last executing test programs: 3.682868456s ago: executing program 4 (id=22106): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x0, 0xc07}}, 0x120) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3.109706481s ago: executing program 2 (id=22111): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) close(r1) 2.77578746s ago: executing program 2 (id=22113): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') rename(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000002c0)='./file1\x00') 2.628137335s ago: executing program 2 (id=22114): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x20) 2.47330216s ago: executing program 2 (id=22116): syz_io_uring_setup(0x2515, 0x0, 0x0, 0x0) unshare(0x22020600) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7b125"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fsync(r0) 2.088062225s ago: executing program 4 (id=22120): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x0, 0x0, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}}) io_uring_enter(r1, 0x3516, 0x483, 0x0, 0x0, 0x0) 2.006845361s ago: executing program 1 (id=22121): io_setup(0x8, &(0x7f00000001c0)=0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x4}]) 1.828752376s ago: executing program 4 (id=22122): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363f48925590534d436138406b699de69db13fd737428808940bcd0840dc930c81a8bd8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be60c4fe6987e", 0x63}, {&(0x7f0000000800)="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", 0x226}, {&(0x7f0000000f00)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de3", 0x50}], 0x3}, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) 1.691674456s ago: executing program 1 (id=22124): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f00000007c0), 0x29) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) 1.537843675s ago: executing program 4 (id=22125): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x2c, &(0x7f0000000300)={0x20, 0xf, 0x44, {0x44, 0x23, "92db5f03587c2e7aceaab0f629d3cf5f29f42808183a38e65bb132fb89f00476171d00f890e05b07f16485af0ac3251ba26619d473c2b0c41639fcefabfe3c7a84b5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000240)=@x86={0x0, 0x0, 0x80, 0x0, 0x3, 0x5, 0x3, 0x4, 0x80, 0x10, 0x2, 0xbe, 0x0, 0x7f, 0x4, 0xef, 0xd6, 0x8, 0x28, '\x00', 0x4, 0x21}) 1.134598047s ago: executing program 0 (id=22129): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) 1.09655542s ago: executing program 3 (id=22130): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.020893144s ago: executing program 0 (id=22131): r0 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x6, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/194, 0xc2}], 0x2}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.010209897s ago: executing program 2 (id=22132): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) 911.809642ms ago: executing program 2 (id=22133): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902"], 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) 911.15109ms ago: executing program 3 (id=22134): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001300)=""/4068, 0xfe4}], 0x1}, 0x10100) 846.769003ms ago: executing program 0 (id=22135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x37, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a834"}}}}, 0x45) 699.73445ms ago: executing program 3 (id=22136): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001000000328bd700000000000ac1e0101000000000000000000000000ac1414aa0000000000000000000000004e230001000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe88000000000000000000000000000151c63dc82d7d0b8a200100000000000000000000000000010000000000000000000000000000000008000000000000000100000001000000060057df4e5d000000000000000000000000000000000000000000000000000000000000000000e2cb"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 699.572952ms ago: executing program 4 (id=22137): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/19, 0x13}, 0xd6f}], 0x1, 0x45833af92e4b39ff, 0x0) 669.59913ms ago: executing program 1 (id=22138): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f00000003c0)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 554.426139ms ago: executing program 1 (id=22139): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz1\x00', {0xf8, 0x100, 0x8, 0x3}, 0x20, [0x8000003, 0x4, 0x80, 0x143b4048, 0x5, 0x7, 0xa, 0x3000000, 0xea1, 0x0, 0x589f, 0x1000, 0x1e, 0x81, 0x0, 0xffffff80, 0x1, 0x2, 0x1000, 0x3, 0x40000000, 0xfffffff9, 0x2, 0xc, 0x3, 0x394d, 0x9, 0x0, 0x5, 0x53987b9e, 0xc, 0x0, 0x0, 0x2, 0x0, 0x3, 0x8, 0xffffce2d, 0x2, 0x8, 0x5, 0x1004, 0x1, 0x81, 0xfffffff8, 0x4, 0x40, 0x7ff, 0x7c2c0bf, 0x5, 0x5, 0x3, 0x8001, 0x1, 0xc2000000, 0xa560, 0xfffff801, 0x8, 0xd809, 0x395, 0x9, 0x8, 0x1, 0x5], [0x76, 0x100, 0x1, 0x7, 0x0, 0x8e8, 0x5, 0xe, 0xfffffffe, 0xf, 0xb16, 0x2, 0x9061, 0x8, 0x8, 0x5, 0xb3f, 0x3, 0x7, 0x4c, 0xff, 0x4557, 0x1, 0x8, 0x7, 0x5d01, 0x5, 0x3, 0x7, 0x4, 0x5, 0x9114, 0x3, 0x7, 0xda0f, 0xac, 0x9, 0xc, 0x2, 0x400, 0x4, 0x2, 0x3, 0x8, 0xd, 0x8e6, 0x1, 0x7, 0x200, 0xd4a, 0x10, 0x8, 0xf1c, 0x8, 0x27, 0x6, 0x9, 0x5, 0x6, 0x8, 0x0, 0x1, 0x7f, 0x5], [0x1, 0x2, 0x9, 0x872d, 0xfffffffb, 0x75cb, 0x4b, 0x1000, 0x3, 0x1, 0x0, 0x4, 0x9, 0x3a7d, 0x3, 0x1000, 0x2, 0x7, 0x0, 0xfff, 0x22, 0x6, 0x7, 0x432c, 0x20000, 0xd, 0x3, 0x1020, 0x4, 0x2, 0x9, 0x100, 0x1, 0x5, 0x8001, 0x4, 0x1, 0x7f, 0xffff2840, 0x1e0000, 0x8000, 0x80000001, 0x5, 0x3, 0x3, 0x9, 0x4, 0x7, 0x7, 0x0, 0x1, 0x2, 0xd4b, 0x2a, 0x3, 0x9, 0x9, 0x22f, 0x7, 0x80, 0x400, 0x2, 0x3, 0x5], [0xef, 0x8000000, 0xfffffffe, 0x8001, 0x4da1, 0x4, 0x1000, 0x200, 0x7, 0x80, 0x8, 0x6, 0x3, 0x80000001, 0x4, 0x0, 0x10c5, 0x324, 0x0, 0x3, 0xcf, 0x8, 0x9, 0x3, 0x40009b33, 0x1, 0x2, 0x3b, 0x2, 0x37fe, 0xff6f, 0x9, 0x0, 0xc, 0x0, 0x3, 0x8, 0x3, 0x7ffffeff, 0x2, 0xff, 0x74, 0x8, 0xc3f, 0x4, 0x7, 0x9, 0x7ff, 0x7, 0x5, 0x4, 0x5, 0xdc, 0x8, 0x7ff, 0x6, 0x5, 0x9, 0x200000, 0x93e7, 0xad7, 0x2, 0x3, 0x1ff]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000680)={'syz1\x00', {0x3ff, 0x5, 0x0, 0x4}, 0x20, [0x8, 0x8, 0x7, 0x8e, 0x1e69, 0x3, 0x3, 0x10, 0x7f, 0x7d, 0xa, 0xffffffff, 0x7, 0x81, 0x4, 0xc, 0x9, 0x8, 0x9, 0x401, 0x3, 0x80, 0x10, 0x10000, 0x4ab, 0x200, 0x80bb, 0x3, 0x6, 0xfffffffb, 0x1002, 0x3, 0x6, 0x5, 0x20000007, 0x34, 0x7, 0x2, 0x3d4e23a4, 0x9, 0x5, 0x8, 0x9, 0x0, 0x73060f7a, 0xffffffff, 0x494f5a75, 0x2, 0x100, 0x93fc, 0x9, 0xa, 0xb, 0x7ff7ffff, 0x8, 0x2, 0x1000001, 0x20000000, 0x1, 0x2, 0x1, 0x2, 0x1, 0x8001], [0x433, 0xe, 0xfffffffe, 0x659, 0xffffffff, 0x6, 0x401, 0x5, 0x101, 0x3, 0x8, 0x8, 0x6, 0x4a9, 0x6, 0x10000, 0x7f, 0x2, 0x99d0, 0x404, 0x200, 0x1, 0xa2e, 0x9, 0xffff95a0, 0x3, 0x4, 0x4, 0x0, 0xcb6, 0x6, 0x9, 0x9, 0x9, 0x7, 0x0, 0x4, 0x29800000, 0x6, 0xa, 0x23, 0xe756, 0xffff934e, 0x6, 0xc, 0x2d, 0x7, 0x45, 0x80, 0x4, 0x80, 0xa4c, 0xffffff0e, 0x1, 0x1000, 0xff, 0x67ac, 0x171680f8, 0x3, 0x6, 0x754b, 0x9, 0xffffffff, 0x5], [0x7a9, 0xfffffffe, 0x7fffffff, 0x2430, 0x220, 0x9, 0x7, 0xc0d, 0x5, 0x2b, 0xfff, 0x2, 0x7, 0x42b2, 0x4, 0x5, 0x4c, 0x7, 0x5, 0x101, 0x6, 0x4, 0x1, 0x101, 0x9, 0x1, 0x7f, 0x1, 0x3, 0xd0, 0x0, 0xfffffffa, 0x9, 0x8, 0x100, 0x6, 0x7, 0x1004, 0x5, 0x9, 0x8001, 0x4, 0x0, 0x8, 0x3fd, 0x8, 0x80000001, 0xe29, 0x6, 0x7, 0x7fff, 0xe0000000, 0x101, 0x3, 0x5, 0x6d4, 0xb, 0x9, 0x7, 0x9, 0xc, 0xc, 0x9, 0x4000000c], [0xfffff001, 0xc3c7, 0x3ff, 0x2, 0x2, 0x4, 0x6, 0x2, 0x5, 0x8, 0x3ff, 0x7, 0x5, 0x1, 0xe65, 0xe25, 0xffffb705, 0x8, 0x5db45c26, 0x80, 0xa14, 0x1, 0x80, 0xfbf, 0xf, 0x5, 0x4, 0x2, 0x3e5fc7b7, 0x20000002, 0x780, 0xc, 0x8, 0x9, 0x4b2, 0x101, 0x2, 0x7, 0x2, 0xa328, 0x7ff, 0x0, 0x8, 0x0, 0x80000001, 0xffffffff, 0x0, 0x8, 0x2, 0x70e8, 0x1, 0x3, 0x7, 0x2, 0x207, 0x3, 0x104, 0x0, 0x10000700, 0x2, 0x80, 0xf, 0xa]}, 0x45c) 522.243823ms ago: executing program 0 (id=22140): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x40000000}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0xffffffff, 0x2, 0x7, 0x6, 0x1, "8a2d8c3fa88ea34cd4b66fd09f38854a6a5f64"}) poll(&(0x7f0000000140)=[{r1, 0x80}], 0x1, 0x2e) 492.162048ms ago: executing program 3 (id=22141): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002011}) shutdown(r0, 0x0) 340.575423ms ago: executing program 1 (id=22142): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, r1, 0x0, 0xfffffffffffffff7, 0x6}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r1, 0x0, 0x80000000, 0x2}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r1, 0x0, &(0x7f00003bd000/0x3000)=nil, 0x3000, 0x80}) 340.419555ms ago: executing program 0 (id=22143): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xe000001a}) read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020) ppoll(&(0x7f0000000100)=[{r1, 0xd47d}, {r0, 0x25a5}], 0x2, 0x0, 0x0, 0x0) 296.019857ms ago: executing program 3 (id=22144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 213.216011ms ago: executing program 1 (id=22145): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 211.147372ms ago: executing program 0 (id=22146): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000000, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 51.198434ms ago: executing program 4 (id=22147): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x10, 0x6169, 0x9, 0xd3, 0x0, 0xffffeffa, 0x7, 0x2ac8}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x9, 0xa}, {0x1, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 0s ago: executing program 3 (id=22148): fallocate(0xffffffffffffffff, 0x0, 0x56d, 0x400) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @rand_addr=0x64010102}}, 0x1e) kernel console output (not intermixed with test programs): [ 1225.200934][ T2536] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1225.255190][ T2536] bond5: entered promiscuous mode [ 1225.284012][ T2536] bond0: (slave bond5): Enslaving as an active interface with an up link [ 1225.535414][ T1925] hsr_slave_0: entered promiscuous mode [ 1225.551853][ T1925] hsr_slave_1: entered promiscuous mode [ 1226.146718][ T2750] cifs: Unknown parameter 'f,' [ 1226.833180][ T2797] netlink: 268 bytes leftover after parsing attributes in process `syz.2.20923'. [ 1227.297367][ T2865] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20931'. [ 1227.332256][T21659] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1227.433149][ T1925] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1227.473802][ T1925] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1227.509555][ T1925] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1227.522548][T21659] usb 3-1: Using ep0 maxpacket: 8 [ 1227.541899][T21659] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1227.549137][ T1925] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1227.552423][T21659] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1227.593677][T21659] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1227.629367][T21659] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1227.663423][T21659] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1227.694306][T21659] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1227.736685][T21659] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.924453][ T1925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.991271][ T1925] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.998829][T21659] usb 3-1: GET_CAPABILITIES returned 0 [ 1228.004803][T21659] usbtmc 3-1:16.0: can't read capabilities [ 1228.021510][ T2919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20941'. [ 1228.047999][ T2919] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1228.062650][ T2919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1228.067411][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.078674][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1228.098208][T21638] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1228.131769][ T2256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.138991][ T2256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1228.216366][ T6369] usb 3-1: USB disconnect, device number 38 [ 1228.279048][T21638] usb 1-1: Using ep0 maxpacket: 32 [ 1228.311373][T21638] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1228.341296][ T1925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1228.342139][T21638] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.479914][T21638] usb 1-1: config 0 descriptor?? [ 1228.490611][T21638] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1228.550037][ T1925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1228.707022][ T1925] veth0_vlan: entered promiscuous mode [ 1228.735546][ T1925] veth1_vlan: entered promiscuous mode [ 1228.845374][ T1925] veth0_macvtap: entered promiscuous mode [ 1228.918065][ T1925] veth1_macvtap: entered promiscuous mode [ 1229.020486][ T1925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1229.047255][ T1925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1229.124869][ T1925] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.192264][ T1925] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.204894][ T1925] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.216458][ T2951] binder: 2950:2951 ioctl c0306201 2000000000c0 returned -22 [ 1229.226198][ T1925] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.304644][T21638] gspca_sunplus: reg_r err -71 [ 1229.318099][T21638] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 1229.352419][T21638] usb 1-1: USB disconnect, device number 17 [ 1229.629855][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.654306][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.818656][ T2256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.828746][ T2256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1230.198542][ T2989] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1230.532339][ T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1230.737597][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1230.744902][ T24] usb 3-1: config 0 has no interfaces? [ 1230.751716][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1230.767360][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1230.789428][ T24] usb 3-1: Manufacturer: syz [ 1230.808397][ T24] usb 3-1: config 0 descriptor?? [ 1231.067503][ T6369] usb 3-1: USB disconnect, device number 39 [ 1231.562481][ T6369] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1231.772994][ T6369] usb 4-1: Using ep0 maxpacket: 32 [ 1231.800894][ T6369] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1231.830623][ T6369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.898950][ T6369] usb 4-1: config 0 descriptor?? [ 1232.049347][ T3083] netlink: 44 bytes leftover after parsing attributes in process `syz.2.20966'. [ 1232.128763][ T6369] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1232.177284][ T6369] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1232.259975][ T6369] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1232.292263][ T6369] usb 4-1: media controller created [ 1232.503874][ T6369] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1232.659490][ T6369] az6027: usb out operation failed. (-71) [ 1232.694911][ T6369] az6027: usb out operation failed. (-71) [ 1232.719357][ T6369] stb0899_attach: Driver disabled by Kconfig [ 1232.750574][ T6369] az6027: no front-end attached [ 1232.750574][ T6369] [ 1232.772554][ T3111] sctp: [Deprecated]: syz.2.20971 (pid 3111) Use of int in max_burst socket option. [ 1232.772554][ T3111] Use struct sctp_assoc_value instead [ 1232.788592][ T6369] az6027: