last executing test programs: 6.725911791s ago: executing program 3 (id=2133): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000006800010003001000fdffff7f00000000000000002c0002000100000008000000000000000800000000000000070000000100000040200000000000000b0000001400"], 0x58}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 6.477821319s ago: executing program 3 (id=2136): r0 = fsopen(&(0x7f0000000240)='vfat\x00', 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 5.456770956s ago: executing program 3 (id=2144): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) 4.719189017s ago: executing program 4 (id=2148): r0 = syz_usbip_server_init(0x1) write(r0, &(0x7f0000001d40)="579cf3300b221d5421d08f3f38ccaa7afc2ded78120e0ac9b7825e09ec6703e3766b1c87570b3a4ac315c85ab304e1b85b63777e9b63824510789b81d3f3823c21f0e70b87deab38d50c4b6a4a30e693661a2c8ab786acf1f01b75d296c18cb91dabc12019c925402b0271f9562857e66c8af4258c7ee2fafe4ff214628ead3639d1a220b18edf19e12f90b5329b005985bd0012eeb55d4ebc2cdd822412bd46870cbd0dbb04f84189be4c98300cda969181755875b09ffba2e3bff75087b0740360524b8abfba9532c2460c2cb895b977418dad44aa488634cfdfd705618e191d7f725b1c8867d165d907d8a62ec6ed5ce3d8e09965f1057f999d5fccf98ddb3bc499c1e244749a157b76c993d8a1135e84edf47345a0b699ca0c6a537475d385b83f9d3384d4cd4a79a154803256fd8ffe470d7a93cc2c6590c98fcb594d347080b9f1acf95d6a236b58416845c22eef98a30eb4843621f853c02616307cb98c6d8d6374e140378fa1b1e4519d38259400c9ee5b85904415b5a2287e2188d231fcab97869826e2d1f713b9e8328df2660efe6963c314ffab9d61dbfe46c20452368481c852a50bab9c39448e9a3d13867a441df8b3c3a83a35073a648a02733abdde52f6025721e4c09ebabe52333caf4ef666a7c5c31b0253200559a0f4c9f7329588a6e9d33e078dca972ef3f12e41762f13f127fd3896fa8e0d7801ba1a58e77ba65868bd34ff62d5b154c6f91a71afd6c0629007d7eceb1e763772dc46894b8fc659e38712fd5c11e1493424a02ddf52d946b0b9b14113aeb0f0a460b7cab5acc54565cfb4ce449ad5a4bcad532e701a5f36ba84ba9675fcc635d6ac19cae2c8ae31d2d857f18793f8f2c0aa79e679e6a0727eaaf8baedaa9e4c5580af90b18720fa96cf5459de0f552d5fd9e335a97b47fa08dd365a6d79e7ac6b6eaee24d1a86480ffcea0bf708ab0be5da281e7ec03c0774439626216fcf051a535bbf479a5ee61ef4efaaab2f5d62bc716efe2fe26ad1d9fc5570d6d501486c886c0e526ea7f586dea54a930953a15afa7986f845833d04378f6be40fefaaeb39793aff83ea18e96986f7e392bf1a53984c9cce3ff057f7635f17be592638043bfc7ac4fb617f1c25399a32f74a2fcc2c548817f8d470a269bce2dd331642d74e4220a03b6e61ae811f8a49ec55deb792bd9ba295462a376b4e4e6ba366cf3297e818c832fda4aa5599350c3e909ed6ea0a9db8d73bf4d1887122fef2e66d6894303226171925464cf5725b422ad0a3520fadd8be01b4c6c234e4236edbaf7b934a63ef9a2841577301a1b3afe12d6e995e47865ccf0a7f31f53dcb1d1fdc889e6696ace2341d48acd237d706c16d3d40e85b8836f6e377620aa44dd4ad7fea8ea26ba9c66902f7bcce4d8390be33d55eee7b0dbcd26b09858a43ac6f079a635e4cb00b790dd5e30fe32ca4299d89e8ffc0f37f1c7c9edb92a4bcfe1df74a1cc7d3097a2036f3ae19471fb67818796c41eb4b702aa2264338288dbb3851eb239624861d9f9fbd44e17049ac75620a34058fb84fb32d965ee618191957655798d2eaa41649eeafe76b6bb1231df82dc94c0998ee88948dab824285538376027b1c73552d7e311f7be386ce33e03b1a9209c20f84ff5dcadff88e09210c32cf315a1cc55a9d0467837b91797ef913975ccfc2ba7e4ed1e2c5110a779e7ae4b8d98863410f348da1e2d6237dd0c410e0860285df7c4d54b3c84166c0e1765216ededd09ae2a9308cb3cbbbe9b4a3020c58cdc44be6f0c071e02d163bc66b3c29a184413c969305e267f491814b587aec748c7dcb70488181197935059c742eb7dd43bf078edd039a93ca3c4feb5c7fb3bb8bc502ece5f210f004891ef5b7c18401d8503db9181f2804e883bb960ed9abe59d1d1ccba0dda3f5d44c55589c1f4e44ad408e3b3acc1600e5ddfbacd971b8efe46eb8e407a0e6134783290b4a55fd68c6c6cd934f08b1b3e51c747c9eb2422fcfa58b4e01efd38837c564024a221368d429624bf3600b4bfe83d7f577eaea61eff5bf5aa1c83bd3d2c9fd1ce4c8452f45e78aec7bf37c385f4617b52e19baa2e4261c184b285e2a54f9216fb7317974b634abf696729bffbdb4c2030c47f569fd9aa958e45df64fe8afdf578f527da0a231b3e60e3118e5e2cfcaeaa798abc2ffccc798659d84135c315d9f6b34038bda232aada465c92decb00d0b5de16cf7c69e473d84c17afd9e6f8a2498db69425ef66fc955e8e9ccbe510daeb3eb97e2f0545efa8c8329ae8e2b2f2a9ea83d0a324d2996d976c0b3d900f17ef625074e04a1bfabb8d9a8a9a4a1dc18a3238e7fc3ede8d91afa4eff5b6739a223c3c23f531137f735764be9db72d8adcd8ad6d95356c22aeebe33b4f98172d964555718f88c79157889bff264189c2e5ace82bc4b930c084950b0a73e83ed1a1512919138ddd51281099efe7ae49a9a2c3194d7163a539a4a6ba442b1222d01aad1c48237c6b8aa546052938dc6d5ce36db795086c2f5465d4ce172e0612dd86a27af4c625daf01b8f1f729ef596d45ce6072342640dbfc2506805a36da0221af4bba0510baa07702572d0b94ac92835d74cf59c86080f06d117546b887232d26a5343706aadd5f8ac7c817e3fa1778ebdc8c1c242ceaf2ff6eea1d40107787a58b1dca88fdbd71175a8f39e9de9d66adad034a0d0c2f9caf526d73e6f48d389857df1944c5dacecb2aea5288795cf164a7c59a9091cb4f175e7b336c9709e687797073f67022630792b407014fda0ef9b399055987c8b3e28f8aa4d060c4769f13be672a047814a82f63f72a678e3770127a57580571251b32bc831bef60394d6f60647ca189558a1df4dc0816247724be3a98ab9912ac0b60ac501664bc4db8203c6846451d970f981fb33bdd7e12a0af56f533ec4a2bf534295670060f9c5e8902575a425927258431d5535749b95328c0713abbb136ea9d57eabf56af9ecb53deccf471b9644e64605df597dfb380a445d768b991ec91a2acabe6ade4bf11969f8ce8ebc44f8f8382474f9dafe2bba816f7edb2aa61d6e1887beaf7e9fa481aa5c9e95549b35e2a500be27018251401993d10b48f2fb6b5f6a9a395270fddfb8ab6efee8b57d2400d0a5e9cc2a78fc583a2c02006fbd9c8458d08f3cdd03400019ea61833808d8a382e46ac7968992d93815513de920ff72fbe5f640ab2fb3251ce6990fda69c661c97f6f39c2ec32348b4bb3fcc7713bed2ed5d7aef89cc7bd6322524af8b36ca521168b392171b3bdc88fc534e66e8bf3f5d3728f7932432418fd309ffcb359333a33b0ba13bcef2601992aedda392c9c6e2f88059f48b17aaf738f36605973c30e4b19524e57a44a3648eeab816b02fd641bf237049da30f0a73518bb49de89cc9c0454f3b31f83cbc5cdc4e8ea5610deb82152bf5e2d76ae26b28d2aadb904ec1c287c7b476f18746d2a6945b7c5d3700893069d3fca49389fe7ee131af77fccd9a3bb0e12ec6917aee3d9e08bc6bd5d4d1ad6236732ac8f0b9f7d911e5669012f6ba55a7b7e374b0eaad5b5e2d3fafd1f23d3e511bf7847d8472fe1a9bdf94ab838bb566e5ac1cde25f34df1405179a892fffda24a733973f24dda2d30ac8c5d33d3789e93c66812fbaedd8911ac06e22712c29322adaa3068d7467f7964cb76ac5c66068a69f8a9a95442f1afef1174f929b44efaa2f57ddba1c0367c086a5cef81cf87db2c5b056904a9f7165448d47496de2dd05b7aceaaaab81c8aed0e3121e3e3611f9312524947f43b07e07df3da214f1513c22db250726eb0d6e87e632106b0b1287eee8e8e163c4144a10efac72d81b469a4de468dfe3ce941c263166a072b91ee30f21a15879daa5bca32ab387887a1fa98bf6009aa729700f4905adeacab8df1048a47dbe4adf68ffdee5eb2655a0a29523013463f489130d2306e08f3cf8fa1258b6578cd75f975fb4a3ee4e60cb336ae477bcd0eb8cb2551221f925f1a76ae92bd5575f2ad97c9b5055cec60b08bde93d042748ed6e661b53efb5cfea94c360bd5bf8196b0776eec50a16ced0785b9af86df32a92eacb801b890e432fca0813f3e3121c8694172592740349e8a5c5f989f8d57b40d6d53bb755f5fadc84fe19e23fa93df9126987ee2d1a3b16d25a433bc0f82e934b7843b2ab1a48444fbf449d3b6dd3e5c97ed63469deb3695f972a32e520db47685c517bf5a14197be968a3eb2735398f97fc3f367f08911bc944ed4b756b914c2b82e89402f087b3b9aa37550c3c482917f81ed0227ffa929e656bf6e560ae8f7996decfb0d68a19c0fba09912b9da9ab4ee67d2c99e62d7bc3434bf89e45a0f156162b8e46a95c72b79d82935a96b1765370b3603bcf4859d916783675d4f1492fe59d7fc173208686f5344baffdfdd0426019721288b4fb543ca795a328fa14c570387d43d2243fd21d67dacc280aa7efe21ba4b80d1d53723caa3207f0be5a9edfeb66b13ad2d1e22c7ab9b2c354d1f196aadac622240fafd8bce8cc1da5f0a8b53f58f3e19b7e78f9ced5553c5dad4a6a5b013eb68d33faee9b7af689d64d8a057c0361fbace7125dda88766b7ab9cea0dec33f0e2374c34d37295d1fd560a84fa705862fbf22b6c573f84bd5fdc441c00ec6e343facc78bc7f9a58e9af8f0006672012930bbcb0d43ea750bacffd42a95c986ee583e7375d9f72710f6c3dc77517e3cd0ba04b5ed364ec51172045aefa41df16ce247b1c4293822e02bf21859c76604a0687286a22bbf6f5bfb45a490eca89a51613c31caaf668afa38610dd6666f9024e81af0eadf2ff227a8792737a1326cba39d58a9b79424abb8b4bdfd020414c9aab5873d9d11019232c93af6ee34b92dbc438fba1f31a2019f32baed44855fa9b1b7e76f6d34b50237251bdf6ec05626c359f7197167c2ffe827292e65f369446e819546edd1ae977c1ded731d7a7f4c4aa171e09b55af03b64150f486f5d4bd1b93218ea68de06656313fe8967dc2419d011a65f1856c26df217608f36c290f2793b91115f8ec6e3eb32e66356f45d37cf3a2e6e2ba5f8298232b4ebd9ffdda05a31a72760f13c60908eb01bbdc086ddec83499328bbba665dad974373a70e8910abe1f91935746b0943ea3739e9e60f42f6d7e29911201ddb64dc7350ad8f246b3237e253b2106584fd5f75b9300e02fca44f259a69145c26bdea99f085ad0281654f52b4aefba5d2e072db0623fe312038e9eb6d486d6837bf920946df52d4d43c984ef6be09ffe6f751a06b798e85ead0c231603d8ddfd4cea8c18ec04284b022c14814c34ea0a8f17", 0xec1) 3.823794411s ago: executing program 4 (id=2150): r0 = socket$kcm(0xa, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415", 0x3}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0xc}, {0x0}], 0x3}, 0x200ce0c0) 3.766098187s ago: executing program 4 (id=2151): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = memfd_create(0x0, 0x2) ftruncate(r1, 0xffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fanotify_init(0xf00, 0x0) fcntl$addseals(r1, 0x409, 0x7) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xffffffe0, 0x40003c, 0x7, 0x5, 0x0, 0x400c97}}}}]}, 0x4c}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc814) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 3.187306222s ago: executing program 2 (id=2155): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0xaf}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/106, 0x6a}, {&(0x7f00000018c0)=""/4100, 0x1004}, {&(0x7f0000001680)=""/129, 0x81}, {&(0x7f0000000240)=""/53, 0x35}], 0x4}, 0x27}], 0x3, 0x2000, 0x0) 3.184753424s ago: executing program 2 (id=2156): setpgid(0x0, 0xffffffffffffffff) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x4000, 0x1}, 0x10) unshare(0x22020600) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x9, 0x0, 0x10}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet(r1, &(0x7f00000070c0), 0x0, 0x0) close(0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffffffffffffff, 0x4}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010100008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 3.128178195s ago: executing program 2 (id=2157): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) epoll_create(0x6) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x78, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x8, 0x6}]}, 0x10) 3.068185676s ago: executing program 2 (id=2158): timer_create(0xb, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x0, &(0x7f00000000c0)={{0x77359400}}, &(0x7f0000000100)) 2.988655607s ago: executing program 3 (id=2160): syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 2.953504722s ago: executing program 2 (id=2161): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) clock_adjtime(0x7, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xc0001, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.839349156s ago: executing program 4 (id=2162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)="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", 0x33c}, {&(0x7f0000000b80)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cfffffffffffffffff8955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0768021fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61f48eccfcc29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a6e453a8a28cd5c4b733fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33c0bb3c24fa67c327cde47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f120790934c3b32f2f4777c65b15748267223cbde856fa5a33f12cb1ea51da9ce96881d1aa6d096ed6b23190800000081803a", 0x210}, {&(0x7f0000000dc0)="30419d20437c98b91b9455046f57b5fc090000000000001a7838ddb9000067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d589", 0x4a}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x40) 2.777158048s ago: executing program 4 (id=2164): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f0000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x5}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000001240), 0x0, 0xaa00) read$hiddev(r2, &(0x7f0000001280)=""/8, 0x8) 2.587653655s ago: executing program 1 (id=2165): open(&(0x7f0000000100)='./bus\x00', 0x64842, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1197, &(0x7f0000000040)={0x0, 0x2550, 0xc000, 0x405, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0, 0x47}], 0x2}) 2.571780985s ago: executing program 1 (id=2166): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f0000000040)=[{0x2, 0x8411, 0x0, 0x0}], 0x1}) 1.847886429s ago: executing program 0 (id=2168): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000000)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f00000004c0)={@local, @random="001a00e100", @void, {@mpls_uc={0x8847, {[], @llc={@snap={0x1, 0x1, "8b", "d3d9e4"}}}}}}, 0x0) 1.838605443s ago: executing program 2 (id=2169): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x8900) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(0x0, 0x203, 0x54442) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="91109d000000000095ea7b8312691589"], &(0x7f00000003c0)='syzkaller\x00'}, 0x94) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x8, 0x80, 0x0, 0x2, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x68, 0x0, 0x3, 0x2f, 0x0, @broadcast, @broadcast, {[@noop]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYBLOB="010025bd7000fcdbdf250a000000040001803f5f87855723e91952390a5fbe"], 0x18}, 0x1, 0x0, 0x0, 0x20040011}, 0x40000) sendmsg$inet(r4, 0x0, 0x4008844) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x5c, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xc, 0xfff3}, {0xffff, 0x7}}, [{0x8, 0xb, 0x63a7}, {0x8, 0xb, 0x405fea2e}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xb55}, {0x8, 0xb, 0xffff0000}, {0x8, 0xb, 0xfffff000}]}, 0x5c}}, 0x40000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fed000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) 1.762567692s ago: executing program 0 (id=2170): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) 1.67116332s ago: executing program 0 (id=2171): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 1.616009929s ago: executing program 3 (id=2172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.34908229s ago: executing program 0 (id=2173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_open_procfs(0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x3516, 0x67f, 0x64, 0x0, 0x0) 1.207856016s ago: executing program 3 (id=2174): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f0000000040)=[{0x2, 0x8411, 0x22, &(0x7f00000001c0)="0203204bdcc36cda8907f4863d148f8d7b34f5551c000bce0f6bc6584f11a740a200"}], 0x1}) 618.241717ms ago: executing program 1 (id=2175): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2d, 0x33, @action={{{}, {0x2}, @broadcast}, @sp_mp_confirm={0xf, 0x2, {0x4014, @random=0xf6, {0x1, 0x1, [{0x6, 0x1}]}, @val={0x72, 0x6}, @void}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 528.762221ms ago: executing program 1 (id=2176): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40) 287.175735ms ago: executing program 1 (id=2177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004010}, 0x90) 237.175163ms ago: executing program 0 (id=2178): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r1, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x240000d4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 183.045439ms ago: executing program 1 (id=2179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x463af000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') clock_gettime(0x0, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) 143.895356ms ago: executing program 0 (id=2180): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000007002021420000"], 0x50) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0x0, 0xc45, 0x1}}, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r5, {0x0, 0x9}, {0x0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x202}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) 0s ago: executing program 4 (id=2181): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) kernel console output (not intermixed with test programs): [ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 283.336780][ T5890] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 283.376801][ T29] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 283.388355][ T10] usb 4-1: config 0 has no interfaces? [ 283.397201][ T10] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 283.398393][ T29] usb 5-1: device descriptor read/8, error -71 [ 283.407645][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.429935][ T10] usb 4-1: Product: syz [ 283.438442][ T10] usb 4-1: Manufacturer: syz [ 283.448480][ T10] usb 4-1: SerialNumber: syz [ 283.463567][ T10] usb 4-1: config 0 descriptor?? [ 283.467130][ T5890] usb 2-1: device descriptor read/64, error -71 [ 283.517177][ T29] usb usb5-port1: unable to enumerate USB device [ 283.588418][ T5890] usb usb2-port1: attempt power cycle [ 283.706280][ T29] usb 4-1: USB disconnect, device number 33 [ 283.946898][ T5890] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 283.976761][ T9409] syzkaller0: entered promiscuous mode [ 283.977507][ T5890] usb 2-1: device descriptor read/8, error -71 [ 283.982460][ T9409] syzkaller0: entered allmulticast mode [ 284.230614][ T5890] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 284.278091][ T5890] usb 2-1: device descriptor read/8, error -71 [ 284.387964][ T5890] usb usb2-port1: unable to enumerate USB device [ 284.406188][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 284.423206][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 285.167044][ T9434] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1284'. [ 285.337575][ T30] audit: type=1326 audit(1772813449.140:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 285.385399][ T30] audit: type=1326 audit(1772813449.140:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 285.433744][ T30] audit: type=1326 audit(1772813449.140:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 285.513425][ T30] audit: type=1326 audit(1772813449.140:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 285.550557][ T30] audit: type=1326 audit(1772813449.140:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9435 comm="syz.4.1285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 286.398534][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1288'. [ 286.427275][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1288'. [ 286.793149][ T9455] syz.4.1291 (9455) used obsolete PPPIOCDETACH ioctl [ 286.985513][ T9462] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1295'. [ 288.165843][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 288.165860][ T30] audit: type=1326 audit(1772813451.970:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 288.194686][ T30] audit: type=1326 audit(1772813452.000:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 288.279149][ T30] audit: type=1326 audit(1772813452.030:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 288.301668][ T30] audit: type=1326 audit(1772813452.030:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 288.324143][ T30] audit: type=1326 audit(1772813452.030:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 288.346633][ T30] audit: type=1326 audit(1772813452.030:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 288.376604][ T29] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 288.428655][ T30] audit: type=1326 audit(1772813452.030:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 288.477910][ T30] audit: type=1326 audit(1772813452.030:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 288.556811][ T29] usb 3-1: device descriptor read/64, error -71 [ 288.611854][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1299'. [ 288.630122][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1299'. [ 288.796778][ T29] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 288.936876][ T29] usb 3-1: device descriptor read/64, error -71 [ 289.047076][ T29] usb usb3-port1: attempt power cycle [ 289.072970][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1302'. [ 289.239004][ T9488] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1304'. [ 289.279434][ T9488] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.288011][ T9488] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.396854][ T29] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 289.439837][ T29] usb 3-1: device descriptor read/8, error -71 [ 289.453137][ T9493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1306'. [ 289.709331][ T29] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 289.761543][ T29] usb 3-1: device descriptor read/8, error -71 [ 289.871344][ T1541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.900290][ T29] usb usb3-port1: unable to enumerate USB device [ 290.206992][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 290.248303][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 290.441820][ T30] audit: type=1326 audit(1772813454.250:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.0.1314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 290.468195][ T30] audit: type=1326 audit(1772813454.250:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.0.1314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 290.538979][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1315'. [ 290.656753][ T1541] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 290.810684][ T1541] usb 4-1: Using ep0 maxpacket: 32 [ 290.817880][ T1541] usb 4-1: config 4 has an invalid descriptor of length 49, skipping remainder of the config [ 290.828562][ T1541] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 290.828844][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.850181][ T1541] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 290.870751][ T1541] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.886759][ T1541] usb 4-1: Product: syz [ 290.893930][ T1541] usb 4-1: Manufacturer: syz [ 290.901202][ T1541] usb 4-1: SerialNumber: syz [ 291.478720][ T5890] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 291.746964][ T5890] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 291.755844][ T5890] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 291.769870][ T5890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 291.786587][ T5890] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 291.841184][ T5890] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 291.874308][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.886364][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 291.992769][ T5890] usb 2-1: Product: syz [ 292.016966][ T5890] usb 2-1: Manufacturer: syz [ 292.032347][ T5890] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 292.241052][ T5827] usb 2-1: USB disconnect, device number 29 [ 292.268378][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.335326][ T1541] usb 4-1: USB disconnect, device number 34 [ 292.907102][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.176730][ T1541] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 293.328067][ T1541] usb 3-1: device descriptor read/64, error -71 [ 293.598242][ T1541] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 293.736738][ T1541] usb 3-1: device descriptor read/64, error -71 [ 293.847120][ T1541] usb usb3-port1: attempt power cycle [ 293.946896][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.078053][ T9583] tipc: Cannot configure node identity twice [ 294.206804][ T1541] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 294.257484][ T1541] usb 3-1: device descriptor read/8, error -71 [ 294.496740][ T5827] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 294.504544][ T1541] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 294.526732][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 294.537325][ T1541] usb 3-1: device descriptor read/8, error -71 [ 294.647359][ T1541] usb usb3-port1: unable to enumerate USB device [ 294.666745][ T5827] usb 2-1: Using ep0 maxpacket: 32 [ 294.676103][ T5827] usb 2-1: config 4 has an invalid descriptor of length 49, skipping remainder of the config [ 294.696958][ T5827] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 294.707984][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 294.716605][ T10] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 294.728233][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 294.739676][ T5827] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 294.756732][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.769953][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.778013][ T5827] usb 2-1: Product: syz [ 294.782411][ T5827] usb 2-1: Manufacturer: syz [ 294.788109][ T5827] usb 2-1: SerialNumber: syz [ 294.794382][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 294.803889][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 294.816734][ T10] usb 5-1: Product: syz [ 294.821009][ T10] usb 5-1: Manufacturer: syz [ 294.869979][ T10] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 294.997000][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.078956][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 295.078973][ T30] audit: type=1326 audit(1772813458.880:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.3.1345" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f95f6c code=0x0 [ 295.109382][ T5890] usb 5-1: USB disconnect, device number 45 [ 295.306899][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.768380][ T5827] usb 2-1: USB disconnect, device number 30 [ 296.037237][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.419910][ T9620] binder: 9619:9620 ioctl c018620c 80000000 returned -1 [ 297.055966][ T9629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1357'. [ 297.066911][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.136741][ T5827] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 297.298944][ T5827] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.309463][ T5827] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 297.318902][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 297.327669][ T5827] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 297.337534][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1361'. [ 297.351068][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.363662][ T5827] usb 2-1: config 0 descriptor?? [ 297.399723][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1362'. [ 297.416827][ T1541] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 297.489929][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 297.503555][ T10] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 297.514500][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 297.525470][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 297.540710][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 297.551676][ T1541] usb 5-1: device descriptor read/64, error -71 [ 297.558124][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 297.566153][ T10] usb 3-1: Product: syz [ 297.574533][ T10] usb 3-1: Manufacturer: syz [ 297.579245][ T5890] usb 2-1: USB disconnect, device number 31 [ 297.595137][ T9647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.597028][ T10] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 297.796793][ T1541] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 297.844527][ T5890] usb 3-1: USB disconnect, device number 39 [ 297.939005][ T1541] usb 5-1: device descriptor read/64, error -71 [ 297.999978][ T9656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1368'. [ 298.027624][ T29] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 298.046994][ T1541] usb usb5-port1: attempt power cycle [ 298.106980][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.189044][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.200094][ T29] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 298.209418][ T29] usb 2-1: New USB device found, idVendor=047f, idProduct=3333, bcdDevice= 0.40 [ 298.218964][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.281072][ T29] usb 2-1: config 0 descriptor?? [ 