last executing test programs: 5m19.469954335s ago: executing program 1 (id=359): r0 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) read$eventfd(r2, &(0x7f0000000340), 0x8) 5m19.330155678s ago: executing program 1 (id=362): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x0, 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1, 0x1ff, 0x3) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/248, 0xf8}], 0x1, &(0x7f0000000480)=[{&(0x7f00000021c0)=""/4096, 0x1000}], 0x1, 0x0) 5m19.148385162s ago: executing program 1 (id=364): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000000180)={0x2, 0x0, @multicast1, 0x4}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 5m18.953199661s ago: executing program 1 (id=365): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) 5m17.989216055s ago: executing program 1 (id=381): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x688200, 0x0) fchdir(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) 5m17.623644996s ago: executing program 1 (id=386): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000004ac0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r1, {0x7}}, 0x18) statfs(&(0x7f0000000100)='./file0\x00', 0x0) 5m17.073255134s ago: executing program 32 (id=386): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000004ac0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r1, {0x7}}, 0x18) statfs(&(0x7f0000000100)='./file0\x00', 0x0) 3.178383944s ago: executing program 5 (id=3877): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 2.820318694s ago: executing program 2 (id=3885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2.772783764s ago: executing program 5 (id=3887): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, 0x20}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x9}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) 2.501725104s ago: executing program 5 (id=3891): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_pidfd_open(r0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 2.40182663s ago: executing program 2 (id=3895): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020"], 0x138) 2.097099408s ago: executing program 3 (id=3899): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {0xffe0}, {0x0, 0xfff3}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) 2.041022855s ago: executing program 3 (id=3900): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x0, 0x0) tkill(r0, 0x1b) 2.01598701s ago: executing program 0 (id=3901): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x0, 0x3, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.865847832s ago: executing program 0 (id=3903): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0xf47) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$cgroup_subtree(r0, 0x0, 0x2b) 1.648926403s ago: executing program 4 (id=3905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a31000000001600"], 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc00000000000000000000000000000006000400000000000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 1.648109345s ago: executing program 5 (id=3906): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x0, 0x4, 0x80a0000, 0x1000, &(0x7f00004ba000/0x1000)=nil, 0x48000000000, r4}) 1.535567316s ago: executing program 0 (id=3907): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.524688526s ago: executing program 4 (id=3908): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\xdaL!\xe1\xdc\x1f\v\x04\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r1, &(0x7f0000000400)=""/63, 0xcad9286a271020d7) 1.443259943s ago: executing program 2 (id=3909): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) 1.243887248s ago: executing program 0 (id=3910): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 1.243020147s ago: executing program 5 (id=3911): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000300)="12", 0x1, 0x5000, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1}, 0x2000000}], 0x2, 0x101, 0x0) 1.238787927s ago: executing program 2 (id=3912): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x7, 0x4) sendto$inet(r0, &(0x7f0000000000)="660b8fcffd635376e1fe007898f7200c67904d41b7cf075592f7f66d5ff464259af040ccbf554b1f711982796b3a1d9fb2fd66", 0xfdbe, 0x24044084, 0x0, 0xfffffffffffffe6d) 1.191726313s ago: executing program 4 (id=3913): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x11, 0x4) recvmmsg$unix(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60, 0x0) 1.107570772s ago: executing program 0 (id=3914): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) futex_waitv(&(0x7f0000000e40)=[{0x0, &(0x7f0000000180), 0x82}], 0x1, 0x0, 0x0, 0x0) 1.091471825s ago: executing program 5 (id=3915): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)={0x20, 0xb, 0xf, "07ab6ada450694716f98d0f8f1d2c9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.075067231s ago: executing program 2 (id=3916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000280)="f4000900062b2b25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad6e911b2b81", 0x2a}], 0x1}, 0x0) 1.002599714s ago: executing program 4 (id=3917): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@cpuid={0x64, 0x18, {0xfffffff9, 0x8}}], 0x18}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000001c0)={0x2, 0x0, [{0x2, 0xa, 0x0, 0xc, 0xfffffffd, 0x4, 0x9583}, {0xc0000000, 0x81, 0x5, 0x4, 0x5ec, 0x1, 0xb}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 898.238868ms ago: executing program 2 (id=3918): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000540)='-B\xd5NI\xc5j\x9appp\xf0\n\x84\xae\n\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1\x03\x00\x00\x00\xe3LS\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh\x9c\xea\xc9\x01c\x10d\xee\xa9\x1a\xcaR\xcf\xbcs\x86\xdf\xb9\xb9\x12\x8b\x04\xa3\xbd\xf2C\x93\xb8\x9a\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xd0\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04(\xcc\xce\x8b\x19\xea\xef\x17d\xc7d\xc5\xfa\b<\xe3?ip\x9dX4U\xd70\xfdM1\x17\xe1G\x81\xd1\x84\v{\x16\xcc7\xd8fP\x12\x0e\xe07)[;\xa4\xc1\x05S\xf9~\x8e7\xa8sKkR\x16\aA\x9a\xf4\x1a\x01\xe5vm\x18&\x8f.\x87\a\xde\xd7M\xda\xa1\xa2b\x0f)\xd0\xf1\x02;\x01\xd5\x94gD\x87\xd3E\xcf!\xf8K\xa4\xee\xb7rS\x8e\xbc`;\xb8\x8er\xe1\xb2\x8b\xb9wN\x87\xad\xd1W\xa7\xe7\xff_&\bv\xb46\xf6\x89\t\x1d\x8b@\xd63\x1d\x80\\\xef\xd0g`\xc6\xaem\n', 0x6) ppoll(&(0x7f0000000080)=[{r0, 0x200}], 0x1, 0x0, 0x0, 0x0) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x4800105c, r2, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 811.7941ms ago: executing program 4 (id=3919): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000004c40)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv6=@gre_packet={0x4, 0x6, "ace260", 0x44, 0x2f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x23, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x1, {0x3e}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0x48, 0x1, 0x1, 0x0, 0x1, 0x61}, 0x2, {0xfffffffb, 0xf587, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7e) 791.189519ms ago: executing program 3 (id=3920): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r0, &(0x7f0000001a80)=""/4058, 0xfda, 0xc0020467, 0x0, 0x0) 668.324466ms ago: executing program 3 (id=3921): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x40000101, 0xfffffffffffffffd}}], 0x20}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 596.842227ms ago: executing program 4 (id=3922): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0xf3}, 0xf338}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0xd}], 0x3fffe16, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 342.302243ms ago: executing program 3 (id=3923): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000003c40)=@newchain={0xedc, 0x64, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0x5, 0x10}, {0xf, 0x2}}, [@f_rsvp={{0x9}, {0xeac, 0x2, [@TCA_RSVP_ACT={0xea8, 0x6, [@m_connmark={0x54, 0xe, 0x0, 0x0, {{0xd}, {0x4}, {0x21, 0x6, "bd75706d89ac21e4efa146f8edc9dc74a264135d8be0a15b03b916d2ec"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xe50, 0x3, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x7, 0x7, 0x9, 0x1}, 0xf1, 0x2}, [{0x2, 0xfffffffb, 0x752b, 0x9, 0x5, 0x2}, {0x6507b03b, 0x1, 0x7, 0xfffffffe, 0x6, 0x5}, {0x4, 0x1, 0x3, 0x8a, 0x6, 0x2}, {0x7, 0x1200000, 0x88d, 0x2, 0x4, 0x2}, {0xffff5cff, 0x4, 0x0, 0x1, 0x40, 0x8001}, {0x6, 0x9, 0x3, 0x0, 0x8, 0xf}, {0x5, 0x9, 0x2, 0x2, 0x3, 0x3}, {0x3, 0x7fffffff, 0x39cbefbf, 0x3, 0x3, 0x8}, {0x6, 0x0, 0xf, 0x1, 0x9, 0x1000}, {0x80000000, 0xffff, 0x4, 0x4, 0x80}, {0x3ff, 0x4, 0x3a14, 0x56d5, 0x2, 0x2}, {0x2, 0x2, 0x8, 0x7, 0xffffff81}, {0x3, 0xc9d, 0x3, 0x13ee, 0x4, 0x6}, {0x7fffffff, 0x1, 0x8, 0x4e80000, 0xf950, 0x9873}, {0x3772, 0x1182, 0x7, 0x6ae9, 0x79, 0xfb28}, {0x8, 0x6962, 0x0, 0x6, 0x4, 0x157}, {0x12968238, 0x0, 0xffffffff, 0x101, 0x0, 0x6}, {0x8, 0x9, 0xa68c, 0x2, 0x1, 0x80000000}, {0x1, 0x80000001, 0x8, 0x1000, 0x7, 0xa}, {0x6, 0x7, 0x9, 0x7fff, 0x6ffb, 0x7}, {0x2, 0x7bb, 0x10, 0xb6c, 0x9, 0x9}, {0x6, 0x5, 0x80000000, 0x5, 0x40}, {0xfffff2e7, 0x7, 0x3, 0x7, 0xa2, 0xfffffff9}, {0x7, 0x2, 0xd, 0x5, 0x6, 0x7fffffff}, {0xb30, 0xfffffff8, 0xc767, 0x2, 0x3, 0x805a0}, {0xffff3594, 0x7, 0x8, 0x2, 0xfffff1f2, 0x4}, {0x4, 0x1, 0x3, 0x1ff, 0x3, 0x3ff}, {0xa0d0, 0xffffff30, 0x0, 0x1, 0x5, 0x5}, {0x0, 0x8, 0x3d, 0x4, 0xfffffffd, 0xde0}, {0x6, 0x8, 0xfffffffc, 0x4, 0x9, 0x10000}, {0x0, 0x80000000, 0x85, 0x9, 0x30ba, 0xfc}, {0x6, 0xffffffff, 0xf, 0x7, 0x7f, 0x1efb}, {0xfffffbff, 0x0, 0x3, 0xe8f6, 0x4, 0x98d}, {0x8, 0x7d0, 0x8, 0xff, 0x7, 0x1}, {0x5, 0x3, 0x7ff, 0x0, 0x2, 0x613}, {0x0, 0xfff, 0x4c3c, 0x5, 0x2, 0x2}, {0x8, 0x2, 0x0, 0xfffffffd, 0xdb1c, 0x3ff}, {0x5, 0xfffffffd, 0x8001, 0x81, 0x9, 0x1}, {0x3, 0x4175, 0x0, 0x2, 0x9, 0x5}, {0x1, 0x3, 0x4, 0x9, 0x100, 0x2}, {0x7, 0x10, 0x0, 0x9, 0xdc}, {0xfffffffb, 0x8, 0xff, 0x6, 0x3, 0x8}, {0x5, 0xff, 0x401, 0x6, 0x7, 0x3}, {0x18, 0x1, 0x4, 0xfff, 0xa, 0x2}, {0x6, 0x9, 0x10000, 0x3f, 0xab9, 0xfffffff5}, {0x7fffffff, 0x2, 0x94c, 0x9dee, 0xffff1483, 0x8}, {0x6fce8c73, 0x81, 0x7, 0x3ff, 0x0, 0x1}, {0x7fff, 0xad, 0x4, 0x0, 0x4, 0x7ff}, {0x1, 0xe364, 0x100, 0x9, 0x3, 0x2}, {0x5, 0x4, 0x80000000, 0x6, 0xb, 0x8}, {0xb95c, 0x80000001, 0x9, 0x6, 0xc, 0xb}, {0x3, 0x3, 0xc1, 0x0, 0x7f7, 0xfffff530}, {0x1, 0x0, 0x40, 0x2, 0x5}, {0x0, 0x3, 0x7, 0x82b, 0x0, 0x5}, {0xfff, 0x98, 0x6a4c, 0x101, 0x9, 0x40}, {0xffff, 0x7, 0x38, 0xb, 0x8, 0x8000}, {0x1, 0x0, 0x0, 0x6, 0x5, 0xf8}, {0x1, 0x6, 0xeef, 0x0, 0x101, 0x2}, {0x8, 0x7, 0x6f, 0x7, 0x6, 0x3}, {0x3f, 0x5, 0x3, 0x8, 0x9, 0x1}, {0x80000001, 0xfffffff9, 0x5, 0x800, 0x543, 0x1}, {0x22a, 0x204, 0x3, 0x0, 0x4, 0x7}, {0xad, 0x7, 0xfffffffa, 0x7b9, 0x164, 0x9}, {0x4, 0x7, 0x9, 0x7, 0x5, 0xc66}, {0x9, 0x3, 0x5, 0x3, 0x54, 0x6}, {0xf, 0x5, 0x9, 0x9, 0xe, 0x7}, {0x2a0d, 0x5, 0x4, 0x7, 0x9, 0x4}, {0x17, 0x200, 0xffff8001, 0x6, 0x62a, 0x4}, {0xc, 0x24000, 0x7f, 0x6b, 0x4, 0xd}, {0x7329e723, 0x4, 0x2, 0x1, 0x2, 0x1}, {0x10000, 0x80, 0x5821, 0x0, 0x5, 0x4}, {0x6, 0x3, 0x2, 0x7, 0x3, 0xcb14}, {0x7, 0x25b, 0x2, 0x6, 0x4, 0x9}, {0x8, 0x7, 0x4, 0xfffffffe, 0x7, 0x9}, {0x7, 0x7, 0x0, 0x648, 0x5, 0x100}, {0x1, 0x0, 0x59a0, 0x1, 0x7, 0x401}, {0x10000, 0x7ff, 0xfffffcca, 0xff, 0x8, 0x3}, {0x1, 0x4, 0x5, 0x7, 0x5}, {0x4, 0x2, 0x6, 0xd, 0x7, 0xb152}, {0x47, 0x9, 0x5, 0xfffffff9, 0x7fffffff, 0xa00000}, {0x4, 0x26c, 0x9, 0x8bab, 0xbc5d}, {0x1, 0x7, 0x5, 0x7, 0x8000, 0x9}, {0x5f, 0x8, 0x5, 0x200, 0x8, 0x10001}, {0x8, 0x2, 0x80000000, 0x6, 0x101, 0x8}, {0x7fffffff, 0xfff, 0x10, 0xfffffff3, 0x8, 0x4}, {0x800, 0xffff, 0x5, 0x7, 0x344, 0x2b25}, {0x8, 0x7, 0x6, 0x1, 0x3, 0x8e02}, {0x1, 0x9e6, 0x8, 0x400, 0x6, 0x3}, {0x8, 0x0, 0x1, 0x7, 0x1, 0x3}, {0x9, 0x2, 0x2, 0x8, 0x3, 0x4}, {0x6, 0xfffffec4, 0x200, 0x8, 0x8, 0x9}, {0x1, 0x8, 0x500, 0x400, 0xc52b, 0x4}, {0x9, 0x1, 0x100, 0xb6a, 0x9, 0x32b5}, {0x8, 0x1, 0x4, 0x0, 0xd73, 0x870}, {0xe08c, 0x7ff, 0x2, 0x6, 0x40, 0x9}, {0xffff, 0x4428, 0x3, 0x6, 0x8, 0x9}, {0x1000, 0x10001, 0x5, 0x4, 0x3, 0xb}, {0xfffff0aa, 0x9, 0xfffffffa, 0x5, 0x2, 0x4}, {0xd, 0xfffffff0, 0x4, 0x0, 0x8, 0x101}, {0xd, 0x2, 0x686, 0xfffffffa, 0x4, 0x4}, {0x7fff, 0x6, 0x200, 0x6, 0x4, 0x8}, {0x96, 0x6, 0x7, 0x7, 0x226, 0x8}, {0x6, 0x3, 0x5, 0x6, 0x7, 0xfff}, {0x3, 0xffffffff, 0x2, 0x568, 0x4, 0xffffffeb}, {0x2, 0x200, 0x2, 0x7, 0x6, 0x6}, {0x4, 0x566, 0x10001, 0xb, 0x4, 0x5594fdf3}, {0x423303a3, 0x9, 0x6, 0x3, 0x6, 0x3}, {0x100, 0x3, 0x0, 0x9, 0x8, 0x25}, {0x8, 0xd47, 0x0, 0x0, 0x6, 0x8f6d}, {0xff, 0x0, 0x0, 0x1, 0x7, 0xe}, {0xce1, 0x9, 0x0, 0x4, 0xffffffff, 0x200}, {0x4, 0xe, 0x3, 0x5e0, 0x8, 0x1}, {0x0, 0x1, 0x1, 0x1, 0x9, 0x8}, {0x4f75, 0x8, 0x3c, 0xb, 0x4, 0x5}, {0x3, 0xd64, 0x1, 0x6, 0x8, 0x6}, {0x3, 0x401, 0x6, 0x4, 0x80, 0x640a525a}, {0x5, 0x0, 0x8, 0xfffffffe, 0xe, 0x6cd4}, {0x9, 0x0, 0x8, 0xa9ba, 0x100, 0x5}, {0x15, 0xfffffeff, 0x2, 0x5, 0x5fc0, 0xfffffff1}, {0x39d, 0x9, 0x1, 0x0, 0xfc, 0x7}, {0x6, 0xe69, 0xe, 0xffffff81, 0xbe7e, 0x401}, {0xfffffffa, 0x4, 0x0, 0x0, 0x6, 0xfffff001}, {0xcf2d, 0x8, 0x9176, 0x0, 0x4f, 0x1}, {0x0, 0x9, 0x5, 0xfff, 0x9030}, {0x4, 0x4, 0x800, 0x41e, 0x8000}, {0x6, 0xfffffffa, 0x0, 0x9a, 0x6, 0x8}, {0x3, 0xb, 0xf079, 0x7fffffff, 0x200, 0x7}, {0x65f, 0x100, 0x8, 0x1, 0x400, 0x2}], [{0x3}, {0x1, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x4}, {}, {0x0, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x3}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x5, 0x649fb4c58d4cf3cc}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x1}, {0x2, 0xd2cd4f2f2bcaea07}, {0x5}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x8dafc58315d2bbb3}, {0x2}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x4, 0x9889dd74d1bcf2ee}, {0x1, 0x1}, {}, {0x3}, {0x4}, {}, {0x3}, {0x3}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0xedc}, 0x1, 0x0, 0x0, 0x810}, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 28.797269ms ago: executing program 3 (id=3924): r0 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0xb3, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x4, 0x9}) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000540)={0x40000000}) mq_timedreceive(r0, &(0x7f0000000580)=""/169, 0xa9, 0x200001000a9b, 0x0) epoll_pwait(r1, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x4, 0x4, 0x0, 0x0) 0s ago: executing program 0 (id=3925): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x22, 0x2, 0x24) r0 = syz_io_uring_setup(0x498, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x125}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): t 2(bridge_slave_1) entered forwarding state [ 320.025960][T13025] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.033166][T13025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.042879][T13025] bridge0: entered promiscuous mode [ 320.049292][T13025] bridge0: entered allmulticast mode [ 320.381412][ T984] usb 5-1: USB disconnect, device number 37 [ 320.430951][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2801'. [ 320.468380][T13037] loop4: detected capacity change from 0 to 2559 [ 320.488218][T13037] buffer_io_error: 313 callbacks suppressed [ 320.488235][T13037] Buffer I/O error on dev loop4, logical block 0, async page read [ 320.502977][T13035] netlink: 'syz.3.2801': attribute type 20 has an invalid length. [ 320.518636][T13037] Buffer I/O error on dev loop4, logical block 0, async page read [ 320.528336][T13035] netlink: 'syz.3.2801': attribute type 21 has an invalid length. [ 320.537148][T13037] Buffer I/O error on dev loop4, logical block 0, async page read [ 320.562395][T13037] Buffer I/O error on dev loop4, logical