usb out operation failed. (-71) [ 1232.816104][ T6369] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1232.913074][ T6369] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input200 [ 1232.944972][ T6369] dvb-usb: schedule remote query interval to 400 msecs. [ 1232.962218][ T6369] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1232.978394][ T6369] usb 4-1: USB disconnect, device number 14 [ 1233.213259][ T30] audit: type=1326 audit(1752115139.596:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3147 comm="syz.2.20980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa196d8e929 code=0x7ffc0000 [ 1233.218575][ T6369] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1233.372087][ T30] audit: type=1326 audit(1752115139.596:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3147 comm="syz.2.20980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa196d8e929 code=0x7ffc0000 [ 1233.422358][ T30] audit: type=1326 audit(1752115139.636:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3147 comm="syz.2.20980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa196d8e929 code=0x7ffc0000 [ 1233.522148][ T30] audit: type=1326 audit(1752115139.636:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3147 comm="syz.2.20980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa196d8e929 code=0x7ffc0000 [ 1233.679057][ T30] audit: type=1326 audit(1752115139.636:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3147 comm="syz.2.20980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa196d8e929 code=0x7ffc0000 [ 1233.752441][ T30] audit: type=1326 audit(1752115139.636:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3147 comm="syz.2.20980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa196d8e929 code=0x7ffc0000 [ 1233.834500][ T30] audit: type=1326 audit(1752115139.636:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3147 comm="syz.2.20980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa196d8e929 code=0x7ffc0000 [ 1233.923087][ T30] audit: type=1326 audit(1752115139.636:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3147 comm="syz.2.20980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa196d8e929 code=0x7ffc0000 [ 1234.053430][ T30] audit: type=1326 audit(1752115139.636:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3147 comm="syz.2.20980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fa196d8e929 code=0x7ffc0000 [ 1234.169806][ T30] audit: type=1326 audit(1752115139.636:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3147 comm="syz.2.20980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 1234.262774][ T3199] misc userio: Can't change port type on an already running userio instance [ 1234.331660][ T3204] macvlan0: left promiscuous mode [ 1234.350984][ T3204] netlink: 'syz.2.20997': attribute type 2 has an invalid length. [ 1235.551431][ T3274] loop6: detected capacity change from 0 to 524287999 [ 1235.812762][ T977] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1236.012474][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 1236.027045][ T977] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1236.085221][ T977] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1236.162166][ T977] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1236.242560][ T977] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1236.294915][ T977] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1236.518825][ T977] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1236.695555][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.932505][T21659] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1236.984321][ T977] usb 5-1: GET_CAPABILITIES returned 0 [ 1236.990360][ T977] usbtmc 5-1:16.0: can't read capabilities [ 1237.068975][ T3343] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21034'. [ 1237.107592][T21659] usb 4-1: Using ep0 maxpacket: 8 [ 1237.125239][T21659] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1237.157786][T21659] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1237.190771][T21659] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1237.208419][ T6369] usb 5-1: USB disconnect, device number 23 [ 1237.258527][T21659] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1237.317703][T21659] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1237.352833][T21659] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.636275][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1237.666411][T21659] usb 4-1: GET_CAPABILITIES returned 0 [ 1237.671985][T21659] usbtmc 4-1:16.0: can't read capabilities [ 1237.846282][ T24] usb 1-1: config 0 has no interfaces? [ 1237.867366][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 1237.913091][T21659] usb 4-1: USB disconnect, device number 15 [ 1237.941037][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.006048][ T3392] bond0: entered promiscuous mode [ 1238.013393][ T24] usb 1-1: config 0 descriptor?? [ 1238.042540][ T3392] bond_slave_0: entered promiscuous mode [ 1238.082511][ T3392] bond_slave_1: entered promiscuous mode [ 1238.113683][ T3392] bond0: left promiscuous mode [ 1238.118535][ T3392] bond_slave_0: left promiscuous mode [ 1238.134239][ T3392] bond_slave_1: left promiscuous mode [ 1238.171386][ T3415] tipc: New replicast peer: 255.255.255.255 [ 1238.187824][ T3415] tipc: Enabled bearer , priority 0 [ 1238.320550][ T3420] netlink: 44 bytes leftover after parsing attributes in process `syz.2.21044'. [ 1238.334050][ T3368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.342633][ T3420] netlink: 'syz.2.21044': attribute type 6 has an invalid length. [ 1238.351945][ T3420] netlink: 'syz.2.21044': attribute type 5 has an invalid length. [ 1238.360077][ T3420] netlink: 'syz.2.21044': attribute type 4 has an invalid length. [ 1238.392606][ T3368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.462892][T21659] usb 1-1: USB disconnect, device number 18 [ 1238.657977][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.664599][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.905571][ T3461] netlink: 48 bytes leftover after parsing attributes in process `syz.3.21054'. [ 1238.922503][T21659] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1239.138988][T21659] usb 1-1: Using ep0 maxpacket: 8 [ 1239.168940][T21659] usb 1-1: config index 0 descriptor too short (expected 72, got 36) [ 1239.207608][T21659] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1239.246244][T21659] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 1239.265108][T21659] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.286525][T21659] usb 1-1: Product: syz [ 1239.298448][T21659] usb 1-1: Manufacturer: syz [ 1239.351696][T21659] usb 1-1: SerialNumber: syz [ 1239.488999][ T3492] netlink: 52 bytes leftover after parsing attributes in process `syz.2.21064'. [ 1239.619578][T21659] usb 1-1: USB disconnect, device number 19 [ 1240.128103][ T3544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21074'. [ 1240.510979][ T3566] [U]  [ 1240.565451][ T3573] loop6: detected capacity change from 0 to 63 [ 1240.604674][ T3573] buffer_io_error: 10 callbacks suppressed [ 1240.604701][ T3573] Buffer I/O error on dev loop6, logical block 0, async page read [ 1240.637254][ T6361] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1240.649962][ T3577] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 1240.689710][ T3577] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 1240.721331][ T3577] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 1240.734313][ T3581] GUP no longer grows the stack in syz.3.21088 (3581): 200000004000-20000000a000 (200000001000) [ 1240.740766][ T3577] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 1240.756578][ T3581] CPU: 0 UID: 0 PID: 3581 Comm: syz.3.21088 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1240.756603][ T3581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1240.756616][ T3581] Call Trace: [ 1240.756624][ T3581] [ 1240.756633][ T3581] dump_stack_lvl+0x189/0x250 [ 1240.756665][ T3581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1240.756688][ T3581] ? __pfx__printk+0x10/0x10 [ 1240.756709][ T3581] ? find_vma+0xe7/0x160 [ 1240.756745][ T3581] __get_user_pages+0x2a60/0x30b0 [ 1240.756803][ T3581] ? __pfx___get_user_pages+0x10/0x10 [ 1240.756822][ T3581] ? __gup_longterm_locked+0xbf7/0x15b0 [ 1240.756842][ T3581] ? down_read_killable+0x1d1/0x350 [ 1240.756860][ T3581] ? try_get_folio+0x633/0x660 [ 1240.756885][ T3581] __gup_longterm_locked+0xd66/0x15b0 [ 1240.756918][ T3581] ? try_grab_folio_fast+0x1be/0x4f0 [ 1240.756951][ T3581] ? gup_fast_fallback+0x1afc/0x2260 [ 1240.756975][ T3581] gup_fast_fallback+0x1cd4/0x2260 [ 1240.757035][ T3581] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1240.757053][ T3581] ? trace_contention_end+0x39/0x120 [ 1240.757078][ T3581] ? __mutex_lock+0x330/0xe80 [ 1240.757102][ T3581] ? is_valid_gup_args+0x11f/0x200 [ 1240.757125][ T3581] ? get_user_pages_fast+0x4d/0xb0 [ 1240.757149][ T3581] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 1240.757178][ T3581] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1240.757200][ T3581] ? wait_for_space+0x24d/0x2d0 [ 1240.757225][ T3581] iov_iter_get_pages2+0x5e/0xa0 [ 1240.757250][ T3581] __se_sys_vmsplice+0x548/0x10d0 [ 1240.757294][ T3581] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 1240.757317][ T3581] ? __pfx_futex_wait+0x10/0x10 [ 1240.757396][ T3581] ? rcu_is_watching+0x15/0xb0 [ 1240.757423][ T3581] ? do_syscall_64+0xbe/0x3b0 [ 1240.757446][ T3581] do_syscall_64+0xfa/0x3b0 [ 1240.757462][ T3581] ? lockdep_hardirqs_on+0x9c/0x150 [ 1240.757487][ T3581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.757505][ T3581] ? clear_bhb_loop+0x60/0xb0 [ 1240.757527][ T3581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.757549][ T3581] RIP: 0033:0x7f3700b8e929 [ 1240.757567][ T3581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1240.757582][ T3581] RSP: 002b:00007f37019ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1240.757604][ T3581] RAX: ffffffffffffffda RBX: 00007f3700db5fa0 RCX: 00007f3700b8e929 [ 1240.757618][ T3581] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 1240.757631][ T3581] RBP: 00007f3700c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1240.757643][ T3581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1240.757655][ T3581] R13: 0000000000000000 R14: 00007f3700db5fa0 R15: 00007f3700edfa28 [ 1240.757686][ T3581] [ 1240.761483][ T3577] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 1240.835689][ T6361] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.872198][ T3577] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 1240.918438][ T6361] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1241.022738][ T3577] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 1241.075969][ T6361] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1241.101765][ T6361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1241.119632][ T6361] usb 3-1: SerialNumber: syz [ 1241.157019][ T5217] Buffer I/O error on dev loop6, logical block 0, async page read [ 1241.186153][ T5217] Buffer I/O error on dev loop6, logical block 0, async page read [ 1241.216075][ T5217] ldm_validate_partition_table(): Disk read failed. [ 1241.225795][ T5217] Dev loop6: unable to read RDB block 0 [ 1241.231993][ T5217] loop6: unable to read partition table [ 1241.252249][T21632] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1241.387981][ T6361] usb 3-1: 0:2 : does not exist [ 1241.402338][T21632] usb 4-1: Using ep0 maxpacket: 16 [ 1241.410761][T21632] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1241.450332][T21632] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1241.464809][ T6361] usb 3-1: USB disconnect, device number 40 [ 1241.475889][T21632] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1241.568460][T10134] udevd[10134]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1241.571681][T21632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.669862][T21632] usb 4-1: config 0 descriptor?? [ 1241.780720][ T3639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21096'. [ 1241.820193][ T3646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21096'. [ 1241.887378][ T3590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1241.925637][T21632] usbhid 4-1:0.0: can't add hid device: -71 [ 1241.950455][T21632] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1242.011764][T21632] usb 4-1: USB disconnect, device number 16 [ 1242.238012][ T3677] netlink: 152 bytes leftover after parsing attributes in process `syz.2.21105'. [ 1243.822815][ T3736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21124'. [ 1243.890825][ T3736] bridge_slave_1: left allmulticast mode [ 1243.907510][ T3736] bridge_slave_1: left promiscuous mode [ 1243.917697][ T3736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.990646][ T3736] bridge_slave_0: left allmulticast mode [ 1244.001539][ T3736] bridge_slave_0: left promiscuous mode [ 1244.022647][ T3736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.112707][T21638] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1244.115211][T21632] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1244.222594][ T3755] delete_channel: no stack [ 1244.292802][T21638] usb 3-1: Using ep0 maxpacket: 8 [ 1244.309079][T21638] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1244.330171][T21638] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.354009][T21638] usb 3-1: Product: syz [ 1244.370187][T21638] usb 3-1: Manufacturer: syz [ 1244.382752][T21638] usb 3-1: SerialNumber: syz [ 1244.431615][T21638] usb 3-1: config 0 descriptor?? [ 1244.451756][T21638] gspca_main: se401-2.14.0 probing 047d:5003 [ 1244.732353][T21632] usb 1-1: Using ep0 maxpacket: 32 [ 1244.739732][T21632] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.759431][T21632] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.780119][T21632] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1244.798229][T21632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.837032][T21632] usb 1-1: config 0 descriptor?? [ 1244.851296][T21632] hub 1-1:0.0: USB hub found [ 1245.072340][T21632] hub 1-1:0.0: 2 ports detected [ 1245.158006][T21638] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input203 [ 1245.238085][ T3757] netlink: 300 bytes leftover after parsing attributes in process `syz.4.21130'. [ 1245.288072][T21632] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1245.308765][T21632] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1245.338862][T21632] usbhid 1-1:0.0: can't add hid device: -71 [ 1245.362714][ T24] usb 3-1: USB disconnect, device number 41 [ 1245.372996][T21632] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1245.435212][T21632] usb 1-1: USB disconnect, device number 20 [ 1245.692133][ T6361] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1245.784568][ T3828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21140'. [ 1245.873248][ T6361] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1245.891866][ T6361] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.919670][ T6361] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1245.968554][ T6361] usb 5-1: config 1 has no interface number 0 [ 1245.985226][ T6361] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1246.006510][ T6361] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1246.031000][ T6361] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1246.061285][ T6361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.099211][ T6361] usb 5-1: Product: syz [ 1246.104370][ T3842] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1246.112525][ T6361] usb 5-1: Manufacturer: syz [ 1246.117347][ T6361] usb 5-1: SerialNumber: syz [ 1246.561842][ T6361] usb 5-1: USB disconnect, device number 24 [ 1246.592378][T21638] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1246.612374][ T6369] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 1246.762510][T21638] usb 2-1: Using ep0 maxpacket: 8 [ 1246.778282][T21638] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1246.783890][ T6369] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1246.790418][T21638] usb 2-1: config 179 has no interface number 0 [ 1246.801120][T21638] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1246.802271][ T6369] usb 3-1: config 0 has no interface number 0 [ 1246.828095][T21638] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1246.847831][T21638] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1246.856925][ T6369] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1246.862252][T21638] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1247.019740][T21638] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1247.103782][T21638] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1247.123745][T21638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.148079][ T6361] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1247.315697][ T6369] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1247.338123][ T6361] usb 1-1: Using ep0 maxpacket: 32 [ 1247.346977][ T3855] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1247.352998][ T6369] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1247.383102][ T6361] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1247.422526][ T6361] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1247.441967][ T6361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.450298][ T6369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.458795][ T6361] usb 1-1: Product: syz [ 1247.473267][ T6361] usb 1-1: Manufacturer: syz [ 1247.498414][ T6361] usb 1-1: SerialNumber: syz [ 1247.597438][ T6361] usb 1-1: config 0 descriptor?? [ 1247.652464][ T6369] usb 3-1: config 0 descriptor?? [ 1247.662761][ T3861] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1247.704344][ T6369] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1247.723613][T21638] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input204 [ 1247.944955][ T6369] usb 3-1: USB disconnect, device number 42 [ 1247.950992][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1248.009379][T21632] usb 2-1: USB disconnect, device number 14 [ 1248.009380][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1248.009522][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1248.037896][ T6361] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 1248.466257][T21632] usb 1-1: USB disconnect, device number 21 [ 1249.982170][ T6369] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1250.152207][ T6369] usb 2-1: Using ep0 maxpacket: 16 [ 1250.186195][ T6369] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1250.240113][ T6369] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1250.294997][ T6369] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1250.339966][ T6369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.357755][ T6369] usb 2-1: Product: syz [ 1250.364078][ T6369] usb 2-1: Manufacturer: syz [ 1250.382407][ T6369] usb 2-1: SerialNumber: syz [ 1250.432919][ T6369] usb 2-1: config 0 descriptor?? [ 1250.488971][ T6369] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1250.564176][ T6369] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1250.635753][ T4076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21197'. [ 1250.679167][ T4076] netlink: 'syz.3.21197': attribute type 9 has an invalid length. [ 1250.828872][ T4076] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 1250.930256][ T4076] macvlan2: entered allmulticast mode [ 1250.961003][ T4076] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 1251.108438][ T6369] em28xx 2-1:0.0: unknown em28xx chip ID (47) [ 1251.129497][ T4104] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21204'. [ 1251.134971][T21632] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1251.292322][T21632] usb 3-1: Using ep0 maxpacket: 16 [ 1251.304806][T21632] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.318908][ T6369] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1251.333792][T21632] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1251.345173][T21632] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1251.358306][ T6369] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1251.366060][ T6369] em28xx 2-1:0.0: No AC97 audio processor [ 1251.381699][T21632] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1251.394272][ T6369] usb 2-1: USB disconnect, device number 15 [ 1251.416817][T21632] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1251.432324][ T6369] em28xx 2-1:0.0: Disconnecting em28xx [ 1251.453997][T21632] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.464079][ T6369] em28xx 2-1:0.0: Freeing device [ 1251.489557][T21632] usb 3-1: config 0 descriptor?? [ 1251.927799][T21632] hid-generic 0003:045E:05DA.00C1: unknown main item tag 0x0 [ 1251.968109][T21632] hid-generic 0003:045E:05DA.00C1: unknown main item tag 0x0 [ 1251.979334][T21632] hid-generic 0003:045E:05DA.00C1: unknown main item tag 0x0 [ 1251.989992][T21632] hid-generic 0003:045E:05DA.00C1: ignoring exceeding usage max [ 1252.009321][T21632] hid-generic 0003:045E:05DA.00C1: ignoring exceeding usage max [ 1252.017555][T21632] hid-generic 0003:045E:05DA.00C1: unknown main item tag 0x0 [ 1252.037578][T21632] hid-generic 0003:045E:05DA.00C1: unbalanced collection at end of report description [ 1252.070565][T21632] hid-generic 0003:045E:05DA.00C1: probe with driver hid-generic failed with error -22 [ 1252.171153][T21638] usb 3-1: USB disconnect, device number 43 [ 1253.516718][ T4228] netlink: 'syz.1.21239': attribute type 21 has an invalid length. [ 1253.532240][ T4228] netlink: 'syz.1.21239': attribute type 1 has an invalid length. [ 1253.540127][ T4228] netlink: 'syz.1.21239': attribute type 2 has an invalid length. [ 1253.552199][ T4228] netlink: 9062 bytes leftover after parsing attributes in process `syz.1.21239'. [ 1253.609009][ T4230] input: syz1 as /devices/virtual/input/input205 [ 1254.733220][T21638] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1254.906563][T21638] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1254.930045][T21638] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.959655][T21638] usb 1-1: config 0 descriptor?? [ 1254.978278][T21638] cp210x 1-1:0.0: cp210x converter detected [ 1255.186308][ T6361] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1255.362519][ T6361] usb 3-1: Using ep0 maxpacket: 16 [ 1255.369480][ T6361] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.379875][ T6361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1255.391064][ T6361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1255.401264][ T6361] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1255.411114][ T6361] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1255.426916][T21638] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1255.436151][ T6361] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1255.449648][ T6361] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1255.460639][T21638] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1255.480440][ T6361] usb 3-1: Manufacturer: syz [ 1255.485571][ T977] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1255.498486][ T6361] usb 3-1: config 0 descriptor?? [ 1255.552573][ T6391] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1255.655982][ T977] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1255.666908][T21632] usb 1-1: USB disconnect, device number 22 [ 1255.667891][ T977] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1255.688768][ T977] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1255.690125][T21632] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1255.705166][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.714373][ T6391] usb 2-1: Using ep0 maxpacket: 16 [ 1255.727486][ T4298] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1255.738493][ T6391] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.757063][T21632] cp210x 1-1:0.0: device disconnected [ 1255.761445][ T977] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1255.773149][ T6391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1255.809560][ T6391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1255.863190][ T6391] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1255.904200][ T6391] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1255.917889][ T6361] rc_core: IR keymap rc-hauppauge not found [ 1255.925158][ T6361] Registered IR keymap rc-empty [ 1255.930192][ T6361] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1255.952151][ T6361] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1255.972553][ T6391] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1255.986431][ T977] usb 4-1: USB disconnect, device number 17 [ 1255.998303][ T6391] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1256.011438][ T6361] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1256.023674][ T6391] usb 2-1: Manufacturer: syz [ 1256.033529][ T6391] usb 2-1: config 0 descriptor?? [ 1256.044473][ T6361] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input206 [ 1256.082760][ T6361] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1256.144947][ T6361] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1256.183062][ T6361] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1256.214625][ T6361] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1256.253235][ T6361] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1256.280943][ T6361] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1256.305843][ T6361] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1256.320397][ T4380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1256.343116][ T6361] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1256.375266][ T6361] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1256.412786][ T6361] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1256.436834][ T6361] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1256.452204][ T6391] rc_core: IR keymap rc-hauppauge not found [ 1256.452223][ T6391] Registered IR keymap rc-empty [ 1256.452369][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1256.458911][ T6361] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1256.475546][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1256.502666][ T6391] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 1256.504798][ T6391] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input207 [ 1256.506992][ T6361] usb 3-1: USB disconnect, device number 44 [ 1256.517877][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1256.532559][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1256.552797][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1256.572200][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1256.592785][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1256.623113][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1256.642396][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1256.666945][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1256.684074][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1256.704487][ T6391] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1256.734378][ T6391] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1256.734404][ T6391] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1256.770556][ T6391] usb 2-1: USB disconnect, device number 16 [ 1257.426233][ T4458] blkio.reset_stats is deprecated [ 1257.473049][ T4464] C: renamed from team_slave_0 [ 1257.503106][ T4464] netlink: 'syz.1.21285': attribute type 3 has an invalid length. [ 1257.533164][ T4464] netlink: 152 bytes leftover after parsing attributes in process `syz.1.21285'. [ 1257.561894][ T4464] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1257.767004][ T4485] syz.1.21289: attempt to access beyond end of device [ 1257.767004][ T4485] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1257.786081][ T4489] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1257.832158][ T6391] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1258.023721][ T6391] usb 4-1: Using ep0 maxpacket: 16 [ 1258.044935][ T6391] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.079235][ T6391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1258.090902][ T6391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1258.102345][ T6391] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1258.138796][ T6391] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1258.157084][ T6391] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1258.191332][ T6391] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1258.208165][ T4517] openvswitch: netlink: Multiple metadata blocks provided [ 1258.215417][ T6391] usb 4-1: Manufacturer: syz [ 1258.226591][ T6391] usb 4-1: config 0 descriptor?? [ 1258.532126][T21632] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 1258.562412][ T6391] rc_core: IR keymap rc-hauppauge not found [ 1258.575106][ T6391] Registered IR keymap rc-empty [ 1258.590374][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1258.623489][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1258.663846][ T6391] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1258.693276][ T6391] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input208 [ 1258.694812][T21632] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1258.725603][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1258.752351][T21632] usb 3-1: config 0 has no interface number 0 [ 1258.758500][T21632] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1258.772336][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1258.802306][T21632] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1258.812227][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1258.823506][T21632] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1258.842862][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1258.847032][T21632] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.863791][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1258.885146][T21632] usb 3-1: config 0 descriptor?? [ 1258.903808][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1258.907807][ T4525] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1258.922998][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1258.933341][T21632] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1258.953270][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1258.979161][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1259.002351][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1259.040065][ T6391] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1259.059754][ T6391] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1259.097757][ T6391] usb 4-1: USB disconnect, device number 18 [ 1259.177627][ T6361] usb 3-1: USB disconnect, device number 45 [ 1259.288303][ T4578] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1260.112475][T21638] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1260.262152][T21638] usb 