0 [ 480.030552][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 480.031486][T18572] netlink: 'syz.2.5030': attribute type 4 has an invalid length. [ 480.053391][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.076601][ T10] usb 4-1: Product: syz [ 480.093240][ T10] usb 4-1: Manufacturer: syz [ 480.108563][ T10] usb 4-1: SerialNumber: syz [ 480.127028][ T10] usb 4-1: config 0 descriptor?? [ 480.139610][ T10] smsc95xx v2.0.0 [ 480.345947][ T5920] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 480.517996][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 480.542130][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 480.567662][ T5920] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 480.568898][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 480.600804][ T5920] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 480.625660][ T5920] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 480.657417][ T5920] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 480.682102][ T5920] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 480.727309][ T5920] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 480.736530][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.796722][ T5919] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 480.925938][ T5889] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 480.970961][ T5919] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 480.974080][ T5920] usb 1-1: GET_CAPABILITIES returned 0 [ 480.982117][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.003638][ T5920] usbtmc 1-1:16.0: can't read capabilities [ 481.009899][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 481.010328][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 481.035964][ T10] usb 4-1: USB disconnect, device number 60 [ 481.062526][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.086349][ T5919] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 481.109083][ T5919] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 481.120924][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 481.127033][ T5919] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 481.135510][ T5919] usb 7-1: Manufacturer: syz [ 481.141509][ T5889] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 481.160404][ T5889] usb 6-1: config 0 has no interface number 0 [ 481.168389][ T5889] usb 6-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 481.179474][ T5919] usb 7-1: config 0 descriptor?? [ 481.185327][ T5889] usb 6-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 481.199607][ T5889] usb 6-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 481.212503][ T5889] usb 6-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 481.226877][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.237534][ T5889] usb 6-1: Product: syz [ 481.242550][ T5889] usb 6-1: Manufacturer: syz [ 481.248449][ T5889] usb 6-1: SerialNumber: syz [ 481.258552][ T5889] usb 6-1: config 0 descriptor?? [ 481.264330][T18598] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 481.288583][ T5889] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 481.347736][ T5920] usb 1-1: USB disconnect, device number 45 [ 481.354113][T18574] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 481.359738][ T5889] snd-usb-audio 6-1:0.16: probe with driver snd-usb-audio failed with error -12 [ 481.446980][T11200] udevd[11200]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.594526][ T5919] appleir 0003:05AC:8243.004C: unknown main item tag 0x0 [ 481.619890][ T5919] appleir 0003:05AC:8243.004C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 481.850019][T18615] ip6gre1: entered allmulticast mode [ 482.124195][ T5920] usb 7-1: USB disconnect, device number 11 [ 482.807101][T18647] input: syz0 as /devices/virtual/input/input108 [ 482.817081][T18647] input: failed to attach handler leds to device input108, error: -6 [ 482.880851][T18649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 484.915654][ T5920] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 485.075883][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 485.094414][ T5920] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 485.126926][ T5920] usb 3-1: config 0 has no interface number 0 [ 485.137770][ T5920] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 485.147409][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.155517][ T5920] usb 3-1: Product: syz [ 485.160113][ T5920] usb 3-1: Manufacturer: syz [ 485.164818][ T5920] usb 3-1: SerialNumber: syz [ 485.182532][ T5920] usb 3-1: config 0 descriptor?? [ 485.192628][ T5920] smsc95xx v2.0.0 [ 485.618828][ T5920] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 485.644556][ T5920] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 486.163861][ T30] audit: type=1326 audit(1764844321.171:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18734 comm="syz.0.5100" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8d058f749 code=0x0 [ 486.271030][ T5920] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 486.308408][ T5920] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 486.335905][ T5920] usb 3-1: USB disconnect, device