block 0, async page read [ 320.593735][T13037] Buffer I/O error on dev loop4, logical block 0, async page read [ 320.609571][T13037] Buffer I/O error on dev loop4, logical block 1, async page read [ 320.621539][T13037] loop4: unable to read partition table [ 320.638098][T13042] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 320.649556][T13047] syzkaller1: entered promiscuous mode [ 320.651082][T13037] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 320.656333][T13047] syzkaller1: entered allmulticast mode [ 320.690095][ T5950] Buffer I/O error on dev loop4, logical block 319, async page read [ 320.698614][T13042] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 320.725706][T13042] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 320.790712][ T5203] ldm_validate_partition_table(): Disk read failed. [ 320.799413][ T5203] Dev loop4: unable to read RDB block 0 [ 320.806127][ T5203] loop4: unable to read partition table [ 320.847210][ T10] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 321.027467][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 321.044803][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.070987][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 321.095446][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.141935][T13059] input: syz0 as /devices/virtual/input/input64 [ 321.344958][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 321.350598][ T10] usbtmc 6-1:16.0: can't read capabilities [ 321.550015][ T10] usb 6-1: USB disconnect, device number 39 [ 321.577089][T13074] usb usb7: usbfs: process 13074 (syz.4.2818) did not claim interface 0 before use [ 321.665433][T13076] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3356708090 (26853664720 ns) > initial count (9735166528 ns). Using initial count to start timer. [ 321.685435][T13076] kvm: Disabled LAPIC found during irq injection [ 321.803453][T13079] ipip0: entered promiscuous mode [ 321.827821][T13079] ipip0: entered allmulticast mode [ 322.085770][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 322.244766][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 322.305068][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 322.323307][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 322.344044][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 322.366355][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 322.386643][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.434819][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 322.464477][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.704203][ T10] usb 3-1: usb_control_msg returned -32 [ 322.712596][ T10] usbtmc 3-1:16.0: can't read capabilities [ 322.954809][ T984] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 323.115168][ T984] usb 6-1: Using ep0 maxpacket: 16 [ 323.124480][ T984] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 323.165078][ T984] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 323.221114][ T984] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.264829][ T984] usb 6-1: config 1 interface 0 has no altsetting 0 [ 323.291537][ T984] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 323.309305][ T984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.334852][ T984] usb 6-1: Product: syz [ 323.339273][ T984] usb 6-1: Manufacturer: syz [ 323.344173][ T984] usb 6-1: SerialNumber: syz [ 323.433523][T13130] usbtmc 3-1:16.0: usb_clear_halt returned -32 [ 323.494841][T13129] kvm: emulating exchange as write [ 323.505096][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 323.611204][ T984] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 40 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 323.641298][ T5887] usb 3-1: USB disconnect, device number 40 [ 323.685044][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 323.698506][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.714244][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.724442][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 323.744767][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 323.753897][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.766561][ T10] usb 4-1: config 0 descriptor?? [ 323.821661][ T57] usb 6-1: USB disconnect, device number 40 [ 323.843508][ T57] usblp1: removed [ 324.205144][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 324.241139][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.002E/input/input65 [ 324.282050][ T10] microsoft 0003:045E:07DA.002E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 324.461791][T13123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.552622][T13123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.696915][ T5887] usb 4-1: USB disconnect, device number 41 [ 324.845393][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 325.017441][ T10] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 325.034759][ T10] usb 3-1: config 0 has no interface number 0 [ 325.044816][ T10] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 325.067671][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 325.084902][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.103476][ T10] usb 3-1: Product: syz [ 325.112216][ T10] usb 3-1: Manufacturer: syz [ 325.117285][ T10] usb 3-1: SerialNumber: syz [ 325.132826][ T10] usb 3-1: config 0 descriptor?? [ 325.159809][ T10] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 325.200547][T13181] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 325.674926][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 325.844910][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 325.858518][ T10] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 325.877021][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.918303][ T10] usb 1-1: config 0 descriptor?? [ 326.148049][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 326.206475][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 326.235669][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 326.243148][ T10] usb 1-1: media controller created [ 326.323798][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 326.401873][ T10] az6027: usb out operation failed. (-71) [ 326.424345][ T10] az6027: usb out operation failed. (-71) [ 326.439311][ T10] stb0899_attach: Driver disabled by Kconfig [ 326.458451][ T10] az6027: no front-end attached [ 326.458451][ T10] [ 326.462521][T13224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2880'. [ 326.475689][ T10] az6027: usb out operation failed. (-71) [ 326.487297][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 326.509553][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input66 [ 326.567551][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 326.598045][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 326.642764][ T10] usb 1-1: USB disconnect, device number 35 [ 326.771414][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 327.046452][T13242] input: syz1 as /devices/virtual/input/input67 [ 327.184853][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 327.374883][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 327.383773][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 327.405177][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 327.421793][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 327.442537][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 327.462760][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.476802][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 327.486364][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.557589][ T5953] usb 3-1: USB disconnect, device number 41 [ 327.590316][ T5953] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 327.775373][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 327.789898][ T10] usbtmc 4-1:16.0: can't read capabilities [ 328.004497][T13260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.084026][T13237] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 328.086887][ T5887] usb 4-1: USB disconnect, device number 42 [ 328.215068][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 328.275097][T13266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.395147][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 328.415225][ T9] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 328.423606][ T9] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 328.465609][ T9] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 328.483281][ T9] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 328.508125][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 328.548196][ T9] usb 6-1: config 0 has no interface number 0 [ 328.575076][ T9] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 328.617318][ T9] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 328.648107][ T9] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 328.690822][ T9] usb 6-1: config 0 interface 125 altsetting 82 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 328.749863][ T9] usb 6-1: config 0 interface 125 has no altsetting 0 [ 328.766772][ T9] usb 6-1: config 0 interface 125 has no altsetting 1 [ 328.782780][ T9] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 328.800501][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.814833][ T9] usb 6-1: Product: syz [ 328.819043][ T9] usb 6-1: Manufacturer: syz [ 328.833870][ T9] usb 6-1: SerialNumber: syz [ 328.849200][ T9] usb 6-1: config 0 descriptor?? [ 328.873415][T13282] kvm: Disabled LAPIC found during irq injection [ 328.965123][ T5887] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 329.127439][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 329.134166][ T5887] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 329.143041][ T5887] usb 3-1: config 179 has no interface number 0 [ 329.149643][ T5887] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 329.161034][ T5887] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 329.184865][ T5887] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 329.205174][ T5887] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 329.218959][ T5887] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 329.232968][ T5887] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 329.242270][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.253600][T13279] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 329.266684][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 329.297409][ T5953] usb 6-1: USB disconnect, device number 41 [ 329.436929][ T9] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 329.445455][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.457149][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.467512][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 329.481709][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 329.491858][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.523119][ T9] usb 1-1: config 0 descriptor?? [ 329.524465][ T5887] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input68 [ 329.728306][T13279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.746985][T13279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.952144][T13304] veth2: entered promiscuous mode [ 329.957908][T13304] veth2: entered allmulticast mode [ 329.969178][ T9] plantronics 0003:047F:FFFF.002F: reserved main item tag 0xd [ 330.015313][ T9] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 330.191970][ T5887] usb 3-1: USB disconnect, device number 42 [ 330.192038][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 330.192095][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 330.236161][T13290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.268416][T13290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.318043][ T9] usb 1-1: USB disconnect, device number 36 [ 331.244970][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 331.453841][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 331.453889][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.453911][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.453931][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 331.455848][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 331.455877][ T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 331.455895][ T9] usb 4-1: Manufacturer: syz [ 331.458672][ T9] usb 4-1: config 0 descriptor?? [ 331.891455][ T9] appleir 0003:05AC:8243.0030: unknown main item tag 0x0 [ 331.939641][ T9] appleir 0003:05AC:8243.0030: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 332.344138][T13386] netlink: 'syz.4.2942': attribute type 13 has an invalid length. [ 332.356082][T13386] netlink: 'syz.4.2942': attribute type 17 has an invalid length. [ 332.454362][ T9] usb 4-1: USB disconnect, device number 43 [ 332.579175][T13386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.609227][T13386] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.645009][T13386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.980612][T13405] netlink: 'syz.0.2954': attribute type 12 has an invalid length. [ 333.064040][ T9] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 333.240205][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 333.259080][ T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 333.277566][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.291271][ T9] usb 6-1: Product: syz [ 333.306570][T13414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2958'. [ 333.329694][ T9] usb 6-1: Manufacturer: syz [ 333.334445][ T9] usb 6-1: SerialNumber: syz [ 333.355894][ T9] r8152-cfgselector 6-1: Unknown version 0x0000 [ 333.364887][T13414] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2958'. [ 333.388396][ T9] r8152-cfgselector 6-1: config 0 descriptor?? [ 333.631471][ T5887] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 333.806474][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 333.830948][ T5887] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 333.853488][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.865535][ T984] r8152-cfgselector 6-1: USB disconnect, device number 42 [ 333.874007][ T5887] usb 4-1: Product: syz [ 333.881767][ T5887] usb 4-1: Manufacturer: syz [ 333.890857][ T5887] usb 4-1: SerialNumber: syz [ 333.900149][ T5887] usb 4-1: config 0 descriptor?? [ 333.921926][ T5887] gspca_main: sq930x-2.14.0 probing 2770:930c [ 334.285071][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 334.445264][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 334.453830][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.466902][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.478092][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 334.487781][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.500494][ T9] usb 3-1: config 0 descriptor?? [ 334.520257][ T9] hub 3-1:0.0: USB hub found [ 334.731121][ T9] hub 3-1:0.0: 1 port detected [ 335.155543][ T5887] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 335.353868][ T9] hub 3-1:0.0: activate --> -90 [ 335.396760][ T5887] gspca_sq930x: Sensor ov9630 not yet treated [ 335.430415][ T5887] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 335.460070][ T5887] usb 4-1: USB disconnect, device number 44 [ 335.567352][ T9] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 335.575324][ T5914] usb 3-1: USB disconnect, device number 43 [ 335.615325][ T5953] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 335.694235][T13467] syzkaller1: entered promiscuous mode [ 335.707717][T13467] syzkaller1: entered allmulticast mode [ 