1-1: Using ep0 maxpacket: 32 [ 1260.271779][T21638] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1260.281490][T21638] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1260.292433][T21638] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.307204][T21638] usb 1-1: Product: syz [ 1260.315945][T21638] usb 1-1: Manufacturer: syz [ 1260.325075][T21638] usb 1-1: SerialNumber: syz [ 1260.341416][T21638] usb 1-1: config 0 descriptor?? [ 1260.635949][ T4644] Attempt to restore checkpoint with obsolete wellknown handles [ 1260.766991][T21638] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 1261.168375][T21638] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1261.228817][T21638] usb 1-1: USB disconnect, device number 23 [ 1261.728423][ T4693] binder: 4692:4693 ioctl c018620c 200000000640 returned -22 [ 1261.846037][ T4699] netlink: 'syz.2.21347': attribute type 10 has an invalid length. [ 1261.867055][ T4699] syz_tun: entered promiscuous mode [ 1261.886501][ T4699] : (slave syz_tun): Enslaving as an active interface with an up link [ 1262.520775][T21632] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1262.697670][T21632] usb 3-1: Using ep0 maxpacket: 16 [ 1262.713728][T21632] usb 3-1: config 0 has no interfaces? [ 1262.726044][T21632] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1262.735640][T21632] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.754294][T21632] usb 3-1: Product: syz [ 1262.758479][T21632] usb 3-1: Manufacturer: syz [ 1262.782539][T21632] usb 3-1: SerialNumber: syz [ 1262.796261][T21632] usb 3-1: config 0 descriptor?? [ 1263.032807][ T24] usb 3-1: USB disconnect, device number 46 [ 1263.252357][ T6361] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1263.432508][ T6361] usb 2-1: Using ep0 maxpacket: 32 [ 1263.439328][ T6361] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 1263.452068][ T6361] usb 2-1: config 0 has no interface number 0 [ 1263.458829][ T6361] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1263.478836][ T6361] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 1263.502373][ T6361] usb 2-1: config 0 interface 126 has no altsetting 0 [ 1263.519900][ T6361] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1263.529666][ T6361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.540822][ T6361] usb 2-1: Product: syz [ 1263.545426][ T6361] usb 2-1: Manufacturer: syz [ 1263.550092][ T6361] usb 2-1: SerialNumber: syz [ 1263.558833][ T6361] usb 2-1: config 0 descriptor?? [ 1263.562453][ T24] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1263.566680][ T4735] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1263.593100][ T4735] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1263.774552][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1263.826546][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1263.912531][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1263.951451][ T24] usb 4-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 1263.971817][ T24] usb 4-1: Manufacturer: syz [ 1263.994285][ T24] usb 4-1: config 0 descriptor?? [ 1264.045687][ T24] hub 4-1:0.0: USB hub found [ 1264.104946][ T6361] ir_usb 2-1:0.126: IR Dongle converter detected [ 1264.274824][ T24] hub 4-1:0.0: 1 port detected [ 1264.304591][ T6361] usb 2-1: IRDA class descriptor not found, device not bound [ 1264.522323][ T6391] usb 2-1: USB disconnect, device number 17 [ 1264.683648][ T24] usb 4-1: USB disconnect, device number 19 [ 1265.342180][ T6369] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1265.397208][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1265.397225][ T30] audit: type=1326 audit(1752115171.786:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.1.21390" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb83238e929 code=0x0 [ 1265.502161][ T6369] usb 3-1: Using ep0 maxpacket: 16 [ 1265.513960][ T6369] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1265.527510][ T6369] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1265.539159][ T6369] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1265.554446][ T6369] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1265.568723][ T6369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1265.581340][ T6369] usb 3-1: SerialNumber: syz [ 1265.596980][ T4814] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1265.832399][ T6369] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1265.843685][ T6369] usb 3-1: USB disconnect, device number 47 [ 1265.912657][T21632] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1266.072286][T21632] usb 4-1: Using ep0 maxpacket: 32 [ 1266.083335][T21632] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1266.102124][T21632] usb 4-1: config 0 has no interface number 0 [ 1266.110735][T21632] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1266.132106][T21632] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.140141][T21632] usb 4-1: Product: syz [ 1266.149928][T21632] usb 4-1: Manufacturer: syz [ 1266.154937][T21632] usb 4-1: SerialNumber: syz [ 1266.170240][T21632] usb 4-1: config 0 descriptor?? [ 1266.181244][T21632] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1266.406843][T21632] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1266.426557][T21632] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1266.643310][ T4860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.676510][ T4860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.920737][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1266.921128][ T6361] usb 4-1: USB disconnect, device number 20 [ 1266.970997][ T6361] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1267.030909][ T6361] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1267.123438][ T6361] quatech2 4-1:0.51: device disconnected [ 1267.238707][ T4939] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 1267.382237][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1267.582411][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1267.601417][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.650570][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1267.681961][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1267.719180][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1267.739213][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1267.789458][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1267.802526][ T6391] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 1267.821819][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1267.848577][ T24] usb 2-1: Manufacturer: syz [ 1267.860506][ T24] usb 2-1: config 0 descriptor?? [ 1268.004568][ T6391] usb 3-1: config 0 has an invalid interface number: 160 but max is 0 [ 1268.013289][ T6391] usb 3-1: config 0 has no interface number 0 [ 1268.019825][ T6391] usb 3-1: config 0 interface 160 has no altsetting 0 [ 1268.037502][ T6391] usb 3-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 1268.047209][ T6391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.062332][ T6391] usb 3-1: Product: syz [ 1268.066520][ T6391] usb 3-1: Manufacturer: syz [ 1268.071122][ T6391] usb 3-1: SerialNumber: syz [ 1268.110518][ T6391] usb 3-1: config 0 descriptor?? [ 1268.142834][ T6361] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1268.157323][ T6391] usb-storage 3-1:0.160: USB Mass Storage device detected [ 1268.174557][ T4989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21430'. [ 1268.242471][ T24] rc_core: IR keymap rc-hauppauge not found [ 1268.248412][ T24] Registered IR keymap rc-empty [ 1268.261745][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1268.292967][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1268.323975][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1268.352277][ T6361] usb 5-1: Using ep0 maxpacket: 32 [ 1268.366470][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input209 [ 1268.398102][ T6391] usb 3-1: USB disconnect, device number 48 [ 1268.404275][ T6361] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1268.430546][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1268.433980][ T6361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.475899][ T6361] usb 5-1: config 0 descriptor?? [ 1268.502658][ T6361] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1268.512353][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1268.542864][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1268.562307][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1268.602261][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1268.625485][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1268.664092][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1268.712370][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1268.744463][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1268.775900][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1268.818853][ T24] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1268.838573][ T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1268.858691][ T24] usb 2-1: USB disconnect, device number 18 [ 1269.334372][ T6361] gspca_nw80x: reg_r err -71 [ 1269.352507][ T6361] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 1269.384686][ T6361] usb 5-1: USB disconnect, device number 25 [ 1269.523078][ T6369] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1269.683666][ T6369] usb 2-1: Using ep0 maxpacket: 16 [ 1269.696228][ T6369] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.730451][ T6369] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1269.742179][ T6391] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1269.755497][ T6369] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1269.775863][ T6369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.798761][ T6369] usb 2-1: config 0 descriptor?? [ 1269.924322][ T6391] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.939595][ T6391] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1269.958852][ T6391] usb 3-1: config 1 has no interface number 0 [ 1269.972067][ T6391] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.993222][ T6391] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1270.011114][T21659] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1270.014248][ T6391] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1270.032052][ T6391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.041754][ T6391] usb 3-1: Product: syz [ 1270.046277][ T6391] usb 3-1: Manufacturer: syz [ 1270.051014][ T6391] usb 3-1: SerialNumber: syz [ 1270.195832][T21659] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1270.213537][T21659] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1270.239232][ T6369] corsair 0003:1B1C:1B02.00C2: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 1270.260455][T21659] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1270.282542][T21659] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.290577][T21659] usb 1-1: Product: syz [ 1270.334587][T21659] usb 1-1: Manufacturer: syz [ 1270.339260][T21659] usb 1-1: SerialNumber: syz [ 1270.366971][T21659] usb 1-1: config 0 descriptor?? [ 1270.384632][ T5077] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1270.406650][ T5077] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1270.427264][ T6369] corsair 0003:1B1C:1B02.00C2: Read invalid backlight brightness: ad. [ 1270.631645][ T6369] usb 2-1: USB disconnect, device number 19 [ 1270.632571][ T5077] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1270.652880][ T5077] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1270.913743][ T6391] cdc_ncm 3-1:1.1: SET_NTB_FORMAT failed [ 1270.945725][ T6391] cdc_ncm 3-1:1.1: bind() failure [ 1270.963902][ T6391] usb 3-1: USB disconnect, device number 49 [ 1271.098116][T21659] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1271.303894][ T5168] input: syz0 as /devices/virtual/input/input210 [ 1271.332184][T21659] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1271.375178][T21659] usb 1-1: USB disconnect, device number 24 [ 1271.530959][ T5186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21472'. [ 1271.709555][ T5196] ipvlan0: entered promiscuous mode [ 1271.822504][ T977] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1271.984219][ T977] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1271.994557][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.031753][ T977] usb 4-1: Product: syz [ 1272.066835][ T977] usb 4-1: Manufacturer: syz [ 1272.090123][ T977] usb 4-1: SerialNumber: syz [ 1272.113225][ T977] usb 4-1: config 0 descriptor?? [ 1272.322252][ T6391] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1272.482954][ T6391] usb 3-1: Using ep0 maxpacket: 32 [ 1272.494208][ T6391] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1272.504910][ T6391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.516946][ T6391] usb 3-1: config 0 descriptor?? [ 1272.741921][ T6391] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1272.770568][ T6391] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1272.789260][ T6391] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1272.797234][ T6391] usb 3-1: media controller created [ 1272.855177][ T6391] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1272.898722][ T5259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21490'. [ 1272.942568][ T977] usb 4-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 1272.954154][ T6391] az6027: usb out operation failed. (-71) [ 1272.962130][ T977] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 1272.976864][ T6391] az6027: usb out operation failed. (-71) [ 1272.983278][ T977] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 1272.991674][ T6391] stb0899_attach: Driver disabled by Kconfig [ 1273.002840][ T6391] az6027: no front-end attached [ 1273.002840][ T6391] [ 1273.018104][ T977] usb 4-1: USB disconnect, device number 21 [ 1273.025616][ T6391] az6027: usb out operation failed. (-71) [ 1273.058341][ T6391] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1273.088879][ T6391] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input211 [ 1273.133895][ T6391] dvb-usb: schedule remote query interval to 400 msecs. [ 1273.140897][ T6391] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1273.175485][ T6391] usb 3-1: USB disconnect, device number 50 [ 1273.398241][ T5291] loop4: detected capacity change from 0 to 524255232 [ 1273.413440][ T6391] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1273.540960][ T5291] Invalid logical block size (3) [ 1273.802125][T21638] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1273.984302][T21638] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.996598][T21638] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1274.013947][T21638] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1274.028347][T21638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.094976][T21638] usb 2-1: config 0 descriptor?? [ 1274.112591][ T5336] netlink: 100 bytes leftover after parsing attributes in process `syz.2.21508'. [ 1274.313458][T21638] usbhid 2-1:0.0: can't add hid device: -71 [ 1274.319458][T21638] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1274.392226][T21638] usb 2-1: USB disconnect, device number 20 [ 1274.515926][ T5363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1274.523189][T21659] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1274.728169][T21659] usb 1-1: Using ep0 maxpacket: 16 [ 