number 76 [ 486.346175][ T5839] udevd[5839]: setting mode of /dev/bus/usb/003/076 to 020664 failed: No such file or directory [ 486.366029][ T5839] udevd[5839]: setting owner of /dev/bus/usb/003/076 to uid=0, gid=0 failed: No such file or directory [ 487.385693][ T5889] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 487.585682][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 487.594531][ T5889] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 487.630284][ T5889] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 487.645633][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.654646][ T5889] usb 3-1: Product: syz [ 487.658983][ T5889] usb 3-1: Manufacturer: syz [ 487.663589][ T5889] usb 3-1: SerialNumber: syz [ 487.677454][ T5920] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 487.695643][ T5889] usb 3-1: config 0 descriptor?? [ 487.712832][ T5889] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 487.741036][ T5889] usb 3-1: setting power ON [ 487.749094][ T5889] dvb-usb: bulk message failed: -22 (2/0) [ 487.766610][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 487.787145][ T5889] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 487.815834][ T5889] usb 3-1: media controller created [ 487.847515][ T5920] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 487.849069][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 487.857075][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.878700][ T5920] usb 7-1: config 0 descriptor?? [ 487.889494][ T5920] cp210x 7-1:0.0: cp210x converter detected [ 487.904673][ T5889] usb 3-1: selecting invalid altsetting 6 [ 487.931245][ T5889] usb 3-1: digital interface selection failed (-22) [ 487.970796][ T5889] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 488.006657][ T5889] usb 3-1: setting power OFF [ 488.011294][ T5889] dvb-usb: bulk message failed: -22 (2/0) [ 488.025626][ T5889] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 488.044385][ T5889] (NULL device *): no alternate interface [ 488.130982][ T5889] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 488.186181][ T5889] usb 3-1: USB disconnect, device number 77 [ 488.294099][ T5920] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 488.305347][T18790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.338334][T18790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.338414][T18807] netlink: 'syz.3.5128': attribute type 13 has an invalid length. [ 488.366283][T18807] netlink: 'syz.3.5128': attribute type 17 has an invalid length. [ 488.390866][ T5920] usb 7-1: cp210x converter now attached to ttyUSB0 [ 488.537392][T18807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.591936][ T5920] usb 7-1: USB disconnect, device number 12 [ 488.617856][ T5920] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 488.636556][ T5920] cp210x 7-1:0.0: device disconnected [ 488.805643][ T5889] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 488.853200][T18819] geneve2: entered promiscuous mode [ 488.865405][ T4479] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 54490 - 0 [ 488.876670][ T4479] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 54490 - 0 [ 488.885670][ T4479] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 54490 - 0 [ 488.894557][ T4479] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 54490 - 0 [ 488.903468][ T5903] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 488.967201][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.986385][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.999976][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 489.013385][ T5889] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 489.023321][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.038491][ T5889] usb 1-1: config 0 descriptor?? [ 489.065660][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 489.074175][ T5903] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 489.104470][ T30] audit: type=1326 audit(1764844324.111:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18822 comm="syz.5.5136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9f58f749 code=0x7ffc0000 [ 489.127434][ T5903] usb 3-1: config 179 has no interface number 0 [ 489.133722][ T5903] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 489.163515][ T5903] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 489.175235][ T30] audit: type=1326 audit(1764844324.161:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18822 comm="syz.5.5136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9f58f749 code=0x7ffc0000 [ 489.205669][ T5903] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 489.227687][ T5903] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 489.249707][ T30] audit: type=1326 audit(1764844324.161:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18822 comm="syz.5.5136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc9f52b829 code=0x7ffc0000 [ 489.280063][ T5903] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 489.308207][ T5903] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 489.320458][ T30] audit: type=1326 audit(1764844324.161:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18822 