298.347048][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.386759][ T1541] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 298.407331][ T1541] usb 5-1: device descriptor read/8, error -71 [ 298.507559][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.527123][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.667370][ T1541] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 298.700379][ T1541] usb 5-1: device descriptor read/8, error -71 [ 298.807132][ T1541] usb usb5-port1: unable to enumerate USB device [ 298.967325][ T29] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 299.045400][ T9685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.147142][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 299.158593][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.169348][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 299.180867][ T29] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 299.192015][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.208292][ T29] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 299.218493][ T29] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 299.226988][ T29] usb 3-1: Manufacturer: syz [ 299.235071][ T29] usb 3-1: config 0 descriptor?? [ 299.310254][ T9696] netlink: 'syz.3.1385': attribute type 3 has an invalid length. [ 299.586794][ T29] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 299.738389][ T29] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 299.749340][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.760345][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.770359][ T29] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 299.784585][ T29] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 299.794428][ T29] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 299.802708][ T29] usb 4-1: Manufacturer: syz [ 299.809874][ T29] usb 4-1: config 0 descriptor?? [ 300.186929][ T796] net_ratelimit: 9 callbacks suppressed [ 300.186946][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.235015][ T29] hid_parser_main: 5 callbacks suppressed [ 300.235039][ T29] appleir 0003:05AC:8243.0017: unknown main item tag 0x0 [ 300.252371][ T796] usb 2-1: USB disconnect, device number 32 [ 300.289809][ T29] appleir 0003:05AC:8243.0017: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 301.227029][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.388830][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.761170][ T5827] usb 3-1: USB disconnect, device number 40 [ 301.989414][ T9735] syzkaller0: entered promiscuous mode [ 301.995989][ T9735] syzkaller0: entered allmulticast mode [ 302.267444][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.329231][ T1541] usb 4-1: USB disconnect, device number 35 [ 303.067167][ T1541] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 303.228801][ T1541] usb 3-1: unable to get BOS descriptor or descriptor too short [ 303.239256][ T1541] usb 3-1: not running at top speed; connect to a high speed hub [ 303.258366][ T1541] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 303.272760][ T1541] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 303.283797][ T1541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.297367][ T1541] usb 3-1: Product: syz [ 303.303773][ T1541] usb 3-1: Manufacturer: syz [ 303.308957][ T1541] usb 3-1: SerialNumber: syz [ 303.311762][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.317450][ T9752] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 303.576371][ T1541] cdc_ncm 3-1:1.0: bind() failure [ 303.589231][ T1541] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 303.596945][ T1541] cdc_ncm 3-1:1.1: bind() failure [ 303.612673][ T1541] usb 3-1: USB disconnect, device number 41 [ 304.351105][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.429026][ T1541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.512026][ T9771] netlink: 'syz.2.1411': attribute type 10 has an invalid length. [ 304.887028][ T9776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1413'. [ 305.391902][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.492138][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.845859][ T9811] syzkaller0: entered promiscuous mode [ 306.857306][ T9811] syzkaller0: entered allmulticast mode [ 307.453043][ T9833] netlink: 'syz.1.1432': attribute type 10 has an invalid length. [ 307.468300][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.551638][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.112155][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.306820][ T5827] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 308.326767][ T1541] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 308.469217][ T5827] usb 5-1: Using ep0 maxpacket: 16 [ 308.476605][ T5827] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.488514][ T5827] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.498818][ T5827] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 308.512259][ T1541] usb 3-1: Using ep0 maxpacket: 16 [ 308.519251][ T5827] usb 5-1: config 0 interface 0 has no altsetting 0 [ 308.526115][ T5827] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 308.535663][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.547742][ T5827] usb 5-1: config 0 descriptor?? [ 308.553300][ T1541] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 308.562045][ T1541] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.576082][ T1541] usb 3-1: config 0 has no interface number 0 [ 308.585040][ T1541] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 308.594546][ T1541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.595055][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.602700][ T1541] usb 3-1: Product: syz [ 308.615134][ T1541] usb 3-1: Manufacturer: syz [ 308.620194][ T1541] usb 3-1: SerialNumber: syz [ 308.629715][ T1541] usb 3-1: config 0 descriptor?? [ 308.649203][ T1541] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 308.656750][ T1541] uvcvideo 3-1:0.105: No valid video chain found. [ 308.757133][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.965149][ T5914] usb 3-1: USB disconnect, device number 42 [ 308.994496][ T5827] hid (null): unknown global tag 0xc [ 309.033640][ T5827] hid (null): unknown global tag 0xc [ 309.046718][ T5827] hid (null): invalid report_size 406278760 [ 309.196857][ T796] usb 5-1: USB disconnect, device number 50 [ 309.633656][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.438968][ T9877] syzkaller0: entered promiscuous mode [ 310.464661][ T9877] syzkaller0: entered allmulticast mode [ 310.508164][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.639209][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.657782][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.678330][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.686450][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.694586][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.702703][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.738215][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.758731][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.777245][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.030191][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1465'. [ 312.048513][ T9915] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1465'. [ 312.064025][ T9915] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1465'. [ 312.395737][ T30] audit: type=1326 audit(1772813476.200:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.4.1467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 312.450064][ T30] audit: type=1326 audit(1772813476.200:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.4.1467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 312.490779][ T30] audit: type=1326 audit(1772813476.200:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.4.1467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 312.517898][ T30] audit: type=1326 audit(1772813476.200:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.4.1467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 312.563083][ T30] audit: type=1326 audit(1772813476.200:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.4.1467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 315.053565][ T30] audit: type=1326 audit(1772813478.860:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9959 comm="syz.1.1483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 315.084849][ T30] audit: type=1326 audit(1772813478.860:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9959 comm="syz.1.1483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 315.107703][ T30] audit: type=1326 audit(1772813478.890:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9959 comm="syz.1.1483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 315.147386][ T30] audit: type=1326 audit(1772813478.890:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9959 comm="syz.1.1483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 315.185735][ T30] audit: type=1326 audit(1772813478.890:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9959 comm="syz.1.1483" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 315.916828][ T796] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 315.951866][ T5897] net_ratelimit: 248 callbacks suppressed [ 315.951885][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.065025][ T9986] syzkaller0: entered promiscuous mode [ 316.066811][ T796] usb 4-1: Using ep0 maxpacket: 32 [ 316.075009][ T9986] syzkaller0: entered allmulticast mode [ 316.088555][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.099831][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.133312][ T796] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 316.157230][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.261384][ T796] usb 4-1: config 0 descriptor?? [ 316.297681][ T796] hub 4-1:0.0: USB hub found [ 316.479690][ T796] hub 4-1:0.0: 1 port detected [ 316.587163][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.758875][T10000] usb usb8: usbfs: process 10000 (syz.2.1499) did not claim interface 0 before use [ 316.901601][ T796] usb 4-1: USB disconnect, device number 36 [ 316.993354][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.079360][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.085725][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.723786][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.958961][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 317.958981][ T30] audit: type=1326 audit(1772813481.750:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95f6c code=0x7ffc0000 [ 318.041813][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.042113][ T30] audit: type=1326 audit(1772813481.750:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95f6c code=0x7ffc0000 [ 318.101361][ T30] audit: type=1326 audit(1772813481.750:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f95f6c code=0x7ffc0000 [ 318.133226][ T30] audit: type=1326 audit(1772813481.750:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95f6c code=0x7ffc0000 [ 318.173435][ T30] audit: type=1326 audit(1772813481.750:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10012 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f95f6c code=0x7ffc0000 [ 318.351026][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.071985][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.627422][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.644669][T10051] syzkaller0: entered promiscuous mode [ 319.650317][T10051] syzkaller0: entered allmulticast mode [ 320.112489][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.516710][ T5827] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 320.735375][ T5827] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 320.755209][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.789100][ T5827] usb 2-1: config 0 descriptor?? [ 321.155339][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.198131][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.408585][ T5827] usb 2-1: string descriptor 0 read error: -71 [ 322.421275][ T5827] usb 2-1: USB disconnect, device number 33 [ 322.665942][T10072] syzkaller1: entered promiscuous mode [ 322.677022][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.694179][T10072] syzkaller1: entered allmulticast mode [ 323.186729][ T5827] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 323.186823][ T796] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 323.230123][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.367323][ T796] usb 3-1: Using ep0 maxpacket: 32 [ 323.373987][ T796] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 323.384720][ T796] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 323.386909][ T5827] usb 5-1: Using ep0 maxpacket: 32 [ 323.401491][ T796] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 323.410983][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.419433][ T796] usb 3-1: Product: syz [ 323.422794][ T5827] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.423863][ T796] usb 3-1: Manufacturer: syz [ 323.439318][ T796] usb 3-1: SerialNumber: syz [ 323.443481][ T5827] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.477460][ T5827] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 323.486711][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 323.502674][ T5827] usb 5-1: Product: syz [ 323.510860][ T5827] usb 5-1: Manufacturer: syz [ 323.517682][ T5827] usb 5-1: SerialNumber: syz [ 323.528054][ T5827] usb 5-1: config 0 descriptor?? [ 323.657453][ T796] cdc_ncm 3-1:1.0: bind() failure [ 323.675357][ T796] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 323.679807][T10110] syzkaller0: entered promiscuous mode [ 323.688031][ T796] cdc_ncm 3-1:1.1: bind() failure [ 323.696352][T10110] syzkaller0: entered allmulticast mode [ 323.705275][ T796] usb 3-1: USB disconnect, device number 43 [ 323.755600][ T5827] usb 5-1: USB disconnect, device number 51 [ 324.277976][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.566900][ T5897] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 324.756789][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 324.768538][ T5897] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 324.801500][ T5897] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 324.818123][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.826586][ T5897] usb 5-1: Product: syz [ 324.838251][ T5897] usb 5-1: Manufacturer: syz [ 324.842970][ T5897] usb 5-1: SerialNumber: syz [ 324.864858][ T5897] r8152-cfgselector 5-1: Unknown version 0x0000 [ 324.873556][ T5897] r8152-cfgselector 5-1: config 0 descriptor?? [ 325.099208][ T5897] r8152-cfgselector 5-1: Needed 2 retries to read version [ 325.306080][ T5897] r8152-cfgselector 5-1: USB disconnect, device number 52 [ 325.347574][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.708324][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.432025][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.440391][ T29] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 326.597192][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 326.604363][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 326.676759][ T29] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 326.686080][ T29] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 326.694462][ T29] usb 5-1: Product: syz [ 326.705524][ T29] usb 5-1: Manufacturer: syz [ 326.724820][ T29] usb 5-1: SerialNumber: syz [ 326.794523][ T29] usb 5-1: config 0 descriptor?? [ 327.029357][ T1541] usb 5-1: USB disconnect, device number 53 [ 327.357942][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.376326][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.404315][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'. [ 327.426801][ T1541] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 327.721229][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.758447][ T1541] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.780869][ T1541] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.838814][ T1541] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 327.856726][ T1541] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 327.865006][ T1541] usb 3-1: SerialNumber: syz [ 328.102749][ T1541] usb 3-1: 0:2 : does not exist [ 328.225420][ T1541] usb 3-1: USB disconnect, device number 44 [ 328.291411][ T8302] udevd[8302]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.747073][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.757119][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.866725][ T1541] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 328.916795][ T5914] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 329.037543][ T1541] usb 4-1: Using ep0 maxpacket: 32 [ 329.048476][ T1541] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 329.071140][ T1541] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 329.080476][ T1541] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 329.088782][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 329.098311][ T1541] usb 4-1: Product: syz [ 329.105370][ T5914] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.120676][ T1541] usb 4-1: Manufacturer: syz [ 329.127673][ T1541] usb 4-1: SerialNumber: syz [ 329.132735][ T5914] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.155318][ T1541] usb 4-1: config 0 descriptor?? [ 329.165832][ T5914] usb 2-1: config 0 interface 0 has no altsetting 0 [ 329.173054][ T5914] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 329.191405][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.213077][ T5914] usb 2-1: config 0 descriptor?? [ 329.394885][ T1541] usb 4-1: USB disconnect, device number 37 [ 329.635586][ T5914] hid (null): unknown global tag 0xd [ 329.674738][ T5914] hid (null): invalid report_size 29797 [ 329.789987][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.893866][ T5914] usb 2-1: USB disconnect, device number 34 [ 330.679330][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1577'. [ 330.832092][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.339355][ T30] audit: type=1326 audit(1772813495.140:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 331.426181][ T30] audit: type=1326 audit(1772813495.140:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 331.490630][ T30] audit: type=1326 audit(1772813495.140:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 331.566222][ T30] audit: type=1326 audit(1772813495.140:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 331.669653][ T30] audit: type=1326 audit(1772813495.140:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 331.732286][ T30] audit: type=1326 audit(1772813495.140:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10238 comm="syz.2.1588" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 331.790666][ T1541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.871914][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.983108][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.266665][T10277] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 333.273308][T10277] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 333.279620][T10277] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 333.313041][T10277] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 333.319896][T10277] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 333.787996][ T30] audit: type=1326 audit(1772813497.570:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10291 comm="syz.0.1606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 333.889395][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1602'. [ 334.228042][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.242479][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.258384][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.260554][ T30] audit: type=1326 audit(1772813497.580:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10291 comm="syz.0.1606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 334.382347][ T30] audit: type=1326 audit(1772813497.580:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10291 comm="syz.0.1606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 334.426697][ T30] audit: type=1326 audit(1772813497.580:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10291 comm="syz.0.1606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 334.827178][ T7722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.835956][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.844761][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.066751][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 335.312026][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.390468][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 335.396620][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 335.402786][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 335.408943][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 336.610253][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1626'. [ 336.908358][ T7728] net_ratelimit: 1 callbacks suppressed [ 336.908371][ T7728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.922760][ T1541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.955420][ T1541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.411973][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.867867][ T1541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.097454][ T5890] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 338.186946][ T5897] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 338.246705][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 338.253437][ T5890] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 338.262332][ T5890] usb 5-1: config 0 has no interface number 0 [ 338.268606][ T5890] usb 5-1: too many endpoints for config 0 interface 48 altsetting 87: 91, using maximum allowed: 30 [ 338.279862][ T5890] usb 5-1: config 0 interface 48 altsetting 87 has 0 endpoint descriptors, different from the interface descriptor's value: 91 [ 338.293357][ T5890] usb 5-1: config 0 interface 48 has no altsetting 0 [ 338.302148][ T5890] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 338.313458][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.322084][ T5890] usb 5-1: Product: syz [ 338.326308][ T5890] usb 5-1: Manufacturer: syz [ 338.331011][ T5890] usb 5-1: SerialNumber: syz [ 338.336720][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 338.344263][ T5890] usb 5-1: config 0 descriptor?? [ 338.349916][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 338.361345][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 338.373316][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 338.385550][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 338.397613][ T5897] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 338.407166][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.415178][ T5897] usb 4-1: Product: syz [ 338.420754][ T5897] usb 4-1: Manufacturer: syz [ 338.425394][ T5897] usb 4-1: SerialNumber: syz [ 338.430358][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.444650][ T5897] usb 4-1: config 0 descriptor?? [ 338.454462][ T5897] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16 [ 338.598194][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 338.607675][ T5890] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 338.614478][ T5890] gspca_ov534_9: reg_w failed -71 [ 338.662453][ T1541] usb 4-1: USB disconnect, device number 38 [ 339.016814][ T5890] gspca_ov534_9: Unknown sensor 0000 [ 339.016916][ T5890] ov534_9 5-1:0.48: probe with driver ov534_9 failed with error -22 [ 339.168796][ T5890] usb 5-1: USB disconnect, device number 54 [ 339.472889][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.829090][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 339.829108][ T30] audit: type=1326 audit(1772813503.640:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10422 comm="syz.4.1654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 339.916493][ T30] audit: type=1326 audit(1772813503.640:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10422 comm="syz.4.1654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 339.969213][ T30] audit: type=1326 audit(1772813503.680:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10422 comm="syz.4.1654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 340.014587][ T30] audit: type=1326 audit(1772813503.680:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10422 comm="syz.4.1654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 340.066702][ T30] audit: type=1326 audit(1772813503.680:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10422 comm="syz.4.1654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 340.089689][ T30] audit: type=1326 audit(1772813503.680:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10422 comm="syz.4.1654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 340.112162][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.122589][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.136833][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.146293][ T30] audit: type=1326 audit(1772813503.680:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10422 comm="syz.4.1654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 340.168842][ T30] audit: type=1326 audit(1772813503.680:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10422 comm="syz.4.1654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 340.349631][ T30] audit: type=1326 audit(1772813503.680:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10422 comm="syz.4.1654" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 340.646877][ T10] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 340.809260][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 4 [ 340.822861][ T10] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 340.833553][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.853763][ T10] usb 2-1: Product: syz [ 340.862021][ T10] usb 2-1: Manufacturer: syz [ 340.876985][ T10] usb 2-1: SerialNumber: syz [ 341.026771][ T5890] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 341.170388][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 341.199244][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 341.226255][ T10] usb 2-1: USB disconnect, device number 35 [ 341.243283][ T5890] usb 4-1: config 0 has no interfaces? [ 341.265226][ T5890] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 341.308704][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.366048][ T5890] usb 4-1: config 0 descriptor?? [ 341.386927][ T1541] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 341.551779][ T1541] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 341.561068][ T1541] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.575344][ T1541] usb 5-1: Product: syz [ 341.579911][ T1541] usb 5-1: Manufacturer: syz [ 341.626755][ T1541] usb 5-1: SerialNumber: syz [ 341.642330][ T1541] usb 5-1: config 0 descriptor?? [ 341.726749][ T10] usb 4-1: USB disconnect, device number 39 [ 341.740222][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1664'. [ 341.789448][ T1541] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 342.226919][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 342.392920][ T1541] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 342.404045][ T1541] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 342.412917][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 342.443739][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 342.454476][ T1541] usb 5-1: USB disconnect, device number 55 [ 342.470885][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.499965][ T10] usb 2-1: config 0 