last executing test programs: 9.047256722s ago: executing program 0 (id=1034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 8.873109846s ago: executing program 0 (id=1035): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000000)=[{0xd0, 0x0, 0x0, 0x0}, {0x1000, 0x2000, 0x0, 0x0}], 0x2}) 8.834156567s ago: executing program 2 (id=1036): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 8.442751695s ago: executing program 2 (id=1039): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 8.24917242s ago: executing program 2 (id=1040): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00') read$FUSE(r0, &(0x7f0000004d00)={0x2020}, 0x2020) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/193, 0xc1}], 0x1, 0x74, 0x4) read$FUSE(r0, &(0x7f0000006d40)={0x2020}, 0x2020) 8.158785051s ago: executing program 2 (id=1041): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1000, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x80002, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x3ad, 0x0, 0x0}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000500)=0x0) read$FUSE(r7, &(0x7f0000001740)={0x2020}, 0x2020) close(0x3) io_submit(r9, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f00000001c0)='m', 0xffffff4c}]) alarm(0x1000000001) alarm(0x0) r10 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r11 = fsmount(r10, 0x1, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r12, &(0x7f0000000100), 0x0, 0x200, 0x1000, 0x12) r13 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r13, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r13, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r13, 0x40045612, &(0x7f0000000100)=0x1) fsetxattr$system_posix_acl(r10, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x10}, [], {0x4, 0x6}}, 0x24, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r14 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r14, 0xc038480a, 0x0) 6.447569069s ago: executing program 2 (id=1045): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(0x0, 0x82, 0x2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000180)='A') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000d80), &(0x7f0000000e00)=0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x23, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x802, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe957, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x218, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0x10, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xa, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x80001, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0xc], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x400, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0xcfc9, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x1, 0x86, 0x44, 0x409, 0x4, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff5, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0xc7e9, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_DESTROY(r3, 0x5502) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010102}, 0x10) fcntl$lock(r4, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x3, 0xfffffffffffffffe}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) readahead(r5, 0x8004, 0x80000000) fcntl$lock(r4, 0x26, &(0x7f0000000080)) unshare(0x22020400) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="b00100001000010027bd700000000000ff0200000000000000000000000000010a0102fe0000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000003200000000000000000000000000000000000000fefffffffffffffffcffffffffffffff030000000000000000000000000000000000000000000000fcffffffffffffff01000000000000000900000000000000010000000000000000084000000000000900000000000000920200000000000000100000000000000000000000000000000000000a0001002c000000580002006362632874776f66697368290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000e0fa01040040000000100000fff2074f4c001400686d616328736861323536290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000001c00040000004e244e22000064010100"/356], 0x1b0}}, 0x44050) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffd, 0x4, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) syz_open_pts(0xffffffffffffffff, 0x8182) 6.297513812s ago: executing program 1 (id=1047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0xb05, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x45}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x10000080}, 0x4042) 6.180333215s ago: executing program 1 (id=1048): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff}}}, 0x90) 6.153334875s ago: executing program 1 (id=1049): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(0x0, 0x64042, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$inet_mreqsrc(r3, 0x0, 0x3, 0x0, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={r0, 0x7fff, 0x0, r0}) 5.736170084s ago: executing program 0 (id=1052): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x8}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xd, 0x6, 0x3, 0x7, 0x8, 0x2, 0x10, 0x4], 0x3, [0x1751, 0xb, 0xad1e, 0x2002, 0x1, 0x2, 0x2, 0xd06, 0xc, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0x7, 0x9, 0x8, 0x1, 0x9, 0x1, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x2002]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x400000000010, 0x3, 0x0) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.211240966s ago: executing program 0 (id=1055): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1000, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x80002, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x3ad, 0x0, 0x0}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000500)=0x0) read$FUSE(r7, &(0x7f0000001740)={0x2020}, 0x2020) close(0x3) io_submit(r9, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f00000001c0)='m', 0xffffff4c}]) alarm(0x1000000001) alarm(0x0) r10 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r11 = fsmount(r10, 0x1, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r12, &(0x7f0000000100), 0x0, 0x200, 0x1000, 0x12) r13 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r13, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r13, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r13, 0x40045612, &(0x7f0000000100)=0x1) fsetxattr$system_posix_acl(r10, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x10}, [], {0x4, 0x6}}, 0x24, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r14 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r14, 0xc038480a, 0x0) 5.02559284s ago: executing program 1 (id=1056): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x439, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x6536d5ef40a93735}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 4.609403919s ago: executing program 1 (id=1058): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000000c0)="0f01c80f205066b98200004066b80000000066ba000000000f3067660f5e00baf80c66b8e4844e8866efbafc0c66ed660f090f01d764660fdceff30f0966f3aa", 0x40}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf20) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 4.53293849s ago: executing program 4 (id=1059): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff}}}, 0x90) 4.480202842s ago: executing program 3 (id=1060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xffffffffffffffff]}, &(0x7f0000000280), 0x0, 0x8) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 2.496419065s ago: executing program 4 (id=1061): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2.472934086s ago: executing program 2 (id=1062): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000000)=[{0xd0, 0x0, 0x0, 0x0}, {0x1000, 0x2000, 0x0, 0x0}], 0x2}) 2.436361747s ago: executing program 3 (id=1063): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x1, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x1, 0xa, 0x2, 0x6, 0x12, 0x5, 0x40}, {0x804, 0x2, 0x1, 0x45, 0x9, 0x0, 0x4, 0xff, 0x0, 0x4, 0x6, 0x6f, 0x20c}, {0x0, 0x3, 0x38, 0x8, 0x84, 0x7, 0x3, 0x50, 0x9, 0x4, 0x4, 0x8, 0x91}], 0xdfffffff}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd7, 0x8, 0x61, 0x200002000001, 0x5, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x7, 0x400000000, 0x6, 0xf739], 0x8000000}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1, 0x100}, {0x25}, {0x6}]}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) r4 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf, 0x3e}, 0x4000006, 0x2}) 2.28820797s ago: executing program 4 (id=1064): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2.144907603s ago: executing program 4 (id=1065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) recvmmsg(r3, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 1.864918359s ago: executing program 0 (id=1066): ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006800090300000000000000000a00"/36], 0x24}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0xa8303, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x541b, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000140)=0x2) syz_open_dev$hiddev(&(0x7f0000000040), 0x9, 0xa000) 1.39828371s ago: executing program 3 (id=1067): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(0x0, 0x64042, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$inet_mreqsrc(r3, 0x0, 0x3, 0x0, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={r0, 0x7fff, 0x0, r0}) 1.310144511s ago: executing program 1 (id=1068): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r5 = syz_io_uring_setup(0x3bd6, 0x0, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_SOCKET={0x2d, 0x0, 0x0, 0x9, 0xffffffff, 0x0, 0x1, 0x0, 0x1, {0x0, 0x0, 0x1000}}) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2400d001}, 0x20040040) r9 = fcntl$dupfd(r0, 0x406, r0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0xffffffffffffffcc, r1}, './file0\x00'}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@loopback, 0x0}, &(0x7f0000000180)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r10, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='6\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="020026bd7000fddbdf25060000005c0001801400020073797a6b616c6c657231000000000000140002006272696467655f736c6176655f30000008", @ANYRES32=r12, @ANYBLOB="140002006261746164765f736c6176655f310000140002007465616d5f736c6176655f31000000001400018008000300020000000800030001000000"], 0x84}}, 0xc040) connect$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r13 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r13, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0xfffffffa, &(0x7f0000000400)}) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x27, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x14000040}, 0x8800) r15 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r16 = socket$kcm(0x2d, 0x2, 0x0) writev(r16, &(0x7f0000002080)=[{&(0x7f0000000f00)="ff", 0x1}], 0x1) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r17 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r17, &(0x7f0000000480)=[{&(0x7f0000000140)="02", 0x1}, {&(0x7f00000003c0)='H', 0x1}], 0x2) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r18, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r15, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) 642.872856ms ago: executing program 4 (id=1069): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) 294.310134ms ago: executing program 3 (id=1070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, r1, 0x1, 0x20000002, 0x25dfdc01, {{}, {@val={0x8, 0x3, r3}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa}]]}, 0x28}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) 236.356935ms ago: executing program 4 (id=1071): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x84}], 0x1, 0x3ff) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x8040, 0x0, 0x0) listen(0xffffffffffffffff, 0xda90) getxattr(&(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000400)=""/254, 0xfe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000490000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x7ff, 0xfa11, 0xff7fffff}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1451c2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x10, @loopback, 0x80000}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000c00)={0x14, &(0x7f0000000ac0)={0x20, 0x4, 0x53, {0x53, 0x2, "d6cad23fb933daccf712fdccfef892b8141e05ca8624a8843961eae9cdff2ba0447c6a6ac2a9d6235188f41247fa018ef22405125f94fe798e71f63ebfa007cf22b4d50fac6429c3fbf1a128c01414d6ba"}}, &(0x7f0000000b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}, &(0x7f0000000b80)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, 'hM'}, @main=@item_012={0x1, 0x0, 0xa, '$'}, @main=@item_012={0x2, 0x0, 0x9, "ecfc"}]}}, &(0x7f0000000bc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x272}}}}, &(0x7f0000000e00)={0x18, &(0x7f0000000c40)={0x40, 0x5, 0x51, "710e44b1ac2b5be6a621a9a7a3838e9d24b175f708b5a83daab98359c291f7c15a30312849dea751320d38d42ada585d45b1aa9da6794278bf1c89e03d211d28d4a2b840fbf60b8ce870e28245ae156223"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000d40)={0x20, 0x1, 0x6a, "d1ab51975d5f002f31807e83159ca3b62a5fd7cdc18f1d8208b65aae6ff7afa1d0f04ed029c9e3ca37a225662753737d4b55480b97c7c3dd84396536803353059ef489aaeb1e97b6584c85203bb1a79969111ab7a43b0e6d350ae62f1c2420c09d946d626cc82765d213"}, &(0x7f0000000dc0)={0x20, 0x3, 0x1, 0x9}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r3, &(0x7f0000000f80)={'syz1\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0x1, 0x4, 0x9, 0x1, 0x4, 0x7, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x7, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0x10, 0x6, 0x3, 0x9, 0x804d7e, 0xff, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd9, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x48, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x1000, 0x1a9e1bfc, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x6ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x4, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x6, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x3, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x1, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x1000, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 132.345617ms ago: executing program 3 (id=1072): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff}}}, 0x90) 86.431618ms ago: executing program 3 (id=1073): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xffffffffffffffff]}, &(0x7f0000000280), 0x0, 0x8) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 0s ago: executing program 0 (id=1074): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) kernel console output (not intermixed with test programs): 233.207643][ T27] usb 3-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 233.217246][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.225468][ T27] usb 3-1: Product: syz [ 233.229807][ T27] usb 3-1: Manufacturer: syz [ 233.235344][ T27] usb 3-1: SerialNumber: syz [ 233.567749][ T27] usb 3-1: USB disconnect, device number 4 [ 233.872302][ T3598] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 234.062324][ T3598] usb 4-1: Using ep0 maxpacket: 8 [ 234.071250][ T3598] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 234.115169][ T3598] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.173856][ T4315] hub 1-1:1.232: bad descriptor, ignoring hub [ 234.183988][ T4315] hub: probe of 1-1:1.232 failed with error -5 [ 234.183993][ T3598] usb 4-1: config 0 has no interfaces? [ 234.217011][ T3598] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 234.251414][ T3598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.269466][ T4315] option 1-1:1.232: GSM modem (1-port) converter detected [ 234.302502][ T3598] usb 4-1: Product: syz [ 234.306760][ T3598] usb 4-1: Manufacturer: syz [ 234.311840][ T3598] usb 4-1: SerialNumber: syz [ 234.327972][ T4315] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 234.360401][ T3598] usb 4-1: config 0 descriptor?? [ 234.400004][ T5873] loop5: detected capacity change from 0 to 7 [ 234.407328][ T4315] usb 1-1: USB disconnect, device number 7 [ 234.427714][ T4315] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 234.450106][ T5868] Dev loop5: unable to read RDB block 7 [ 234.457080][ T4315] option 1-1:1.232: device disconnected [ 234.464346][ T5868] loop5: AHDI p1 [ 234.472431][ T5868] loop5: partition table partially beyond EOD, truncated [ 234.597059][ T3598] usb 4-1: USB disconnect, device number 15 [ 234.862652][ T5873] Dev loop5: unable to read RDB block 7 [ 234.869621][ T5873] loop5: AHDI p1 [ 234.875879][ T5873] loop5: partition table partially beyond EOD, truncated [ 236.251837][ T4315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 236.275952][ T4315] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 236.689331][ T3598] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 236.723589][ T3598] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 236.832485][ T27] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 237.034486][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 237.046537][ T27] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 237.116808][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.198912][ T27] usb 2-1: config 0 has no interfaces? [ 237.253533][ T27] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 237.297725][ T5923] overlayfs: missing 'lowerdir' [ 237.328048][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.382353][ T27] usb 2-1: Product: syz [ 237.411979][ T27] usb 2-1: Manufacturer: syz [ 237.455840][ T27] usb 2-1: SerialNumber: syz [ 237.486834][ T27] usb 2-1: config 0 descriptor?? [ 237.580908][ T5914] netlink: 20 bytes leftover after parsing attributes in process `syz.3.406'. [ 237.735911][ T27] usb 2-1: USB disconnect, device number 10 [ 238.178827][ T5926] loop4: detected capacity change from 0 to 40427 [ 238.257941][ T5926] F2FS-fs (loop4): Found nat_bits in checkpoint [ 238.525102][ T5926] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 238.863165][ T4281] syz-executor: attempt to access beyond end of device [ 238.863165][ T4281] loop4: rw=2049, sector=45096, nr_sectors = 120 limit=40427 [ 239.877833][ T4320] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 239.912971][ T4320] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 240.315686][ T4320] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 240.370729][ T4320] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz1] on syz0 [ 241.873690][ T5968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.421'. [ 241.892342][ T27] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 241.939679][ T5991] tipc: Enabled bearer , priority 0 [ 242.020750][ T5990] tipc: Disabling bearer [ 242.113489][ T5996] overlayfs: missing 'lowerdir' [ 242.132443][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 242.167696][ T27] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 242.179693][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.207881][ T27] usb 2-1: config 0 has no interfaces? [ 242.231345][ T27] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 242.280800][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.304574][ T27] usb 2-1: Product: syz [ 242.310759][ T27] usb 2-1: Manufacturer: syz [ 242.324260][ T27] usb 2-1: SerialNumber: syz [ 242.341276][ T27] usb 2-1: config 0 descriptor?? [ 242.573876][ T3598] usb 2-1: USB disconnect, device number 11 [ 245.950691][ T6030] tipc: Enabling of bearer rejected, failed to enable media [ 246.020416][ T7] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 246.042677][ T7] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 246.215754][ T6041] loop5: detected capacity change from 0 to 7 [ 246.255568][ T5865] Dev loop5: unable to read RDB block 7 [ 246.261491][ T5865] loop5: AHDI p1 [ 246.290114][ T5865] loop5: partition table partially beyond EOD, truncated [ 246.329828][ T6041] Dev loop5: unable to read RDB block 7 [ 246.341023][ T6041] loop5: AHDI p1 [ 246.355093][ T6041] loop5: partition table partially beyond EOD, truncated [ 246.662243][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 246.852527][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 246.863021][ T7] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 246.871259][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.912030][ T7] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 246.945891][ T7] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 246.962238][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.970316][ T7] usb 3-1: Product: syz [ 247.016375][ T7] usb 3-1: Manufacturer: syz [ 247.021057][ T7] usb 3-1: SerialNumber: syz [ 247.063734][ T7] usb 3-1: config 0 descriptor?? [ 247.322254][ T4315] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 247.332814][ T7] usb 3-1: USB disconnect, device number 5 [ 248.262268][ T4315] usb 1-1: Using ep0 maxpacket: 16 [ 248.286616][ T4315] usb 1-1: unable to get BOS descriptor or descriptor too short [ 248.301006][ T4315] usb 1-1: config 1 has an invalid interface number: 232 but max is 0 [ 248.312971][ T4315] usb 1-1: config 1 has no interface number 0 [ 248.342444][ T4315] usb 1-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 248.360876][ T4315] usb 1-1: config 1 interface 232 has no altsetting 0 [ 248.400807][ T4315] usb 1-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 248.422951][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.450607][ T4315] usb 1-1: Product: syz [ 248.460339][ T4315] usb 1-1: Manufacturer: syz [ 248.471002][ T4315] usb 1-1: SerialNumber: syz [ 248.495196][ T6055] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 248.496222][ T6079] overlayfs: missing 'lowerdir' [ 249.000950][ T4315] hub 1-1:1.232: bad descriptor, ignoring hub [ 249.019985][ T4315] hub: probe of 1-1:1.232 failed with error -5 [ 249.043298][ T4315] option 1-1:1.232: GSM modem (1-port) converter detected [ 249.097553][ T4315] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 249.183155][ T4315] usb 1-1: USB disconnect, device number 8 [ 249.263405][ T4315] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 249.292903][ T4315] option 1-1:1.232: device disconnected [ 249.927335][ T6098] tipc: Enabling of bearer rejected, failed to enable media [ 250.012277][ T6102] random: crng reseeded on system resumption [ 251.212495][ T126] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 251.231784][ T126] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 251.562299][ T126] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 251.587475][ T6116] fido_id[6116]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 251.755661][ T126] usb 5-1: Using ep0 maxpacket: 16 [ 251.762992][ T126] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.810644][ T126] usb 5-1: config 0 interface 0 has no altsetting 0 [ 251.860898][ T126] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 251.890303][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.907000][ T126] usb 5-1: config 0 descriptor?? [ 251.948106][ T4318] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 251.972833][ T4318] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 253.370347][ T6127] netlink: 'syz.0.456': attribute type 12 has an invalid length. [ 253.380363][ T6127] overlayfs: failed to resolve './bus': -2 [ 253.776099][ T6120] netlink: 20 bytes leftover after parsing attributes in process `syz.3.460'. [ 254.438111][ T6146] random: crng reseeded on system resumption [ 255.431875][ T126] usbhid 5-1:0.0: can't add hid device: -71 [ 255.438172][ T126] usbhid: probe of 5-1:0.0 failed with error -71 [ 255.485429][ T126] usb 5-1: USB disconnect, device number 12 [ 255.628303][ T6153] tipc: Enabling of bearer rejected, failed to enable media [ 255.670275][ T6134] loop1: detected capacity change from 0 to 40427 [ 255.713009][ T6155] device pim6reg1 entered promiscuous mode [ 255.735011][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.750513][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.867883][ T6134] F2FS-fs (loop1): Found nat_bits in checkpoint [ 256.032368][ T4315] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 256.043263][ T126] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 256.062692][ T6134] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 256.234858][ T4315] usb 3-1: unable to get BOS descriptor or descriptor too short [ 256.247848][ T4315] usb 3-1: not running at top speed; connect to a high speed hub [ 256.252788][ T126] usb 4-1: Using ep0 maxpacket: 32 [ 256.270102][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.295990][ T4315] usb 3-1: config 8 has an invalid interface number: 43 but max is 1 [ 256.324683][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.339794][ T4315] usb 3-1: config 8 has an invalid interface number: 35 but max is 1 [ 256.374323][ T4315] usb 3-1: config 8 has no interface number 0 [ 256.380629][ T126] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 256.403939][ T4315] usb 3-1: config 8 has no interface number 1 [ 256.440845][ T4315] usb 3-1: config 8 interface 43 altsetting 17 has an invalid endpoint with address 0xE5, skipping [ 256.451170][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.474284][ T4315] usb 3-1: config 8 interface 43 has no altsetting 0 [ 256.512010][ T4315] usb 3-1: config 8 interface 35 has no altsetting 0 [ 256.530396][ T126] usb 4-1: config 0 descriptor?? [ 256.551818][ T4315] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 256.562532][ T4275] syz-executor: attempt to access beyond end of device [ 256.562532][ T4275] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 256.587890][ T126] hub 4-1:0.0: USB hub found [ 256.592691][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.657925][ T4315] usb 3-1: Product: syz [ 256.687471][ T4315] usb 3-1: Manufacturer: syz [ 256.707655][ T4315] usb 3-1: SerialNumber: syz [ 256.767097][ T126] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 256.942549][ T6155] netlink: 'syz.2.469': attribute type 1 has an invalid length. [ 257.023712][ T6155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.805727][ T126] hid-generic 0003:046D:C31C.000D: unknown main item tag 0x0 [ 257.869271][ T126] hid-generic 0003:046D:C31C.000D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 257.989887][ T6160] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 258.022929][ T4298] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 258.092764][ T6155] netlink: 'syz.2.469': attribute type 10 has an invalid length. [ 258.100571][ T6155] netlink: 40 bytes leftover after parsing attributes in process `syz.2.469'. [ 258.144763][ T126] usb 4-1: reset high-speed USB device number 16 using dummy_hcd [ 258.182597][ T4298] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 258.194136][ T6155] device dummy0 entered promiscuous mode [ 258.229524][ T6155] bond1: (slave dummy0): Removing an active aggregator [ 258.253496][ T4298] bond1: (slave dummy0): link status up again after 0 ms [ 258.288490][ T6155] bond1: (slave dummy0): Releasing backup interface [ 258.354676][ T4315] ums-alauda 3-1:8.43: USB Mass Storage device detected [ 258.484817][ T4315] hub 3-1:8.35: Invalid hub with more than one config or interface [ 258.495183][ T4315] hub: probe of 3-1:8.35 failed with error -22 [ 258.502021][ T4315] ums-alauda 3-1:8.35: USB Mass Storage device detected [ 258.512975][ T5135] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 258.569527][ T4315] usb 3-1: USB disconnect, device number 6 [ 258.703226][ T6197] overlayfs: missing 'lowerdir' [ 258.770496][ T126] usb 4-1: USB disconnect, device number 16 [ 258.834837][ T5135] hid-generic 0000:0000:0000.000E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 259.221126][ T6203] random: crng reseeded on system resumption [ 260.097188][ T6199] fido_id[6199]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 260.142237][ T126] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 260.492554][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 260.683769][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 260.695087][ T7] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.728499][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 260.750189][ T7] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 260.789599][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.819492][ T7] usb 3-1: config 0 descriptor?? [ 261.522651][ T6224] loop0: detected capacity change from 0 to 40427 [ 261.556675][ T6237] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.565880][ T6237] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.574693][ T6237] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.583477][ T6237] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.671227][ T6224] F2FS-fs (loop0): Found nat_bits in checkpoint [ 261.750413][ T6237] team0: Port device vxlan0 added [ 262.012357][ T6224] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 262.143620][ T6248] device pim6reg1 entered promiscuous mode [ 262.325638][ T4274] syz-executor: attempt to access beyond end of device [ 262.325638][ T4274] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 262.472353][ T126] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 262.674696][ T126] usb 2-1: unable to get BOS descriptor or descriptor too short [ 262.693198][ T126] usb 2-1: not running at top speed; connect to a high speed hub [ 262.714304][ T126] usb 2-1: config 8 has an invalid interface number: 43 but max is 1 [ 262.762388][ T126] usb 2-1: config 8 has an invalid interface number: 35 but max is 1 [ 262.770577][ T126] usb 2-1: config 8 has no interface number 0 [ 262.801029][ T126] usb 2-1: config 8 has no interface number 1 [ 262.807332][ T126] usb 2-1: config 8 interface 43 altsetting 17 has an invalid endpoint with address 0xE5, skipping [ 262.841179][ T126] usb 2-1: config 8 interface 43 has no altsetting 0 [ 262.861047][ T126] usb 2-1: config 8 interface 35 has no altsetting 0 [ 262.902625][ T126] usb 2-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 262.943467][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.971969][ T126] usb 2-1: Product: syz [ 262.992326][ T126] usb 2-1: Manufacturer: syz [ 263.010778][ T6252] random: crng reseeded on system resumption [ 263.017022][ T126] usb 2-1: SerialNumber: syz [ 263.238520][ T6248] netlink: 'syz.1.489': attribute type 1 has an invalid length. [ 263.327192][ T7] usbhid 3-1:0.0: can't add hid device: -71 [ 263.334483][ T7] usbhid: probe of 3-1:0.0 failed with error -71 [ 263.348210][ T7] usb 3-1: USB disconnect, device number 7 [ 263.443331][ T6248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.579335][ T6255] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 263.589618][ T31] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 263.647581][ T6266] loop5: detected capacity change from 0 to 7 [ 263.703288][ T5563] Dev loop5: unable to read RDB block 7 [ 263.708916][ T5563] loop5: AHDI p1 [ 263.737948][ T5563] loop5: partition table partially beyond EOD, truncated [ 263.762451][ T4930] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 263.770905][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 263.830850][ T6266] Dev loop5: unable to read RDB block 7 [ 263.857691][ T6266] loop5: AHDI p1 [ 263.862128][ T6263] netlink: 'syz.1.489': attribute type 10 has an invalid length. [ 263.888784][ T6266] loop5: partition table partially beyond EOD, truncated [ 263.905195][ T6263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.489'. [ 263.969265][ T6263] device dummy0 entered promiscuous mode [ 264.002497][ T6263] bond1: (slave dummy0): Removing an active aggregator [ 264.022721][ T4484] bond1: Warning: Found an uninitialized port [ 264.053469][ T6263] bond1: (slave dummy0): Releasing backup interface [ 264.139081][ T126] ums-alauda 2-1:8.43: USB Mass Storage device detected [ 264.276575][ T126] hub 2-1:8.35: Invalid hub with more than one config or interface [ 264.306632][ T126] hub: probe of 2-1:8.35 failed with error -22 [ 264.332789][ T126] ums-alauda 2-1:8.35: USB Mass Storage device detected [ 264.403348][ T6279] overlayfs: missing 'lowerdir' [ 264.445318][ T126] usb 2-1: USB disconnect, device number 12 [ 264.854559][ T6289] netlink: 'syz.0.494': attribute type 12 has an invalid length. [ 264.913214][ T6289] overlayfs: failed to resolve './bus': -2 [ 265.868452][ T126] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 265.896979][ T126] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 266.562512][ T6302] netlink: 20 bytes leftover after parsing attributes in process `syz.2.500'. [ 266.602271][ T5135] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 266.792268][ T5135] usb 2-1: Using ep0 maxpacket: 16 [ 266.799807][ T5135] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.848389][ T5135] usb 2-1: config 0 interface 0 has no altsetting 0 [ 266.872857][ T5135] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 266.899408][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.940606][ T5135] usb 2-1: config 0 descriptor?? [ 267.085324][ T6324] loop5: detected capacity change from 0 to 7 [ 267.110649][ T6324] Dev loop5: unable to read RDB block 7 [ 267.131098][ T6324] loop5: AHDI p1 [ 267.141435][ T6324] loop5: partition table partially beyond EOD, truncated [ 267.182238][ T4315] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 267.422256][ T4315] usb 1-1: Using ep0 maxpacket: 16 [ 267.430725][ T4315] usb 1-1: unable to get BOS descriptor or descriptor too short [ 267.462662][ T4315] usb 1-1: config 1 has an invalid interface number: 232 but max is 0 [ 267.531715][ T4315] usb 1-1: config 1 has no interface number 0 [ 267.558330][ T4315] usb 1-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 267.609375][ T4315] usb 1-1: config 1 interface 232 has no altsetting 0 [ 267.692537][ T4315] usb 1-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 267.771834][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.780143][ T4315] usb 1-1: Product: syz [ 