335.806197][ T5953] usb 1-1: Using ep0 maxpacket: 8 [ 335.819811][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 335.832513][ T5953] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 335.842986][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.851602][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 335.872595][ T5953] usb 1-1: config 0 descriptor?? [ 336.008666][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.020136][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.031896][ T9] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 336.042178][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.059190][ T9] usb 5-1: config 0 descriptor?? [ 336.102584][ T5953] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 336.200827][ T5953] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 336.226347][ T5953] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 336.512849][ T9] hid-steam 0003:28DE:1142.0032: unknown main item tag 0x0 [ 336.528387][ T9] hid-steam 0003:28DE:1142.0032: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 336.599287][ T5953] usb 1-1: USB disconnect, device number 37 [ 336.607477][ T9] hid-steam 0003:28DE:1142.0032: Steam wireless receiver connected [ 336.633599][ T9] hid-steam 0003:28DE:1142.0032: No HID_FEATURE_REPORT submitted - nothing to read [ 336.663923][ T9] hid-steam 0003:28DE:1142.0033: unknown main item tag 0x0 [ 336.719274][ T9] hid-steam 0003:28DE:1142.0033: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 337.230706][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2988'. [ 337.259734][T13487] netlink: 'syz.0.2989': attribute type 13 has an invalid length. [ 337.268828][T13487] macvtap0: entered promiscuous mode [ 337.274238][T13487] macvtap0: entered allmulticast mode [ 337.280130][ T9] usb 5-1: USB disconnect, device number 38 [ 337.290386][ T9] hid-steam 0003:28DE:1142.0032: Steam wireless receiver disconnected [ 337.533769][T13497] binder: 13496:13497 ioctl 4018620d 0 returned -22 [ 337.603634][T13500] binder: 13496:13500 ioctl c0306201 0 returned -14 [ 338.195607][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 338.355298][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 338.365503][ T9] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 338.391363][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.420816][ T9] usb 5-1: config 0 descriptor?? [ 338.457276][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 338.618812][T13525] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3005'. [ 338.648649][T13523] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.481234][ T9] gspca_vc032x: reg_w err -71 [ 339.493581][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.508357][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.526150][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.541169][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.553914][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.566522][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.578338][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.593034][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.603022][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.614393][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.620061][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.626201][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.631766][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.643023][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.653023][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.669316][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.679698][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.697120][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.714953][ T9] gspca_vc032x: Unknown sensor... [ 339.732125][ T9] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 339.750616][ T9] usb 5-1: USB disconnect, device number 39 [ 339.932950][ T30] audit: type=1326 audit(1764736864.588:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13564 comm="syz.0.3025" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f866c38f749 code=0x0 [ 340.053443][T13576] netlink: 'syz.3.3027': attribute type 13 has an invalid length. [ 340.086782][T13576] netlink: 'syz.3.3027': attribute type 17 has an invalid length. [ 340.203200][T13576] bridge0: left promiscuous mode [ 340.217457][T13576] bridge0: left allmulticast mode [ 340.262921][T13576] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 340.324854][ T984] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 340.495410][ T984] usb 6-1: Using ep0 maxpacket: 16 [ 340.517573][ T984] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 340.536081][ T984] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 340.556203][T13589] vlan2: entered promiscuous mode [ 340.562519][ T984] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 340.575480][T13589] gretap0: entered promiscuous mode [ 340.575759][ T984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.625794][ T984] usb 6-1: Product: syz [ 340.630010][ T984] usb 6-1: Manufacturer: syz [ 340.634626][ T984] usb 6-1: SerialNumber: syz [ 341.077106][ T984] usb 6-1: 0:2 : does not exist [ 341.194880][ T5887] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 341.332226][T13613] bond0: entered promiscuous mode [ 341.340796][T13613] bond_slave_0: entered promiscuous mode [ 341.348015][T13613] bond_slave_1: entered promiscuous mode [ 341.357139][ T5887] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 341.369412][T13613] batadv0: entered promiscuous mode [ 341.376652][T13613] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 341.388990][ T5887] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 341.399517][ T5887] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 341.405902][T13613] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 341.408716][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.428589][T13600] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 341.486011][ T984] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 341.514571][ T5887] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 341.525642][ T984] usb 6-1: USB disconnect, device number 43 [ 341.667253][ T5887] usb 1-1: USB disconnect, device number 38 [ 341.732116][ T5950] udevd[5950]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.074794][ T5887] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 342.156828][T13631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3051'. [ 342.167683][T13631] netlink: 'syz.2.3051': attribute type 13 has an invalid length. [ 342.198551][T13631] vxlan1: entered promiscuous mode [ 342.209869][ T6183] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.219912][ T6183] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.233870][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 342.236708][ T6183] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.248565][ T6183] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.251845][ T5887] usb 5-1: config 0 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.284833][ T5887] usb 5-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.297485][ T5887] usb 5-1: config 0 interface 0 has no altsetting 0 [ 342.304346][ T5887] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 342.333708][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.355432][ T5887] usb 5-1: config 0 descriptor?? [ 342.415231][T13640] netlink: 'syz.5.3054': attribute type 29 has an invalid length. [ 342.437596][T13640] netlink: 'syz.5.3054': attribute type 29 has an invalid length. [ 342.459420][T13640] netlink: 500 bytes leftover after parsing attributes in process `syz.5.3054'. [ 342.724844][ T984] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 342.780442][ T5887] mcp2221 0003:04D8:00DD.0034: unknown main item tag 0x0 [ 342.946425][ T5887] mcp2221 0003:04D8:00DD.0034: unknown main item tag 0x0 [ 342.953625][ T5887] mcp2221 0003:04D8:00DD.0034: unknown main item tag 0x0 [ 342.974808][ T5887] mcp2221 0003:04D8:00DD.0034: unknown main item tag 0x0 [ 342.982030][ T5887] mcp2221 0003:04D8:00DD.0034: unknown main item tag 0x0 [ 343.021834][ T5887] mcp2221 0003:04D8:00DD.0034: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 343.032566][ T984] usb 4-1: Using ep0 maxpacket: 16 [ 343.046710][ T984] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 108, changing to 10 [ 343.066384][ T984] usb 4-1: config 0 interface 0 has no altsetting 0 [ 343.073085][ T984] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 343.105418][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.116366][ T984] usb 4-1: config 0 descriptor?? [ 343.176388][ T5887] usb 5-1: USB disconnect, device number 40 [ 343.197761][T13666] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3066'. [ 343.549637][ T984] nzxt-smart2 0003:1E71:2009.0035: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 343.571353][ T30] audit: type=1804 audit(1764736868.228:1971): pid=13669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3067" name=6D656D66643A6C32AA2AAAAAAB49F9BF83667CC38615ACBBEDBF25D8EE2917AA0FAA6C5296E621D76B026FFF5345 dev="hugetlbfs" ino=51975 res=1 errno=0 [ 343.730827][ T30] audit: type=1326 audit(1764736868.388:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.4.3068" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc402f8f749 code=0x0 [ 343.840071][T13666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.860529][T13666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.872404][T13666] bond0 (unregistering): Released all slaves [ 344.011799][ T984] usb 4-1: USB disconnect, device number 45 [ 344.535128][ T5953] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 344.842051][T13700] loop2: detected capacity change from 0 to 7 [ 344.882688][ T5834] Dev loop2: unable to read RDB block 7 [ 344.900433][ T5834] loop2: unable to read partition table [ 344.926565][ T5834] loop2: partition table beyond EOD, truncated [ 344.942704][T13700] Dev loop2: unable to read RDB block 7 [ 344.985509][T13700] loop2: unable to read partition table [ 345.019980][T13700] loop2: partition table beyond EOD, truncated [ 345.045250][T13700] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 345.068812][ T5953] usb 6-1: unable to get BOS descriptor or descriptor too short [ 345.096335][ T5953] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 345.131769][ T5953] usb 6-1: can't read configurations, error -71 [ 345.135171][ T984] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 345.335781][ T984] usb 5-1: Using ep0 maxpacket: 16 [ 345.356521][ T984] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.370058][T13709] bridge0: entered allmulticast mode [ 345.389959][T13709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3084'. [ 345.404818][ T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 345.454744][ T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 345.464544][ T984] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 345.524782][ T984] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.539603][T13709] bridge_slave_1: left allmulticast mode [ 345.592367][T13709] bridge_slave_1: left promiscuous mode [ 345.600394][ T984] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 345.644205][ T984] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 345.656197][T13709] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.685745][ T984] usb 5-1: Manufacturer: syz [ 345.695863][ T984] usb 5-1: config 0 descriptor?? [ 345.798862][T13709] bridge_slave_0: left allmulticast mode [ 345.814948][T13709] bridge_slave_0: left promiscuous mode [ 345.860731][T13709] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.970661][T13709] bridge0 (unregistering): left allmulticast mode [ 346.034956][ T984] rc_core: IR keymap rc-hauppauge not found [ 346.040989][ T984] Registered IR keymap rc-empty [ 346.063287][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 346.109807][ T5892] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 346.118182][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 346.166030][ T984] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 346.206937][ T984] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input70 [ 346.233980][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 346.296789][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.308339][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 346.316844][ T5892] usb 3-1: config 0 interface 0 has no altsetting 0 [ 346.330404][ T5892] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 346.341321][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 346.348603][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.357870][ T5892] usb 3-1: Product: syz [ 346.362122][ T5892] usb 3-1: Manufacturer: syz [ 346.367154][ T5892] usb 3-1: SerialNumber: syz [ 346.375321][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 346.383224][ T5892] usb 3-1: config 0 descriptor?? [ 346.392470][ T5892] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 346.404868][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 346.417677][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 346.427278][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 346.436289][ T5892] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 346.449681][ T5892] usb 3-1: media controller created [ 346.455610][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 346.487777][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 346.510755][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 346.524927][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 346.554876][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 346.564820][ T5953] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 346.573058][ T5892] DVB: Unable to find symbol tda10046_attach() [ 346.581331][ T984] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 346.593142][ T5892] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 346.602586][ T5892] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 346.615698][ T984] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 346.639867][ T984] usb 5-1: USB disconnect, device number 41 [ 346.684809][ T5914] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 346.735845][ T5953] usb 1-1: Using ep0 maxpacket: 8 [ 346.747404][ T5953] usb 1-1: unable to get BOS descriptor or descriptor too short [ 346.767332][ T5953] usb 1-1: config 4 interface 0 has no altsetting 0 [ 346.774900][T13740] kvm: MWAIT instruction emulated as NOP! [ 346.784003][ T5953] usb 1-1: string descriptor 0 read error: -22 [ 346.796289][ T5953] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 346.825367][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.851630][ T5953] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 346.870766][ T5953] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 346.876754][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 346.882188][ T5953] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 346.893370][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 346.900585][ T5953] usb 1-1: media controller created [ 346.922737][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 346.933668][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 346.951748][ T5914] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 346.962791][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.992546][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 346.992941][ T5914] usb 4-1: config 0 descriptor?? [ 