comm="syz.5.5136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9f58f749 code=0x7ffc0000 [ 489.344952][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.365483][T18813] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 489.373045][ T30] audit: type=1326 audit(1764844324.161:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18822 comm="syz.5.5136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc9f52b829 code=0x7ffc0000 [ 489.424131][ T30] audit: type=1326 audit(1764844324.161:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18822 comm="syz.5.5136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9f58f749 code=0x7ffc0000 [ 489.463295][ T30] audit: type=1326 audit(1764844324.161:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18822 comm="syz.5.5136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9f58f749 code=0x7ffc0000 [ 489.486369][ T30] audit: type=1326 audit(1764844324.161:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18822 comm="syz.5.5136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9f58f749 code=0x7ffc0000 [ 489.501716][ T5889] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 489.524104][ T30] audit: type=1326 audit(1764844324.161:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18822 comm="syz.5.5136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9f58f749 code=0x7ffc0000 [ 489.651290][ T5910] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input110 [ 489.861585][ T5889] usb 3-1: USB disconnect, device number 78 [ 489.861639][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 489.885848][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 489.905822][T18835] vivid-003: disconnect [ 489.911282][T18835] vivid-003: reconnect [ 491.095780][T18876] veth1_to_bridge: entered promiscuous mode [ 491.102606][T18876] veth1_to_bridge: left promiscuous mode [ 491.567765][ T5910] usb 1-1: USB disconnect, device number 46 [ 491.657593][ T5903] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 491.847565][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.881678][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.997812][ T5903] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 492.025683][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.062229][ T5903] usb 7-1: config 0 descriptor?? [ 492.498995][ T5903] cm6533_jd 0003:0D8C:0022.004E: unknown main item tag 0x0 [ 492.536305][ T5903] cm6533_jd 0003:0D8C:0022.004E: unknown main item tag 0x0 [ 492.570045][ T5903] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.004E/input/input111 [ 492.631719][ T5903] cm6533_jd 0003:0D8C:0022.004E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 492.763271][ T5903] usb 7-1: USB disconnect, device number 13 [ 492.811256][T18921] netlink: 'syz.2.5178': attribute type 29 has an invalid length. [ 492.848235][T18921] netlink: 'syz.2.5178': attribute type 29 has an invalid length. [ 492.877002][T18916] fido_id[18916]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 492.904548][T18921] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5178'. [ 493.050317][T18931] loop2: detected capacity change from 0 to 7 [ 493.061735][T18931] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 [ 493.075092][T18931] loop2: p1 start 3018249949 is beyond EOD, truncated [ 493.093779][T18931] loop2: p2 start 1879129398 is beyond EOD, truncated [ 493.135192][T18931] loop2: p3 start 4093120540 is beyond EOD, truncated [ 493.155014][T18931] loop2: p4 start 2524654898 is beyond EOD, truncated [ 493.175510][T18931] loop2: p5 start 674059 is beyond EOD, truncated [ 493.182795][T18931] loop2: p6 start 57445 is beyond EOD, truncated [ 493.189752][T18931] loop2: p7 start 1646166690 is beyond EOD, truncated [ 493.197120][T18931] loop2: p8 start 3277892638 is beyond EOD, truncated [ 493.204086][T18931] loop2: p9 start 4163259941 is beyond EOD, truncated [ 493.276566][T18935] kvm: apic: phys broadcast and lowest prio [ 493.486749][ T5910] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 493.523332][T18948] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5187'. [ 493.655653][ T5910] usb 1-1: Using ep0 maxpacket: 16 [ 493.668182][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 493.693475][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 493.717426][ T5910] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 493.726923][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.756338][ T5910] usb 1-1: Product: syz [ 493.763052][ T5910] usb 1-1: Manufacturer: syz [ 493.773908][ T5910] usb 1-1: SerialNumber: syz [ 493.788513][ T5910] usb 1-1: config 0 descriptor?? [ 493.817846][ T5910] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 493.850345][ T5910] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 494.074554][T18958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.096054][T18958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.428847][ T5910] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 494.445685][ T5910] em28xx 1-1:0.0: Config register raw data: 0x36 [ 494.453206][ T5910] em28xx 1-1:0.0: I2S Audio (3 sample rate(s)) [ 494.465799][ T5910] em28xx 1-1:0.0: No AC97 audio processor [ 494.495661][ T5889] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 494.690450][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.715717][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.739064][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 494.772595][ T5889] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 494.804444][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.833200][T18977] input: syz1 as /devices/virtual/input/input112 [ 494.840626][ T5889] usb 3-1: config 0 descriptor?? [ 494.845342][ T5910] usb 1-1: USB disconnect, device number 47 [ 495.226803][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 495.226820][ T30] audit: type=1326 audit(1764844330.241:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18984 comm="syz.5.5202" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc9f58f749 code=0x0 [ 495.302186][ T5889] plantronics 0003:047F:FFFF.004F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 495.589044][ T5910] usb 3-1: USB disconnect, device number 79 [ 496.151571][T19009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 496.856337][ T5910] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 496.870013][T19038] netlink: 'syz.6.5224': attribute type 5 has an invalid length. [ 496.936903][T19038] batman_adv: batadv0: Adding interface: vxlan0 [ 496.943205][T19038] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.987038][T19038] batman_adv: batadv0: Interface activated: vxlan0 [ 496.998413][ T3484] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.011058][ T3484] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.040235][ T3484] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.068453][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.089100][ T3484] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.105988][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.152142][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 497.183748][ T5910] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 497.198121][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.214559][ T5910] usb 1-1: config 0 descriptor?? [ 497.266034][ T5903] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 497.428027][ T5903] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 497.446688][ T5903] usb 3-1: config 0 has no interface number 0 [ 497.462501][ T5903] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 497.481959][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.495737][ T5903] usb 3-1: Product: syz [ 497.499999][ T5903] usb 3-1: Manufacturer: syz [ 497.514896][ T5903] usb 3-1: SerialNumber: syz [ 497.536017][ T5903] usb 3-1: config 0 descriptor?? [ 497.584915][ T5903] yurex 3-1:0.50: Could not find endpoints [ 497.670790][ T5910] plantronics 0003:047F:FFFF.0050: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 497.795437][T19040] kvm_pr_unimpl_wrmsr: 10 callbacks suppressed [ 497.795456][T19040] kvm: kvm [19039]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 497.856824][T19040] kvm: kvm [19039]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 497.931932][ T5910] usb 1-1: USB disconnect, device number 48 [ 497.961665][ T5903] usb 3-1: USB disconnect, device number 80 [ 498.081306][T19063] binder: 19060:19063 ioctl c0306201 2000000003c0 returned -14 [ 498.372447][T19072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.382724][T19072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.435157][T19107] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.5253'. [ 499.705687][ T5910] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 499.789622][T19113] syzkaller1: entered promiscuous mode [ 499.795146][T19113] syzkaller1: entered allmulticast mode [ 499.863720][T19119] loop9: detected capacity change from 0 to 7 [ 499.876214][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 499.883190][ T5910] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 499.905690][ T5910] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 499.930281][ T5910] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 499.965777][ T5910] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 499.985668][ T5910] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.017998][ T5910] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 500.067833][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.154866][T19120] Invalid logical block size (1) [ 500.154978][T19119] Dev loop9: unable to read RDB block 7 [ 500.160333][T19119] loop9: unable to read partition table [ 500.173693][T19119] loop9: partition table beyond EOD, truncated [ 500.180246][T19119] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 500.323304][ T5910] usb 1-1: GET_CAPABILITIES returned 0 [ 500.351427][ T5910] usbtmc 1-1:16.0: can't read capabilities [ 500.640275][ T5910] usb 1-1: USB disconnect, device number 49 [ 500.648678][T19109] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 500.846513][ T5889] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 501.005083][ T5889] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 501.057744][ T5889] usb 4-1: config 0 has no interface number 0 [ 501.074134][ T5889] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 