267.784511][ T4315] usb 1-1: Manufacturer: syz [ 267.789219][ T4315] usb 1-1: SerialNumber: syz [ 267.798480][ T6320] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 268.032290][ T5135] usbhid 2-1:0.0: can't add hid device: -71 [ 268.048050][ T5135] usbhid: probe of 2-1:0.0 failed with error -71 [ 268.132521][ T5135] usb 2-1: USB disconnect, device number 13 [ 268.230303][ T4315] hub 1-1:1.232: bad descriptor, ignoring hub [ 268.240152][ T4315] hub: probe of 1-1:1.232 failed with error -5 [ 268.297564][ T4315] option 1-1:1.232: GSM modem (1-port) converter detected [ 268.337597][ T4315] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 268.404907][ T4315] usb 1-1: USB disconnect, device number 9 [ 268.451320][ T4315] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 268.518592][ T4315] option 1-1:1.232: device disconnected [ 268.965080][ T6345] random: crng reseeded on system resumption [ 269.264119][ T6354] overlayfs: missing 'lowerdir' [ 270.359491][ T6362] netlink: 'syz.4.514': attribute type 12 has an invalid length. [ 270.492815][ T6363] overlayfs: failed to resolve './bus': -2 [ 270.758997][ T6360] loop3: detected capacity change from 0 to 40427 [ 270.855086][ T6360] F2FS-fs (loop3): Found nat_bits in checkpoint [ 271.052466][ T6360] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 271.266540][ T7] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 271.292746][ T7] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 271.348542][ T4270] syz-executor: attempt to access beyond end of device [ 271.348542][ T4270] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 272.080196][ T6369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.516'. [ 272.362320][ T5135] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 272.563025][ T5135] usb 3-1: Using ep0 maxpacket: 16 [ 272.573357][ T5135] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.605657][ T5135] usb 3-1: config 0 interface 0 has no altsetting 0 [ 272.632215][ T5135] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 272.676365][ T5135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.708629][ T5135] usb 3-1: config 0 descriptor?? [ 273.061027][ T6398] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 273.062828][ T4315] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 273.124492][ T6398] kvm: pic: level sensitive irq not supported [ 273.125817][ T6398] kvm: pic: non byte read [ 273.142798][ T6398] kvm: pic: level sensitive irq not supported [ 273.142877][ T6398] kvm: pic: non byte read [ 273.161289][ T6398] kvm: pic: level sensitive irq not supported [ 273.161428][ T6398] kvm: pic: non byte read [ 273.179120][ T6398] kvm: pic: level sensitive irq not supported [ 273.179285][ T6398] kvm: pic: non byte read [ 273.191676][ T6398] kvm: pic: level sensitive irq not supported [ 273.191798][ T6398] kvm: pic: non byte read [ 273.205403][ T6398] kvm: pic: level sensitive irq not supported [ 273.205482][ T6398] kvm: pic: non byte read [ 273.218335][ T6398] kvm: pic: level sensitive irq not supported [ 273.218478][ T6398] kvm: pic: non byte read [ 273.262292][ T4315] usb 1-1: Using ep0 maxpacket: 16 [ 273.270822][ T4315] usb 1-1: unable to get BOS descriptor or descriptor too short [ 273.305627][ T4315] usb 1-1: config 1 has an invalid interface number: 232 but max is 0 [ 273.344070][ T4315] usb 1-1: config 1 has no interface number 0 [ 273.357112][ T4315] usb 1-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 273.384790][ T4315] usb 1-1: config 1 interface 232 has no altsetting 0 [ 273.402072][ T4315] usb 1-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 273.420725][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.443035][ T4315] usb 1-1: Product: syz [ 273.448332][ T4315] usb 1-1: Manufacturer: syz [ 273.461284][ T4315] usb 1-1: SerialNumber: syz [ 273.470529][ T6389] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 273.721462][ T6410] device pim6reg1 entered promiscuous mode [ 273.919179][ T4315] hub 1-1:1.232: bad descriptor, ignoring hub [ 273.937103][ T4315] hub: probe of 1-1:1.232 failed with error -5 [ 273.976732][ T4315] option 1-1:1.232: GSM modem (1-port) converter detected [ 274.025667][ T4315] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 274.042341][ T7] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 274.093840][ T4315] usb 1-1: USB disconnect, device number 10 [ 274.115719][ T4315] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 274.154225][ T4315] option 1-1:1.232: device disconnected [ 274.284311][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 274.323124][ T7] usb 2-1: not running at top speed; connect to a high speed hub [ 274.363618][ T7] usb 2-1: config 8 has an invalid interface number: 43 but max is 1 [ 274.468846][ T7] usb 2-1: config 8 has an invalid interface number: 35 but max is 1 [ 274.508125][ T7] usb 2-1: config 8 has no interface number 0 [ 274.532377][ T7] usb 2-1: config 8 has no interface number 1 [ 274.579396][ T7] usb 2-1: config 8 interface 43 altsetting 17 has an invalid endpoint with address 0xE5, skipping [ 274.631384][ T7] usb 2-1: config 8 interface 43 has no altsetting 0 [ 274.641530][ T7] usb 2-1: config 8 interface 35 has no altsetting 0 [ 274.681469][ T7] usb 2-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 274.717238][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.757318][ T7] usb 2-1: Product: syz [ 274.772009][ T7] usb 2-1: Manufacturer: syz [ 274.806466][ T7] usb 2-1: SerialNumber: syz [ 274.930185][ T6418] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 275.023679][ T6418] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 275.052992][ T6410] netlink: 'syz.1.527': attribute type 1 has an invalid length. [ 275.259990][ T6410] 8021q: adding VLAN 0 to HW filter on device bond2 [ 275.270448][ T5135] usbhid 3-1:0.0: can't add hid device: -71 [ 275.283211][ T6421] device dummy0 left promiscuous mode [ 275.296429][ T5135] usbhid: probe of 3-1:0.0 failed with error -71 [ 275.341222][ T5135] usb 3-1: USB disconnect, device number 8 [ 275.369278][ T6421] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 275.434820][ T4298] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 275.512485][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 275.525389][ T7] ums-alauda 2-1:8.43: USB Mass Storage device detected [ 275.563090][ T6427] random: crng reseeded on system resumption [ 275.604214][ T7] hub 2-1:8.35: Invalid hub with more than one config or interface [ 275.623535][ T7] hub: probe of 2-1:8.35 failed with error -22 [ 275.663114][ T7] ums-alauda 2-1:8.35: USB Mass Storage device detected [ 275.683603][ T9] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 275.820402][ T7] usb 2-1: USB disconnect, device number 14 [ 276.615705][ T6443] netlink: 'syz.2.531': attribute type 12 has an invalid length. [ 276.668330][ T6443] overlayfs: failed to resolve './bus': -2 [ 277.022275][ T4315] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 277.223420][ T4315] usb 2-1: Using ep0 maxpacket: 8 [ 277.230734][ T4315] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 277.258443][ T4315] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 277.298284][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.337071][ T4315] usb 2-1: Product: syz [ 277.360111][ T4315] usb 2-1: Manufacturer: syz [ 277.377535][ T4315] usb 2-1: SerialNumber: syz [ 277.399660][ T4315] usb 2-1: config 0 descriptor?? [ 277.432839][ T4315] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 277.492492][ T4315] usb 2-1: setting power ON [ 277.497082][ T4315] dvb-usb: bulk message failed: -22 (2/0) [ 277.563870][ T4315] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 277.570105][ T6455] loop5: detected capacity change from 0 to 7 [ 277.591529][ T4315] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 277.618449][ T6455] Dev loop5: unable to read RDB block 7 [ 277.622600][ T4315] usb 2-1: media controller created [ 277.657089][ T6455] loop5: AHDI p1 [ 277.672088][ T6455] loop5: partition table partially beyond EOD, truncated [ 277.716157][ T4315] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.788200][ T4315] usb 2-1: selecting invalid altsetting 6 [ 277.800090][ T4315] usb 2-1: digital interface selection failed (-22) [ 277.830311][ T4315] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 277.872319][ T4315] usb 2-1: setting power OFF [ 277.877034][ T4315] dvb-usb: bulk message failed: -22 (2/0) [ 277.892387][ T4315] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 277.901838][ T4315] (NULL device *): no alternate interface [ 277.988235][ T4315] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 278.025906][ T4315] usb 2-1: USB disconnect, device number 15 [ 278.042225][ T126] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 278.262303][ T126] usb 5-1: Using ep0 maxpacket: 16 [ 278.270225][ T126] usb 5-1: unable to get BOS descriptor or descriptor too short [ 278.289486][ T126] usb 5-1: config 1 has an invalid interface number: 232 but max is 0 [ 278.300260][ T126] usb 5-1: config 1 has no interface number 0 [ 278.310213][ T126] usb 5-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 278.320999][ T126] usb 5-1: config 1 interface 232 has no altsetting 0 [ 278.333563][ T126] usb 5-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 278.343367][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.351510][ T126] usb 5-1: Product: syz [ 278.356572][ T126] usb 5-1: Manufacturer: syz [ 278.367716][ T126] usb 5-1: SerialNumber: syz [ 278.381589][ T6459] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 278.392234][ T5135] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 278.583380][ T5135] usb 1-1: Using ep0 maxpacket: 16 [ 278.595899][ T5135] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.647728][ T5135] usb 1-1: config 0 interface 0 has no altsetting 0 [ 278.669009][ T5135] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 278.717450][ T5135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.792865][ T5135] usb 1-1: config 0 descriptor?? [ 278.825887][ T126] hub 5-1:1.232: bad descriptor, ignoring hub [ 278.842395][ T126] hub: probe of 5-1:1.232 failed with error -5 [ 278.854232][ T126] option 5-1:1.232: GSM modem (1-port) converter detected [ 278.878514][ T126] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 278.935848][ T126] usb 5-1: USB disconnect, device number 13 [ 278.977850][ T126] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 278.999203][ T126] option 5-1:1.232: device disconnected [ 279.171204][ T6468] loop2: detected capacity change from 0 to 40427 [ 279.278774][ T6468] F2FS-fs (loop2): Found nat_bits in checkpoint [ 279.537419][ T6468] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 279.907481][ T4280] syz-executor: attempt to access beyond end of device [ 279.907481][ T4280] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 281.187298][ T6491] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 281.225999][ T6491] kvm: pic: level sensitive irq not supported [ 281.226102][ T6491] kvm: pic: non byte read [ 281.247346][ T6491] kvm: pic: level sensitive irq not supported [ 281.247455][ T6491] kvm: pic: non byte read [ 281.275690][ T6491] kvm: pic: level sensitive irq not supported [ 281.275768][ T6491] kvm: pic: non byte read [ 281.288325][ T5135] usbhid 1-1:0.0: can't add hid device: -71 [ 281.295775][ T5135] usbhid: probe of 1-1:0.0 failed with error -71 [ 281.345583][ T5135] usb 1-1: USB disconnect, device number 11 [ 281.377055][ T6500] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 281.450371][ T6491] kvm: pic: level sensitive irq not supported [ 281.459486][ T6491] kvm: pic: non byte read [ 281.461903][ T6500] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 281.535087][ T6505] random: crng reseeded on system resumption [ 281.900777][ T6491] kvm: pic: level sensitive irq not supported [ 281.900851][ T6491] kvm: pic: non byte read [ 281.941921][ T6491] kvm: pic: level sensitive irq not supported [ 281.942302][ T6491] kvm: pic: non byte read [ 282.353636][ T6507] device syzkaller0 entered promiscuous mode [ 282.446705][ T6509] loop5: detected capacity change from 0 to 7 [ 282.470909][ T5563] Dev loop5: unable to read RDB block 7 [ 282.476935][ T5563] loop5: AHDI p1 [ 282.492272][ T5563] loop5: partition table partially beyond EOD, truncated [ 282.531424][ T6509] Dev loop5: unable to read RDB block 7 [ 282.542925][ T6509] loop5: AHDI p1 [ 282.546631][ T6509] loop5: partition table partially beyond EOD, truncated [ 283.192423][ T7] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 283.271799][ T6527] netlink: 'syz.1.552': attribute type 12 has an invalid length. [ 283.292489][ T5135] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 283.309685][ T6527] overlayfs: failed to resolve './bus': -2 [ 283.386718][ T7] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 283.402294][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.410357][ T7] usb 1-1: Product: syz [ 283.422231][ T7] usb 1-1: Manufacturer: syz [ 283.428640][ T7] usb 1-1: SerialNumber: syz [ 283.435155][ T7] usb 1-1: config 0 descriptor?? [ 283.482237][ T5135] usb 5-1: Using ep0 maxpacket: 32 [ 283.490333][ T5135] usb 5-1: unable to get BOS descriptor or descriptor too short [ 283.500572][ T5135] usb 5-1: config 12 has an invalid interface number: 183 but max is 1 [ 283.509566][ T5135] usb 5-1: config 12 has an invalid interface number: 229 but max is 1 [ 283.529060][ T5135] usb 5-1: config 12 has no interface number 0 [ 283.537013][ T5135] usb 5-1: config 12 has no interface number 1 [ 283.543563][ T5135] usb 5-1: config 12 interface 183 has no altsetting 0 [ 283.553645][ T5135] usb 5-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 283.563752][ T5135] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.571883][ T5135] usb 5-1: Product: syz [ 283.576826][ T5135] usb 5-1: Manufacturer: syz [ 283.581560][ T5135] usb 5-1: SerialNumber: syz [ 283.592332][ T27] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 283.782374][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 283.789740][ T27] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.816997][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 283.838501][ T27] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 283.868141][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.896131][ T27] usb 3-1: config 0 descriptor?? [ 283.941024][ T5135] usb 5-1: USB disconnect, device number 14 [ 284.452492][ T7] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -110 [ 284.462373][ T7] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -110 [ 285.152893][ T6555] device syzkaller0 entered promiscuous mode [ 285.170609][ T6557] loop5: detected capacity change from 0 to 7 [ 285.225846][ T5563] Dev loop5: unable to read RDB block 7 [ 285.241753][ T5563] loop5: unable to read partition table [ 285.280583][ T5563] loop5: partition table beyond EOD, truncated [ 285.311830][ T6557] Dev loop5: unable to read RDB block 7 [ 285.324938][ T6557] loop5: unable to read partition table [ 285.344943][ T6557] loop5: partition table beyond EOD, truncated [ 285.362325][ T6557] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 285.911072][ T5135] usb 1-1: USB disconnect, device number 12 [ 286.014345][ T6564] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 286.147714][ T6564] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 286.430912][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 286.438188][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 286.490316][ T27] usb 3-1: USB disconnect, device number 9 [ 286.642108][ T6573] device pim6reg1 entered promiscuous mode [ 287.042008][ T6575] netlink: 'syz.1.571': attribute type 12 has an invalid length. [ 287.102449][ T27] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 287.137548][ T6576] overlayfs: failed to resolve './bus': -2 [ 287.294241][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 287.306715][ T27] usb 3-1: not running at top speed; connect to a high speed hub [ 287.370637][ T27] usb 3-1: config 8 has an invalid interface number: 43 but max is 1 [ 287.425031][ T27] usb 3-1: config 8 has an invalid interface number: 35 but max is 1 [ 287.457247][ T27] usb 3-1: config 8 has no interface number 0 [ 287.480193][ T27] usb 3-1: config 8 has no interface number 1 [ 287.500884][ T27] usb 3-1: config 8 interface 43 altsetting 17 has an invalid endpoint with address 0xE5, skipping [ 287.565164][ T27] usb 3-1: config 8 interface 43 has no altsetting 0 [ 287.585031][ T27] usb 3-1: config 8 interface 35 has no altsetting 0 [ 287.608408][ T27] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 287.635499][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.666618][ T27] usb 3-1: Product: syz [ 287.681092][ T27] usb 3-1: Manufacturer: syz [ 287.691231][ T27] usb 3-1: SerialNumber: syz [ 287.939784][ T27] ums-alauda 3-1:8.43: USB Mass Storage device detected [ 288.022559][ T6590] loop5: detected capacity change from 0 to 7 [ 288.030766][ T6590] Dev