descriptor?? [ 342.519494][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 342.672301][ T7722] net_ratelimit: 3 callbacks suppressed [ 342.672320][ T7722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.686081][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.694200][ T1541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.706816][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.740845][ T5914] usb 2-1: USB disconnect, device number 36 [ 342.806419][T10466] syzkaller0: entered promiscuous mode [ 342.816975][T10466] syzkaller0: entered allmulticast mode [ 343.146846][ T1541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.216941][ T5914] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 343.488776][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 343.506713][ T5914] usb 2-1: New USB device found, idVendor=047f, idProduct=3333, bcdDevice= 0.40 [ 343.535347][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.579502][ T5914] usb 2-1: config 0 descriptor?? [ 343.601257][ T5914] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 343.743135][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.656188][T10488] vivid-002: disconnect [ 344.761532][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.796897][T10487] vivid-002: reconnect [ 344.967171][T10503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1684'. [ 345.077718][T10505] syzkaller0: entered promiscuous mode [ 345.083454][T10505] syzkaller0: entered allmulticast mode [ 345.526112][ T1541] usb 2-1: USB disconnect, device number 37 [ 345.538457][ T5914] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 345.726697][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 345.734166][ T5914] usb 4-1: unable to get BOS descriptor or descriptor too short [ 345.744673][ T5914] usb 4-1: config 4 has too many interfaces: 231, using maximum allowed: 32 [ 345.757279][ T5914] usb 4-1: config 4 has 1 interface, different from the descriptor's value: 231 [ 345.766356][ T5914] usb 4-1: config 4 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.779696][ T5914] usb 4-1: config 4 interface 0 has no altsetting 0 [ 345.792766][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.804266][ T5914] usb 4-1: string descriptor 0 read error: -22 [ 345.811181][ T5914] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 345.820437][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.841410][ T5914] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 345.873024][ T5914] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 345.892771][ T5914] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 345.901323][ T5914] usb 4-1: media controller created [ 345.920202][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 346.186966][ T1541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.832846][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.998512][T10509] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 347.005513][ T5914] zl10353_read_register: readreg error (reg=127, ret==0) [ 347.307659][ T5914] usb 4-1: USB disconnect, device number 40 [ 347.515441][T10538] vivid-003: disconnect [ 347.789979][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.799221][ T1541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.814350][T10534] vivid-003: reconnect [ 347.831050][T10544] netlink: 'syz.4.1697': attribute type 1 has an invalid length. [ 347.871951][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.884569][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.897398][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.906103][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.999862][T10544] bond1: entered promiscuous mode [ 348.005283][T10544] 8021q: adding VLAN 0 to HW filter on device bond1 [ 348.028417][T10547] syzkaller0: entered promiscuous mode [ 348.034002][T10547] syzkaller0: entered allmulticast mode [ 348.066713][ T30] audit: type=1326 audit(1772813511.870:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.1.1699" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 348.116939][T10548] bond1: (slave bridge0): making interface the new active one [ 348.139370][ T30] audit: type=1326 audit(1772813511.870:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.1.1699" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 348.139978][T10548] bridge0: entered promiscuous mode [ 348.167514][ T5890] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 348.179748][T10548] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 348.226727][ T30] audit: type=1326 audit(1772813511.900:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.1.1699" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 348.553988][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 348.581648][ T5890] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 348.596723][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.615363][ T5890] usb 4-1: config 0 descriptor?? [ 348.631194][ T5890] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 348.832931][ T5890] usb 4-1: USB disconnect, device number 41 [ 348.913186][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.976771][ T5897] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 349.136761][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 349.145035][ T5897] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 349.155219][ T5897] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.209739][ T5897] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.219787][ T5897] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 349.230878][ T5897] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.244305][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.261172][ T5897] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 349.436389][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.447050][ T1541] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 349.459581][ T5897] usbtmc 3-1:16.0: bulk endpoints not found [ 349.540540][ T29] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 349.607872][ T1541] usb 2-1: Using ep0 maxpacket: 32 [ 349.620721][ T1541] usb 2-1: unable to get BOS descriptor or descriptor too short [ 349.697296][ T1541] usb 2-1: config 0 has no interfaces? [ 349.705468][ T1541] usb 2-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 349.720946][ T1541] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.749574][ T1541] usb 2-1: Product: syz [ 349.753928][ T1541] usb 2-1: Manufacturer: syz [ 349.759032][ T1541] usb 2-1: SerialNumber: syz [ 349.778190][ T1541] usb 2-1: config 0 descriptor?? [ 349.828332][ T29] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 349.863742][ T29] usb 4-1: New USB device found, idVendor=047f, idProduct=3333, bcdDevice= 0.40 [ 349.894571][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.967021][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.025258][ T5897] usb 2-1: USB disconnect, device number 38 [ 350.045638][ T29] usb 4-1: config 0 descriptor?? [ 350.062876][ T29] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 350.373442][T10582] vivid-004: disconnect [ 350.729736][T10580] vivid-004: reconnect [ 350.810164][T10588] ALSA: seq fatal error: cannot create timer (-22) [ 350.993038][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.745041][ T5914] usb 3-1: USB disconnect, device number 45 [ 352.101860][ T29] usb 4-1: USB disconnect, device number 42 [ 352.462803][T10619] vivid-002: disconnect [ 352.513744][T10616] vivid-002: reconnect [ 352.515492][T10623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1725'. [ 352.737482][T10626] binder: 10621:10626 ioctl ae41 0 returned -22 [ 352.995909][T10632] net_ratelimit: 2 callbacks suppressed [ 352.995937][T10632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.017993][T10632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.027156][T10632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.147485][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.191964][T10632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.210516][T10632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.258079][T10633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.278804][T10632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.287447][T10632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.306755][T10632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.516807][ T1541] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 354.681892][ T1541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.699940][ T1541] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 354.710343][ T1541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.729537][ T1541] usb 2-1: config 0 descriptor?? [ 354.741644][ T1541] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 354.956774][ T5914] usb 2-1: USB disconnect, device number 39 [ 355.124680][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1743'. [ 355.310350][ T5897] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 355.478709][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.500724][ T5897] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 355.510395][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.534675][ T5897] usb 4-1: config 0 descriptor?? [ 355.583136][ T5897] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 355.673798][T10682] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 355.705783][T10682] kvm: pic: single mode not supported [ 355.706937][ T5914] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 355.720568][T10682] kvm: pic: non byte read [ 355.725722][T10682] kvm: pic: single mode not supported [ 355.725891][T10682] kvm: pic: level sensitive irq not supported [ 355.732085][T10682] kvm: pic: non byte read [ 355.743800][T10682] kvm: pic: non byte read [ 355.749599][T10682] kvm: pic: single mode not supported [ 355.749646][T10682] kvm: pic: non byte read [ 355.822612][ T5897] usb 4-1: USB disconnect, device number 43 [ 355.898275][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.916607][ T5914] usb 2-1: New USB device found, idVendor=047f, idProduct=3333, bcdDevice= 0.40 [ 355.956751][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.985585][ T5914] usb 2-1: config 0 descriptor?? [ 356.008944][ T5914] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 356.227459][T10691] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 356.244036][T10691] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 356.308164][T10691] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 357.546605][T10719] fuse: Bad value for 'group_id' [ 357.553705][T10719] fuse: Bad value for 'group_id' [ 357.973966][ T29] usb 2-1: USB disconnect, device number 40 [ 358.286811][ T5832] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 358.348182][ T5827] net_ratelimit: 9 callbacks suppressed [ 358.348202][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.434587][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.500696][ T30] audit: type=1326 audit(1772813522.310:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95f6c code=0x7ffc0000 [ 358.574626][ T30] audit: type=1326 audit(1772813522.310:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95f6c code=0x7ffc0000 [ 358.626730][ T30] audit: type=1326 audit(1772813522.330:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95f6c code=0x7ffc0000 [ 358.660300][ T30] audit: type=1326 audit(1772813522.330:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f95f6c code=0x7ffc0000 [ 358.686585][ T30] audit: type=1326 audit(1772813522.330:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95f6c code=0x7ffc0000 [ 358.710006][ T30] audit: type=1326 audit(1772813522.330:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95f6c code=0x7ffc0000 [ 358.758378][ T30] audit: type=1326 audit(1772813522.330:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f95f6c code=0x7ffc0000 [ 359.083811][ T30] audit: type=1326 audit(1772813522.890:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95f6c code=0x7ffc0000 [ 359.095926][ T29] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 359.176719][ T30] audit: type=1326 audit(1772813522.890:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95f6c code=0x7ffc0000 [ 359.312262][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 359.331491][ T29] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 359.347944][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.366221][ T29] usb 5-1: Product: syz [ 359.371274][ T29] usb 5-1: Manufacturer: syz [ 359.375894][ T29] usb 5-1: SerialNumber: syz [ 359.404122][ T29] usb 5-1: config 0 descriptor?? [ 359.472921][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.588015][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'. [ 359.830080][T10755] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 359.878826][T10755] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 359.887454][T10755] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 359.905906][ T29] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 360.009623][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 360.098861][ T29] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 360.128459][ T29] usb 5-1: media controller created [ 360.224915][T10761] netlink: 'syz.1.1770': attribute type 4 has an invalid length. [ 360.232943][T10761] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1770'. [ 360.610096][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.625064][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.689922][ T29] zl10353_read_register: readreg error (reg=127, ret==0) [ 360.710764][ T29] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 360.730216][ T29] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 360.783238][ T29] usb 5-1: USB disconnect, device number 56 [ 360.826188][ T29] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 