347.440372][ T5953] usb 1-1: USB disconnect, device number 39 [ 347.454390][ T5914] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 347.639796][ T5892] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 347.679287][ T5892] usb 3-1: USB disconnect, device number 44 [ 348.070946][T13766] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3106'. [ 349.014853][ T5892] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 349.176908][ T5892] usb 6-1: Using ep0 maxpacket: 8 [ 349.200384][ T5892] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 349.219119][ T5892] usb 6-1: config 179 has no interface number 0 [ 349.233112][ T5892] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 349.249024][ T5892] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 349.260701][ T5892] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 349.272711][ T5892] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 349.284579][ T5892] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 349.298747][ T5892] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 349.310692][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.323222][T13800] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 349.620371][ T5953] usb 4-1: USB disconnect, device number 46 [ 349.641048][ T5914] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input72 [ 349.934651][ T5914] usb 6-1: USB disconnect, device number 46 [ 349.934771][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 349.949199][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 349.957595][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.464285][T13842] netlink: 'syz.0.3136': attribute type 1 has an invalid length. [ 350.554158][T13842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 350.694243][T13844] bond1: (slave ip6gretap1): making interface the new active one [ 350.747957][T13844] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 351.184940][ T5953] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 351.216444][T13885] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3150'. [ 351.389860][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.422638][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.452459][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 351.484869][ T5953] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 351.502530][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.520012][ T5953] usb 5-1: config 0 descriptor?? [ 351.694806][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 351.864929][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 351.872914][ T10] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 352.094872][ T5953] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 352.149076][ T10] usb 3-1: config 0 has no interface number 0 [ 352.165089][ T10] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 352.186587][ T10] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 352.218852][ T10] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 352.254789][ T10] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 352.332876][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 352.342121][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.351697][ T10] usb 3-1: Product: syz [ 352.383403][ T10] usb 3-1: Manufacturer: syz [ 352.389414][ T10] usb 3-1: SerialNumber: syz [ 352.407100][ T10] usb 3-1: config 0 descriptor?? [ 352.648611][ T10] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior1 [ 352.796741][ T10] usb 5-1: USB disconnect, device number 42 [ 352.824932][ T5953] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 352.927005][ T5892] usb 3-1: USB disconnect, device number 45 [ 353.056233][ T5953] usb 1-1: Using ep0 maxpacket: 32 [ 353.070200][ T5953] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 353.084244][ T5953] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 353.096243][ T5953] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 353.108676][ T5953] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 353.127321][ T5953] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 353.139011][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.148450][ T5953] usb 1-1: Product: syz [ 353.152842][ T5953] usb 1-1: Manufacturer: syz [ 353.157538][ T5953] usb 1-1: SerialNumber: syz [ 353.178909][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 353.190896][ T5953] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input74 [ 353.224971][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 353.314914][ T9] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 353.384799][ T5953] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 353.393400][ T5953] (id 0x00) [ 353.470284][ T5953] rc_core: IR keymap rc-imon-pad not found [ 353.492880][ T5953] Registered IR keymap rc-empty [ 353.513688][ T5953] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 353.529452][ T9] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 353.537962][ T9] usb 5-1: config 0 has no interface number 0 [ 353.544084][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 353.562830][ T5953] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 353.586362][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 353.614862][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 353.628615][ T5953] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 353.644762][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 353.666856][ T5953] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input75 [ 353.694340][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 353.714750][ T5953] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:40> initialized [ 353.724946][T13923] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3164'. [ 353.740229][ T9] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 353.774808][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 353.784223][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.867788][ T9] usb 5-1: config 0 descriptor?? [ 353.886120][T13911] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 353.899737][T13911] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 353.939344][ T984] usb 1-1: USB disconnect, device number 40 [ 353.945822][T13905] imon:send_packet: packet tx failed (-71) [ 353.965662][ T9] ldusb 5-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 353.979513][T13905] imon:vfd_write: send packet #0 failed [ 354.178571][ T5914] usb 5-1: USB disconnect, device number 43 [ 354.197942][ T5914] ldusb 5-1:0.55: LD USB Device #1 now disconnected [ 354.374895][ T5892] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 354.524867][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 354.533604][ T5892] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.547522][ T5892] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.559263][ T5892] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 354.569153][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.021917][ T5892] mcp2221 0003:04D8:00DD.0038: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 355.247736][T13935] i2c i2c-1: Invalid block write size 155 [ 355.268912][ T9] usb 3-1: USB disconnect, device number 46 [ 355.695613][ T5892] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 355.919780][ T5892] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 355.935693][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.974962][ T5892] usb 6-1: config 0 descriptor?? [ 355.991111][ T5892] gspca_main: spca508-2.14.0 probing 8086:0110 [ 356.192159][ T5892] gspca_spca508: reg_read err -32 [ 356.209649][ T5892] gspca_spca508: reg_read err -32 [ 356.229152][ T5892] gspca_spca508: reg_read err -32 [ 356.242479][ T5892] gspca_spca508: reg_read err -32 [ 356.461992][ T5892] gspca_spca508: reg write: error -71 [ 356.483835][ T5892] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 356.502386][ T5892] usb 6-1: USB disconnect, device number 47 [ 356.590185][T13974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3184'. [ 356.919772][T13982] input: syz0 as /devices/virtual/input/input76 [ 357.454241][T14008] netlink: 'syz.3.3199': attribute type 16 has an invalid length. [ 357.467203][T14008] netlink: 'syz.3.3199': attribute type 17 has an invalid length. [ 357.529404][T14008] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.536938][T14008] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.545195][ T5953] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 357.653267][T14008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.661211][ T10] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 357.679701][T14008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.695244][ T5953] usb 1-1: Using ep0 maxpacket: 16 [ 357.712355][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.746071][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.760396][ T5953] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 357.788538][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.809991][ T5953] usb 1-1: config 0 descriptor?? [ 357.824820][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 357.832851][ T10] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 357.864949][ T10] usb 6-1: config 0 has no interface number 0 [ 357.871133][ T10] usb 6-1: config 0 interface 184 has no altsetting 0 [ 357.904004][T14008] ipip0: left promiscuous mode [ 357.913018][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 357.926425][T14008] ipip0: left allmulticast mode [ 357.931997][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.952496][ T10] usb 6-1: Product: syz [ 357.956827][ T10] usb 6-1: Manufacturer: syz [ 357.961459][ T10] usb 6-1: SerialNumber: syz [ 357.989250][ T10] usb 6-1: config 0 descriptor?? [ 358.007445][ T10] smsc75xx v1.0.0 [ 358.020955][ T1100] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.064799][ T1100] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.073733][ T1100] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.105705][ T1100] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.291123][T14018] netlink: 'syz.3.3202': attribute type 11 has an invalid length. [ 358.459760][ T5953] usb 1-1: language id specifier not provided by device, defaulting to English [ 358.873480][ T5953] letsketch 0003:6161:4D15.0039: Device info: ఁ [ 359.048953][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 359.112956][ T5953] usb 1-1: Max retries (5) exceeded reading string descriptor 201 [ 359.154096][ T5953] letsketch 0003:6161:4D15.0039: probe with driver letsketch failed with error -71 [ 359.183339][ T5953] usb 1-1: USB disconnect, device number 41 [ 359.261350][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 359.309707][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 359.327325][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 359.346293][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 359.365239][ T10] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 359.389385][ T10] usb 6-1: USB disconnect, device number 48 [ 360.079016][T14060] dvmrp1: entered allmulticast mode [ 360.525231][ T5892] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 360.695239][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 360.712486][ T5892] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 360.735050][ T5892] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.768282][ T5892] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.789581][ T5892] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.806687][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.824889][ T5892] usb 1-1: Product: syz [ 360.836615][ T5892] usb 1-1: Manufacturer: syz [ 360.846535][ T5892] usb 1-1: SerialNumber: syz [ 360.897403][T14092] input: syz0 as /devices/virtual/input/input77 [ 361.134877][ T10] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 361.273556][ T5892] usb 1-1: 0:2 : does not exist [ 361.294792][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 361.318677][ T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 361.350582][ T10] usb 6-1: config 1 has no interface number 1 [ 361.368872][ T10] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 361.400264][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 361.417553][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 361.433271][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 361.449932][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.460285][ T10] usb 6-1: Product: syz [ 361.467988][ T10] usb 6-1: Manufacturer: syz [ 361.472792][ T10] usb 6-1: SerialNumber: syz [ 361.709654][ T460] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.873143][ T460] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.033923][ T460] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.176181][ T10] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 362.176220][ T5892] usb 1-1: USB disconnect, device number 42 [ 362.234311][ T460] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.615103][ T460] bridge_slave_1: left allmulticast mode [ 362.624997][ T460] bridge_slave_1: left promiscuous mode [ 362.630823][ T460] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.747097][ T460] bridge_slave_0: left allmulticast mode [ 362.752795][ T460] bridge_slave_0: left promiscuous mode [ 362.793432][ T460] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.873553][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.889949][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.898736][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.910027][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.918659][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.944873][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 362.977451][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.985877][ T10] usb 6-1: 2:1: cannot get freq at ep 0x82 [ 362.995788][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.005400][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.013605][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.021455][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.062529][ T10] usb 6-1: USB disconnect, device number 49 [ 363.113162][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 363.122496][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.134228][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 363.143497][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.213143][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 363.228877][ T9209] udevd[9209]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 363.243287][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 363.263670][ T9] usb 4-1: Product: syz [ 363.328504][ T9] usb 4-1: Manufacturer: syz [ 363.360293][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 363.394601][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 363.410845][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 363.430274][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 363.565726][ C0] cdc_wdm 4-1:1.0: unknown notification 255 received: index 255 len 0 [ 363.778314][ T10] usb 4-1: USB disconnect, device number 47 [ 363.854114][T14132] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3250'. [ 364.033079][ T460] bond1 (unregistering): (slave geneve2): Releasing active interface [ 364.648690][ T460] bond0 (unregistering): left promiscuous mode [ 364.655173][ T460] bond_slave_0: left promiscuous mode [ 364.661088][ T460] bond_slave_1: left promiscuous mode [ 364.679711][ T460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.692660][ T460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.703718][ T460] bond0 (unregistering): Released all slaves [ 364.788247][T14153] loop9: detected capacity change from 0 to 7 [ 364.914326][ T460] bond1 (unregistering): Released all slaves [ 364.934900][T14140] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3254'. [ 364.946568][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3251'. [ 364.969127][T14134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3251'. [ 365.075144][ T5153] Bluetooth: hci2: command tx timeout [ 365.085358][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3251'. [ 365.105128][T14134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3251'. [ 365.143884][ T50] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.205420][ T460] tipc: Disabling bearer [ 365.209781][T14153] Dev loop9: unable to read RDB block 7 [ 365.215920][ T460] tipc: Left network mode [ 365.239468][ T50] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.256688][T14155] Invalid logical block size (1) [ 365.295330][ T50] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.313890][T14153] loop9: unable to read partition table [ 365.326295][T14153] loop9: partition table beyond EOD, truncated [ 365.345745][T14153] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 365.427903][ T50] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.708512][T14177] gretap0: entered promiscuous mode [ 365.722564][T14177] vlan2: entered promiscuous mode [ 366.171483][ T460] batadv0: left promiscuous mode [ 366.229894][ T460] hsr_slave_0: left promiscuous mode [ 366.259372][ T460] hsr_slave_1: left promiscuous mode [ 366.285706][ T460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.311827][ T460] batman_adv: batadv0: Removing interface: macsec1 [ 366.331939][ T460] batman_adv: batadv0: Interface deactivated: macvtap1 [ 366.354805][ T460] batman_adv: batadv0: Removing interface: macvtap1 [ 366.371087][ T460] veth0_to_batadv: left allmulticast mode [ 366.719284][T14215] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3278'. [ 366.754060][ T5203] Dev loop6: unable to read RDB block 1 [ 366.760661][ T5203] loop6: unable to read partition table [ 366.775381][ T5203] loop6: partition table beyond EOD, truncated [ 366.846394][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 367.014829][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 367.022626][ T9] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 367.052836][ T9] usb 4-1: config 0 has no interface number 0 [ 367.059576][ T9] usb 4-1: config 0 interface 182 has no altsetting 0 [ 367.081837][ T9] usb 4-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 367.092202][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.114780][ T9] usb 4-1: Product: syz [ 367.119047][ T9] usb 4-1: Manufacturer: syz [ 367.145094][ T5153] Bluetooth: hci2: command tx timeout [ 367.145482][ T9] usb 4-1: SerialNumber: syz [ 367.169810][ T9] usb 4-1: config 0 descriptor?? [ 367.192948][ T9] hub 4-1:0.182: bad descriptor, ignoring hub [ 367.230245][ T9] hub 4-1:0.182: probe with driver hub failed with error -5 [ 367.427514][ T9] kaweth 4-1:0.182: Firmware present in device. [ 367.511763][ T10] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 367.515575][ T5914] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 367.543880][ T460] team0 (unregistering): Port device team_slave_1 removed [ 367.605316][ T9] kaweth 4-1:0.182: Statistics collection: 0 [ 367.611353][ T9] kaweth 4-1:0.182: Multicast filter limit: 0 [ 367.617723][ T9] kaweth 4-1:0.182: MTU: 0 [ 367.625451][ T9] kaweth 4-1:0.182: Read MAC address 00:00:00:00:00:00 [ 367.625965][ T460] team0 (unregistering): Port device team_slave_0 removed [ 367.689650][ T10] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 367.699037][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.725072][ T10] usb 6-1: Product: syz [ 367.729300][ T10] usb 6-1: Manufacturer: syz [ 367.743474][ T10] usb 6-1: SerialNumber: syz [ 367.755529][ T10] usb 6-1: config 0 descriptor?? [ 367.888604][ T5914] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 367.955377][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 368.026137][ T5914] usb 6-1: USB disconnect, device number 50 [ 368.427402][ T9] kaweth 4-1:0.182: kaweth interface created at eth9 [ 368.460996][T14125] chnl_net:caif_netlink_parms(): no params data found [ 368.485865][ T9] usb 4-1: USB disconnect, device number 48 [ 368.526022][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 368.632362][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 368.893792][T14125] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.906919][ T460] IPVS: stop unused estimator thread 0... [ 368.924717][T14125] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.944829][T14125] bridge_slave_0: entered allmulticast mode [ 368.962860][T14125] bridge_slave_0: entered promiscuous mode [ 368.981078][T14125] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.988857][T14125] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.998204][T14125] bridge_slave_1: entered allmulticast mode [ 369.006002][T14125] bridge_slave_1: entered promiscuous mode [ 369.135620][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3297'. [ 369.147753][T14125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.157297][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 369.184074][T14125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.226303][ T5153] Bluetooth: hci2: command tx timeout [ 369.303916][T14125] team0: Port device team_slave_0 added [ 369.331287][T14125] team0: Port device team_slave_1 added [ 369.450816][T14125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.472268][T14125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.534858][T14125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.565562][T14125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.604736][T14125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.676995][T14125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.886076][T14125] hsr_slave_0: entered promiscuous mode [ 369.892805][T14125] hsr_slave_1: entered promiscuous mode [ 369.937397][T14125] debugfs: 'hsr0' already exists in 'hsr' [ 369.949879][T14125] Cannot create hsr debugfs directory [ 370.702636][T14323] veth1_to_bond: entered promiscuous mode [ 370.823236][T14323] veth1_to_bond: left promiscuous mode [ 371.260968][T14125] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 371.294971][T14125] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 371.305143][ T5153] Bluetooth: hci2: command tx timeout [ 371.336437][T14125] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 371.357236][T14125] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 371.705670][T14125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.768582][T14125] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.816731][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.823903][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.883407][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.890643][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.214802][ T5953] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 372.288357][T14125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.384839][ T5953] usb 3-1: Using ep0 maxpacket: 16 [ 372.420542][ T5953] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 372.461988][ T5953] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.512188][ T5953] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 372.519448][T14377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3324'. [ 372.522903][T14125] veth0_vlan: entered promiscuous mode [ 372.568274][ T5953] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 372.611057][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.627488][T14125] veth1_vlan: entered promiscuous mode [ 372.638879][ T5953] usb 3-1: Product: syz [ 372.653697][ T5953] usb 3-1: Manufacturer: syz [ 372.669907][T14379] input: syz0 as /devices/virtual/input/input78 [ 372.696861][ T5953] usb 3-1: SerialNumber: syz [ 372.797312][T14125] veth0_macvtap: entered promiscuous mode [ 372.843515][T14125] veth1_macvtap: entered promiscuous mode [ 373.001241][T14125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.098668][T14125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.195977][ T5953] usb 3-1: 0:2 : does not exist [ 373.212665][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.238264][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.285660][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.340799][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.851365][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.885104][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.012388][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.033569][ T5892] usb 3-1: USB disconnect, device number 47 [ 374.047311][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.326397][T14415] atomic_op ffff88805401d198 conn xmit_atomic 0000000000000000 [ 374.615919][T14423] loop2: detected capacity change from 0 to 7 [ 374.655402][ T5950] Dev loop2: unable to read RDB block 7 [ 374.661021][ T5950] loop2: AHDI p1 p2 p3 [ 374.668137][ T5950] loop2: partition table partially beyond EOD, truncated [ 374.686623][ T5950] loop2: p1 start 1634624559 is beyond EOD, truncated [ 374.704902][ T5950] loop2: p2 start 1702059890 is beyond EOD, truncated [ 374.714455][T14423] Dev loop2: unable to read RDB block 7 [ 374.725483][T14423] loop2: AHDI p1 p2 p3 [ 374.746356][T14423] loop2: partition table partially beyond EOD, truncated [ 374.756734][T14423] loop2: p1 start 1634624559 is beyond EOD, truncated [ 374.763731][T14423] loop2: p2 start 1702059890 is beyond EOD, truncated [ 374.795328][T14429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.854879][ T5953] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 375.034779][ T5953] usb 4-1: Using ep0 maxpacket: 8 [ 375.063153][ T5953] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 375.091283][ T5953] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 375.119151][ T5953] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 375.129974][ T5953] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 375.143525][ T5953] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.169288][ T5953] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 375.198282][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.445555][ T5953] usb 4-1: GET_CAPABILITIES returned 0 [ 375.463323][ T5953] usbtmc 4-1:16.0: can't read capabilities [ 375.789273][T14425] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 375.815515][ T5953] usb 4-1: USB disconnect, device number 49 [ 377.895328][ T984] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 378.042962][T14548] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.057044][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.083228][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.118119][ T984] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 378.162668][ T984] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 378.193498][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.230503][ T984] usb 4-1: config 0 descriptor?? [ 378.406828][T14565] netlink: 'syz.5.3375': attribute type 1 has an invalid length. [ 378.463757][T14565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.504254][T14567] bond0: (slave ip6gretap1): making interface the new active one [ 378.529307][T14567] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 378.637117][T14575] batadv_slave_1: entered promiscuous mode [ 378.645387][T14574] batadv_slave_1: left promiscuous mode [ 378.667861][ T984] plantronics 0003:047F:FFFF.003A: reserved main item tag 0xd [ 378.699622][ T984] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 378.829216][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.839333][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.854453][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3382'. [ 378.874864][ T57] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 378.918733][T14584] input: syz1 as /devices/virtual/input/input80 [ 378.947257][ T984] usb 4-1: USB disconnect, device number 50 [ 379.025080][ T57] usb 1-1: Using ep0 maxpacket: 8 [ 379.051963][ T57] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 379.070437][ T57] usb 1-1: config 179 has no interface number 0 [ 379.080260][ T57] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 379.096021][ T57] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 379.109197][ T57] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 379.120821][ T57] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 379.133807][ T57] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 379.190089][ T57] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 379.216206][ T57] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.268280][T14573] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 379.296386][T14590] macsec2: entered promiscuous mode [ 379.321817][T14590] ip6gretap0: entered promiscuous mode [ 379.346664][T14590] macsec2: entered allmulticast mode [ 379.359175][T14590] ip6gretap0: entered allmulticast mode [ 379.385658][T14590] ip6gretap0: left allmulticast mode [ 379.395162][T14590] ip6gretap0: left promiscuous mode [ 379.553239][ T57] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input81 [ 379.782955][ T57] usb 1-1: USB disconnect, device number 43 [ 379.783026][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 379.783077][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 380.395739][T14617] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3396'. [ 380.454068][T14620] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3396'. [ 381.118686][T14648] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 381.302320][ T57] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 381.326764][ T57] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 381.534958][ T5892] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 381.555021][ T57] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 381.715140][ T57] usb 1-1: Using ep0 maxpacket: 16 [ 381.715203][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 381.729019][ T57] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.736968][ T5892] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 381.760099][ T57] usb 1-1: config 0 interface 0 has no altsetting 0 [ 381.774783][ T57] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 381.774825][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.784008][ T57] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.806633][ T57] usb 1-1: config 0 descriptor?? [ 381.867839][ T5892] usb 3-1: config 0 has no interface number 0 [ 381.874002][ T5892] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 381.914430][ T984] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 381.956778][ T984] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 381.977014][ T5892] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 382.002538][ T5892] usb 3-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 382.047100][ T5892] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 382.074880][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.082922][ T5892] usb 3-1: Product: syz [ 382.104896][ T5892] usb 3-1: Manufacturer: syz [ 382.125130][ T5892] usb 3-1: SerialNumber: syz [ 382.152178][ T5892] usb 3-1: config 0 descriptor?? [ 382.178690][T14657] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 