1274.753547][T21659] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1274.794554][T21659] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1274.822189][T21638] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1274.901281][T21659] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1274.928885][T21659] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.943329][T21659] usb 1-1: config 0 descriptor?? [ 1275.076330][ T30] audit: type=1326 audit(1752115181.456:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5339 comm="syz.4.21509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c6e52ab19 code=0x7ffc0000 [ 1275.126355][T21638] usb 2-1: Using ep0 maxpacket: 16 [ 1275.173011][T21638] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1275.218200][ T30] audit: type=1326 audit(1752115181.456:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5339 comm="syz.4.21509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6e58e929 code=0x7ffc0000 [ 1275.252534][T21638] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1275.302287][T21638] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1275.345085][T21638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.353420][ T30] audit: type=1326 audit(1752115181.456:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5339 comm="syz.4.21509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c6e52ab19 code=0x7ffc0000 [ 1275.402119][T21638] usb 2-1: config 0 descriptor?? [ 1275.407994][T21659] corsair 0003:1B1C:1B02.00C3: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 1275.449956][ T30] audit: type=1326 audit(1752115181.456:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5339 comm="syz.4.21509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6e58e929 code=0x7ffc0000 [ 1275.642535][ T30] audit: type=1326 audit(1752115181.456:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5339 comm="syz.4.21509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c6e52ab19 code=0x7ffc0000 [ 1275.692261][ T30] audit: type=1326 audit(1752115181.456:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5339 comm="syz.4.21509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c6e52ab19 code=0x7ffc0000 [ 1275.724825][ T30] audit: type=1326 audit(1752115181.456:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5339 comm="syz.4.21509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6e58e929 code=0x7ffc0000 [ 1275.747564][ T30] audit: type=1326 audit(1752115181.456:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5339 comm="syz.4.21509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c6e52ab19 code=0x7ffc0000 [ 1275.773176][T21659] corsair 0003:1B1C:1B02.00C3: Failed to get K90 initial state (error -71). [ 1275.830717][T21638] kye 0003:0458:5016.00C4: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1275.847780][T21659] usb 1-1: USB disconnect, device number 25 [ 1275.872602][ T30] audit: type=1326 audit(1752115181.456:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5339 comm="syz.4.21509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6e58e929 code=0x7ffc0000 [ 1275.911157][T21638] kye 0003:0458:5016.00C4: unknown main item tag 0x0 [ 1276.001592][T21638] kye 0003:0458:5016.00C4: hidraw0: USB HID v0.00 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 1276.055367][ T30] audit: type=1326 audit(1752115181.456:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5339 comm="syz.4.21509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c6e52ab19 code=0x7ffc0000 [ 1276.144200][T21638] kye 0003:0458:5016.00C4: tablet-enabling feature report not found [ 1276.251643][T21638] kye 0003:0458:5016.00C4: tablet enabling failed [ 1276.267339][ T5439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21527'. [ 1276.308350][T21638] usb 2-1: USB disconnect, device number 21 [ 1276.431887][ T5435] fido_id[5435]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1276.670706][ T5457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21531'. [ 1276.813958][ T5439] team0 (unregistering): Port device team_slave_0 removed [ 1276.836431][ T5439] team0 (unregistering): Port device team_slave_1 removed [ 1276.860698][ T5439] team0 (unregistering): Port device batadv0 removed [ 1276.875119][ T5439] team0 (unregistering): Port device virt_wifi0 removed [ 1277.121101][ T5501] binder: 5500:5501 ioctl c018620c 200000000380 returned -22 [ 1277.522351][T21659] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1277.732157][T21659] usb 1-1: Using ep0 maxpacket: 16 [ 1277.750816][T21659] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1277.796418][T21659] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1277.824081][T21659] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.838187][T21659] usb 1-1: config 0 descriptor?? [ 1278.294516][T21659] mcp2221 0003:04D8:00DD.00C5: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1278.391487][ T5549] input: syz1 as /devices/virtual/input/input212 [ 1278.687429][T21659] usb 1-1: USB disconnect, device number 26 [ 1280.058938][ T5642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21565'. [ 1280.071678][ T5642] netlink: 'syz.2.21565': attribute type 18 has an invalid length. [ 1280.087888][ T5642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21565'. [ 1280.192678][T21638] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1280.315387][ T5656] netlink: 'syz.2.21568': attribute type 29 has an invalid length. [ 1280.353137][ T5656] netlink: 'syz.2.21568': attribute type 29 has an invalid length. [ 1280.393889][T21638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.411156][T21638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1280.470596][T21638] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1280.507742][ T5665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21571'. [ 1280.545170][T21638] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1280.559575][T21638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.571735][T21638] usb 4-1: config 0 descriptor?? [ 1280.623426][ T5672] netlink: 104 bytes leftover after parsing attributes in process `syz.1.21572'. [ 1281.026182][T21638] plantronics 0003:047F:FFFF.00C6: reserved main item tag 0xe [ 1281.042687][T21659] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1281.072179][T21638] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 1281.083628][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 1281.083644][ T30] audit: type=1326 audit(1752115187.476:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5691 comm="syz.4.21579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c6e52ab19 code=0x7ffc0000 [ 1281.120273][T21638] plantronics 0003:047F:FFFF.00C6: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1281.186342][ T30] audit: type=1326 audit(1752115187.496:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5691 comm="syz.4.21579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c6e52ab19 code=0x7ffc0000 [ 1281.241147][ T30] audit: type=1326 audit(1752115187.496:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5691 comm="syz.4.21579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c6e52ab19 code=0x7ffc0000 [ 1281.269662][T21659] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1281.279496][T21659] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.288370][ T30] audit: type=1326 audit(1752115187.496:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5691 comm="syz.4.21579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c6e52ab19 code=0x7ffc0000 [ 1281.311216][T21659] usb 1-1: Product: syz [ 1281.328806][T21659] usb 1-1: Manufacturer: syz [ 1281.335776][ T6369] usb 4-1: USB disconnect, device number 22 [ 1281.351321][T21659] usb 1-1: SerialNumber: syz [ 1281.379558][ T5699] fido_id[5699]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1281.381055][T21659] usb 1-1: config 0 descriptor?? [ 1281.417659][ T30] audit: type=1326 audit(1752115187.496:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5691 comm="syz.4.21579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c6e52ab19 code=0x7ffc0000 [ 1281.442836][ T30] audit: type=1326 audit(1752115187.496:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5691 comm="syz.4.21579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c6e52ab19 code=0x7ffc0000 [ 1281.465186][ C1] vkms_vblank_simulate: vblank timer overrun [ 1281.474605][ T30] audit: type=1326 audit(1752115187.496:3870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5691 comm="syz.4.21579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c6e52ab19 code=0x7ffc0000 [ 1281.499286][ T30] audit: type=1326 audit(1752115187.496:3871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5691 comm="syz.4.21579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c6e52ab19 code=0x7ffc0000 [ 1281.561900][ T30] audit: type=1326 audit(1752115187.496:3872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5691 comm="syz.4.21579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c6e52ab19 code=0x7ffc0000 [ 1281.584343][ C1] vkms_vblank_simulate: vblank timer overrun [ 1281.592273][ T30] audit: type=1326 audit(1752115187.496:3873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5691 comm="syz.4.21579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c6e52ab19 code=0x7ffc0000 [ 1281.881872][T21659] usb 1-1: Firmware version (0.0) predates our first public release. [ 1281.904574][T21659] usb 1-1: Please update to version 0.2 or newer [ 1281.933973][T21659] usb 1-1: Firmware: build [ 1282.140450][T21659] usb 1-1: USB disconnect, device number 27 [ 1282.212651][ T6391] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1282.311581][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1282.352194][ T6369] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1282.375392][ T6391] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1282.396121][ T6391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1282.407976][ T6391] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1282.420619][ T6391] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1282.437075][ T6391] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1282.446818][ T6391] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1282.455305][ T6391] usb 4-1: Manufacturer: syz [ 1282.464623][ T6391] usb 4-1: config 0 descriptor?? [ 1282.499473][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1282.517335][ T6369] usb 5-1: Using ep0 maxpacket: 8 [ 1282.524036][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1282.542292][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1282.553604][ T6369] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1282.563021][ T6369] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.572082][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1282.587015][ T6369] usb 5-1: config 0 descriptor?? [ 1282.592352][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1282.604246][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.616319][ T24] usb 3-1: config 0 descriptor?? [ 1282.794459][ T6391] rc_core: IR keymap rc-hauppauge not found [ 1282.805765][ T6391] Registered IR keymap rc-empty [ 1282.810390][ T6369] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1282.810902][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1282.862284][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1282.893569][ T6391] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1282.908950][ T6391] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input213 [ 1282.925859][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1282.952500][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1282.962436][T21659] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1282.972582][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1282.992249][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1283.012239][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1283.032254][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1283.054580][ T24] plantronics 0003:047F:FFFF.00C7: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1283.055350][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1283.102946][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1283.132196][T21659] usb 1-1: Using ep0 maxpacket: 16 [ 1283.132297][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1283.151581][T21659] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.179120][T21659] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1283.182887][ T6391] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1283.210693][T21659] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1283.236496][ T6391] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1283.263590][ T6391] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1283.269363][T21659] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1283.286082][ T6391] usb 4-1: USB disconnect, device number 23 [ 1283.324550][ T24] usb 3-1: USB disconnect, device number 51 [ 1283.344822][T21659] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1283.375676][T21659] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1283.415801][T21659] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1283.446405][T21659] usb 1-1: Manufacturer: syz [ 1283.473104][T21659] usb 1-1: config 0 descriptor?? [ 1283.638244][ T6369] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1283.669702][ T6369] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1283.730846][ T6369] usb 5-1: USB disconnect, device number 26 [ 1283.822304][T21659] rc_core: IR keymap rc-hauppauge not found [ 1283.832233][T21659] Registered IR keymap rc-empty [ 1283.837250][T21659] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1283.882537][T21659] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1283.931951][T21659] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1284.001204][T21659] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input215 [ 1284.053204][T21659] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1284.108864][T21659] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1284.183527][T21659] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1284.224299][T21659] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1284.280874][T21659] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1284.312268][T21659] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1284.355390][ T5875] netlink: 348 bytes leftover after parsing attributes in process `syz.2.21603'. [ 1284.372458][T21659] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1284.403038][T21659] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1284.426734][T21659] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1284.472187][T21659] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1284.504797][T21659] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1284.532584][T21659] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1284.582422][T21659] usb 1-1: USB disconnect, device number 28 [ 1284.692199][ T6391] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1284.872269][ T6391] usb 3-1: Using ep0 maxpacket: 8 [ 1284.888827][ T6391] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1284.908814][ T6391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.929415][ T6391] usb 3-1: Product: syz [ 1284.936430][ T6391] usb 3-1: Manufacturer: syz [ 1284.950468][ T6391] usb 3-1: SerialNumber: syz [ 1284.966793][ T6391] usb 3-1: config 0 descriptor?? [ 1285.187408][ T6391] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1285.994769][ T6391] usb write operation failed. (-71) [ 1286.011409][ T6391] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1286.023360][ T6391] dvbdev: DVB: registering new adapter (Terratec H7) [ 1286.030115][ T6391] usb 3-1: media controller created [ 1286.037171][ T6391] usb read operation failed. (-71) [ 1286.057527][ T6391] usb write operation failed. (-71) [ 1286.066417][ T6391] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1286.080609][ T6391] usb 3-1: USB disconnect, device number 52 [ 1286.210108][ T5980] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1286.596262][ T30] kauditd_printk_skb: 125 callbacks suppressed [ 1286.596280][ T30] audit: type=1326 audit(1752115192.986:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.1.21626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb83232ab19 code=0x7fc00000 [ 1286.922705][ T6020] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.21643'. [ 1287.385647][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1287.585477][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1287.611019][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1287.649610][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1287.668499][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1287.677989][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.710910][ T24] usb 5-1: config 0 descriptor?? [ 1288.153317][ T24] plantronics 0003:047F:FFFF.00C8: unknown main item tag 0x0 [ 1288.195979][ T24] plantronics 0003:047F:FFFF.00C8: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1288.332218][ T6361] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 1288.413733][ T6369] usb 5-1: USB disconnect, device number 27 [ 1288.422311][ T6391] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1288.498774][ T6361] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1288.510269][ T6361] usb 4-1: config 0 has no interface number 0 [ 1288.520522][ T6361] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1288.532244][ T6361] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1288.547967][ T6361] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1288.557483][ T6361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.570074][ T6361] usb 4-1: config 0 descriptor?? [ 1288.584272][ T6391] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.597656][ T6391] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1288.607912][ T6072] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1288.624441][ T6391] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1288.634328][ T6361] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1288.651876][ T6391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1288.664777][ T6391] usb 3-1: SerialNumber: syz [ 1288.902722][ T6391] usb 3-1: 0:2 : does not exist [ 1288.938081][ T6391] usb 3-1: USB disconnect, device number 53 [ 1289.081339][T10134] udevd[10134]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1289.292619][ T6132] random: crng reseeded on system resumption [ 1289.364918][ T6369] usb 4-1: USB disconnect, device number 24 [ 1291.059786][ T30] audit: type=1326 audit(1752115197.436:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.21673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeaf8e929 code=0x7fc00000 [ 1291.082278][ C1] vkms_vblank_simulate: vblank timer overrun [ 1291.132983][ T30] audit: type=1326 audit(1752115197.436:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.21673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7eeaf8e929 code=0x7fc00000 [ 1291.198939][ T30] audit: type=1326 audit(1752115197.436:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.21673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeaf8e929 code=0x7fc00000 [ 1291.306845][ T30] audit: type=1326 audit(1752115197.436:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.21673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeaf8e929 code=0x7fc00000 [ 1291.335334][ T30] audit: type=1326 audit(1752115197.436:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.21673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeaf8e929 code=0x7fc00000 [ 1291.370596][ T30] audit: type=1326 audit(1752115197.436:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.21673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeaf8e929 code=0x7fc00000 [ 1291.573950][ T30] audit: type=1326 audit(1752115197.436:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.21673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeaf8e929 code=0x7fc00000 [ 1291.655150][ T30] audit: type=1326 audit(1752115197.436:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.21673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeaf8e929 code=0x7fc00000 [ 1291.685466][ T30] audit: type=1326 audit(1752115197.436:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.21673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeaf8e929 code=0x7fc00000 [ 1291.723034][ T30] audit: type=1326 audit(1752115197.436:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.21673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeaf8e929 code=0x7fc00000 [ 1291.752450][ T30] audit: type=1326 audit(1752115197.436:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.21673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeaf8e929 code=0x7fc00000 [ 1291.784950][ T30] audit: type=1326 audit(1752115197.436:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.21673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeaf8e929 code=0x7fc00000 [ 1291.869194][ T30] audit: type=1326 audit(1752115197.436:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.21673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeaf8e929 code=0x7fc00000 [ 1291.899095][ T30] audit: type=1326 audit(1752115197.436:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.21673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeaf8e929 code=0x7fc00000 [ 1292.010629][ T30] audit: type=1326 audit(1752115197.436:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.21673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeaf8e929 code=0x7fc00000 [ 1292.087418][ T30] audit: type=1326 audit(1752115197.436:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.21673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeaf8e929 code=0x7fc00000 [ 1292.143229][ T30] audit: type=1326 audit(1752115197.436:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.21673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eeaf8e929 code=0x7fc00000 [ 1292.312390][T21638] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1292.381811][ T6284] loop6: detected capacity change from 0 to 2098 [ 1292.484659][T21638] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1292.518488][T21638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.579235][T21638] usb 3-1: config 0 descriptor?? [ 1292.605520][T21638] cp210x 3-1:0.0: cp210x converter detected [ 1292.648792][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21707'. [ 1293.014359][T21638] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1293.243464][T21638] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1293.444879][T21638] usb 3-1: USB disconnect, device number 54 [ 1293.466264][T21638] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1293.511487][T21638] cp210x 3-1:0.0: device disconnected [ 1293.705243][ T6383] netlink: 80 bytes leftover after parsing attributes in process `syz.3.21723'. [ 1294.921444][T21638] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1295.112823][T21638] usb 4-1: Using ep0 maxpacket: 16 [ 1295.125244][T21638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.212165][T21659] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1295.385373][T21659] usb 3-1: Using ep0 maxpacket: 16 [ 1295.401147][T21659] usb 3-1: config 0 has no interfaces? [ 1295.411661][T21659] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1295.431414][T21659] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1295.452685][T21638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.459772][T21659] usb 3-1: Manufacturer: syz [ 1295.472295][T21638] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1295.478802][T21659] usb 3-1: config 0 descriptor?? [ 1295.492354][T21638] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1295.511570][T21638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.522220][ T6369] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1295.523045][T21638] usb 4-1: config 0 descriptor?? [ 1295.703848][ T6369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.725565][ T6369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.742634][ T6369] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1295.749513][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21743'. [ 1295.761396][ T6369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.776452][ T6391] usb 3-1: USB disconnect, device number 55 [ 1295.809356][ T6369] usb 1-1: config 0 descriptor?? [ 1295.997312][T21638] hid-multitouch 0003:0457:07DA.00C9: unknown main item tag 0x0 [ 1296.012389][T21638] hid-multitouch 0003:0457:07DA.00C9: unknown main item tag 0x0 [ 1296.056461][T21638] hid-multitouch 0003:0457:07DA.00C9: unknown main item tag 0x0 [ 1296.073035][T21638] hid-multitouch 0003:0457:07DA.00C9: unknown main item tag 0x0 [ 1296.083534][T21638] hid-multitouch 0003:0457:07DA.00C9: unknown main item tag 0x0 [ 1296.118257][T21638] hid-multitouch 0003:0457:07DA.00C9: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 1296.143592][ T6484] netlink: 92 bytes leftover after parsing attributes in process `syz.4.21749'. [ 1296.244012][ T6369] cm6533_jd 0003:0D8C:0022.00CA: unknown main item tag 0x0 [ 1296.270984][ T6369] cm6533_jd 0003:0D8C:0022.00CA: unknown main item tag 0x0 [ 1296.287322][T21638] usb 4-1: USB disconnect, device number 25 [ 1296.299308][ T6369] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.00CA/input/input216 [ 1296.413976][ T6369] cm6533_jd 0003:0D8C:0022.00CA: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 1296.459606][ T6369] usb 1-1: USB disconnect, device number 29 [ 1296.640434][ T6518] fido_id[6518]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1296.881569][ T6538] kernel read not supported for file /eth0 (pid: 6538 comm: syz.4.21754) [ 1296.941887][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1296.941906][ T30] audit: type=1800 audit(1752115203.326:4052): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.21754" name="eth0" dev="mqueue" ino=175462 res=0 errno=0 [ 1297.372158][ T6550] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1297.425073][ T6565] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.21761'. [ 1297.969865][ T6593] IPVS: Scheduler module ip_vs_ not found [ 1299.013197][ T24] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1299.244462][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1299.284199][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1299.291826][ T24] usb 3-1: can't read configurations, error -71 [ 1299.534908][ T6659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.542730][ T6659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.857909][ T6659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1299.881578][ T6659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1299.942497][ T6369] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1300.057390][ T6659] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.067450][ T6659] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.078980][ T6659] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.097925][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.104659][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.127769][ T6659] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.144113][ T6369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1300.156348][ T6369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.166603][ T6369] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1300.175892][ T6369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.202293][ T6369] usb 1-1: config 0 descriptor?? [ 1300.323464][ T6659] mac80211_hwsim hwsim36 wlan0: left allmulticast mode [ 1300.634687][ T6369] cm6533_jd 0003:0D8C:0022.00CB: unknown main item tag 0x0 [ 1300.660114][ T6369] cm6533_jd 0003:0D8C:0022.00CB: unknown main item tag 0x0 [ 1300.691665][ T6369] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.00CB/input/input217 [ 1300.711264][ T30] audit: type=1326 audit(1752115207.096:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6674 comm="syz.1.21792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83238e929 code=0x7fc00000 [ 1300.733743][ C1] vkms_vblank_simulate: vblank timer overrun [ 1300.803300][ T6369] cm6533_jd 0003:0D8C:0022.00CB: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 1300.864883][ T6369] usb 1-1: USB disconnect, device number 30 [ 1300.882166][T21638] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1301.003019][ T6735] fido_id[6735]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1301.032650][ T6361] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1301.064072][T21638] usb 4-1: Using ep0 maxpacket: 8 [ 1301.091231][T21638] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1301.110286][T21638] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.122850][T21638] usb 4-1: config 0 has no interface number 0 [ 1301.131901][T21638] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1301.146062][T21638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.165892][T21638] usb 4-1: Product: syz [ 1301.170160][T21638] usb 4-1: Manufacturer: syz [ 1301.182840][T21638] usb 4-1: SerialNumber: syz [ 1301.191422][T21638] usb 4-1: config 0 descriptor?? [ 1301.214552][ T6361] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.241022][ T6361] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1301.251332][ T6361] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1301.261224][ T6361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.274516][ T6361] usb 3-1: config 0 descriptor?? [ 1301.287081][ T6361] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1301.301149][ T6361] dvb-usb: bulk message failed: -22 (3/0) [ 1301.333546][ T6361] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1301.358833][ T6361] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1301.382690][ T6361] usb 3-1: media controller created [ 1301.391485][ T6361] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1301.412491][T21638] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 1301.428651][ T6361] dvb-usb: bulk message failed: -22 (6/0) [ 1301.440991][T21638] usb 4-1: No valid video chain found. [ 1301.447782][ T6361] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1301.475155][ T6361] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input218 [ 1301.572637][ T6361] dvb-usb: schedule remote query interval to 150 msecs. [ 1301.615800][ T6361] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1301.644872][ T24] usb 4-1: USB disconnect, device number 26 [ 1301.734124][ T6361] usb 3-1: USB disconnect, device number 58 [ 1301.785048][ T6361] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1302.317853][ T6828] netlink: 27 bytes leftover after parsing attributes in process `syz.4.21822'. [ 1304.733374][ T6923] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.21850'. [ 1304.812315][ T24] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1304.982166][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1304.997264][ T24] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1305.006295][ T24] usb 3-1: config 0 has no interface number 0 [ 1305.028663][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1305.051421][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.067817][ T24] usb 3-1: Product: syz [ 1305.080872][ T24] usb 3-1: Manufacturer: syz [ 1305.090683][ T24] usb 3-1: SerialNumber: syz [ 1305.121428][ T24] usb 3-1: config 0 descriptor?? [ 1305.135428][ T24] smsc95xx v2.0.0 [ 1305.161025][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21855'. [ 1305.171412][ T6941] openvswitch: netlink: nsh attr 8224 is out of range max 3 [ 1305.180214][ T6941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1305.462117][ T6369] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1305.614197][ T6369] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1305.629009][ T6369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1305.651668][ T6369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1305.673252][ T6369] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1305.700133][ T6369] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1305.709681][ T6369] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1305.718214][ T6369] usb 1-1: Manufacturer: syz [ 1305.733965][ T6369] usb 1-1: config 0 descriptor?? [ 1305.802243][T21632] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1305.942376][ T6967] batadv_slave_0: entered promiscuous mode [ 1305.953377][ T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1305.973250][T21632] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.984614][T21632] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1305.985553][ T6966] batadv_slave_0: left promiscuous mode [ 1305.993986][T21632] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.012938][T21632] usb 5-1: config 0 descriptor?? [ 1306.026545][T21632] pwc: Askey VC010 type 2 USB webcam detected. [ 1306.155167][ T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1306.170804][ T6369] appleir 0003:05AC:8243.00CC: unknown main item tag 0x0 [ 1306.217393][ T24] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1306.235332][ T6369] appleir 0003:05AC:8243.00CC: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1306.267249][ T24] usb 3-1: USB disconnect, device number 59 [ 1306.466062][T21632] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1306.667801][ T6369] usb 1-1: USB disconnect, device number 31 [ 1306.902498][T21632] pwc: recv_control_msg error -71 req 04 val 1000 [ 1306.927806][T21632] pwc: recv_control_msg error -71 req 04 val 1300 [ 1306.942962][T21632] pwc: recv_control_msg error -71 req 04 val 1400 [ 1306.955504][T21632] pwc: recv_control_msg error -71 req 02 val 2000 [ 1306.967823][T21632] pwc: recv_control_msg error -71 req 02 val 2100 [ 1306.980773][T21632] pwc: recv_control_msg error -71 req 04 val 1500 [ 1307.018085][T21632] pwc: recv_control_msg error -71 req 02 val 2500 [ 1307.027117][T21632] pwc: recv_control_msg error -71 req 02 val 2400 [ 1307.039767][T21632] pwc: recv_control_msg error -71 req 02 val 2600 [ 1307.047197][T21632] pwc: recv_control_msg error -71 req 02 val 2900 [ 1307.059734][T21632] pwc: recv_control_msg error -71 req 02 val 2800 [ 1307.068426][T21632] pwc: recv_control_msg error -71 req 04 val 1100 [ 1307.082862][T21632] pwc: recv_control_msg error -71 req 04 val 1200 [ 1307.115007][T21632] pwc: Registered as video103. [ 1307.135287][T21632] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input219 [ 1307.175116][T21632] usb 5-1: USB disconnect, device number 28 [ 1307.212717][ T6361] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 1307.384483][ T6361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1307.412549][ T6361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1307.437383][ T6361] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1307.493731][ T6361] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1307.528726][ T6361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.557821][ T6361] usb 3-1: config 0 descriptor?? [ 1307.997088][ T6361] plantronics 0003:047F:FFFF.00CD: unknown main item tag 0x0 [ 1308.064010][ T6361] plantronics 0003:047F:FFFF.00CD: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1308.276763][T21638] usb 3-1: USB disconnect, device number 60 [ 1308.321770][ T7093] @: renamed from vlan0 [ 1308.692598][ T7128] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1308.699174][ T7128] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1308.719660][ T7128] vhci_hcd vhci_hcd.0: Device attached [ 1308.728789][ T7129] vhci_hcd: connection closed [ 1308.728937][T20094] vhci_hcd: stop threads [ 1308.747290][T20094] vhci_hcd: release socket [ 1308.754503][T20094] vhci_hcd: disconnect device [ 1308.842391][ T6369] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1309.002279][ T6369] usb 4-1: Using ep0 maxpacket: 16 [ 1309.009505][ T6369] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1309.019707][ T6369] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.030991][ T6369] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1309.049671][ T6369] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1309.061547][ T6369] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.070879][ T6369] usb 4-1: Product: syz [ 1309.077137][ T6369] usb 4-1: Manufacturer: syz [ 1309.082923][T21638] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1309.092458][ T6369] usb 4-1: SerialNumber: syz [ 1309.255019][T21638] usb 3-1: Using ep0 maxpacket: 16 [ 1309.277158][T21638] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1309.290931][T21638] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1309.312120][T21638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.340282][T21638] usb 3-1: config 0 descriptor?? [ 1309.362661][T21638] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input221 [ 1309.512914][ T6369] usb 4-1: 0:2 : does not exist [ 1309.707394][ T5202] bcm5974 3-1:0.0: could not read from device [ 1309.751852][T21638] usb 3-1: USB disconnect, device number 61 [ 1309.772760][ T5202] bcm5974 3-1:0.0: could not read from device [ 1309.820124][ T7189] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.21906'. [ 1310.157384][ T6369] usb 4-1: USB disconnect, device number 27 [ 1310.221625][T10134] udevd[10134]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1310.232273][T21659] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1310.267646][ T7235] macsec3: entered allmulticast mode [ 1310.441381][ T7250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1310.452350][T21659] usb 1-1: Using ep0 maxpacket: 16 [ 1310.474434][T21659] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1310.500476][T21659] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.545186][T21659] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1310.551892][T21659] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1310.589132][T21659] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.639265][T21659] usb 1-1: config 0 descriptor?? [ 1311.127408][T21659] hid (null): bogus close delimiter [ 1311.153832][T21659] cougar 0003:060B:500A.00CE: unexpected long global item [ 1311.172573][ T6361] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 1311.205215][T21659] cougar 0003:060B:500A.00CE: parse failed [ 1311.234616][T21659] cougar 0003:060B:500A.00CE: probe with driver cougar failed with error -22 [ 1311.363015][ T6361] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1311.387247][ T24] usb 1-1: USB disconnect, device number 32 [ 1311.402142][ T6361] usb 4-1: config 0 has no interface number 0 [ 1311.408304][ T6361] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1311.456834][ T6361] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1311.468220][ T6361] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1311.597061][ T6361] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1311.682798][ T6361] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1311.707837][ T6361] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1311.722534][ T6361] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1311.731615][ T6361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.753077][ T6361] usb 4-1: config 0 descriptor?? [ 1311.760914][ T7278] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1311.771077][ T7278] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1311.792161][ T6361] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1311.945736][ T7336] netlink: 172 bytes leftover after parsing attributes in process `syz.1.21933'. [ 1312.543727][T21659] usb 4-1: USB disconnect, device number 28 [ 1312.558495][T21659] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1313.097334][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21947'. [ 1313.123181][ T7379] chnl_net:caif_netlink_parms(): no params data found [ 1313.456596][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21956'. [ 1313.557295][ T7420] usb usb8: usbfs: process 7420 (syz.3.21958) did not claim interface 0 before use [ 1314.492496][T21659] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1314.669919][T21659] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1314.729912][T21659] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1314.744356][T21659] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1314.754973][T21659] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1314.769667][T21659] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1314.779664][T21659] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.791110][T21659] usb 4-1: config 0 descriptor?? [ 1314.848479][ T7490] loop3: detected capacity change from 0 to 1 [ 1314.876223][ T7490] Dev loop3: unable to read RDB block 1 [ 1314.886210][ T7490] loop3: unable to read partition table [ 1314.898964][ T7490] loop3: partition table beyond EOD, truncated [ 1314.925707][ T7490] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1315.313313][T21659] plantronics 0003:047F:FFFF.00CF: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1315.546464][ T6361] usb 4-1: USB disconnect, device number 29 [ 1315.582187][T21638] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1315.764775][T21638] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1315.783450][T21638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1315.797315][T21638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1315.808666][T21638] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1315.832342][T21638] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1315.841427][T21638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.874935][T21638] usb 3-1: config 0 descriptor?? [ 1316.217507][ T30] audit: type=1800 audit(1752115222.606:4054): pid=7571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.21991" name="file1" dev="tmpfs" ino=1044 res=0 errno=0 [ 1316.332412][T21638] plantronics 0003:047F:FFFF.00D0: ignoring exceeding usage max [ 1316.407847][T21638] plantronics 0003:047F:FFFF.00D0: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1316.464955][ T7591] sctp: [Deprecated]: syz.3.21993 (pid 7591) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1316.464955][ T7591] Use struct sctp_sack_info instead [ 1316.489127][T21659] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1316.623443][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21995'. [ 1316.649006][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21995'. [ 1316.677898][ T7595] netlink: 'syz.0.21995': attribute type 19 has an invalid length. [ 1316.703095][T21659] usb 2-1: Using ep0 maxpacket: 16 [ 1316.711769][T21659] usb 2-1: config 0 has no interfaces? [ 1316.738595][T21659] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1316.765933][T21659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.792874][T21659] usb 2-1: Product: syz [ 1316.805496][T21659] usb 2-1: Manufacturer: syz [ 1316.821910][T21659] usb 2-1: SerialNumber: syz [ 1316.863770][T21659] usb 2-1: config 0 descriptor?? [ 1317.606870][ T6391] usb 2-1: USB disconnect, device number 22 [ 1317.633752][T21659] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1317.779158][ T7662] vivid-003: disconnect [ 1317.805510][ T7662] vivid-003: reconnect [ 1317.843633][T21659] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1317.861033][T21659] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1317.892264][T21659] usb 4-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 1317.911490][T21659] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.951285][T21659] usb 4-1: config 0 descriptor?? [ 1318.162453][ T977] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1318.352238][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1318.368947][ T977] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1318.378767][ T977] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1318.396462][ T977] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1318.423559][T21659] hid-generic 0003:04F3:0754.00D1: failed to start in urb: -90 [ 1318.450487][T21659] hid-generic 0003:04F3:0754.00D1: hidraw1: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.3-1/input0 [ 1318.451645][ T977] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1318.484102][ T6361] usb 3-1: USB disconnect, device number 62 [ 1318.512134][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1318.526015][ T24] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1318.555134][ T24] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1318.562248][ T977] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1318.575594][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1318.632063][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1318.658981][ T977] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1318.680096][T21638] usb 4-1: USB disconnect, device number 30 [ 1318.689615][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1318.698945][ T977] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1318.709157][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1318.719193][ T977] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1318.734382][ T24] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1318.745693][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.748150][ T977] usb 5-1: Product: syz [ 1318.807496][ T977] usb 5-1: Manufacturer: syz [ 1318.816369][ T977] usb 5-1: SerialNumber: syz [ 1318.843984][ T24] usb 2-1: config 0 descriptor?? [ 1318.862226][ T977] usb 5-1: config 0 descriptor?? [ 1318.883250][ T7667] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1318.898295][ T977] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1318.917600][ T977] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1319.075787][ T24] usblp 2-1:0.0: usblp1: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1319.220993][ T24] usb 5-1: USB disconnect, device number 29 [ 1319.269849][ T24] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1319.310122][T21638] usb 2-1: USB disconnect, device number 23 [ 1319.374728][T21638] usblp1: removed [ 1319.570714][ T7776] vivid-000: disconnect [ 1319.622529][ T24] vivid-000: reconnect [ 1321.976821][ T7899] input: syz1 as /devices/virtual/input/input223 [ 1322.088671][ T7905] syzkaller1: entered promiscuous mode [ 1322.104601][ T7905] syzkaller1: entered allmulticast mode [ 1322.138383][ T7911] netlink: 'syz.0.22063': attribute type 9 has an invalid length. [ 1322.224812][ T7911] netlink: 'syz.0.22063': attribute type 9 has an invalid length. [ 1322.583134][T21638] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1322.597512][ T7934] netlink: 'syz.1.22069': attribute type 1 has an invalid length. [ 1322.762501][ T977] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1322.783847][T21638] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1322.834793][T21638] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1322.864155][T21638] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1322.922095][T21638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.984257][ T977] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1323.003911][ T7917] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1323.038786][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1323.055146][T21638] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1323.122133][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1323.222180][ T977] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1323.316441][ T977] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1323.342910][T21638] usb 3-1: USB disconnect, device number 63 [ 1323.382767][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.473247][ T977] usb 1-1: config 0 descriptor?? [ 1323.482833][ T7927] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1323.605110][ T7990] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1323.619055][ T7989] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1323.861278][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22081'. [ 1323.946246][ T977] plantronics 0003:047F:FFFF.00D2: reserved main item tag 0xd [ 1323.983959][ T977] plantronics 0003:047F:FFFF.00D2: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1324.169984][ T8074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1324.310916][ T6369] usb 1-1: USB disconnect, device number 33 [ 1324.435984][ T8069] fido_id[8069]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1324.665149][T21659] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 1324.903324][T21659] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1324.934268][T21659] usb 2-1: config 0 has no interface number 0 [ 1324.941867][T21659] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1324.958037][T21659] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1324.969047][T21659] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1324.978493][T21659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.050557][T21659] usb 2-1: config 0 descriptor?? [ 1325.062229][ T8089] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1325.107057][T21659] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1325.335543][T21659] usb 2-1: USB disconnect, device number 24 [ 1325.335641][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1325.988423][T21638] hid-generic 0000:0003:0000.00D3: unknown main item tag 0x0 [ 1325.999560][T21638] hid-generic 0000:0003:0000.00D3: unknown main item tag 0x0 [ 1326.027880][T21638] hid-generic 0000:0003:0000.00D3: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1326.222445][T21632] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1326.416750][T21632] usb 1-1: Using ep0 maxpacket: 32 [ 1326.427390][ T8187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22109'. [ 1326.476328][T21632] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1326.516399][T21632] usb 1-1: config 0 has no interface number 0 [ 1326.555000][T21632] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1326.600873][T21632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.639987][T21632] usb 1-1: Product: syz [ 1326.650568][T21632] usb 1-1: Manufacturer: syz [ 1326.697878][T21632] usb 1-1: SerialNumber: syz [ 1326.723867][T21632] usb 1-1: config 0 descriptor?? [ 1326.751950][T21632] smsc95xx v2.0.0 [ 1327.051557][ T30] audit: type=1326 audit(1752115233.426:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.2.22114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa196d8e929 code=0x7ffc0000 [ 1327.118131][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22115'. [ 1327.137189][ T30] audit: type=1326 audit(1752115233.426:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.2.22114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa196d2ab19 code=0x7ffc0000 [ 1327.181569][ T30] audit: type=1326 audit(1752115233.426:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.2.22114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa196d2ab19 code=0x7ffc0000 [ 1327.230834][ T30] audit: type=1326 audit(1752115233.426:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.2.22114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa196d2ab19 code=0x7ffc0000 [ 1327.282501][ T30] audit: type=1326 audit(1752115233.426:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.2.22114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa196d2ab19 code=0x7ffc0000 [ 1327.344404][ T30] audit: type=1326 audit(1752115233.426:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.2.22114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa196d8e929 code=0x7ffc0000 [ 1327.402218][ T6369] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1327.406792][ T30] audit: type=1326 audit(1752115233.426:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.2.22114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa196d8e929 code=0x7ffc0000 [ 1327.455363][ T30] audit: type=1326 audit(1752115233.426:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.2.22114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa196d2ab19 code=0x7ffc0000 [ 1327.496234][ T30] audit: type=1326 audit(1752115233.426:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.2.22114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa196d2ab19 code=0x7ffc0000 [ 1327.570516][ T30] audit: type=1326 audit(1752115233.426:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.2.22114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa196d2ab19 code=0x7ffc0000 [ 1327.593851][ T6369] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1327.614033][ T6369] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.616214][ T8232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1327.634848][ T6369] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1327.652167][ T6369] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.664914][ T6369] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9649, setting to 1024 [ 1327.685592][ T6369] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1327.695269][ T6369] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1327.703391][ T6369] usb 3-1: Product: syz [ 1327.710767][ T6369] usb 3-1: Manufacturer: syz [ 1327.730154][ T8216] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1327.744523][ T6369] cdc_wdm 3-1:1.0: skipping garbage [ 1327.762137][ T6369] cdc_wdm 3-1:1.0: skipping garbage [ 1327.778054][ T6369] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1327.804064][ T6369] cdc_wdm 3-1:1.0: Unknown control protocol [ 1327.847239][T21632] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 1327.883858][T21632] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1327.923892][T21632] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1327.954054][ C1] wdm_int_callback: 11 callbacks suppressed [ 1327.954077][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1327.966581][ C1] wdm_int_callback: 11 callbacks suppressed [ 1327.966599][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1327.980888][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1327.987526][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1327.993854][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1328.000468][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1328.006715][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1328.013330][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1328.019632][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1328.026243][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1328.032660][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1328.039280][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1328.045573][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1328.052183][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1328.058484][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1328.065101][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1328.071369][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1328.077966][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1328.084236][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1328.090849][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1328.105998][T21632] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1328.125143][T21632] usb 1-1: USB disconnect, device number 34 [ 1328.538444][T21632] usb 3-1: USB disconnect, device number 64 [ 1328.842853][ T8307] syzkaller1: entered promiscuous mode [ 1328.866767][ T8307] syzkaller1: entered allmulticast mode [ 1328.983686][ T8316] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.22136'. [ 1329.094894][ T8322] input: syz1 as /devices/virtual/input/input226 [ 1329.095197][T21632] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1329.282251][T21632] usb 3-1: Using ep0 maxpacket: 16 [ 1329.297947][T21632] usb 3-1: config 0 has no interfaces? [ 1329.315297][T21632] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1329.332603][T21632] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1329.366615][T21632] usb 3-1: SerialNumber: syz [ 1329.387254][T21632] usb 3-1: config 0 descriptor?? [ 1329.628588][ T8350] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005d: 0000 [#1] SMP KASAN PTI [ 1329.640530][ T8350] KASAN: null-ptr-deref in range [0x00000000000002e8-0x00000000000002ef] [ 1329.648964][ T8350] CPU: 0 UID: 0 PID: 8350 Comm: syz.4.22147 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1329.661046][ T8350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1329.671116][ T8350] RIP: 0010:hfsc_qlen_notify+0x2e/0x160 [ 1329.676682][ T8350] Code: 55 41 57 41 56 41 55 41 54 53 48 89 f3 49 bc 00 00 00 00 00 fc ff df e8 f0 74 3d f8 4c 8d b3 ec 02 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 e8 00 00 00 41 8b 2e 31 ff 89 ee e8 09 [ 1329.696277][ T8350] RSP: 0018:ffffc9000e2570f0 EFLAGS: 00010203 [ 1329.702333][ T8350] RAX: 000000000000005d RBX: 0000000000000000 RCX: 0000000000080000 [ 1329.710286][ T8350] RDX: ffffc900149b2000 RSI: 00000000000002c4 RDI: 00000000000002c5 [ 1329.718240][ T8350] RBP: dffffc0000000000 R08: ffff88807ea13c00 R09: 0000000000000002 [ 1329.726197][ T8350] R10: 00000000ffffffff R11: ffffffff8982b160 R12: dffffc0000000000 [ 1329.734180][ T8350] R13: ffff888021698000 R14: 00000000000002ec R15: ffff888021698000 [ 1329.742153][ T8350] FS: 00007f0c6f4456c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 1329.751077][ T8350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1329.757649][ T8350] CR2: 000000110c2a831f CR3: 000000002cc58000 CR4: 00000000003526f0 [ 1329.765616][ T8350] Call Trace: [ 1329.768886][ T8350] [ 1329.771806][ T8350] qdisc_tree_reduce_backlog+0x299/0x480 [ 1329.777438][ T8350] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 1329.783158][ T8350] hhf_change+0x764/0xad0 [ 1329.787486][ T8350] ? __pfx_hhf_change+0x10/0x10 [ 1329.792336][ T8350] ? __pfx_hhf_init+0x10/0x10 [ 1329.797005][ T8350] hhf_init+0x213/0x950 [ 1329.801152][ T8350] ? __pfx_hhf_init+0x10/0x10 [ 1329.805819][ T8350] qdisc_create+0x7a9/0xea0 [ 1329.810315][ T8350] tc_modify_qdisc+0x1426/0x2010 [ 1329.815244][ T8350] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1329.820525][ T8350] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1329.825796][ T8350] rtnetlink_rcv_msg+0x77c/0xb70 [ 1329.830725][ T8350] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1329.835824][ T8350] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1329.841275][ T8350] netlink_rcv_skb+0x205/0x470 [ 1329.846029][ T8350] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1329.851479][ T8350] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1329.856757][ T8350] ? netlink_deliver_tap+0x2e/0x1b0 [ 1329.861947][ T8350] ? netlink_deliver_tap+0x2e/0x1b0 [ 1329.867141][ T8350] netlink_unicast+0x758/0x8d0 [ 1329.871899][ T8350] netlink_sendmsg+0x805/0xb30 [ 1329.876657][ T8350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1329.881933][ T8350] ? aa_sock_msg_perm+0x94/0x160 [ 1329.886870][ T8350] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1329.892154][ T8350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1329.897431][ T8350] __sock_sendmsg+0x219/0x270 [ 1329.902105][ T8350] ____sys_sendmsg+0x505/0x830 [ 1329.906863][ T8350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1329.912140][ T8350] ? import_iovec+0x74/0xa0 [ 1329.916634][ T8350] ___sys_sendmsg+0x21f/0x2a0 [ 1329.921310][ T8350] ? __pfx____sys_sendmsg+0x10/0x10 [ 1329.926509][ T8350] ? __fget_files+0x2a/0x420 [ 1329.931093][ T8350] ? __fget_files+0x3a0/0x420 [ 1329.935770][ T8350] __x64_sys_sendmsg+0x19b/0x260 [ 1329.940701][ T8350] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1329.946154][ T8350] ? rcu_is_watching+0x15/0xb0 [ 1329.950928][ T8350] ? do_syscall_64+0xbe/0x3b0 [ 1329.955616][ T8350] do_syscall_64+0xfa/0x3b0 [ 1329.960120][ T8350] ? lockdep_hardirqs_on+0x9c/0x150 [ 1329.965321][ T8350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.971379][ T8350] ? clear_bhb_loop+0x60/0xb0 [ 1329.976048][ T8350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.981927][ T8350] RIP: 0033:0x7f0c6e58e929 [ 1329.986332][ T8350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1330.005931][ T8350] RSP: 002b:00007f0c6f445038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1330.014337][ T8350] RAX: ffffffffffffffda RBX: 00007f0c6e7b5fa0 RCX: 00007f0c6e58e929 [ 1330.022298][ T8350] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1330.030265][ T8350] RBP: 00007f0c6e610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1330.038224][ T8350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1330.046184][ T8350] R13: 0000000000000000 R14: 00007f0c6e7b5fa0 R15: 00007f0c6e8dfa28 [ 1330.054150][ T8350] [ 1330.057167][ T8350] Modules linked in: [ 1330.061280][ T8350] ---[ end trace 0000000000000000 ]--- [ 1330.066783][ T8350] RIP: 0010:hfsc_qlen_notify+0x2e/0x160 [ 1330.072376][ T8350] Code: 55 41 57 41 56 41 55 41 54 53 48 89 f3 49 bc 00 00 00 00 00 fc ff df e8 f0 74 3d f8 4c 8d b3 ec 02 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 e8 00 00 00 41 8b 2e 31 ff 89 ee e8 09 [ 1330.079695][T21632] usb 3-1: USB disconnect, device number 65 [ 1330.092033][ T8350] RSP: 0018:ffffc9000e2570f0 EFLAGS: 00010203 [ 1330.092059][ T8350] RAX: 000000000000005d RBX: 0000000000000000 RCX: 0000000000080000 [ 1330.092072][ T8350] RDX: ffffc900149b2000 RSI: 00000000000002c4 RDI: 00000000000002c5 [ 1330.092084][ T8350] RBP: dffffc0000000000 R08: ffff88807ea13c00 R09: 0000000000000002 [ 1330.092096][ T8350] R10: 00000000ffffffff R11: ffffffff8982b160 R12: dffffc0000000000 [ 1330.092109][ T8350] R13: ffff888021698000 R14: 00000000000002ec R15: ffff888021698000 [ 1330.092122][ T8350] FS: 00007f0c6f4456c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 1330.092138][ T8350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1330.133536][T13933] tipc: Subscription rejected, illegal request [ 1330.136036][ T8350] CR2: 000000110c2a831f CR3: 000000002cc58000 CR4: 00000000003526f0 [ 1330.173799][ T8350] Kernel panic - not syncing: Fatal exception in interrupt [ 1330.181260][ T8350] Kernel Offset: disabled [ 1330.185576][ T8350] Rebooting in 86400 seconds..