361.395574][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.627199][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.667084][ T5827] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 361.784758][T10779] netlink: 'syz.3.1777': attribute type 8 has an invalid length. [ 361.794264][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1777'. [ 361.809902][T10779] bond0: entered promiscuous mode [ 361.815028][T10779] bond_slave_0: entered promiscuous mode [ 361.821087][T10779] bond_slave_1: entered promiscuous mode [ 361.827127][T10779] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 361.835771][T10779] gretap0: entered promiscuous mode [ 361.843585][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.844071][T10779] erspan0: entered promiscuous mode [ 361.856926][ T5827] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 361.860304][T10779] hsr1: entered promiscuous mode [ 361.869970][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.897419][ T5827] usb 3-1: config 0 descriptor?? [ 361.911707][ T5827] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 361.970770][T10781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.981193][T10781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.990713][T10781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.002339][T10781] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 362.006980][ T5914] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 362.147711][ T5827] usb 3-1: USB disconnect, device number 46 [ 362.218936][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 362.228128][ T30] audit: type=1326 audit(1772813526.010:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.3.1781" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95f6c code=0x7ffc0000 [ 362.265618][ T5914] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 362.290321][ T5914] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 362.399680][ T5914] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 362.422741][T10791] loop4: detected capacity change from 0 to 7 [ 362.432804][T10791] Dev loop4: unable to read RDB block 7 [ 362.440441][T10791] loop4: AHDI p1 p2 p3 [ 362.444648][T10791] loop4: partition table partially beyond EOD, truncated [ 362.454569][T10791] loop4: p1 start 1601398130 is beyond EOD, truncated [ 362.462134][T10791] loop4: p2 start 1702059890 is beyond EOD, [ 362.462200][ T5914] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 362.462222][T10791] truncated [ 362.476705][ T5914] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.575990][ T5914] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 362.593204][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.622204][ T5914] usbtmc 5-1:16.0: bulk endpoints not found [ 362.628241][ T5827] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 362.790231][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.800209][ T5827] usb 3-1: New USB device found, idVendor=047f, idProduct=3333, bcdDevice= 0.40 [ 362.815045][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.914270][ T5827] usb 3-1: config 0 descriptor?? [ 362.939329][ T5827] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 364.031000][ T5827] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 364.208406][ T5827] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 364.224938][ T5827] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 364.260604][ T5827] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 364.275255][ T5827] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 364.303639][ T5827] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 364.329487][ T5827] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 364.339150][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 364.348595][ T5827] usb 4-1: Product: syz [ 364.355124][ T5827] usb 4-1: Manufacturer: syz [ 364.373765][ T5827] cdc_wdm 4-1:1.0: skipping garbage [ 364.387135][ T5827] cdc_wdm 4-1:1.0: skipping garbage [ 364.397556][ T5827] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 364.403719][ T5827] cdc_wdm 4-1:1.0: Unknown control protocol [ 364.585843][T10821] syzkaller0: entered promiscuous mode [ 364.593100][T10821] syzkaller0: entered allmulticast mode [ 364.686441][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 364.693054][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 364.700843][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 364.707443][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 364.714423][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 364.721063][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 364.727650][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 364.734271][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 364.740730][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 364.742430][ T5827] usb 5-1: USB disconnect, device number 57 [ 364.747427][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 364.747911][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 364.765991][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 364.779848][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 364.786470][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 364.792836][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 364.799448][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 364.806024][ T29] usb 4-1: USB disconnect, device number 44 [ 364.812050][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 364.812073][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 364.812087][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 364.927298][ T5897] usb 3-1: USB disconnect, device number 47 [ 366.870581][ T1541] IPVS: starting estimator thread 0... [ 366.967708][T10866] IPVS: using max 30 ests per chain, 72000 per kthread [ 366.997414][ T5827] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 367.032163][ T1541] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 367.046806][ T5897] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 367.146696][ T5827] usb 3-1: Using ep0 maxpacket: 32 [ 367.153921][ T5827] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 367.182193][ T5827] usb 3-1: config 0 has no interface number 0 [ 367.199629][ T1541] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.286784][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 367.306944][ T5897] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 367.312522][T10872] vivid-004: disconnect [ 367.315333][ T5897] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 367.329812][ T5897] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 367.339927][ T5897] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 367.340392][ T5827] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 367.366222][T10871] vivid-004: reconnect [ 367.370336][ T1541] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 367.370364][ T1541] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.392100][ T5897] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 367.409172][ T5897] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 367.410481][ T1541] usb 4-1: config 0 descriptor?? [ 367.445031][ T5827] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 367.447084][ T5897] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 367.454527][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.476735][ T1541] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 367.558791][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.631940][ T5897] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 367.657315][T10880] bridge0: port 1(syz_tun) entered blocking state [ 367.688561][ T1541] usb 4-1: USB disconnect, device number 45 [ 367.719572][T10880] bridge0: port 1(syz_tun) entered disabled state [ 367.730374][ T5827] usb 3-1: Product: syz [ 367.734616][ T5827] usb 3-1: Manufacturer: syz [ 367.780033][T10880] syz_tun: entered allmulticast mode [ 367.789823][ T5827] usb 3-1: SerialNumber: syz [ 367.803594][ T5827] usb 3-1: config 0 descriptor?? [ 367.809143][T10880] syz_tun: entered promiscuous mode [ 367.822131][ T5827] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 367.845705][ T5827] em28xx 3-1:0.132: Video interface 132 found: [ 368.267301][ T1541] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 368.331839][ T5827] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 368.411997][ T5827] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 368.435374][ T1541] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.496802][ T5827] em28xx 3-1:0.132: board has no eeprom [ 368.502808][ T1541] usb 4-1: New USB device found, idVendor=047f, idProduct=3333, bcdDevice= 0.40 [ 368.512466][ T1541] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.525335][ T1541] usb 4-1: config 0 descriptor?? [ 368.541617][ T1541] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 368.567843][ T5827] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 368.578465][ T5827] em28xx 3-1:0.132: analog set to bulk mode. [ 368.592620][ T1541] em28xx 3-1:0.132: Registering V4L2 extension [ 368.631239][ T5827] usb 3-1: USB disconnect, device number 48 [ 368.675948][ T5827] em28xx 3-1:0.132: Disconnecting em28xx [ 368.883115][ T1541] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 368.900766][ T1541] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 368.943803][ T1541] em28xx 3-1:0.132: No AC97 audio processor [ 368.974338][ T1541] usb 3-1: Decoder not found [ 369.005122][ T1541] em28xx 3-1:0.132: failed to create media graph [ 369.052743][ T1541] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 369.180198][ T1541] em28xx 3-1:0.132: Remote control support is not available for this card. [ 369.203843][ T5827] em28xx 3-1:0.132: Closing input extension [ 369.260370][ T5827] em28xx 3-1:0.132: Freeing device [ 369.550251][T10911] vivid-001: disconnect [ 369.608196][T10907] vivid-001: reconnect [ 369.806897][ T5897] usb 2-1: USB disconnect, device number 41 [ 369.820348][T10917] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 369.854213][T10917] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 369.886502][T10917] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 370.383930][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1832'. [ 370.426872][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 370.426891][ T30] audit: type=1326 audit(1772813534.190:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.2.1832" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 370.514614][ T5897] usb 4-1: USB disconnect, device number 46 [ 370.531229][ T30] audit: type=1326 audit(1772813534.190:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.2.1832" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 370.619678][ T30] audit: type=1326 audit(1772813534.190:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.2.1832" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 370.699031][ T30] audit: type=1326 audit(1772813534.190:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.2.1832" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 370.750877][ T30] audit: type=1326 audit(1772813534.190:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.2.1832" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 370.813338][ T30] audit: type=1326 audit(1772813534.190:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.2.1832" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 371.058068][ T30] audit: type=1326 audit(1772813534.190:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.2.1832" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 371.087169][ T30] audit: type=1326 audit(1772813534.190:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.2.1832" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 371.132443][ T30] audit: type=1326 audit(1772813534.190:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.2.1832" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 371.166360][ T30] audit: type=1326 audit(1772813534.190:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.2.1832" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 372.236818][ T5897] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 372.316919][ T29] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 372.396725][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 372.405038][T10970] binder: 10965:10970 ioctl 4018620d 0 returned -22 [ 372.411807][ T5897] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 372.425780][ T5897] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 372.437253][ T5897] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 372.447725][ T5897] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 372.463842][ T5897] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 372.473884][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 372.479915][ T5897] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.496825][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.507337][ T5897] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 372.523020][ T29] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 372.537247][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.556324][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 372.568292][ T5897] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 372.594062][ T29] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 372.606702][ T5827] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 372.628633][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.652210][ T29] usb 2-1: config 0 descriptor?? [ 372.670200][ T29] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 372.777599][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.799951][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.815811][ T5827] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 372.831774][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.847813][ T5827] usb 4-1: config 0 descriptor?? [ 373.068731][ T5827] usbhid 4-1:0.0: can't add hid device: -71 [ 373.076234][ T5827] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 373.104702][ T5827] usb 4-1: USB disconnect, device number 47 [ 373.246068][T10973] syzkaller0: entered promiscuous mode [ 373.252628][T10973] syzkaller0: entered allmulticast mode [ 373.265930][T10973] syzkaller0: tun_net_xmit 1 [ 374.935531][ T1541] usb 5-1: USB disconnect, device number 58 [ 375.449901][ T5897] usb 2-1: USB disconnect, device number 42 [ 377.266957][ T5827] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 377.317747][ T5897] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 377.417036][ T5827] usb 2-1: Using ep0 maxpacket: 32 [ 377.425862][ T5827] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 377.460183][ T5827] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 377.478172][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 377.503080][ T5827] usb 2-1: Product: syz [ 377.509913][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.511156][ T5827] usb 2-1: Manufacturer: syz [ 377.525897][ T1541] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 377.528703][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.564558][ T5897] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 377.566696][ T5827] usb 2-1: SerialNumber: syz [ 377.584015][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.595967][ T5827] usb 2-1: config 0 descriptor?? [ 377.612878][ T5897] usb 5-1: config 0 descriptor?? [ 377.628353][T11012] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 377.696688][ T1541] usb 3-1: Using ep0 maxpacket: 8 [ 377.715614][ T1541] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 377.747116][ T1541] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 377.766803][ T1541] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 377.778666][ T1541] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 377.788901][ T1541] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 377.799781][ T1541] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.813095][ T1541] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 377.823236][ T1541] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.845886][ T5897] usbhid 5-1:0.0: can't add hid device: -71 [ 377.858701][ T1541] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 377.863998][ T5897] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 377.902158][ T5897] usb 5-1: USB disconnect, device number 59 [ 378.167214][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 378.167232][ T30] audit: type=1804 audit(1772813541.970:268): pid=11030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1863" name=2F6E6577726F6F742F3430392FE16F8F1F449A7A835673312B54EBB2AA76C806D22627E7 dev="tmpfs" ino=2101 res=1 errno=0 [ 378.218815][ T30] audit: type=1804 audit(1772813542.030:269): pid=11030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1863" name=2F6E6577726F6F742F3430392FE16F8F1F449A7A835673312B54EBB2AA76C806D22627E7 dev="tmpfs" ino=2101 res=1 errno=0 [ 378.513271][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.520052][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.138341][T11043] sit1: entered allmulticast mode [ 380.002452][T11048] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 380.009111][T11048] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 380.035482][T11048] vhci_hcd vhci_hcd.0: Device attached [ 380.088545][ T5827] usb 2-1: USB disconnect, device number 43 [ 380.149638][T11052] syzkaller0: entered promiscuous mode [ 380.155307][T11052] syzkaller0: entered allmulticast mode [ 380.174405][T11052] syzkaller0: tun_net_xmit 1 [ 380.251479][ T10] usb 3-1: USB disconnect, device number 49 [ 380.308543][ T1541] usb 42-1: SetAddress Request (6) to port 0 [ 380.402435][ T1541] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 380.950167][ T30] audit: type=1326 audit(1772813544.760:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11069 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 381.098842][ T30] audit: type=1326 audit(1772813544.760:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11069 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 381.151760][ T30] audit: type=1326 audit(1772813544.760:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11069 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 381.199154][ T30] audit: type=1326 audit(1772813544.760:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11069 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 381.251865][ T30] audit: type=1326 audit(1772813544.760:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11069 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 381.344788][ T30] audit: type=1326 audit(1772813544.790:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11069 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 381.404915][ T30] audit: type=1326 audit(1772813544.790:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11069 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 381.510325][ T30] audit: type=1326 audit(1772813544.790:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11069 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704ef6c code=0x7ffc0000 [ 382.878690][T11049] vhci_hcd: connection reset by peer [ 382.890961][ T36] vhci_hcd vhci_hcd.4: stop threads [ 382.907158][ T36] vhci_hcd vhci_hcd.4: release socket [ 382.912794][ T36] vhci_hcd vhci_hcd.4: disconnect device [ 383.088580][T11081] netlink: 'syz.1.1880': attribute type 10 has an invalid length. [ 383.427501][ T29] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 383.586709][ T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 383.586750][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 383.621432][ T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 383.635516][ T29] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 383.656743][ T29] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 383.664936][ T29] usb 5-1: Product: syz [ 383.676739][ T29] usb 5-1: Manufacturer: syz [ 383.681378][ T29] usb 5-1: SerialNumber: syz [ 383.698190][ T29] usb 5-1: config 0 descriptor?? [ 383.704387][T11085] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 383.741019][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 383.754015][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 383.763016][ T5827] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 383.772167][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 383.782860][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 383.795431][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 383.807511][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.821186][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 383.830736][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.936731][ T5827] usb 4-1: Using ep0 maxpacket: 32 [ 383.943981][ T5827] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 383.956781][ T5827] usb 4-1: config 0 has no interface number 0 [ 383.978472][ T5827] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 383.996688][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.004807][ T5827] usb 4-1: Product: syz [ 384.009559][ T5827] usb 4-1: Manufacturer: syz [ 384.014194][ T5827] usb 4-1: SerialNumber: syz [ 384.037978][ T5827] usb 4-1: config 0 descriptor?? [ 384.093513][ T10] usb 2-1: usb_control_msg returned -32 [ 384.101179][ T10] usbtmc 2-1:16.0: can't read capabilities [ 384.131722][ T10] usb 2-1: USB disconnect, device number 44 [ 384.449788][ T5827] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 384.460930][ T5827] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 385.075219][ T5827] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 385.106370][ T5827] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 385.139904][ T5827] usb 4-1: USB disconnect, device number 48 [ 385.333702][T11109] syzkaller0: entered promiscuous mode [ 385.339604][T11109] syzkaller0: entered allmulticast mode [ 385.352291][ T36] syzkaller0: tun_net_xmit 48 [ 385.369725][T11109] syzkaller0: tun_net_xmit 1 [ 385.466756][ T5897] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 385.471745][ T1541] usb 42-1: device descriptor read/8, error -110 [ 385.618223][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 385.638057][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.672984][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 385.706264][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 385.742854][ T5897] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 385.815679][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.878442][ T1541] usb usb42-port1: attempt power cycle [ 385.883770][ T5897] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 385.903488][ T5897] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 385.950795][ T5897] usb 2-1: Manufacturer: syz [ 386.025027][ T5897] usb 2-1: config 0 descriptor?? [ 386.243130][ T796] usb 5-1: USB disconnect, device number 60 [ 386.529399][ T1541] usb usb42-port1: unable to enumerate USB device [ 386.695393][T11118] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 386.701937][T11118] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 386.749848][T11118] vhci_hcd vhci_hcd.0: Device attached [ 386.835979][ T5897] rc_core: IR keymap rc-hauppauge not found [ 386.843152][ T5897] Registered IR keymap rc-empty [ 386.849372][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 386.879507][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 386.912917][ T5897] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 386.938408][ T5897] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 386.977519][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 387.002533][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 387.019513][ T796] usb 34-1: SetAddress Request (6) to port 0 [ 387.025658][ T796] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd [ 387.033397][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 387.056860][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 387.080817][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 387.106994][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 387.139980][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 387.182343][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 387.207813][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 387.229638][ T5897] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 387.259999][ T5897] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 387.269082][ T5897] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 387.326138][ T5897] usb 2-1: USB disconnect, device number 45 [ 388.716770][ T1541] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 388.896705][ T1541] usb 2-1: Using ep0 maxpacket: 8 [ 388.909303][ T1541] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 388.917985][ T1541] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 388.936796][ T1541] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 388.953303][ T1541] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 388.974333][ T1541] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.006717][ T1541] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 389.015968][ T1541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.084770][T11121] vhci_hcd: connection reset by peer [ 389.116687][ T36] vhci_hcd vhci_hcd.0: stop threads [ 389.138030][ T36] vhci_hcd vhci_hcd.0: release socket [ 389.164537][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 389.249618][ T1541] usb 2-1: usb_control_msg returned -32 [ 389.260630][ T1541] usbtmc 2-1:16.0: can't read capabilities [ 389.288236][ T1541] usb 2-1: USB disconnect, device number 46 [ 389.726710][ T1541] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 389.736708][ T5890] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 389.876812][ T1541] usb 3-1: Using ep0 maxpacket: 32 [ 389.885010][ T1541] usb 3-1: config 51 has an invalid interface number: 208 but max is 0 [ 389.893595][ T1541] usb 3-1: config 51 has no interface number 0 [ 389.896803][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 389.900303][ T1541] usb 3-1: config 51 interface 208 has no altsetting 0 [ 389.913325][ T5890] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 389.914483][ T1541] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=8b.70 [ 389.932812][ T1541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.934460][ T5890] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 389.940912][ T1541] usb 3-1: Product: syz [ 389.940932][ T1541] usb 3-1: Manufacturer: syz [ 389.940945][ T1541] usb 3-1: SerialNumber: syz [ 389.970522][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 389.979563][ T5890] usb 4-1: Product: syz [ 389.983876][ T5890] usb 4-1: Manufacturer: syz [ 389.988958][ T5890] usb 4-1: SerialNumber: syz [ 389.997683][ T5890] usb 4-1: config 0 descriptor?? [ 390.004349][T11155] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 390.054652][T11162] syzkaller0: entered promiscuous mode [ 390.060347][T11162] syzkaller0: entered allmulticast mode [ 390.248051][ T5890] usb 4-1: USB disconnect, device number 49 [ 390.388704][T11169] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1910'. [ 390.506791][ T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 390.555031][T11171] syzkaller0: entered promiscuous mode [ 390.576852][T11171] syzkaller0: entered allmulticast mode [ 390.596584][T11171] syzkaller0: tun_net_xmit 1 [ 390.662649][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 390.682301][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.701258][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.726725][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 390.735840][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.781001][ T10] usb 5-1: config 0 descriptor?? [ 390.811228][ T10] hub 5-1:0.0: USB hub found [ 390.989689][ T1541] usb 3-1: USB disconnect, device