501.107146][ T5889] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 501.134614][ T5889] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 501.155949][ T5889] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 501.167630][ T5889] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 501.185658][ T5889] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 501.209191][ T5889] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 501.221956][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.247748][ T5889] usb 4-1: config 0 descriptor?? [ 501.268014][T19137] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 501.295777][T19137] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 501.326133][ T5889] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 501.481052][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.488954][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.566353][ T5889] usb 4-1: USB disconnect, device number 61 [ 501.600314][ T5889] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 502.062387][T19141] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI [ 502.074299][T19141] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 502.082730][T19141] CPU: 1 UID: 0 PID: 19141 Comm: syz.2.5266 Not tainted syzkaller #0 PREEMPT(full) [ 502.092114][T19141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 502.102176][T19141] RIP: 0010:fd_install+0x57/0x3d0 [ 502.107205][T19141] Code: 48 81 c3 48 09 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 47 50 e6 ff 4c 8b 3b 49 8d 5e 40 48 89 d8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 29 03 00 00 8b 1b 89 de 81 e6 00 00 00 01 [ 502.126805][T19141] RSP: 0018:ffffc90003417ca0 EFLAGS: 00010202 [ 502.132867][T19141] RAX: 0000000000000008 RBX: 0000000000000041 RCX: 0000000000080000 [ 502.140836][T19141] RDX: ffffc90004eb2000 RSI: 00000000000000de RDI: 00000000000000df [ 502.148819][T19141] RBP: dffffc0000000000 R08: ffff888022a9754b R09: 1ffff11004552ea9 [ 502.156798][T19141] R10: dffffc0000000000 R11: ffffed1004552eaa R12: 0000000000000003 [ 502.164763][T19141] R13: 0000000000000003 R14: 0000000000000001 R15: ffff888076ac6d00 [ 502.172726][T19141] FS: 00007f5acbdf56c0(0000) GS:ffff8881261a6000(0000) knlGS:0000000000000000 [ 502.182080][T19141] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.188653][T19141] CR2: 00007fdc9f7babe0 CR3: 00000000593f8000 CR4: 00000000003526f0 [ 502.196622][T19141] Call Trace: [ 502.199902][T19141] [ 502.202822][T19141] ? do_mq_open+0x595/0x770 [ 502.207322][T19141] do_mq_open+0x5a0/0x770 [ 502.211645][T19141] ? __pfx_do_mq_open+0x10/0x10 [ 502.216576][T19141] __x64_sys_mq_open+0x16a/0x1c0 [ 502.221507][T19141] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 502.226960][T19141] ? do_syscall_64+0xbe/0xf80 [ 502.231628][T19141] do_syscall_64+0xfa/0xf80 [ 502.236131][T19141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.242234][T19141] ? clear_bhb_loop+0x60/0xb0 [ 502.246898][T19141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.252777][T19141] RIP: 0033:0x7f5acaf8f749 [ 502.257194][T19141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.276880][T19141] RSP: 002b:00007f5acbdf5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 502.285285][T19141] RAX: ffffffffffffffda RBX: 00007f5acb1e5fa0 RCX: 00007f5acaf8f749 [ 502.293253][T19141] RDX: 0000000000000196 RSI: 6e93ebbbcc0884f2 RDI: 0000200000000480 [ 502.301238][T19141] RBP: 00007f5acb013f91 R08: 0000000000000000 R09: 0000000000000000 [ 502.309207][T19141] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 502.317179][T19141] R13: 00007f5acb1e6038 R14: 00007f5acb1e5fa0 R15: 00007f5acb30fa28 [ 502.325150][T19141] [ 502.328192][T19141] Modules linked in: [ 502.332994][T19141] ---[ end trace 0000000000000000 ]--- [ 502.348346][T19141] RIP: 0010:fd_install+0x57/0x3d0 [ 502.353648][T19141] Code: 48 81 c3 48 09 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 47 50 e6 ff 4c 8b 3b 49 8d 5e 40 48 89 d8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 29 03 00 00 8b 1b 89 de 81 e6 00 00 00 01 [ 502.405652][T19141] RSP: 0018:ffffc90003417ca0 EFLAGS: 00010202 [ 502.419591][T19141] RAX: 0000000000000008 RBX: 0000000000000041 RCX: 0000000000080000 [ 502.439154][T19141] RDX: ffffc90004eb2000 RSI: 00000000000000de RDI: 00000000000000df [ 502.485607][T19141] RBP: dffffc0000000000 R08: ffff888022a9754b R09: 1ffff11004552ea9 [ 502.493629][T19141] R10: dffffc0000000000 R11: ffffed1004552eaa R12: 0000000000000003 [ 502.505695][T19141] R13: 0000000000000003 R14: 0000000000000001 R15: ffff888076ac6d00 [ 502.513934][T19141] FS: 00007f5acbdf56c0(0000) GS:ffff8881260a6000(0000) knlGS:0000000000000000 [ 502.523344][T19141] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.530472][T19141] CR2: 0000001b31520ff8 CR3: 00000000593f8000 CR4: 00000000003526f0 [ 502.539377][T19141] DR0: 00000000ffffa75b DR1: 0000000000000000 DR2: 0000000000000000 [ 502.547878][T19141] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 502.556861][T19141] Kernel panic - not syncing: Fatal exception [ 502.563438][T19141] Kernel Offset: disabled [ 502.567750][T19141] Rebooting in 86400 seconds..