loop5: unable to read RDB block 7 [ 288.036628][ T6590] loop5: unable to read partition table [ 288.043248][ T6590] loop5: partition table beyond EOD, truncated [ 288.050897][ T6590] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 288.096342][ T27] hub 3-1:8.35: Invalid hub with more than one config or interface [ 288.134234][ T27] hub: probe of 3-1:8.35 failed with error -22 [ 288.141055][ T27] ums-alauda 3-1:8.35: USB Mass Storage device detected [ 288.311855][ T27] usb 3-1: USB disconnect, device number 10 [ 288.662447][ T7] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 288.832434][ T27] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 288.871471][ T7] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 288.905100][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.920217][ T7] usb 4-1: Product: syz [ 288.926130][ T7] usb 4-1: Manufacturer: syz [ 288.931133][ T7] usb 4-1: SerialNumber: syz [ 288.944255][ T7] usb 4-1: config 0 descriptor?? [ 289.032337][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 289.039506][ T27] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.098289][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 289.110851][ T6617] random: crng reseeded on system resumption [ 289.437000][ T27] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 289.446181][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.457946][ T27] usb 1-1: config 0 descriptor?? [ 289.976495][ T7] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 289.985371][ T7] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -110 [ 290.003139][ T6613] loop2: detected capacity change from 0 to 40427 [ 290.070061][ T6613] F2FS-fs (loop2): Found nat_bits in checkpoint [ 290.259720][ T6613] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 290.486246][ T4280] syz-executor: attempt to access beyond end of device [ 290.486246][ T4280] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 290.749885][ T6637] overlayfs: missing 'lowerdir' [ 291.441665][ T7] usb 4-1: USB disconnect, device number 18 [ 291.658302][ T27] usbhid 1-1:0.0: can't add hid device: -71 [ 291.684823][ T27] usbhid: probe of 1-1:0.0 failed with error -71 [ 291.703701][ T6640] loop5: detected capacity change from 0 to 7 [ 291.705851][ T27] usb 1-1: USB disconnect, device number 13 [ 291.752484][ T6640] Dev loop5: unable to read RDB block 7 [ 291.767698][ T6640] loop5: unable to read partition table [ 291.792474][ T6640] loop5: partition table beyond EOD, truncated [ 291.822227][ T6640] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 292.220295][ T6650] device pim6reg1 entered promiscuous mode [ 292.522231][ T7] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 292.565114][ T6653] netlink: 'syz.0.592': attribute type 12 has an invalid length. [ 292.643186][ T6653] overlayfs: failed to resolve './bus': -2 [ 292.714382][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 292.729793][ T7] usb 3-1: not running at top speed; connect to a high speed hub [ 292.761935][ T7] usb 3-1: config 8 has an invalid interface number: 43 but max is 1 [ 292.791566][ T7] usb 3-1: config 8 has an invalid interface number: 35 but max is 1 [ 292.811110][ T7] usb 3-1: config 8 has no interface number 0 [ 292.820141][ T7] usb 3-1: config 8 has no interface number 1 [ 292.890044][ T7] usb 3-1: config 8 interface 43 altsetting 17 has an invalid endpoint with address 0xE5, skipping [ 292.935457][ T7] usb 3-1: config 8 interface 43 has no altsetting 0 [ 292.979191][ T7] usb 3-1: config 8 interface 35 has no altsetting 0 [ 293.000635][ T7] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 293.017245][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.044455][ T7] usb 3-1: Product: syz [ 293.053437][ T7] usb 3-1: Manufacturer: syz [ 293.058478][ T7] usb 3-1: SerialNumber: syz [ 293.219282][ T6660] device syzkaller0 entered promiscuous mode [ 293.288327][ T7] ums-alauda 3-1:8.43: USB Mass Storage device detected [ 293.419332][ T7] hub 3-1:8.35: Invalid hub with more than one config or interface [ 293.440740][ T7] hub: probe of 3-1:8.35 failed with error -22 [ 293.454366][ T7] ums-alauda 3-1:8.35: USB Mass Storage device detected [ 293.569376][ T7] usb 3-1: USB disconnect, device number 11 [ 293.962246][ T126] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 294.047422][ T6682] loop5: detected capacity change from 0 to 7 [ 294.065054][ T6682] Dev loop5: unable to read RDB block 7 [ 294.074374][ T6682] loop5: unable to read partition table [ 294.090603][ T6682] loop5: partition table beyond EOD, truncated [ 294.097032][ T7] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 294.112521][ T6682] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 294.164858][ T126] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 294.190634][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.216334][ T126] usb 4-1: Product: syz [ 294.241002][ T126] usb 4-1: Manufacturer: syz [ 294.251133][ T126] usb 4-1: SerialNumber: syz [ 294.266477][ T126] usb 4-1: config 0 descriptor?? [ 294.286582][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 294.304537][ T7] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.338098][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 294.345711][ T6690] overlayfs: missing 'lowerdir' [ 294.360480][ T7] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 294.380002][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.423310][ T7] usb 5-1: config 0 descriptor?? [ 295.332495][ T126] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 295.346745][ T126] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -110 [ 296.666711][ T4320] usb 4-1: USB disconnect, device number 19 [ 297.016404][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 297.026155][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 297.056153][ T6721] device pim6reg1 entered promiscuous mode [ 297.111519][ T7] usb 5-1: USB disconnect, device number 15 [ 297.382250][ T5135] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 297.548478][ T6737] overlayfs: failed to resolve './bus': -2 [ 297.584750][ T5135] usb 1-1: unable to get BOS descriptor or descriptor too short [ 297.715702][ T5135] usb 1-1: not running at top speed; connect to a high speed hub [ 297.728636][ T6736] netlink: 'syz.2.613': attribute type 12 has an invalid length. [ 297.873179][ T5135] usb 1-1: config 8 has an invalid interface number: 43 but max is 1 [ 297.881343][ T5135] usb 1-1: config 8 has an invalid interface number: 35 but max is 1 [ 297.944835][ T5135] usb 1-1: config 8 has no interface number 0 [ 297.949205][ T6739] loop5: detected capacity change from 0 to 7 [ 297.972827][ T5135] usb 1-1: config 8 has no interface number 1 [ 297.979279][ T5135] usb 1-1: config 8 interface 43 altsetting 17 has an invalid endpoint with address 0xE5, skipping [ 297.997224][ T5563] Dev loop5: unable to read RDB block 7 [ 298.003346][ T5563] loop5: unable to read partition table [ 298.034363][ T5563] loop5: partition table beyond EOD, truncated [ 298.044039][ T5135] usb 1-1: config 8 interface 43 has no altsetting 0 [ 298.067554][ T5135] usb 1-1: config 8 interface 35 has no altsetting 0 [ 298.092112][ T6739] Dev loop5: unable to read RDB block 7 [ 298.095808][ T5135] usb 1-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 298.112972][ T6739] loop5: unable to read partition table [ 298.117730][ T5135] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.121063][ T6739] loop5: partition table beyond EOD, [ 298.133467][ T5135] usb 1-1: Product: syz [ 298.159614][ T5135] usb 1-1: Manufacturer: syz [ 298.169145][ T5135] usb 1-1: SerialNumber: syz [ 298.175510][ T6739] truncated [ 298.203993][ T6739] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 298.241105][ T6741] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 298.328276][ T6741] kvm: pic: level sensitive irq not supported [ 298.328398][ T6741] kvm: pic: non byte read [ 298.385778][ T6741] kvm: pic: level sensitive irq not supported [ 298.385874][ T6741] kvm: pic: non byte read [ 298.403928][ T5135] ums-alauda 1-1:8.43: USB Mass Storage device detected [ 298.462558][ T6741] kvm: pic: level sensitive irq not supported [ 298.462636][ T6741] kvm: pic: non byte read [ 298.544692][ T6741] kvm: pic: level sensitive irq not supported [ 298.545036][ T6741] kvm: pic: non byte read [ 298.577182][ T5135] hub 1-1:8.35: Invalid hub with more than one config or interface [ 298.598546][ T5135] hub: probe of 1-1:8.35 failed with error -22 [ 298.617988][ T5135] ums-alauda 1-1:8.35: USB Mass Storage device detected [ 298.622875][ T6741] kvm: pic: level sensitive irq not supported [ 298.625437][ T6741] kvm: pic: non byte read [ 298.713246][ T6741] kvm: pic: level sensitive irq not supported [ 298.713343][ T6741] kvm: pic: non byte read [ 298.752792][ T6741] kvm: pic: level sensitive irq not supported [ 298.752867][ T6741] kvm: pic: non byte read [ 298.779413][ T5135] usb 1-1: USB disconnect, device number 14 [ 299.257386][ T6761] overlayfs: missing 'lowerdir' [ 299.269251][ T4315] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 299.287628][ T4315] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 299.297684][ T27] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 299.522386][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 299.530531][ T27] usb 5-1: config 0 has no interfaces? [ 299.554214][ T27] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 299.580655][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.611560][ T27] usb 5-1: config 0 descriptor?? [ 299.788499][ T6762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.624'. [ 299.848901][ T4320] usb 5-1: USB disconnect, device number 16 [ 300.304207][ T6774] random: crng reseeded on system resumption [ 301.268329][ T5135] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 301.453509][ T5135] usb 4-1: Using ep0 maxpacket: 16 [ 301.461573][ T5135] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.508593][ T5135] usb 4-1: config 0 interface 0 has no altsetting 0 [ 301.529831][ T5135] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 301.569879][ T5135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.600604][ T5135] usb 4-1: config 0 descriptor?? [ 301.926409][ T6792] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 301.982067][ T6792] kvm: pic: level sensitive irq not supported [ 301.983401][ T6792] kvm: pic: non byte read [ 302.037441][ T6792] kvm: pic: level sensitive irq not supported [ 302.037962][ T6792] kvm: pic: non byte read [ 302.110225][ T6792] kvm: pic: level sensitive irq not supported [ 302.110337][ T6792] kvm: pic: non byte read [ 302.932361][ T126] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 303.152267][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 303.159491][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.222692][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.351553][ T126] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 303.394191][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.432824][ T126] usb 1-1: config 0 descriptor?? [ 303.462813][ T126] hub 1-1:0.0: USB hub found [ 303.644464][ T5135] usbhid 4-1:0.0: can't add hid device: -71 [ 303.661200][ T126] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 303.682320][ T5135] usbhid: probe of 4-1:0.0 failed with error -71 [ 303.729076][ T5135] usb 4-1: USB disconnect, device number 20 [ 304.074797][ T126] hid-generic 0003:046D:C31C.0012: unknown main item tag 0x0 [ 304.099681][ T126] hid-generic 0003:046D:C31C.0012: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 304.135976][ T6816] random: crng reseeded on system resumption [ 304.242296][ T5135] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 304.442591][ T5135] usb 4-1: Using ep0 maxpacket: 16 [ 304.457415][ T5135] usb 4-1: unable to get BOS descriptor or descriptor too short [ 304.484494][ T5135] usb 4-1: config 1 has an invalid interface number: 232 but max is 0 [ 304.505157][ T5135] usb 4-1: config 1 has no interface number 0 [ 304.521315][ T5135] usb 4-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 304.545612][ T5135] usb 4-1: config 1 interface 232 has no altsetting 0 [ 304.564626][ T5135] usb 4-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 304.585218][ T5135] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.601452][ T5135] usb 4-1: Product: syz [ 304.610313][ T5135] usb 4-1: Manufacturer: syz [ 304.621312][ T5135] usb 4-1: SerialNumber: syz [ 304.630628][ T6812] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 305.075365][ T6804] usb 1-1: reset high-speed USB device number 15 using dummy_hcd [ 305.107202][ T5135] hub 4-1:1.232: bad descriptor, ignoring hub [ 305.118298][ T5135] hub: probe of 4-1:1.232 failed with error -5 [ 305.126052][ T5135] option 4-1:1.232: GSM modem (1-port) converter detected [ 305.149718][ T5135] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 305.202939][ T5135] usb 4-1: USB disconnect, device number 21 [ 305.233873][ T5135] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 305.263613][ T5135] option 4-1:1.232: device disconnected [ 305.729012][ T4351] usb 1-1: USB disconnect, device number 15 [ 305.900121][ T6844] overlayfs: missing 'workdir' [ 306.141896][ T6846] device syzkaller0 entered promiscuous mode [ 306.332343][ T4351] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 306.532275][ T4351] usb 1-1: Using ep0 maxpacket: 32 [ 306.539947][ T4351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.563092][ T4351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.592198][ T4351] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 306.611581][ T4351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.647051][ T4351] usb 1-1: config 0 descriptor?? [ 306.656136][ T4351] hub 1-1:0.0: USB hub found [ 306.706105][ T4320] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 306.741953][ T6856] loop5: detected capacity change from 0 to 7 [ 306.750187][ T6856] Dev loop5: unable to read RDB block 7 [ 306.767476][ T6856] loop5: unable to read partition table [ 306.779829][ T6856] loop5: partition table beyond EOD, truncated [ 306.805281][ T6856] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 306.863107][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.885367][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.902469][ T4320] usb 5-1: Using ep0 maxpacket: 16 [ 306.915270][ T4320] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.940802][ T4320] usb 5-1: config 0 interface 0 has no altsetting 0 [ 306.950702][ T4320] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 306.987944][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.016105][ T4320] usb 5-1: config 0 descriptor?? [ 307.116613][ T4351] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 307.145717][ T4351] usbhid 1-1:0.0: can't add hid device: -71 [ 307.156095][ T4351] usbhid: probe of 1-1:0.0 failed with error -71 [ 307.204781][ T4351] usb 1-1: USB disconnect, device number 16 [ 307.952489][ T4351] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 307.995818][ T4320] usbhid 5-1:0.0: can't add hid device: -71 [ 308.001905][ T4320] usbhid: probe of 5-1:0.0 failed with error -71 [ 308.045162][ T4320] usb 5-1: USB disconnect, device number 17 [ 308.152250][ T4351] usb 4-1: Using ep0 maxpacket: 16 [ 308.159954][ T4351] usb 4-1: unable to get BOS descriptor or descriptor too short [ 308.189658][ T4351] usb 4-1: config 1 has an invalid interface number: 232 but max is 0 [ 308.245594][ T4351] usb 4-1: config 1 has no interface number 0 [ 308.275437][ T4351] usb 4-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 308.311771][ T4351] usb 4-1: config 1 interface 232 has no altsetting 0 [ 308.349604][ T4351] usb 4-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 308.385080][ T4351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.436994][ T4351] usb 4-1: Product: syz [ 308.456453][ T4351] usb 4-1: Manufacturer: syz [ 308.467345][ T4351] usb 4-1: SerialNumber: syz [ 308.501449][ T6870] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 308.946485][ T4351] hub 4-1:1.232: bad descriptor, ignoring hub [ 308.958852][ T4351] hub: probe of 4-1:1.232 failed with error -5 [ 309.000003][ T6885] device syzkaller0 entered promiscuous mode [ 309.019488][ T4351] option 4-1:1.232: GSM modem (1-port) converter detected [ 309.097513][ T4351] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 309.169421][ T4351] usb 4-1: USB disconnect, device number 22 [ 309.212722][ T4351] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 309.253493][ T4351] option 4-1:1.232: device disconnected [ 309.419024][ T6891] device pim6reg1 entered promiscuous mode [ 309.550967][ T6899] overlayfs: missing 'workdir' [ 309.639271][ T6901] netlink: 16 bytes leftover after parsing attributes in process `syz.4.665'. [ 309.790943][ T26] audit: type=1800 audit(1784390409.307:4): pid=6898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.663" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 310.032270][ T4351] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 310.222693][ T4351] usb 1-1: Using ep0 maxpacket: 32 [ 310.233809][ T4351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.279801][ T4351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.344986][ T4351] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 310.370093][ T4351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.471636][ T4351] usb 1-1: config 0 descriptor?? [ 310.487049][ T4351] hub 1-1:0.0: USB hub found [ 310.686790][ T4351] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 311.099513][ T4351] hid-generic 0003:046D:C31C.0013: unknown main item tag 0x0 [ 311.137647][ T4351] hid-generic 0003:046D:C31C.0013: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 311.562669][ T6926] device syzkaller0 entered promiscuous mode [ 311.741643][ T6906] usb 1-1: reset high-speed USB device number 17 using dummy_hcd [ 312.146066][ T26] audit: type=1326 audit(1784390411.667:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6929 comm="syz.3.673" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8a799de99 code=0x0 [ 312.371732][ T4351] usb 1-1: USB disconnect, device number 17 [ 312.542536][ T6942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.677'. [ 312.622494][ T5135] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 312.657290][ T6944] device pim6reg1 entered promiscuous mode [ 312.802509][ T5135] usb 3-1: Using ep0 maxpacket: 16 [ 312.811795][ T5135] usb 3-1: unable to get BOS descriptor or descriptor too short [ 312.838554][ T5135] usb 3-1: config 1 has an invalid interface number: 232 but max is 0 [ 312.852490][ T5135] usb 3-1: config 1 has no interface number 0 [ 312.858666][ T5135] usb 3-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 312.913118][ T5135] usb 3-1: config 1 interface 232 has no altsetting 0 [ 312.929255][ T5135] usb 3-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 312.952212][ T5135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.970655][ T5135] usb 3-1: Product: syz [ 312.975919][ T4351] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 312.984958][ T5135] usb 3-1: Manufacturer: syz [ 312.989865][ T5135] usb 3-1: SerialNumber: syz [ 313.012235][ T6939] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 313.178765][ T6958] device syzkaller0 entered promiscuous mode [ 313.185100][ T4351] usb 1-1: Using ep0 maxpacket: 32 [ 313.192950][ T4351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.217923][ T4351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.251048][ T4351] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 313.261193][ T4351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.299292][ T4351] usb 1-1: config 0 descriptor?? [ 313.313231][ T4351] hub 1-1:0.0: USB hub found [ 313.378629][ T6968] overlayfs: missing 'workdir' [ 313.435878][ T5135] hub 3-1:1.232: bad descriptor, ignoring hub [ 313.447213][ T5135] hub: probe of 3-1:1.232 failed with error -5 [ 313.456250][ T5135] option 3-1:1.232: GSM modem (1-port) converter detected [ 313.483068][ T5135] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 313.517423][ T6906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.536627][ T5135] usb 3-1: USB disconnect, device number 12 [ 313.568836][ T6906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.586964][ T5135] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 313.604013][ T5135] option 3-1:1.232: device disconnected [ 313.677975][ T6971] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 313.804459][ T4351] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 313.825524][ T4351] usbhid 1-1:0.0: can't add hid device: -71 [ 313.833680][ T4351] usbhid: probe of 1-1:0.0 failed with error -71 [ 313.884431][ T4351] usb 1-1: USB disconnect, device number 18 [ 314.291957][ T6975] binder: BINDER_SET_CONTEXT_MGR already set [ 314.299427][ T6975] binder: 6974:6975 ioctl 4018620d 2000000002c0 returned -16 [ 315.402258][ T4315] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 315.602405][ T4315] usb 4-1: Using ep0 maxpacket: 16 [ 315.610040][ T4315] usb 4-1: unable to get BOS descriptor or descriptor too short [ 315.659620][ T4315] usb 4-1: config 1 has an invalid interface number: 232 but max is 0 [ 315.681767][ T4315] usb 4-1: config 1 has no interface number 0 [ 315.714399][ T4315] usb 4-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 315.742443][ T4315] usb 4-1: config 1 interface 232 has no altsetting 0 [ 315.772904][ T4315] usb 4-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 315.792481][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.816179][ T4315] usb 4-1: Product: syz [ 315.828072][ T4315] usb 4-1: Manufacturer: syz [ 315.838031][ T4315] usb 4-1: SerialNumber: syz [ 315.866544][ T7004] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 316.266713][ T4351] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 316.298667][ T4315] hub 4-1:1.232: bad descriptor, ignoring hub [ 316.310667][ T4315] hub: probe of 4-1:1.232 failed with error -5 [ 316.351577][ T4315] option 4-1:1.232: GSM modem (1-port) converter detected [ 316.408089][ T4315] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 316.462634][ T4351] usb 1-1: Using ep0 maxpacket: 8 [ 316.468005][ T4315] usb 4-1: USB disconnect, device number 23 [ 316.476292][ T4351] usb 1-1: config 0 has no interfaces? [ 316.481843][ T4351] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 316.496383][ T4351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.505259][ T4315] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 316.518628][ T4315] option 4-1:1.232: device disconnected [ 316.576956][ T4351] usb 1-1: config 0 descriptor?? [ 316.789576][ T4315] usb 1-1: USB disconnect, device number 19 [ 317.022425][ T4351] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 317.174683][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.181062][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.212288][ T4351] usb 5-1: Using ep0 maxpacket: 32 [ 317.219434][ T4351] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 317.237789][ T4351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.264118][ T4351] usb 5-1: config 0 descriptor?? [ 317.399892][ T26] audit: type=1804 audit(1784390416.917:6): pid=7039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.709" name="bus" dev="ramfs" ino=44188 res=1 errno=0 [ 317.483237][ T4351] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 317.518118][ T4351] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 317.538909][ T26] audit: type=1804 audit(1784390416.957:7): pid=7039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.709" name="bus" dev="ramfs" ino=44188 res=1 errno=0 [ 317.583658][ T4351] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 317.617032][ T4351] usb 5-1: media controller created [ 317.687083][ T4351] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 317.803912][ T4351] az6027: usb out operation failed. (-71) [ 317.823655][ T4351] az6027: usb out operation failed. (-71) [ 317.832539][ T4351] stb0899_attach: Driver disabled by Kconfig [ 317.851553][ T4351] az6027: no front-end attached [ 317.851553][ T4351] [ 317.894211][ T4351] az6027: usb out operation failed. (-71) [ 317.917076][ T4351] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 317.964631][ T4351] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 318.032641][ T4351] dvb-usb: schedule remote query interval to 400 msecs. [ 318.088469][ T4351] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 318.132362][ T4351] usb 5-1: USB disconnect, device number 18 [ 318.238703][ T7052] netlink: 72 bytes leftover after parsing attributes in process `syz.0.713'. [ 318.302402][ T4351] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 318.515286][ T7054] binder: BINDER_SET_CONTEXT_MGR already set [ 318.523567][ T7054] binder: 7047:7054 ioctl 4018620d 2000000002c0 returned -16 [ 319.449709][ T7076] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.721'. [ 319.603164][ T126] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 319.798223][ T7076] could not allocate digest TFM handle _!5Á’›ã(ìÛiÀ£ïÕHP,ƒomñ«xúÄ™í©*Ô71U"~Âß ‘2.Ë>£~e’…ñŠ>/yµ™ [ 319.802434][ T126] usb 2-1: Using ep0 maxpacket: 16 [ 319.853458][ T126] usb 2-1: unable to get BOS descriptor or descriptor too short [ 319.898511][ T126] usb 2-1: config 1 has an invalid interface number: 232 but max is 0 [ 319.934664][ T126] usb 2-1: config 1 has no interface number 0 [ 319.961318][ T126] usb 2-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 320.017734][ T126] usb 2-1: config 1 interface 232 has no altsetting 0 [ 320.052094][ T126] usb 2-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 320.093928][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.131686][ T126] usb 2-1: Product: syz [ 320.156336][ T126] usb 2-1: Manufacturer: syz [ 320.174804][ T126] usb 2-1: SerialNumber: syz [ 320.209035][ T7074] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 320.648594][ T126] hub 2-1:1.232: bad descriptor, ignoring hub [ 320.670691][ T126] hub: probe of 2-1:1.232 failed with error -5 [ 320.694109][ T126] option 2-1:1.232: GSM modem (1-port) converter detected [ 320.743319][ T126] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 320.823168][ T126] usb 2-1: USB disconnect, device number 16 [ 320.851997][ T126] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 320.885727][ T126] option 2-1:1.232: device disconnected [ 321.151789][ T26] audit: type=1804 audit(1784390420.667:8): pid=7089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.724" name="bus" dev="ramfs" ino=43610 res=1 errno=0 [ 321.209637][ T26] audit: type=1804 audit(1784390420.717:9): pid=7089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.724" name="bus" dev="ramfs" ino=43610 res=1 errno=0 [ 321.334402][ T4320] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 321.532350][ T4320] usb 3-1: Using ep0 maxpacket: 8 [ 321.539713][ T4320] usb 3-1: config 0 has no interfaces? [ 321.591883][ T4320] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 321.626052][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.640690][ T4320] usb 3-1: config 0 descriptor?? [ 321.652275][ T4315] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 321.852001][ T4320] usb 3-1: USB disconnect, device number 13 [ 321.889531][ T4315] usb 5-1: Using ep0 maxpacket: 32 [ 321.900277][ T4315] usb 5-1: unable to get BOS descriptor or descriptor too short [ 321.920156][ T4315] usb 5-1: config 12 has an invalid interface number: 183 but max is 1 [ 321.928802][ T4315] usb 5-1: config 12 has an invalid interface number: 229 but max is 1 [ 321.937249][ T4315] usb 5-1: config 12 has no interface number 0 [ 321.943618][ T4315] usb 5-1: config 12 has no interface number 1 [ 321.950001][ T4315] usb 5-1: config 12 interface 183 has no altsetting 0 [ 321.976841][ T4315] usb 5-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 321.990204][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.003213][ T4315] usb 5-1: Product: syz [ 322.007602][ T4315] usb 5-1: Manufacturer: syz [ 322.034070][ T4315] usb 5-1: SerialNumber: syz [ 322.371937][ T7119] binder: BINDER_SET_CONTEXT_MGR already set [ 322.438357][ T7119] binder: 7111:7119 ioctl 4018620d 2000000002c0 returned -16 [ 322.494772][ T4315] usb 5-1: USB disconnect, device number 19 [ 323.142371][ T126] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 323.340753][ T126] usb 3-1: Using ep0 maxpacket: 32 [ 323.355805][ T126] usb 3-1: config 123 has an invalid descriptor of length 0, skipping remainder of the config [ 323.398102][ T126] usb 3-1: config 123 has 0 interfaces, different from the descriptor's value: 1 [ 323.444394][ T126] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 323.476906][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.510250][ T126] usb 3-1: Product: syz [ 323.524866][ T126] usb 3-1: Manufacturer: syz [ 323.544205][ T126] usb 3-1: SerialNumber: syz [ 323.786679][ T126] usb 3-1: USB disconnect, device number 14 [ 324.449898][ T26] audit: type=1326 audit(1784390423.967:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.1.739" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb0679de99 code=0x0 [ 324.634581][ T126] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 327.042259][ T126] usb 4-1: Using ep0 maxpacket: 16 [ 327.065670][ T126] usb 4-1: unable to get BOS descriptor or descriptor too short [ 327.083699][ T126] usb 4-1: config 1 has an invalid interface number: 232 but max is 0 [ 327.091957][ T126] usb 4-1: config 1 has no interface number 0 [ 327.115717][ T126] usb 4-1: config 1 interface 232 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 327.135977][ T126] usb 4-1: config 1 interface 232 has no altsetting 0 [ 327.158514][ T126] usb 4-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 327.192262][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.210698][ T126] usb 4-1: Product: syz [ 327.229030][ T126] usb 4-1: Manufacturer: syz [ 327.245021][ T126] usb 4-1: SerialNumber: syz [ 327.262675][ T7138] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 327.438119][ T126] usb 4-1: can't set config #1, error -71 [ 327.465561][ T126] usb 4-1: USB disconnect, device number 24 [ 327.720560][ T7154] device ip6gre1 entered promiscuous mode [ 327.994990][ T7169] loop0: detected capacity change from 0 to 1024 [ 328.110582][ T7169] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 328.552260][ T4320] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 328.743940][ T4320] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 328.766815][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.820635][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.873613][ T4320] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 328.954711][ T4320] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 329.000526][ T4320] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 329.056448][ T4320] usb 5-1: Manufacturer: syz [ 329.091631][ T4320] usb 5-1: config 0 descriptor?? [ 329.523884][ T4320] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 329.552481][ T4320] appleir 0003:05AC:8243.0014: No inputs registered, leaving [ 329.608712][ T4320] appleir 0003:05AC:8243.0014: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 330.865482][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 331.172370][ T7] usb 5-1: reset high-speed USB device number 20 using dummy_hcd [ 332.942265][ T4315] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 333.162204][ T4315] usb 3-1: Using ep0 maxpacket: 16 [ 333.169495][ T4315] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.265942][ T4315] usb 3-1: config 0 interface 0 has no altsetting 0 [ 333.290489][ T4315] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 333.449509][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.465824][ T4315] usb 3-1: config 0 descriptor?? [ 333.510778][ T7220] Context (ID=0x1) not attached to queue pair (handle=0x2:0x1) [ 333.602796][ T7226] netlink: 'syz.4.758': attribute type 12 has an invalid length. [ 333.651952][ T7226] overlayfs: failed to resolve './bus': -2 [ 333.949156][ T4320] usb 5-1: USB disconnect, device number 20 [ 334.344674][ T4315] usbhid 3-1:0.0: can't add hid device: -71 [ 334.351369][ T4315] usbhid: probe of 3-1:0.0 failed with error -71 [ 334.394604][ T4315] usb 3-1: USB disconnect, device number 15 [ 334.811336][ T7246] device syzkaller0 entered promiscuous mode [ 334.975667][ T7248] loop1: detected capacity change from 0 to 1024 [ 335.088072][ T7248] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 337.580110][ T7265] process 'syz.2.768' launched './file0' with NULL argv: empty string added [ 339.169857][ T7267] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.179701][ T7267] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.460870][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 339.646774][ T7298] loop5: detected capacity change from 0 to 7 [ 339.679790][ T5563] Dev loop5: unable to read RDB block 7 [ 339.686837][ T5563] loop5: unable to read partition table [ 339.709451][ T5563] loop5: partition table beyond EOD, truncated [ 339.748687][ T7298] Dev loop5: unable to read RDB block 7 [ 339.770651][ T7298] loop5: unable to read partition table [ 339.822389][ T7298] loop5: partition table beyond EOD, truncated [ 339.842333][ T7298] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 340.372386][ T4351] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 340.456848][ T7267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.508871][ T7267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.562282][ T4351] usb 2-1: Using ep0 maxpacket: 16 [ 340.573907][ T4351] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.590910][ T4351] usb 2-1: config 0 interface 0 has no altsetting 0 [ 340.598599][ T4351] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 340.613961][ T4351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.626151][ T4351] usb 2-1: config 0 descriptor?? [ 341.106689][ T7267] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.116696][ T7267] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.127149][ T7267] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.137469][ T7267] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.259503][ T7267] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.268608][ T7267] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.277755][ T7267] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.286818][ T7267] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.453522][ T4351] usbhid 2-1:0.0: can't add hid device: -71 [ 341.459735][ T4351] usbhid: probe of 2-1:0.0 failed with error -71 [ 341.525686][ T7293] device syzkaller0 entered promiscuous mode [ 341.553151][ T4351] usb 2-1: USB disconnect, device number 17 [ 342.005012][ T7316] IPVS: set_ctl: invalid protocol: 189 172.20.20.17:19998 [ 342.692303][ T5135] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 342.865499][ T5135] usb 2-1: Using ep0 maxpacket: 8 [ 342.875380][ T5135] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 342.912904][ T5135] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 342.924551][ T5135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.933228][ T5135] usb 2-1: Product: syz [ 342.937537][ T5135] usb 2-1: Manufacturer: syz [ 342.942840][ T5135] usb 2-1: SerialNumber: syz [ 342.958350][ T5135] usb 2-1: config 0 descriptor?? [ 342.970594][ T5135] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 342.988016][ T5135] usb 2-1: setting power ON [ 342.993271][ T5135] dvb-usb: bulk message failed: -22 (2/0) [ 343.013779][ T5135] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 343.023784][ T5135] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 343.033156][ T5135] usb 2-1: media controller created [ 343.065503][ T5135] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 343.107033][ T5135] usb 2-1: selecting invalid altsetting 6 [ 343.119206][ T5135] usb 2-1: digital interface selection failed (-22) [ 343.126484][ T5135] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 343.150735][ T5135] usb 2-1: setting power OFF [ 343.156073][ T5135] dvb-usb: bulk message failed: -22 (2/0) [ 343.161958][ T5135] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 343.177410][ T7319] dvb-usb: bulk message failed: -22 (3/0) [ 343.183616][ T5135] (NULL device *): no alternate interface [ 343.189155][ T7319] dvb-usb: bulk message failed: -22 (3/0) [ 343.234499][ T5135] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 343.255366][ T5135] usb 2-1: USB disconnect, device number 18 [ 344.799462][ T7326] tipc: Enabling of bearer rejected, failed to enable media [ 345.326122][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.784'. [ 346.005342][ T4351] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 346.196405][ T4351] usb 1-1: Using ep0 maxpacket: 16 [ 346.205114][ T4351] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.221014][ T4351] usb 1-1: config 0 interface 0 has no altsetting 0 [ 346.229879][ T4351] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 346.249488][ T4351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.270223][ T4351] usb 1-1: config 0 descriptor?? [ 347.149126][ T4351] usbhid 1-1:0.0: can't add hid device: -71 [ 347.160423][ T4351] usbhid: probe of 1-1:0.0 failed with error -71 [ 347.221969][ T4351] usb 1-1: USB disconnect, device number 20 [ 349.062086][ T7406] tipc: Enabled bearer , priority 0 [ 349.141142][ T7407] device syzkaller0 entered promiscuous mode [ 349.190881][ T7404] tipc: Disabling bearer [ 350.058434][ T4318] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 350.182373][ T4320] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 350.255911][ T4318] usb 4-1: unable to get BOS descriptor or descriptor too short [ 350.284409][ T4318] usb 4-1: not running at top speed; connect to a high speed hub [ 350.334169][ T4318] usb 4-1: config 8 has an invalid interface number: 43 but max is 1 [ 350.367064][ T4318] usb 4-1: config 8 has an invalid interface number: 35 but max is 1 [ 350.402422][ T4320] usb 2-1: Using ep0 maxpacket: 16 [ 350.413361][ T4318] usb 4-1: config 8 has no interface number 0 [ 350.420153][ T4320] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.434164][ T4318] usb 4-1: config 8 has no interface number 1 [ 350.469902][ T4320] usb 2-1: config 0 interface 0 has no altsetting 0 [ 350.476897][ T4318] usb 4-1: config 8 interface 43 altsetting 17 has an invalid endpoint with address 0xE5, skipping [ 350.490328][ T4320] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 350.504861][ T4318] usb 4-1: config 8 interface 43 has no altsetting 0 [ 350.517845][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.526154][ T4318] usb 4-1: config 8 interface 35 has no altsetting 0 [ 350.544703][ T4320] usb 2-1: config 0 descriptor?? [ 350.558333][ T4318] usb 4-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 350.573595][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.581829][ T4318] usb 4-1: Product: syz [ 350.590701][ T4318] usb 4-1: Manufacturer: syz [ 350.599955][ T4318] usb 4-1: SerialNumber: syz [ 350.828992][ T4318] ums-alauda 4-1:8.43: USB Mass Storage device detected [ 350.900129][ T4318] hub 4-1:8.35: Invalid hub with more than one config or interface [ 350.908715][ T4318] hub: probe of 4-1:8.35 failed with error -22 [ 350.920805][ T4318] ums-alauda 4-1:8.35: USB Mass Storage device detected [ 351.002701][ T4318] usb 4-1: USB disconnect, device number 25 [ 351.465812][ T4320] usbhid 2-1:0.0: can't add hid device: -71 [ 351.492360][ T4320] usbhid: probe of 2-1:0.0 failed with error -71 [ 351.525275][ T4320] usb 2-1: USB disconnect, device number 19 [ 351.801996][ T7454] tipc: Enabled bearer , priority 0 [ 351.855999][ T7453] tipc: Disabling bearer [ 352.275942][ T7465] Context (ID=0x1) not attached to queue pair (handle=0x2:0x1) [ 353.435096][ T4351] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 353.436634][ T26] audit: type=1326 audit(1784390452.957:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7481 comm="syz.2.816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2f159de99 code=0x0 [ 353.482275][ T4320] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 353.553970][ T26] audit: type=1804 audit(1784390453.077:12): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.814" name="bus" dev="ramfs" ino=45264 res=1 errno=0 [ 353.574798][ T4318] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 353.632255][ T4351] usb 1-1: Using ep0 maxpacket: 8 [ 353.639682][ T4351] usb 1-1: config 0 has no interfaces? [ 353.652398][ T26] audit: type=1804 audit(1784390453.107:13): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.814" name="bus" dev="ramfs" ino=45264 res=1 errno=0 [ 353.662894][ T4351] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 353.698744][ T4351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.702452][ T4320] usb 2-1: Using ep0 maxpacket: 32 [ 353.717568][ T4320] usb 2-1: unable to get BOS descriptor or descriptor too short [ 353.730641][ T4320] usb 2-1: config 12 has an invalid interface number: 183 but max is 1 [ 353.739499][ T4320] usb 2-1: config 12 has an invalid interface number: 229 but max is 1 [ 353.748414][ T4320] usb 2-1: config 12 has no interface number 0 [ 353.757311][ T4320] usb 2-1: config 12 has no interface number 1 [ 353.762838][ T4351] usb 1-1: config 0 descriptor?? [ 353.769538][ T4320] usb 2-1: config 12 interface 183 has no altsetting 0 [ 353.784513][ T4318] usb 5-1: unable to get BOS descriptor or descriptor too short [ 353.797663][ T4318] usb 5-1: not running at top speed; connect to a high speed hub [ 353.816714][ T4320] usb 2-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 353.829151][ T4318] usb 5-1: config 8 has an invalid interface number: 43 but max is 1 [ 353.841933][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.854305][ T4318] usb 5-1: config 8 has an invalid interface number: 35 but max is 1 [ 353.865415][ T4320] usb 2-1: Product: syz [ 353.875011][ T4318] usb 5-1: config 8 has no interface number 0 [ 353.884699][ T4320] usb 2-1: Manufacturer: syz [ 353.890547][ T4318] usb 5-1: config 8 has no interface number 1 [ 353.899061][ T4320] usb 2-1: SerialNumber: syz [ 353.909761][ T4318] usb 5-1: config 8 interface 43 altsetting 17 has an invalid endpoint with address 0xE5, skipping [ 353.932051][ T4318] usb 5-1: config 8 interface 43 has no altsetting 0 [ 353.939899][ T4318] usb 5-1: config 8 interface 35 has no altsetting 0 [ 353.957949][ T4318] usb 5-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 353.979351][ T4351] usb 1-1: USB disconnect, device number 21 [ 353.999665][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.023777][ T4318] usb 5-1: Product: syz [ 354.030757][ T4318] usb 5-1: Manufacturer: syz [ 354.042455][ T4318] usb 5-1: SerialNumber: syz [ 354.264097][ T4318] ums-alauda 5-1:8.43: USB Mass Storage device detected [ 354.375360][ T4318] hub 5-1:8.35: Invalid hub with more than one config or interface [ 354.396778][ T4318] hub: probe of 5-1:8.35 failed with error -22 [ 354.412050][ T4318] ums-alauda 5-1:8.35: USB Mass Storage device detected [ 354.492435][ T4318] usb 5-1: USB disconnect, device number 21 [ 354.942450][ T4315] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 354.980938][ T4320] usb 2-1: USB disconnect, device number 20 [ 355.111213][ T7510] device syzkaller0 entered promiscuous mode [ 355.132238][ T4315] usb 3-1: Using ep0 maxpacket: 16 [ 355.153014][ T4315] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.168081][ T4315] usb 3-1: config 0 interface 0 has no altsetting 0 [ 355.175527][ T4315] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 355.186997][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.204932][ T4315] usb 3-1: config 0 descriptor?? [ 355.562228][ T4320] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 355.767204][ T4320] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 355.796783][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.832750][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.847869][ T4320] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 355.878511][ T4320] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 355.900592][ T4320] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 355.935526][ T4320] usb 4-1: Manufacturer: syz [ 355.971422][ T4320] usb 4-1: config 0 descriptor?? [ 356.186303][ T4315] usbhid 3-1:0.0: can't add hid device: -71 [ 356.194270][ T4315] usbhid: probe of 3-1:0.0 failed with error -71 [ 356.228361][ T4315] usb 3-1: USB disconnect, device number 16 [ 356.412393][ T4351] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 356.462669][ T4320] appleir 0003:05AC:8243.0015: unknown main item tag 0x0 [ 356.533268][ T4320] appleir 0003:05AC:8243.0015: No inputs registered, leaving [ 356.556764][ T7525] netlink: 184 bytes leftover after parsing attributes in process `syz.1.822'. [ 356.572554][ T4320] appleir 0003:05AC:8243.0015: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 356.613704][ T4351] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 356.630694][ T4351] usb 5-1: config 0 has no interface number 0 [ 356.682369][ T4351] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 356.724911][ T4351] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 356.787600][ T4351] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 356.857192][ T4351] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 356.910329][ T4351] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 356.941233][ T4351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.973557][ T4351] usb 5-1: config 0 descriptor?? [ 356.991584][ T7528] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 357.004889][ T7528] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 357.055488][ T4351] ldusb 5-1:0.55: Interrupt in endpoint not found [ 358.114976][ T26] audit: type=1326 audit(1784390457.637:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.2.827" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2f159de99 code=0x0 [ 358.162408][ T4318] usb 4-1: reset high-speed USB device number 26 using dummy_hcd [ 358.203258][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 358.302683][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 358.361479][ T7547] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 358.385490][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 358.440085][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 358.558603][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 358.596328][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 358.654978][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 358.709430][ T26] audit: type=1326 audit(1784390458.227:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.3.828" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a799de99 code=0x7ffc0000 [ 358.801227][ T7527] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 358.860116][ T26] audit: type=1326 audit(1784390458.257:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.3.828" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb8a799de99 code=0x7ffc0000 [ 358.945148][ T7] usb 5-1: USB disconnect, device number 22 [ 358.985658][ T26] audit: type=1326 audit(1784390458.257:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.3.828" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a799de99 code=0x7ffc0000 [ 359.009634][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.179838][ T4320] usb 4-1: USB disconnect, device number 26 [ 359.194953][ T7551] netlink: 84 bytes leftover after parsing attributes in process `syz.3.828'. [ 359.312209][ T26] audit: type=1326 audit(1784390458.277:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.3.828" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb8a799de99 code=0x7ffc0000 [ 359.388963][ T26] audit: type=1326 audit(1784390458.277:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.3.828" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a799de99 code=0x7ffc0000 [ 359.465629][ T26] audit: type=1326 audit(1784390458.287:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.3.828" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fb8a799de99 code=0x7ffc0000 [ 359.552207][ T7] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 359.605726][ T26] audit: type=1326 audit(1784390458.317:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.3.828" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a799de99 code=0x7ffc0000 [ 359.629650][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.762265][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 359.777500][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.826723][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.836856][ T26] audit: type=1326 audit(1784390458.337:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.3.828" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb8a799de99 code=0x7ffc0000 [ 359.860680][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.885349][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 359.952279][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.006684][ T7] usb 3-1: config 0 descriptor?? [ 360.016550][ T26] audit: type=1326 audit(1784390458.347:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.3.828" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb8a799dc02 code=0x7ffc0000 [ 360.053720][ T7] hub 3-1:0.0: USB hub found [ 360.063104][ T26] audit: type=1326 audit(1784390458.377:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.3.828" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a799de99 code=0x7ffc0000 [ 360.223001][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.242507][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.294460][ T7] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 360.338744][ T7] usbhid 3-1:0.0: can't add hid device: -71 [ 360.361591][ T7] usbhid: probe of 3-1:0.0 failed with error -71 [ 360.433728][ T7] usb 3-1: USB disconnect, device number 17 [ 362.052578][ T7] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 362.242381][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 362.249647][ T7] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 362.271385][ T7] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 362.291969][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.301916][ T7] usb 3-1: Product: syz [ 362.306578][ T7] usb 3-1: Manufacturer: syz [ 362.311520][ T7] usb 3-1: SerialNumber: syz [ 362.318681][ T7] usb 3-1: config 0 descriptor?? [ 362.328369][ T7] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 362.342477][ T7] usb 3-1: setting power ON [ 362.347416][ T7] dvb-usb: bulk message failed: -22 (2/0) [ 362.371985][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 362.400010][ T7] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 362.418868][ T7] usb 3-1: media controller created [ 362.461921][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 362.531889][ T7] usb 3-1: selecting invalid altsetting 6 [ 362.545711][ T7] usb 3-1: digital