382.262966][ T57] nzxt-smart2 0003:1E71:2009.003D: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 382.436826][T14657] loop3: detected capacity change from 0 to 7 [ 382.463786][T14657] Dev loop3: unable to read RDB block 7 [ 382.493746][T14657] loop3: AHDI p1 p2 [ 382.514022][T14657] loop3: partition table partially beyond EOD, truncated [ 382.570173][T14657] loop3: p1 start 2589959654 is beyond EOD, truncated [ 382.633464][ T5892] usb 3-1: NFC: intf ffff88807b7e4000 id ffffffff8e925360 [ 382.695866][ T5892] usb 3-1: USB disconnect, device number 48 [ 382.801598][ T984] usb 1-1: USB disconnect, device number 44 [ 382.936074][ T30] audit: type=1326 audit(1764736907.598:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz.3.3422" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05db78f749 code=0x0 [ 385.695176][ T57] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 385.886760][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 385.947168][ T57] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 385.995042][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.021010][ T57] usb 6-1: config 0 descriptor?? [ 386.048485][T14755] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 386.522745][ T57] elan 0003:04F3:0755.003E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 386.737537][ T57] usb 6-1: USB disconnect, device number 51 [ 387.590978][ T5203] Dev loop6: unable to read RDB block 1 [ 387.601530][ T5203] loop6: unable to read partition table [ 387.608036][ T5203] loop6: partition table beyond EOD, truncated [ 387.833262][T14814] loop2: detected capacity change from 0 to 7 [ 387.885664][T14814] Dev loop2: unable to read RDB block 7 [ 387.900953][T14814] loop2: unable to read partition table [ 387.934573][T14814] loop2: partition table beyond EOD, truncated [ 387.951990][T14817] binder: 14815:14817 ioctl c0306201 2000000003c0 returned -14 [ 387.980333][T14814] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 388.435273][ T5892] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 388.445201][ T57] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 388.606439][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 388.614552][ T5892] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 388.637419][ T5892] usb 4-1: config 0 has no interface number 0 [ 388.650312][ T57] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 388.662637][ T5892] usb 4-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=77.d6 [ 388.688373][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.694760][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.707931][ T57] usb 5-1: config 0 descriptor?? [ 388.722247][ T5892] usb 4-1: Product: syz [ 388.738253][ T57] cp210x 5-1:0.0: cp210x converter detected [ 388.742580][ T5892] usb 4-1: Manufacturer: syz [ 388.762810][ T5892] usb 4-1: SerialNumber: syz [ 388.784258][ T5892] usb 4-1: config 0 descriptor?? [ 389.012123][ T5914] usb 4-1: USB disconnect, device number 51 [ 389.056699][ T5892] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 389.140912][ T57] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 389.164742][ T57] usb 5-1: cp210x converter now attached to ttyUSB0 [ 389.217988][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.239545][ T5892] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 389.249555][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.283319][ T5892] usb 6-1: config 0 descriptor?? [ 389.366708][ T57] usb 5-1: USB disconnect, device number 44 [ 389.383917][ T57] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 389.463826][ T57] cp210x 5-1:0.0: device disconnected [ 389.509479][ T5892] usbhid 6-1:0.0: can't add hid device: -71 [ 389.520778][ T5892] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 389.536272][ T5892] usb 6-1: USB disconnect, device number 52 [ 389.846129][T14870] vlan2: entered allmulticast mode [ 389.851385][T14870] dummy0: entered allmulticast mode [ 390.034931][ T5892] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 390.214865][ T5892] usb 6-1: Using ep0 maxpacket: 32 [ 390.227775][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.266948][ T5892] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 390.291820][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.327907][ T5892] usb 6-1: config 0 descriptor?? [ 390.354474][ T5892] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 390.366809][ T5892] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 390.812700][T14895] pim6reg1: entered promiscuous mode [ 390.829663][T14895] pim6reg1: entered allmulticast mode [ 390.910579][T14896] pim6reg1: left promiscuous mode [ 390.930147][T14896] pim6reg1: left allmulticast mode [ 391.076844][T14900] program syz.4.3509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 391.164514][ T57] usb 6-1: USB disconnect, device number 53 [ 391.180827][ T57] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 391.513880][T14912] loop9: detected capacity change from 0 to 7 [ 391.529623][T14916] netlink: 'syz.2.3515': attribute type 12 has an invalid length. [ 391.540813][ T5950] Dev loop9: unable to read RDB block 7 [ 391.548271][ T5950] loop9: unable to read partition table [ 391.554160][ T5950] loop9: partition table beyond EOD, truncated [ 391.566587][T14916] netlink: 'syz.2.3515': attribute type 29 has an invalid length. [ 391.574565][T14916] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3515'. [ 391.586045][T14916] netlink: 'syz.2.3515': attribute type 2 has an invalid length. [ 391.593793][T14916] netlink: 23 bytes leftover after parsing attributes in process `syz.2.3515'. [ 391.619665][T14912] Dev loop9: unable to read RDB block 7 [ 391.637020][T14912] loop9: unable to read partition table [ 391.642913][T14912] loop9: partition table beyond EOD, truncated [ 391.674805][T14912] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 391.763214][T14919] netlink: 'syz.2.3517': attribute type 5 has an invalid length. [ 392.034773][ T57] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 392.199279][ T57] usb 6-1: Using ep0 maxpacket: 16 [ 392.234343][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.267749][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.280947][ T57] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 392.296099][ T57] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 392.305812][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.336395][ T57] usb 6-1: config 0 descriptor?? [ 392.771634][ T57] HID 045e:07da: Invalid code 65791 type 1 [ 392.805283][ T57] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.003F/input/input82 [ 392.834998][ T57] microsoft 0003:045E:07DA.003F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 393.072249][ T5914] usb 6-1: USB disconnect, device number 54 [ 393.116159][T14944] binder: 14943:14944 ioctl c0306201 2000000003c0 returned -14 [ 394.186833][T14980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3544'. [ 394.485173][ T5914] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 394.514814][ T5892] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 394.610721][T14988] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.3549' sets config #2227 [ 394.704737][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 394.712889][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.734833][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.745451][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13629, setting to 64 [ 394.765540][ T5892] usb 6-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 394.778905][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 394.799339][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.814202][ T5914] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 394.842231][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.852642][ T5892] usb 6-1: config 0 descriptor?? [ 394.900447][ T5914] usb 3-1: config 0 descriptor?? [ 394.922885][T14982] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 395.214892][ T984] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 395.281812][ T5892] logitech-hidpp-device 0003:046D:C091.0040: item fetching failed at offset 1/5 [ 395.300706][ T5892] logitech-hidpp-device 0003:046D:C091.0040: hidpp_probe:parse failed [ 395.310614][ T5892] logitech-hidpp-device 0003:046D:C091.0040: probe with driver logitech-hidpp-device failed with error -22 [ 395.373456][ T5914] hid-multitouch 0003:0457:07DA.0041: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 395.394877][ T984] usb 4-1: Using ep0 maxpacket: 32 [ 395.407230][ T984] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 395.419154][ T984] usb 4-1: config 0 has no interface number 0 [ 395.426296][ T984] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 395.445168][ T984] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 395.465921][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.483908][ T5914] usb 6-1: USB disconnect, device number 55 [ 395.490972][ T984] usb 4-1: Product: syz [ 395.500447][ T984] usb 4-1: Manufacturer: syz [ 395.510651][ T984] usb 4-1: SerialNumber: syz [ 395.529279][ T984] usb 4-1: config 0 descriptor?? [ 395.545839][T14992] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 395.627455][ T5892] usb 3-1: USB disconnect, device number 49 [ 395.775993][T14992] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 396.808144][ T984] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 396.826624][ T984] asix 4-1:0.188: probe with driver asix failed with error -71 [ 396.872251][ T984] usb 4-1: USB disconnect, device number 52 [ 396.965911][T15027] loop2: detected capacity change from 0 to 7 [ 396.974818][T15027] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 [ 396.989659][T15029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3567'. [ 396.992916][T15027] loop2: p1 start 3018249949 is beyond EOD, truncated [ 397.009856][T15027] loop2: p2 start 1879129398 is beyond EOD, truncated [ 397.016832][T15029] hsr_slave_0: left promiscuous mode [ 397.025918][T15029] hsr_slave_1: left promiscuous mode [ 397.055997][T15027] loop2: p3 start 4093120540 is beyond EOD, truncated [ 397.095357][T15027] loop2: p4 start 2524654898 is beyond EOD, truncated [ 397.104523][T15027] loop2: p5 start 674059 is beyond EOD, truncated [ 397.138215][T15027] loop2: p6 start 57445 is beyond EOD, truncated [ 397.164950][T15027] loop2: p7 start 1646166690 is beyond EOD, truncated [ 397.184861][T15027] loop2: p8 start 3277892638 is beyond EOD, truncated [ 397.206774][T15027] loop2: p9 start 4163259941 is beyond EOD, truncated [ 397.358920][T15032] netlink: 'syz.5.3568': attribute type 13 has an invalid length. [ 397.427156][T15032] netlink: 'syz.5.3568': attribute type 17 has an invalid length. [ 397.859922][T15032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 399.406876][T15081] binder: 15079:15081 ioctl c0306201 200000000480 returned -14 [ 399.765032][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 399.956702][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.968031][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.978381][ T10] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 399.987777][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.999922][ T10] usb 5-1: config 0 descriptor?? [ 400.391964][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 400.429450][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 400.461337][ T10] usb 5-1: USB disconnect, device number 45 [ 400.678037][ T57] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 400.834927][ T57] usb 3-1: Using ep0 maxpacket: 32 [ 400.842479][ T57] usb 3-1: config 0 has no interfaces? [ 400.851816][ T57] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 400.861143][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.870281][ T57] usb 3-1: Product: syz [ 400.874611][ T57] usb 3-1: Manufacturer: syz [ 400.880299][ T57] usb 3-1: SerialNumber: syz [ 400.889073][ T57] usb 3-1: config 0 descriptor?? [ 401.146939][ T57] usb 3-1: USB disconnect, device number 50 [ 401.366753][T15130] netlink: 'syz.4.3610': attribute type 11 has an invalid length. [ 401.377118][T15131] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.526694][ T30] audit: type=1326 audit(1764736926.188:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.5.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188458f749 code=0x7ffc0000 [ 401.549240][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.594276][ T30] audit: type=1326 audit(1764736926.218:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.5.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f188452b829 code=0x7ffc0000 [ 401.616881][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.686930][ T30] audit: type=1326 audit(1764736926.218:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.5.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188458f749 code=0x7ffc0000 [ 401.762008][T15143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3615'. [ 401.771401][ T30] audit: type=1326 audit(1764736926.218:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.5.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f188452b829 code=0x7ffc0000 [ 401.797206][T15143] hsr_slave_0: left promiscuous mode [ 401.803775][ T30] audit: type=1326 audit(1764736926.218:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.5.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f188452b829 code=0x7ffc0000 [ 401.803817][T15143] hsr_slave_1: left promiscuous mode [ 401.836055][ T30] audit: type=1326 audit(1764736926.218:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.5.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188458f749 code=0x7ffc0000 [ 401.873059][ T30] audit: type=1326 audit(1764736926.218:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.5.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f188452b829 code=0x7ffc0000 [ 401.908701][ T30] audit: type=1326 audit(1764736926.218:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.5.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f188452b829 code=0x7ffc0000 [ 401.950777][ T30] audit: type=1326 audit(1764736926.218:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.5.