interface selection failed (-22) [ 362.560415][ T7] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 362.560687][ T7580] dvb-usb: bulk message failed: -22 (3/0) [ 362.580772][ T7] usb 3-1: setting power OFF [ 362.592254][ T7580] dvb-usb: bulk message failed: -22 (43/0) [ 362.604543][ T7] dvb-usb: bulk message failed: -22 (2/0) [ 362.617458][ T7] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 362.638543][ T7] (NULL device *): no alternate interface [ 363.613040][ T7] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 363.765353][ T7] usb 3-1: USB disconnect, device number 18 [ 365.432222][ T27] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 365.652281][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 365.729226][ T27] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 366.497011][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.540368][ T27] usb 5-1: config 0 descriptor?? [ 366.689524][ T7636] netlink: 112 bytes leftover after parsing attributes in process `syz.0.852'. [ 366.808924][ T27] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 366.836987][ T27] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 366.866358][ T27] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 367.052273][ T5135] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 367.252288][ T5135] usb 4-1: Using ep0 maxpacket: 8 [ 367.259453][ T5135] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 367.290703][ T5135] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 367.342467][ T5135] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.350534][ T5135] usb 4-1: Product: syz [ 367.382433][ T5135] usb 4-1: Manufacturer: syz [ 367.387635][ T5135] usb 4-1: SerialNumber: syz [ 367.442458][ T5135] usb 4-1: config 0 descriptor?? [ 367.460807][ T5135] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 367.510855][ T5135] usb 4-1: setting power ON [ 367.517012][ T5135] dvb-usb: bulk message failed: -22 (2/0) [ 367.552880][ T5135] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 367.569047][ T5135] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 367.579978][ T5135] usb 4-1: media controller created [ 367.659535][ T7657] loop2: detected capacity change from 0 to 1024 [ 367.731128][ T5135] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 367.750598][ T7640] dvb-usb: bulk message failed: -22 (3/0) [ 367.796550][ T7657] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 367.841276][ T7640] dvb-usb: bulk message failed: -22 (43/0) [ 367.944390][ T5135] usb 4-1: selecting invalid altsetting 6 [ 368.001317][ T5135] usb 4-1: digital interface selection failed (-22) [ 368.068706][ T5135] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 368.140970][ T5135] usb 4-1: setting power OFF [ 368.157828][ T5135] dvb-usb: bulk message failed: -22 (2/0) [ 368.166104][ T5135] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 368.266335][ T5135] (NULL device *): no alternate interface [ 369.007283][ T5135] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 369.114420][ T5135] usb 4-1: USB disconnect, device number 27 [ 369.250024][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 369.938456][ T7704] loop2: detected capacity change from 0 to 1024 [ 369.948661][ T7704] EXT4-fs: Ignoring removed bh option [ 369.978513][ T7704] EXT4-fs: Ignoring removed bh option [ 370.049862][ T7704] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 371.232821][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 371.232837][ T26] audit: type=1326 audit(1784390470.757:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.1.873" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb0679de99 code=0x0 [ 371.273702][ T5135] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 371.315365][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 371.525700][ T5135] usb 1-1: Using ep0 maxpacket: 8 [ 371.695155][ T956] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 371.699963][ T7734] loop2: detected capacity change from 0 to 1024 [ 371.859988][ T7734] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 372.425989][ T5135] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 372.450509][ T5135] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 372.472183][ T5135] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.480253][ T5135] usb 1-1: Product: syz [ 372.486718][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 372.500382][ T5135] usb 1-1: Manufacturer: syz [ 372.516222][ T5135] usb 1-1: SerialNumber: syz [ 372.528523][ T5135] usb 1-1: config 0 descriptor?? [ 372.567348][ T5135] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 372.633752][ T5135] usb 1-1: setting power ON [ 372.639425][ T956] usb 4-1: unable to get BOS descriptor or descriptor too short [ 372.660756][ T956] usb 4-1: not running at top speed; connect to a high speed hub [ 372.674813][ T5135] dvb-usb: bulk message failed: -22 (2/0) [ 372.708678][ T956] usb 4-1: config 8 has an invalid interface number: 43 but max is 0 [ 372.722811][ T5135] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 372.751683][ T956] usb 4-1: config 8 has no interface number 0 [ 372.769971][ T7722] dvb-usb: bulk message failed: -22 (3/0) [ 372.776644][ T5135] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 372.802967][ T7749] mmap: syz.1.882 (7749) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 372.819954][ T7722] dvb-usb: bulk message failed: -22 (43/0) [ 372.826406][ T956] usb 4-1: config 8 interface 43 altsetting 17 has an invalid endpoint with address 0xE5, skipping [ 372.838072][ T5135] usb 1-1: media controller created [ 372.851529][ T956] usb 4-1: config 8 interface 43 has no altsetting 0 [ 372.872591][ T956] usb 4-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 372.885209][ T5135] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 372.893711][ T956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.910683][ T956] usb 4-1: Product: syz [ 372.920520][ T956] usb 4-1: Manufacturer: syz [ 372.930080][ T5135] usb 1-1: selecting invalid altsetting 6 [ 372.937331][ T956] usb 4-1: SerialNumber: syz [ 372.942348][ T5135] usb 1-1: digital interface selection failed (-22) [ 372.966562][ T5135] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 372.997151][ T5135] usb 1-1: setting power OFF [ 373.007596][ T5135] dvb-usb: bulk message failed: -22 (2/0) [ 373.030642][ T5135] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 373.079473][ T5135] (NULL device *): no alternate interface [ 373.153859][ T5135] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 373.178993][ T956] ums-alauda 4-1:8.43: USB Mass Storage device detected [ 373.265385][ T956] usb 4-1: USB disconnect, device number 28 [ 373.289185][ T5135] usb 1-1: USB disconnect, device number 22 [ 373.670918][ T7761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.883'. [ 373.955816][ T7765] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 374.020273][ T7761] device macvlan2 entered promiscuous mode [ 374.039645][ T7761] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 374.237907][ T7776] netlink: 64 bytes leftover after parsing attributes in process `syz.2.886'. [ 374.475098][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.886'. [ 374.685357][ T7784] loop0: detected capacity change from 0 to 1024 [ 374.713181][ T7784] EXT4-fs: Ignoring removed bh option [ 374.718839][ T7784] EXT4-fs: Ignoring removed bh option [ 374.853344][ T7784] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 375.536996][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 375.673623][ T7796] binder: 7795:7796 ioctl c0306201 0 returned -14 [ 375.813334][ T7800] loop0: detected capacity change from 0 to 1024 [ 377.412587][ T7801] binder: 7795:7801 ioctl c0306201 0 returned -14 [ 377.473999][ T7800] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 377.652564][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 377.831485][ T7814] netlink: 16 bytes leftover after parsing attributes in process `syz.3.893'. [ 378.005532][ T7817] netlink: 68 bytes leftover after parsing attributes in process `syz.3.893'. [ 378.024779][ T7817] netlink: 16 bytes leftover after parsing attributes in process `syz.3.893'. [ 378.072405][ T956] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 378.292319][ T956] usb 1-1: Using ep0 maxpacket: 8 [ 378.312230][ T956] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 378.333346][ T956] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 378.402286][ T956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.439470][ T956] usb 1-1: Product: syz [ 378.452744][ T956] usb 1-1: Manufacturer: syz [ 378.480148][ T956] usb 1-1: SerialNumber: syz [ 378.553009][ T956] usb 1-1: config 0 descriptor?? [ 378.574265][ T956] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 378.601286][ T956] usb 1-1: setting power ON [ 378.609998][ T956] dvb-usb: bulk message failed: -22 (2/0) [ 378.619609][ T7824] device syzkaller0 entered promiscuous mode [ 378.626775][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.633653][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.661981][ T956] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 378.686348][ T956] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 378.768735][ T7816] dvb-usb: bulk message failed: -22 (3/0) [ 378.776140][ T956] usb 1-1: media controller created [ 378.792297][ T7816] dvb-usb: bulk message failed: -22 (63/0) [ 378.863813][ T956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 378.962403][ T956] usb 1-1: selecting invalid altsetting 6 [ 378.973220][ T956] usb 1-1: digital interface selection failed (-22) [ 379.038933][ T7835] random: crng reseeded on system resumption [ 380.038324][ T956] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 380.082545][ T956] usb 1-1: setting power OFF [ 380.087239][ T956] dvb-usb: bulk message failed: -22 (2/0) [ 380.122193][ T956] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 380.166050][ T956] (NULL device *): no alternate interface [ 380.209121][ T956] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 380.297829][ T956] usb 1-1: USB disconnect, device number 23 [ 380.991878][ T7842] loop0: detected capacity change from 0 to 1024 [ 381.017723][ T7842] EXT4-fs: Ignoring removed bh option [ 381.042696][ T7842] EXT4-fs: Ignoring removed bh option [ 381.129607][ T7842] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 381.856477][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 382.104165][ T7861] loop0: detected capacity change from 0 to 1024 [ 383.471914][ T7861] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 383.664221][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 383.993647][ T7869] Context (ID=0x1) not attached to queue pair (handle=0x2:0x1) [ 385.712198][ T956] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 385.920742][ T7886] loop4: detected capacity change from 0 to 40427 [ 385.933681][ T956] usb 2-1: Using ep0 maxpacket: 8 [ 385.947275][ T956] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 385.999710][ T7886] F2FS-fs (loop4): Found nat_bits in checkpoint [ 386.010587][ T956] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 386.055675][ T956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.091227][ T956] usb 2-1: Product: syz [ 386.123503][ T956] usb 2-1: Manufacturer: syz [ 386.145366][ T956] usb 2-1: SerialNumber: syz [ 386.184906][ T956] usb 2-1: config 0 descriptor?? [ 386.209918][ T7886] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 386.235827][ T956] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 386.268395][ T956] usb 2-1: setting power ON [ 386.301889][ T956] dvb-usb: bulk message failed: -22 (2/0) [ 386.359058][ T956] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 386.427173][ T7883] dvb-usb: bulk message failed: -22 (3/0) [ 386.516548][ T956] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 386.525305][ T956] usb 2-1: media controller created [ 386.541004][ T7883] dvb-usb: bulk message failed: -22 (63/0) [ 386.559817][ T956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 386.614124][ T956] usb 2-1: selecting invalid altsetting 6 [ 386.647181][ T956] usb 2-1: digital interface selection failed (-22) [ 386.667977][ T956] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 386.700940][ T956] usb 2-1: setting power OFF [ 386.729644][ T956] dvb-usb: bulk message failed: -22 (2/0) [ 386.742285][ T956] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 386.767750][ T956] (NULL device *): no alternate interface [ 386.824811][ T956] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 386.866404][ T956] usb 2-1: USB disconnect, device number 21 [ 386.916820][ T4281] syz-executor: attempt to access beyond end of device [ 386.916820][ T4281] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 388.440628][ T7927] device syzkaller0 entered promiscuous mode [ 388.521711][ T7932] Context (ID=0x1) not attached to queue pair (handle=0x2:0x1) [ 389.276668][ T5135] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 389.482588][ T5135] usb 4-1: Using ep0 maxpacket: 16 [ 389.489938][ T5135] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.516370][ T5135] usb 4-1: config 0 interface 0 has no altsetting 0 [ 389.542457][ T5135] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 389.562000][ T5135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.582520][ T5135] usb 4-1: config 0 descriptor?? [ 390.177267][ T7938] loop2: detected capacity change from 0 to 40427 [ 390.262925][ T7938] F2FS-fs (loop2): Found nat_bits in checkpoint [ 390.403250][ T5135] usbhid 4-1:0.0: can't add hid device: -71 [ 390.409287][ T5135] usbhid: probe of 4-1:0.0 failed with error -71 [ 390.470701][ T5135] usb 4-1: USB disconnect, device number 29 [ 390.538027][ T7938] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 390.689872][ T4280] syz-executor: attempt to access beyond end of device [ 390.689872][ T4280] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 390.776395][ T26] audit: type=1804 audit(1784390490.297:63): pid=7953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.930" name="/newroot/206/file0" dev="fuse" ino=1 res=1 errno=0 [ 393.290631][ T7971] random: crng reseeded on system resumption [ 395.663934][ T7] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 395.872327][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 395.882398][ T7] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.902167][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 395.917970][ T7] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 396.015160][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.042645][ T7] usb 4-1: config 0 descriptor?? [ 396.283014][ T7993] netlink: 104 bytes leftover after parsing attributes in process `syz.4.942'. [ 396.812281][ T4348] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 396.915602][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 396.928154][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 397.002419][ T4348] usb 1-1: Using ep0 maxpacket: 8 [ 397.022349][ T4348] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 397.041295][ T7] usb 4-1: USB disconnect, device number 30 [ 397.077749][ T4348] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 397.111226][ T4348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.146173][ T4348] usb 1-1: Product: syz [ 397.158067][ T4348] usb 1-1: Manufacturer: syz [ 397.188741][ T4348] usb 1-1: SerialNumber: syz [ 397.246459][ T4348] usb 1-1: config 0 descriptor?? [ 397.300630][ T4348] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 397.333567][ T4348] usb 1-1: setting power ON [ 397.348641][ T4348] dvb-usb: bulk message failed: -22 (2/0) [ 397.368183][ T4348] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 397.408985][ T4348] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 397.461699][ T4348] usb 1-1: media controller created [ 397.501920][ T8001] dvb-usb: bulk message failed: -22 (3/0) [ 397.522278][ T8001] dvb-usb: bulk message failed: -22 (73/0) [ 397.586086][ T4348] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.651900][ T4348] usb 1-1: selecting invalid altsetting 6 [ 397.668806][ T4348] usb 1-1: digital interface selection failed (-22) [ 397.700694][ T4348] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 397.764651][ T4348] usb 1-1: setting power OFF [ 397.779099][ T4348] dvb-usb: bulk message failed: -22 (2/0) [ 397.808923][ T4348] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 397.838552][ T4348] (NULL device *): no alternate interface [ 397.907032][ T4348] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 397.969273][ T4348] usb 1-1: USB disconnect, device number 24 [ 399.964946][ T8030] device syzkaller0 entered promiscuous mode [ 401.032242][ T4318] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 401.248020][ T4318] usb 4-1: device descriptor read/64, error -71 [ 401.563773][ T4318] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 401.759500][ T4318] usb 4-1: device descriptor read/64, error -71 [ 401.882394][ T4318] usb usb4-port1: attempt power cycle [ 402.323322][ T4318] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 402.375252][ T4318] usb 4-1: device descriptor read/8, error -71 [ 402.667215][ T4318] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 402.712881][ T4318] usb 4-1: device descriptor read/8, error -71 [ 402.823732][ T4318] usb usb4-port1: unable to enumerate USB device [ 403.502154][ T26] audit: type=1326 audit(1784390503.017:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8074 comm="syz.0.961" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f145159de99 code=0x0 [ 404.533149][ T22] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 404.689429][ T8107] device syzkaller0 entered promiscuous mode [ 404.722485][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 404.733644][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.761588][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.803573][ T22] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 404.830770][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.888210][ T22] usb 4-1: config 0 descriptor?? [ 404.898868][ T22] hub 4-1:0.0: USB hub found [ 405.101713][ T22] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 405.336417][ T4348] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 405.506915][ T4348] usb 1-1: device descriptor read/64, error -71 [ 405.525991][ T22] hid-generic 0003:046D:C31C.0016: unknown main item tag 0x0 [ 405.537410][ T22] hid-generic 0003:046D:C31C.0016: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 405.782371][ T4348] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 405.942333][ T4348] usb 1-1: device descriptor read/64, error -71 [ 406.073392][ T4348] usb usb1-port1: attempt power cycle [ 406.337007][ T8101] usb 4-1: reset high-speed USB device number 35 using dummy_hcd [ 406.488309][ T4348] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 406.532999][ T4348] usb 1-1: device descriptor read/8, error -71 [ 406.803785][ T4348] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 406.851277][ T4348] usb 1-1: device descriptor read/8, error -71 [ 406.967589][ T4318] usb 4-1: USB disconnect, device number 35 [ 406.972985][ T4348] usb usb1-port1: unable to enumerate USB device [ 407.542365][ T4318] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 407.727354][ T8144] loop1: detected capacity change from 0 to 1024 [ 407.890783][ T8144] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 408.062481][ T4318] usb 4-1: Using ep0 maxpacket: 32 [ 408.112270][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.168068][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.248720][ T4318] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 408.331405][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.404653][ T4318] usb 4-1: config 0 descriptor?? [ 408.414807][ T4318] usb 4-1: can't set config #0, error -71 [ 408.421731][ T4318] usb 4-1: USB disconnect, device number 36 [ 408.448846][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 408.488073][ T8155] fuse: Bad value for 'fd' [ 408.836313][ T8164] device syzkaller0 entered promiscuous mode [ 409.812170][ T22] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 409.982364][ T22] usb 1-1: device descriptor read/64, error -71 [ 410.252230][ T22] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 410.407509][ T22] usb 1-1: device descriptor read/64, error -71 [ 410.534416][ T22] usb usb1-port1: attempt power cycle [ 410.942402][ T22] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 410.994457][ T22] usb 1-1: device descriptor read/8, error -71 [ 411.262318][ T22] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 411.302945][ T22] usb 1-1: device descriptor read/8, error -71 [ 411.422350][ T22] usb usb1-port1: unable to enumerate USB device [ 411.634511][ T26] audit: type=1804 audit(1784390511.157:65): pid=8201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.998" name="bus" dev="ramfs" ino=47627 res=1 errno=0 [ 411.832816][ T8205] loop2: detected capacity change from 0 to 1024 [ 412.022628][ T8205] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 412.453137][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 413.621319][ T8237] device syzkaller0 entered promiscuous mode [ 413.796144][ T22] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 413.992380][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 414.000135][ T22] usb 4-1: config 0 has no interfaces? [ 414.032504][ T22] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 414.078419][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.130318][ T22] usb 4-1: config 0 descriptor?? [ 414.353436][ T22] usb 4-1: USB disconnect, device number 37 [ 415.902866][ T22] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 416.072379][ T22] usb 3-1: device descriptor read/64, error -71 [ 416.372424][ T22] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 416.542246][ T22] usb 3-1: device descriptor read/64, error -71 [ 416.672346][ T22] usb usb3-port1: attempt power cycle [ 417.082240][ T22] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 417.132905][ T22] usb 3-1: device descriptor read/8, error -71 [ 417.412351][ T22] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 417.453157][ T22] usb 3-1: device descriptor read/8, error -71 [ 417.582479][ T22] usb usb3-port1: unable to enumerate USB device [ 418.516464][ T8293] device syzkaller1 entered promiscuous mode [ 418.655984][ T8295] device syzkaller0 entered promiscuous mode [ 420.522187][ T22] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 420.692249][ T22] usb 1-1: device descriptor read/64, error -71 [ 420.972604][ T22] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 421.133923][ T22] usb 1-1: device descriptor read/64, error -71 [ 421.276079][ T22] usb usb1-port1: attempt power cycle [ 421.695567][ T22] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 421.752262][ T22] usb 1-1: device descriptor read/8, error -71 [ 422.022337][ T22] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 422.065807][ T22] usb 1-1: device descriptor read/8, error -71 [ 422.192490][ T22] usb usb1-port1: unable to enumerate USB device [ 422.902179][ T4318] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 423.112847][ T4318] usb 3-1: Using ep0 maxpacket: 16 [ 423.121106][ T4318] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.160939][ T4318] usb 3-1: config 0 interface 0 has no altsetting 0 [ 423.179940][ T4318] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 423.204521][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.229397][ T4318] usb 3-1: config 0 descriptor?? [ 423.646560][ T4318] nzxt-smart2 0003:1E71:2009.0017: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 424.178542][ T8372] input: syz1 as /devices/virtual/input/input8 [ 424.711057][ T8372] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1045'. [ 424.751086][ T4318] usb 3-1: USB disconnect, device number 23 [ 426.708452][ T26] audit: type=1326 audit(1784390526.227:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.3.1063" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8a799de99 code=0x0 [ 427.002236][ T4318] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 427.162267][ T4318] usb 3-1: device descriptor read/64, error -71 [ 427.452197][ T4318] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 427.485628][ T22] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 427.612316][ T4318] usb 3-1: device descriptor read/64, error -71 [ 427.672227][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 427.679579][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.745723][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.755966][ T4318] usb usb3-port1: attempt power cycle [ 427.798428][ T22] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 427.810695][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.821017][ T22] usb 1-1: config 0 descriptor?? [ 428.182237][ T4318] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 428.192229][ T956] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 428.239558][ T22] savu 0003:1E7D:2D5A.0018: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 428.293495][ T4318] usb 3-1: device descriptor read/8, error -71 [ 428.383996][ T956] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 428.395747][ T956] usb 2-1: config 0 has no interface number 0 [ 428.431354][ T956] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 428.467398][ T956] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 428.486984][ T956] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 428.500565][ T956] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 428.525394][ T956] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 428.538059][ T956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.551559][ T956] usb 2-1: config 0 descriptor?? [ 428.561286][ T8458] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 428.569189][ T22] usb 1-1: USB disconnect, device number 37 [ 428.586694][ T8458] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 428.602216][ T4318] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 428.626278][ T956] ldusb 2-1:0.55: Interrupt in endpoint not found [ 428.651729][ T4318] usb 3-1: device descriptor read/8, error -71 [ 428.740824][ T8461] fido_id[8461]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 428.792665][ T4318] usb usb3-port1: unable to enumerate USB device [ 429.814053][ T27] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 534.842089][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 534.849246][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8450/1:b..l [ 534.857757][ C1] (detected by 1, t=10503 jiffies, g=51901, q=92 ncpus=2) [ 534.865002][ C1] task:syz.1.1068 state:R running task stack:24304 pid:8450 ppid:4275 flags:0x00004000 [ 534.877165][ C1] Call Trace: [ 534.880507][ C1] [ 534.883574][ C1] __schedule+0x107f/0x4030 [ 534.888169][ C1] ? __sched_text_start+0x8/0x8 [ 534.893070][ C1] ? lock_chain_count+0x20/0x20 [ 534.897976][ C1] ? preempt_schedule_irq+0xb0/0x160 [ 534.903403][ C1] preempt_schedule_irq+0xbb/0x160 [ 534.908570][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 534.914344][ C1] ? rcu_is_watching+0x11/0xa0 [ 534.919165][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 534.925037][ C1] irqentry_exit+0x63/0x70 [ 534.929547][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 534.935690][ C1] RIP: 0010:xas_descend+0xa/0x460 [ 534.940771][ C1] Code: 44 89 f1 80 e1 07 38 c1 0f 8c 46 ff ff ff 4c 89 f7 89 f5 e8 58 5e b0 f7 89 ee e9 35 ff ff ff 90 55 41 57 41 56 41 55 41 54 53 <48> 83 ec 20 49 89 f5 48 89 fb 49 bf 00 00 00 00 00 fc ff df e8 1d [ 534.960442][ C1] RSP: 0018:ffffc900059af228 EFLAGS: 00000293 [ 534.966559][ C1] RAX: ffffffff8a238018 RBX: dffffc0000000000 RCX: 0000000000000002 [ 534.974578][ C1] RDX: ffff8880733b9e00 RSI: ffff888067d70dc0 RDI: ffffc900059af268 [ 534.982591][ C1] RBP: 000000000000000c R08: dffffc0000000000 R09: 1ffffffff2162048 [ 534.990602][ C1] R10: dffffc0000000000 R11: fffffbfff2162049 R12: 1ffff1100cfae1b8 [ 534.998954][ C1] R13: 0000000000000000 R14: ffff888067d70dc2 R15: ffff888067d70dc0 [ 535.006975][ C1] ? xa_load+0x178/0x2e0 [ 535.011278][ C1] ? xas_start+0x3b0/0x770 [ 535.015747][ C1] xa_load+0x18a/0x2e0 [ 535.019883][ C1] ? xa_load+0x60/0x2e0 [ 535.024110][ C1] mpage_readahead+0x1f2/0x890 [ 535.028922][ C1] ? dio_aio_complete_work+0x20/0x20 [ 535.034281][ C1] ? blkdev_fallocate+0x4a0/0x4a0 [ 535.039416][ C1] ? blk_start_plug+0x4d/0x110 [ 535.044313][ C1] read_pages+0x187/0x860 [ 535.048690][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 535.053766][ C1] ? page_cache_ra_unbounded+0x750/0x750 [ 535.059444][ C1] ? folio_add_lru+0x319/0xcf0 [ 535.064285][ C1] ? folio_add_lru+0x508/0xcf0 [ 535.069235][ C1] ? filemap_add_folio+0x186/0x3d0 [ 535.074493][ C1] page_cache_ra_unbounded+0x667/0x750 [ 535.080019][ C1] filemap_read+0x917/0x3150 [ 535.084768][ C1] ? verify_lock_unused+0x140/0x140 [ 535.090375][ C1] ? find_get_pages_range_tag+0x780/0x780 [ 535.096192][ C1] ? down_read+0x1a8/0x2d0 [ 535.100649][ C1] blkdev_read_iter+0x42f/0x570 [ 535.105556][ C1] aio_read+0x337/0x490 [ 535.109849][ C1] ? __get_reqs_available+0x4d0/0x4d0 [ 535.115359][ C1] ? __might_fault+0xa6/0x120 [ 535.120100][ C1] io_submit_one+0x6a3/0x1340 [ 535.124833][ C1] ? lookup_ioctx+0x680/0x680 [ 535.129548][ C1] ? __might_fault+0xa6/0x120 [ 535.134289][ C1] ? __might_fault+0xc2/0x120 [ 535.139006][ C1] ? __might_fault+0xa6/0x120 [ 535.143723][ C1] __se_sys_io_submit+0x19d/0x310 [ 535.148796][ C1] ? __x64_sys_io_submit+0x80/0x80 [ 535.153950][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 535.159187][ C1] do_syscall_64+0x4c/0xa0 [ 535.163642][ C1] ? clear_bhb_loop+0x60/0xb0 [ 535.168367][ C1] ? clear_bhb_loop+0x60/0xb0 [ 535.173092][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.179055][ C1] RIP: 0033:0x7ffb0679de99 [ 535.183520][ C1] RSP: 002b:00007ffb07725028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 535.191986][ C1] RAX: ffffffffffffffda RBX: 00007ffb06a25fa0 RCX: 00007ffb0679de99 [ 535.200002][ C1] RDX: 00002000000000c0 RSI: 00000000000000ca RDI: 00007ffb076c2000 [ 535.208010][ C1] RBP: 00007ffb06833eaf R08: 0000000000000000 R09: 0000000000000000 [ 535.216109][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.224120][ C1] R13: 00007ffb06a26038 R14: 00007ffb06a25fa0 R15: 00007fff187ec948 [ 535.232147][ C1] [ 535.235198][ C1] rcu: rcu_preempt kthread starved for 9661 jiffies! g51901 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 535.247032][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 535.257057][ C1] rcu: RCU grace-period kthread stack dump: [ 535.262973][ C1] task:rcu_preempt state:R running task stack:28112 pid:16 ppid:2 flags:0x00004000 [ 535.273884][ C1] Call Trace: [ 535.277190][ C1] [ 535.280158][ C1] __schedule+0x107f/0x4030 [ 535.284730][ C1] ? __sched_text_start+0x8/0x8 [ 535.289646][ C1] schedule+0xb9/0x180 [ 535.293763][ C1] schedule_timeout+0x184/0x2d0 [ 535.298741][ C1] ? console_conditional_schedule+0x40/0x40 [ 535.304677][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 535.310614][ C1] ? update_process_times+0x1b0/0x1b0 [ 535.316132][ C1] ? prepare_to_swait_event+0x340/0x360 [ 535.321734][ C1] rcu_gp_fqs_loop+0x303/0x1350 [ 535.326626][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 535.331653][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 535.337968][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 535.343914][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 535.349204][ C1] ? rcu_gp_init+0x14f0/0x14f0 [ 535.354010][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 535.359953][ C1] ? finish_swait+0xc6/0x1c0 [ 535.364598][ C1] rcu_gp_kthread+0x99/0x3b0 [ 535.369234][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 535.374395][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 535.380346][ C1] ? __kthread_parkme+0x71/0x1c0 [ 535.385370][ C1] ? __kthread_parkme+0x15b/0x1c0 [ 535.390453][ C1] kthread+0x29d/0x330 [ 535.394564][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 535.399712][ C1] ? kthread_blkcg+0xd0/0xd0 [ 535.404335][ C1] ret_from_fork+0x1f/0x30 [ 535.408810][ C1] [ 535.411861][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 535.418232][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 535.425391][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 535.435501][ C1] RIP: 0010:default_idle+0xb/0x10 [ 535.440594][ C1] Code: 48 89 df e8 67 01 99 f7 e9 44 ff ff ff e8 8d 03 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d f7 60 4c 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 535.460240][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 535.466351][ C1] RAX: efe6d89056261700 RBX: ffffffff8a3a4b17 RCX: efe6d89056261700 [ 535.474721][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0 [ 535.482817][ C1] RBP: ffffc90000177f20 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 535.490913][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000000 [ 535.498927][ C1] R13: dffffc0000000000 R14: ffff888017701e00 R15: 1ffff9200002efc8 [ 535.506936][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 535.515904][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 535.522522][ C1] CR2: 000055c28bf86000 CR3: 000000002866e000 CR4: 00000000003506e0 [ 535.530535][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 535.538545][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 535.546641][ C1] Call Trace: [ 535.549954][ C1] [ 535.552920][ C1] default_idle_call+0x84/0xc0 [ 535.557827][ C1] do_idle+0x250/0x680 [ 535.561952][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 535.567204][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 535.572545][ C1] ? asm_sysvec_error_interrupt+0x11/0x20 [ 535.578338][ C1] ? schedule_idle+0x57/0x90 [ 535.582999][ C1] cpu_startup_entry+0x3f/0x60 [ 535.587825][ C1] start_secondary+0xe4/0xf0 [ 535.592480][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 535.598437][ C1]