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188458f749 code=0x7ffc0000 [ 401.976903][ T30] audit: type=1326 audit(1764736926.218:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.5.3611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f188452b829 code=0x7ffc0000 [ 401.999696][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.737821][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3626'. [ 404.152643][T15214] loop5: detected capacity change from 0 to 7 [ 404.167013][ C1] blk_print_req_error: 10 callbacks suppressed [ 404.167033][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.182433][ C1] buffer_io_error: 333 callbacks suppressed [ 404.182448][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 404.206417][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.215657][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 404.224744][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.234075][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 404.246445][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.285098][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.294310][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 404.330954][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.340210][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 404.360211][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.369531][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 404.380963][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.390172][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 404.398071][T15214] ldm_validate_partition_table(): Disk read failed. [ 404.453100][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.462370][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 404.476100][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.485333][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 404.493553][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 404.512962][T15214] Dev loop5: unable to read RDB block 0 [ 404.533663][T15214] loop5: unable to read partition table [ 404.547803][T15214] loop5: partition table beyond EOD, truncated [ 404.562841][T15214] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 404.634840][ T984] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 404.801333][ T984] usb 3-1: unable to get BOS descriptor or descriptor too short [ 404.821861][ T984] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 404.844757][ T984] usb 3-1: can't read configurations, error -71 [ 405.169159][T15257] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 405.235125][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 405.404795][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 405.418262][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 405.441903][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 405.479813][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 405.492292][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 405.503972][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.519173][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 405.535779][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.708621][T15271] netlink: 'syz.5.3667': attribute type 25 has an invalid length. [ 405.721645][T15271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3667'. [ 405.782698][ T10] usb 4-1: usb_control_msg returned -32 [ 405.791950][ T10] usbtmc 4-1:16.0: can't read capabilities [ 405.826308][T15271] netlink: 'syz.5.3667': attribute type 25 has an invalid length. [ 405.839115][T15271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3667'. [ 406.177287][T15295] netlink: 'syz.4.3675': attribute type 13 has an invalid length. [ 406.185880][T15295] netlink: 'syz.4.3675': attribute type 17 has an invalid length. [ 406.263122][T15295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 406.575989][T15311] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 406.704813][ T984] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 406.764833][ T57] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 406.777757][ T5892] usb 4-1: USB disconnect, device number 53 [ 406.854823][ T984] usb 1-1: Using ep0 maxpacket: 32 [ 406.862070][ T984] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 406.885538][ T984] usb 1-1: config 0 has no interface number 0 [ 406.903097][ T984] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 406.923242][ T984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.933022][ T984] usb 1-1: Product: syz [ 406.940060][ T984] usb 1-1: Manufacturer: syz [ 406.947339][ T57] usb 5-1: config 0 has no interfaces? [ 406.952539][ T984] usb 1-1: SerialNumber: syz [ 406.952888][ T57] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 406.966989][ T984] usb 1-1: config 0 descriptor?? [ 406.970918][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.979050][ T984] smsc95xx v2.0.0 [ 406.988132][ T57] usb 5-1: config 0 descriptor?? [ 407.134858][ T57] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 407.285411][ T5892] usb 5-1: USB disconnect, device number 46 [ 407.311364][ T57] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 407.322395][ T57] usb 3-1: config 0 has no interface number 0 [ 407.332370][ T57] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 407.374828][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.383961][ T57] usb 3-1: Product: syz [ 407.384104][ T984] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 407.388749][ T57] usb 3-1: Manufacturer: syz [ 407.404696][ T57] usb 3-1: SerialNumber: syz [ 407.409914][ T984] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 407.426995][ T57] usb 3-1: config 0 descriptor?? [ 407.465100][ T57] yurex 3-1:0.50: Could not find endpoints [ 407.575716][T15329] netlink: 'syz.3.3690': attribute type 13 has an invalid length. [ 407.580674][T15331] ip6gre1: entered allmulticast mode [ 407.583769][T15329] netlink: 'syz.3.3690': attribute type 17 has an invalid length. [ 407.648540][T15329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.656132][T15313] kvm: kvm [15312]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 407.676932][T15329] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.685919][T15313] kvm: kvm [15312]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 407.696640][T15329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 407.734341][ T24] usb 3-1: USB disconnect, device number 53 [ 408.051100][ T984] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 408.063841][ T984] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 408.077676][ T984] usb 1-1: USB disconnect, device number 45 [ 408.174850][ T57] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 408.361152][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.405581][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.438521][ T57] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 408.474887][ T57] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 408.484049][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.503551][ T57] usb 5-1: config 0 descriptor?? [ 408.555107][ T10] usb 6-1: new low-speed USB device number 56 using dummy_hcd [ 408.644861][ T984] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 408.726379][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 408.735564][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 408.747692][ T10] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 408.760811][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 408.772310][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 408.785321][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 408.792810][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 408.804832][ T10] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 408.817564][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 408.830139][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 408.842245][ T984] usb 4-1: config 0 has an invalid interface number: 204 but max is 0 [ 408.843338][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 408.860948][ T984] usb 4-1: config 0 has no interface number 0 [ 408.870096][ T984] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 408.875146][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 408.892670][ T10] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 408.899746][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.919383][ T984] usb 4-1: Product: syz [ 408.923692][ T984] usb 4-1: Manufacturer: syz [ 408.928511][ T984] usb 4-1: SerialNumber: syz [ 408.947008][ T984] usb 4-1: config 0 descriptor?? [ 408.964194][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 408.965572][ T984] ems_usb 4-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 408.986941][ T57] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 409.032024][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 409.033924][ T984] ems_usb 4-1:0.204: probe with driver ems_usb failed with error -22 [ 409.058511][ T10] usb 6-1: string descriptor 0 read error: -22 [ 409.066245][ T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 409.087035][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.118959][ T10] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 409.242189][T15348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3698'. [ 409.255203][ T984] usb 4-1: USB disconnect, device number 54 [ 410.289453][ T5887] usb 6-1: USB disconnect, device number 56 [ 410.498578][T15394] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3716'. [ 410.516223][ T57] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 410.684809][ T57] usb 3-1: Using ep0 maxpacket: 8 [ 410.696571][ T57] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 410.705611][ T57] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 410.725339][ T57] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 410.744919][ T57] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 410.756900][ T57] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.770950][ T57] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 410.781479][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.030725][ T57] usb 3-1: usb_control_msg returned -32 [ 411.036897][ T57] usbtmc 3-1:16.0: can't read capabilities [ 411.085956][ T5953] usb 5-1: USB disconnect, device number 47 [ 411.207313][T15419] input: syz1 as /devices/virtual/input/input84 [ 411.318546][T15422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3728'. [ 411.428045][T15424] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 411.951101][T15447] netlink: 'syz.0.3739': attribute type 1 has an invalid length. [ 411.997443][T15447] 8021q: adding VLAN 0 to HW filter on device bond3 [ 412.026742][T15451] bond3: (slave geneve2): making interface the new active one [ 412.051265][T15451] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 412.078868][ T460] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.099350][ T460] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.113014][ T460] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.132453][ T460] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.220445][ T30] kauditd_printk_skb: 124 callbacks suppressed [ 412.220462][ T30] audit: type=1326 audit(1764736936.878:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.0.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866c38f749 code=0x7ffc0000 [ 412.253853][ T30] audit: type=1326 audit(1764736936.898:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.0.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f866c38f749 code=0x7ffc0000 [ 412.277894][ T30] audit: type=1326 audit(1764736936.898:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.0.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866c38f749 code=0x7ffc0000 [ 412.305900][ T30] audit: type=1326 audit(1764736936.898:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.0.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f866c38f749 code=0x7ffc0000 [ 412.330188][ T30] audit: type=1326 audit(1764736936.898:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.0.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866c38f749 code=0x7ffc0000 [ 412.358388][ T30] audit: type=1326 audit(1764736936.898:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.0.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f866c38f749 code=0x7ffc0000 [ 412.384371][ T30] audit: type=1326 audit(1764736936.898:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.0.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866c38f749 code=0x7ffc0000 [ 412.437346][ T30] audit: type=1326 audit(1764736936.898:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.0.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866c38f749 code=0x7ffc0000 [ 412.563966][ T57] IPVS: starting estimator thread 0... [ 412.665106][T15474] IPVS: using max 31 ests per chain, 74400 per kthread [ 412.874778][ T57] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 413.034845][ T57] usb 1-1: Using ep0 maxpacket: 32 [ 413.042061][ T57] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 413.051131][ T57] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 413.060019][ T57] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 413.069451][ T57] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 413.079242][ T57] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 413.089135][ T57] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 413.102612][ T57] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 413.111915][ T57] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.122135][ T57] usb 1-1: config 0 descriptor?? [ 413.253514][ T5953] usb 3-1: USB disconnect, device number 54 [ 413.344196][ T57] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 413.364221][T15493] netlink: 'syz.2.3757': attribute type 13 has an invalid length. [ 413.393055][T15493] netlink: 'syz.2.3757': attribute type 17 has an invalid length. [ 413.541628][T15493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.566508][ C0] usblp0: nonzero read bulk status received: -71 [ 413.573507][ T5953] usb 1-1: USB disconnect, device number 46 [ 413.583190][T15493] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.791730][T15476] usblp0: removed [ 413.856242][T15493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 414.294955][ T5953] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 414.472537][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.495022][ T5953] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 414.520621][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.543655][ T5953] usb 5-1: config 0 descriptor?? [ 414.735580][T15517] input: syz1 as /devices/virtual/input/input85 [ 414.932651][T15521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3770'. [ 414.989339][ T5953] keytouch 0003:0926:3333.0043: fixing up Keytouch IEC report descriptor [ 415.033497][ T5953] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0043/input/input86 [ 415.236333][ T5953] keytouch 0003:0926:3333.0043: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 415.880601][ T5953] usb 5-1: USB disconnect, device number 48 [ 416.574782][ T5953] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 416.734822][ T5953] usb 3-1: Using ep0 maxpacket: 16 [ 416.751588][ T5953] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 416.789206][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 416.827195][ T5953] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 416.846774][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.865369][ T5953] usb 3-1: Product: syz [ 416.869576][ T5953] usb 3-1: Manufacturer: syz [ 416.874182][ T5953] usb 3-1: SerialNumber: syz [ 416.912245][ T5953] usb 3-1: config 0 descriptor?? [ 416.931338][ T5953] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 416.951678][ T5953] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 417.125902][ T24] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 417.272602][T15560] input: syz0 as /devices/virtual/input/input87 [ 417.288266][ T24] usb 6-1: config 0 has an invalid interface number: 204 but max is 0 [ 417.296983][ T24] usb 6-1: config 0 has no interface number 0 [ 417.308063][ T24] usb 6-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 417.319225][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.329478][ T24] usb 6-1: Product: syz [ 417.333662][ T24] usb 6-1: Manufacturer: syz [ 417.338718][ T24] usb 6-1: SerialNumber: syz [ 417.350969][ T24] usb 6-1: config 0 descriptor?? [ 417.359250][ T24] ems_usb 6-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 417.376980][ T24] ems_usb 6-1:0.204: probe with driver ems_usb failed with error -22 [ 417.551147][ T5953] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 417.558111][ T5953] em28xx 3-1:0.0: Config register raw data: 0x41 [ 417.602340][T15555] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3781'. [ 417.613134][ T24] usb 6-1: USB disconnect, device number 57 [ 418.012479][T15566] netlink: 'syz.0.3784': attribute type 13 has an invalid length. [ 418.021729][T15566] netlink: 'syz.0.3784': attribute type 17 has an invalid length. [ 418.110586][T15566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.119850][T15566] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.144872][T15566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 418.195317][T15569] bridge_slave_0: left allmulticast mode [ 418.201004][T15569] bridge_slave_0: left promiscuous mode [ 418.226099][T15569] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.259098][T15569] bridge_slave_1: left allmulticast mode [ 418.269264][T15569] bridge_slave_1: left promiscuous mode [ 418.276250][T15569] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.291497][T15569] bond0: (slave bond_slave_0): Releasing backup interface [ 418.311015][T15569] bond0: (slave bond_slave_1): Releasing backup interface [ 418.337618][T15569] team0: Port device team_slave_0 removed [ 418.348151][T15569] team0: Port device team_slave_1 removed [ 418.356062][T15569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.364623][T15569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.373284][T15569] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 419.367515][ T24] usb 3-1: USB disconnect, device number 55 [ 419.387086][ T24] em28xx 3-1:0.0: Disconnecting em28xx [ 419.406885][ T24] em28xx 3-1:0.0: Freeing device [ 419.600095][T15619] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3807'. [ 420.089994][T15631] syz.2.3813 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 421.897803][T15663] bridge_slave_0: left allmulticast mode [ 421.906207][T15663] bridge_slave_0: left promiscuous mode [ 421.912013][T15663] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.978856][T15663] bridge_slave_1: left allmulticast mode [ 421.984547][T15663] bridge_slave_1: left promiscuous mode [ 422.044990][T15663] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.329999][T15663] team0: Port device team_slave_1 removed [ 422.353819][T15663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.401280][T15663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.436701][T15663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.458373][T15663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.560468][T15663] bond0: (slave ip6gretap1): Releasing active interface [ 422.701613][T15691] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 422.804997][ T5892] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 422.957194][ T5892] usb 1-1: config 0 has an invalid interface number: 22 but max is 0 [ 422.974932][ T5892] usb 1-1: config 0 has no interface number 0 [ 422.982168][ T5892] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.998842][ T5892] usb 1-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.010297][ T5892] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 423.019880][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.038707][ T5892] usb 1-1: config 0 descriptor?? [ 423.061185][T15702] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3841'. [ 423.497971][ T5892] elo 0003:04E7:0030.0044: item fetching failed at offset 6/7 [ 423.536044][ T5892] elo 0003:04E7:0030.0044: parse failed [ 423.552357][ T5892] elo 0003:04E7:0030.0044: probe with driver elo failed with error -22 [ 423.707380][ T5892] usb 1-1: USB disconnect, device number 47 [ 424.207527][ T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 424.254983][ T984] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 424.366517][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 424.380393][ T24] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 424.391866][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 424.402369][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 424.415069][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 424.429180][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 424.438809][ T984] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.449320][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 424.457617][ T984] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 424.466917][ T24] usb 5-1: Product: syz [ 424.471090][ T24] usb 5-1: Manufacturer: syz [ 424.475971][ T984] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 424.490218][ T984] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 424.501309][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 424.506958][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 424.512227][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.521599][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 424.529542][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 424.536173][T15732] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 424.546522][ T984] hub 4-1:1.0: bad descriptor, ignoring hub [ 424.552491][ T984] hub 4-1:1.0: probe with driver hub failed with error -5 [ 424.561295][ T984] cdc_wdm 4-1:1.0: skipping garbage [ 424.567596][ T984] cdc_wdm 4-1:1.0: skipping garbage [ 424.574569][ T984] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 424.580654][ T984] cdc_wdm 4-1:1.0: Unknown control protocol [ 424.716322][ C1] wdm_int_callback: 335 callbacks suppressed [ 424.716339][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 424.729097][ C1] wdm_int_callback: 335 callbacks suppressed [ 424.729111][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 424.741716][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 424.748335][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 424.754642][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 424.761248][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 424.767546][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 424.774242][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 424.780518][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 424.787138][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 424.793841][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 424.800469][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 424.807103][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 424.813727][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 424.820200][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 424.826811][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 424.833373][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 424.840012][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 424.846332][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 424.852941][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 424.860560][ T984] usb 5-1: USB disconnect, device number 49 [ 424.866538][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 424.896138][ T10] usb 4-1: USB disconnect, device number 55 [ 425.230235][T15757] bridge_slave_0: left allmulticast mode [ 425.236825][ T984] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 425.244488][T15757] bridge_slave_0: left promiscuous mode [ 425.251644][T15757] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.267184][T15757] bridge_slave_1: left allmulticast mode [ 425.273309][T15757] bridge_slave_1: left promiscuous mode [ 425.280192][T15757] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.312865][T15757] bond0: (slave bond_slave_0): Releasing backup interface [ 425.365621][T15757] bond0: (slave bond_slave_1): Releasing backup interface [ 425.397365][ T984] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.419854][ T984] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 425.448601][ T984] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 425.462480][T15757] team0: Port device team_slave_0 removed [ 425.474631][T15757] team0: Port device team_slave_1 removed [ 425.475983][ T984] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 425.495404][T15757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.523314][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.586363][T15732] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 425.595781][T15757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.596859][ T984] hub 4-1:1.0: bad descriptor, ignoring hub [ 425.647850][T15757] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 425.658245][ T984] hub 4-1:1.0: probe with driver hub failed with error -5 [ 425.695071][ T984] cdc_wdm 4-1:1.0: skipping garbage [ 425.704946][ T984] cdc_wdm 4-1:1.0: skipping garbage [ 425.732240][ T984] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 425.949120][ T5953] usb 4-1: USB disconnect, device number 56 [ 426.112886][T15790] netlink: 'syz.5.3877': attribute type 1 has an invalid length. [ 426.180558][T15790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.227113][T15794] bond1: (slave ip6erspan0): making interface the new active one [ 426.239537][T15794] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 426.322495][T15802] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.492238][T15810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3887'. [ 426.555454][T15811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3886'. [ 426.572377][T15811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3886'. [ 426.789320][T15823] netlink: 'syz.4.3892': attribute type 1 has an invalid length. [ 426.874604][T15823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.882230][T15829] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.982510][ T984] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 427.035287][ T984] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 427.043807][T15831] bond1: (slave gretap1): making interface the new active one [ 427.079012][ T984] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 427.083917][T15831] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 427.097746][ T984] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 427.142630][ T984] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 427.157890][ T984] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 427.184374][ T984] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 427.203134][ T984] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 427.213037][ T984] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 427.220658][ T984] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 427.497874][ T984] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [sy] on syz0 [ 427.747043][T15861] input: syz0 as /devices/virtual/input/input88 [ 428.454758][ T24] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 428.617134][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 428.632481][ T24] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 428.650316][ T24] usb 6-1: config 0 has no interface number 0 [ 428.665028][ T24] usb 6-1: config 0 interface 12 has no altsetting 0 [ 428.678174][ T24] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 428.692255][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.710545][ T24] usb 6-1: Product: syz [ 428.717229][ T24] usb 6-1: Manufacturer: syz [ 428.722006][ T24] usb 6-1: SerialNumber: syz [ 428.730044][ T24] usb 6-1: config 0 descriptor?? [ 429.257006][T15902] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI [ 429.268947][T15902] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 429.277475][T15902] CPU: 0 UID: 0 PID: 15902 Comm: syz.3.3924 Not tainted syzkaller #0 PREEMPT(full) [ 429.286928][T15902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 429.297080][T15902] RIP: 0010:fd_install+0x57/0x3d0 [ 429.302113][T15902] Code: 48 81 c3 48 09 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 67 4f e6 ff 4c 8b 3b 49 8d 5e 40 48 89 d8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 29 03 00 00 8b 1b 89 de 81 e6 00 00 00 01 [ 429.321797][T15902] RSP: 0018:ffffc9000bb0fca0 EFLAGS: 00010202 [ 429.327897][T15902] RAX: 0000000000000008 RBX: 0000000000000041 RCX: 0000000000080000 [ 429.335861][T15902] RDX: ffffc9000cbdc000 RSI: 00000000000000ad RDI: 00000000000000ae [ 429.344010][T15902] RBP: dffffc0000000000 R08: ffff888011341e1b R09: 1ffff110022683c3 [ 429.351986][T15902] R10: dffffc0000000000 R11: ffffed10022683c4 R12: 0000000000000003 [ 429.359953][T15902] R13: 0000000000000003 R14: 0000000000000001 R15: ffff88802634f840 [ 429.367917][T15902] FS: 00007f05d99f66c0(0000) GS:ffff8881260c0000(0000) knlGS:0000000000000000 [ 429.376951][T15902] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 429.383527][T15902] CR2: 00007f05d99f5f98 CR3: 00000000655f6000 CR4: 00000000003526f0 [ 429.391497][T15902] DR0: 00000000ffffa75b DR1: 0000000000000000 DR2: 0000000000000000 [ 429.399468][T15902] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 429.407439][T15902] Call Trace: [ 429.410742][T15902] [ 429.413665][T15902] ? do_mq_open+0x595/0x770 [ 429.418179][T15902] do_mq_open+0x5a0/0x770 [ 429.422509][T15902] ? __pfx_do_mq_open+0x10/0x10 [ 429.427378][T15902] __x64_sys_mq_open+0x16a/0x1c0 [ 429.432323][T15902] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 429.437789][T15902] ? do_syscall_64+0xbe/0xf80 [ 429.442476][T15902] do_syscall_64+0xfa/0xf80 [ 429.446992][T15902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.453054][T15902] ? clear_bhb_loop+0x60/0xb0 [ 429.457823][T15902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.463725][T15902] RIP: 0033:0x7f05db78f749 [ 429.468148][T15902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.487836][T15902] RSP: 002b:00007f05d99f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 429.496255][T15902] RAX: ffffffffffffffda RBX: 00007f05db9e5fa0 RCX: 00007f05db78f749 [ 429.504222][T15902] RDX: 00000000000000b3 RSI: 00000000000008c2 RDI: 0000200000000000 [ 429.512192][T15902] RBP: 00007f05db813f91 R08: 0000000000000000 R09: 0000000000000000 [ 429.520494][T15902] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 429.528557][T15902] R13: 00007f05db9e6038 R14: 00007f05db9e5fa0 R15: 00007f05dbb0fa28 [ 429.536533][T15902] [ 429.539556][T15902] Modules linked in: [ 429.543970][T15902] ---[ end trace 0000000000000000 ]--- [ 429.563869][T15902] RIP: 0010:fd_install+0x57/0x3d0 [ 429.577264][T15902] Code: 48 81 c3 48 09 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 67 4f e6 ff 4c 8b 3b 49 8d 5e 40 48 89 d8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 29 03 00 00 8b 1b 89 de 81 e6 00 00 00 01 [ 429.597104][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.666886][T15902] RSP: 0018:ffffc9000bb0fca0 EFLAGS: 00010202 [ 429.701705][T15902] RAX: 0000000000000008 RBX: 0000000000000041 RCX: 0000000000080000 [ 429.723072][T15902] RDX: ffffc9000cbdc000 RSI: 00000000000000ad RDI: 00000000000000ae [ 429.734858][T15902] RBP: dffffc0000000000 R08: ffff888011341e1b R09: 1ffff110022683c3 [ 429.748051][T15902] R10: dffffc0000000000 R11: ffffed10022683c4 R12: 0000000000000003 [ 429.751773][T15903] delete_channel: no stack [ 429.776871][T15902] R13: 0000000000000003 R14: 0000000000000001 R15: ffff88802634f840 [ 429.808305][T15902] FS: 00007f05d99f66c0(0000) GS:ffff8881260c0000(0000) knlGS:0000000000000000 [ 429.836162][T15902] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 429.864735][T15902] CR2: 00002000005bc030 CR3: 00000000655f6000 CR4: 00000000003526f0 [ 429.872762][T15902] DR0: 00000000ffffa75b DR1: 0000000000000000 DR2: 0000000000000000 [ 429.880812][T15902] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 429.888888][T15902] Kernel panic - not syncing: Fatal exception [ 429.895438][T15902] Kernel Offset: disabled [ 429.899772][T15902] Rebooting in 86400 seconds..