number 50 [ 391.005304][ T1541] f81534a_ctrl 3-1:51.208: failed to enable ports: -19 [ 391.016318][ T10] hub 5-1:0.0: 1 port detected [ 391.292539][T11174] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 391.299112][T11174] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 391.332718][T11174] vhci_hcd vhci_hcd.0: Device attached [ 391.597174][ T5890] usb 40-1: SetAddress Request (6) to port 0 [ 391.603580][ T5890] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 391.637390][ T10] hub 5-1:0.0: activate --> -90 [ 392.044269][ T1541] usb 5-1: USB disconnect, device number 61 [ 392.112316][ T796] usb 34-1: device descriptor read/8, error -110 [ 392.510906][ T796] usb usb34-port1: attempt power cycle [ 392.777221][T11176] vhci_hcd: connection reset by peer [ 392.803389][ T176] vhci_hcd vhci_hcd.3: stop threads [ 392.809399][ T176] vhci_hcd vhci_hcd.3: release socket [ 392.828446][ T176] vhci_hcd vhci_hcd.3: disconnect device [ 392.954599][T11195] syzkaller0: entered promiscuous mode [ 392.960209][T11195] syzkaller0: entered allmulticast mode [ 393.080102][ T796] usb usb34-port1: unable to enumerate USB device [ 393.127753][ T1541] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 393.165823][T11200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1922'. [ 393.297504][ T1541] usb 3-1: Using ep0 maxpacket: 8 [ 393.310811][ T1541] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 393.330814][ T1541] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 393.341026][ T1541] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 393.353396][ T1541] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 393.373777][ T1541] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.393222][ T1541] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 393.406368][ T1541] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.658855][ T1541] usb 3-1: usb_control_msg returned -32 [ 393.666803][ T1541] usbtmc 3-1:16.0: can't read capabilities [ 393.691279][ T1541] usb 3-1: USB disconnect, device number 51 [ 394.894761][T11232] syzkaller0: entered promiscuous mode [ 394.901595][T11239] netlink: 'syz.1.1936': attribute type 10 has an invalid length. [ 394.931774][T11232] syzkaller0: entered allmulticast mode [ 394.941964][ T29] IPVS: starting estimator thread 0... [ 395.037145][T11241] IPVS: using max 34 ests per chain, 81600 per kthread [ 396.106796][ T29] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 396.259039][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 396.283310][ T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 396.295542][ T29] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 396.305501][ T29] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 396.314022][ T29] usb 5-1: Product: syz [ 396.318434][ T29] usb 5-1: Manufacturer: syz [ 396.323066][ T29] usb 5-1: SerialNumber: syz [ 396.337298][ T29] usb 5-1: config 0 descriptor?? [ 396.345186][T11244] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 396.570762][ T29] usb 5-1: USB disconnect, device number 62 [ 396.678605][ T5890] usb 40-1: device descriptor read/8, error -110 [ 396.997195][T11247] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.004340][T11247] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.068520][T11251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1940'. [ 397.090765][ T5890] usb usb40-port1: attempt power cycle [ 397.128397][T11251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1940'. [ 397.434519][T11268] netlink: 'syz.2.1950': attribute type 10 has an invalid length. [ 397.594112][T11277] syzkaller0: entered promiscuous mode [ 397.607272][T11277] syzkaller0: entered allmulticast mode [ 397.616117][T11281] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.623543][T11281] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.672749][ T5890] usb usb40-port1: unable to enumerate USB device [ 397.846788][ T5890] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 398.020862][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 398.028135][ T5890] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 398.042219][ T5890] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 398.057104][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 398.080265][ T5890] usb 2-1: Product: syz [ 398.084473][ T5890] usb 2-1: Manufacturer: syz [ 398.130987][ T5890] usb 2-1: SerialNumber: syz [ 398.163915][ T5890] usb 2-1: config 0 descriptor?? [ 398.182578][T11280] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 398.460644][T11298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1960'. [ 398.694581][T11303] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 398.706584][T11302] netlink: 'syz.2.1962': attribute type 10 has an invalid length. [ 398.984845][T11309] bridge0: port 3(syz_tun) entered blocking state [ 398.997423][T11309] bridge0: port 3(syz_tun) entered disabled state [ 399.005350][T11309] syz_tun: entered allmulticast mode [ 399.031797][T11309] syz_tun: entered promiscuous mode [ 399.219871][T11315] syzkaller0: entered promiscuous mode [ 399.225908][T11315] syzkaller0: entered allmulticast mode [ 399.740673][T11326] netlink: 'syz.0.1971': attribute type 1 has an invalid length. [ 400.123336][T11333] netlink: 'syz.3.1974': attribute type 10 has an invalid length. [ 400.674572][ T5890] usb 2-1: USB disconnect, device number 47 [ 401.106900][ T5890] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 401.256709][ T5890] usb 2-1: device descriptor read/64, error -71 [ 401.516746][ T5890] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 401.814535][ T5890] usb 2-1: device descriptor read/64, error -71 [ 401.936981][ T5890] usb usb2-port1: attempt power cycle [ 402.307122][ T5890] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 402.347106][ T5890] usb 2-1: device descriptor read/8, error -71 [ 402.587088][ T5890] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 402.607835][ T5890] usb 2-1: device descriptor read/8, error -71 [ 402.647195][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 402.738579][ T5890] usb usb2-port1: unable to enumerate USB device [ 402.816686][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 402.828819][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 402.857039][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 402.876679][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 402.886437][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 402.916685][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 402.928284][ T5827] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 402.949168][ T10] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 402.958551][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.966551][ T10] usb 3-1: Product: syz [ 402.970802][ T10] usb 3-1: Manufacturer: syz [ 402.975396][ T10] usb 3-1: SerialNumber: syz [ 402.982832][ T10] usb 3-1: config 0 descriptor?? [ 403.096717][ T5827] usb 4-1: Using ep0 maxpacket: 32 [ 403.104363][ T5827] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 403.123714][ T5827] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 403.133767][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 403.142356][ T5827] usb 4-1: Product: syz [ 403.147183][ T5827] usb 4-1: Manufacturer: syz [ 403.151868][ T5827] usb 4-1: SerialNumber: syz [ 403.161323][ T5827] usb 4-1: config 0 descriptor?? [ 403.167179][T11375] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 403.396191][ T10] input input18: Device does not respond to id packet M [ 403.597859][ T10] input input18: Device does not respond to id packet P [ 403.801447][ T10] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 403.817922][ T10] input input18: Device does not respond to id packet B [ 403.826142][ T10] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 403.835894][ T10] input input18: Device does not respond to id packet N [ 403.844072][ T10] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 403.852589][ T10] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 403.859522][ T10] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 403.869024][ T10] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 403.890590][ T10] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input18 [ 403.937864][ T10] usb 3-1: USB disconnect, device number 52 [ 404.198425][T11390] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 404.216453][T11390] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 404.270519][T11390] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 405.104260][T11404] netlink: 'syz.1.2002': attribute type 10 has an invalid length. [ 405.414544][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2000'. [ 405.699637][ T5890] usb 4-1: USB disconnect, device number 50 [ 406.758214][T11444] vivid-000: disconnect [ 406.992746][T11441] vivid-000: reconnect [ 407.326955][T11448] syzkaller0: entered promiscuous mode [ 407.332436][T11448] syzkaller0: entered allmulticast mode [ 408.497286][T11475] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 408.625846][T11475] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 408.725841][T11475] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 409.251337][T11491] netlink: 'syz.1.2031': attribute type 2 has an invalid length. [ 409.266780][T11491] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2031'. [ 409.882303][T11510] loop2: detected capacity change from 0 to 7 [ 409.921969][ T5828] Dev loop2: unable to read RDB block 7 [ 409.938274][ T5828] loop2: AHDI p1 p2 p3 [ 409.944787][ T5828] loop2: partition table partially beyond EOD, truncated [ 409.956528][ T5828] loop2: p3 start 335544320 is beyond EOD, truncated [ 409.969761][T11510] Dev loop2: unable to read RDB block 7 [ 409.975523][T11510] loop2: AHDI p1 p2 p3 [ 410.016499][T11510] loop2: partition table partially beyond EOD, truncated [ 410.031516][T11510] loop2: p3 start 335544320 is beyond EOD, truncated [ 410.384262][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2046'. [ 410.618359][ T5832] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 413.253204][T11603] loop2: detected capacity change from 0 to 7 [ 413.277202][T11603] Dev loop2: unable to read RDB block 7 [ 413.296669][T11603] loop2: AHDI p1 p2 p3 [ 413.329914][T11603] loop2: partition table partially beyond EOD, truncated [ 413.342061][T11603] loop2: p1 start 1601398130 is beyond EOD, truncated [ 413.362139][T11603] loop2: p2 start 1702059890 is beyond EOD, truncated [ 413.430748][T11605] syzkaller0: entered promiscuous mode [ 413.436285][T11605] syzkaller0: entered allmulticast mode [ 413.737299][ T5890] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 413.911192][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 413.943295][ T5890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.977050][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 414.017153][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 414.061629][ T5890] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 414.176749][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.236385][ T5890] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 414.295600][ T5890] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 414.332084][ T5890] usb 4-1: Manufacturer: syz [ 414.599551][ T5890] usb 4-1: config 0 descriptor?? [ 414.936834][ T5890] rc_core: IR keymap rc-hauppauge not found [ 414.943829][ T5890] Registered IR keymap rc-empty [ 414.956811][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.006934][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.053240][ T5890] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 415.105023][ T5890] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input19 [ 415.135531][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.157260][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.176848][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.226472][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.240428][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2075'. [ 415.316739][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.336821][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.498503][T11637] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2078'. [ 415.516884][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.566952][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.600901][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.637009][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 415.715803][ T5890] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 415.761352][ T5890] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 416.075066][ T5890] usb 4-1: USB disconnect, device number 51 [ 416.615917][ T30] audit: type=1326 audit(1772813580.420:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.2.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 416.765150][T11656] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 416.784655][ T30] audit: type=1326 audit(1772813580.460:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.2.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 416.807070][ T30] audit: type=1326 audit(1772813580.460:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.2.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 416.830132][ T30] audit: type=1326 audit(1772813580.460:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.2.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 416.852506][T11656] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 416.852782][ T30] audit: type=1326 audit(1772813580.460:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.2.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 416.884012][T11656] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 416.941282][ T30] audit: type=1326 audit(1772813580.460:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.2.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 416.966691][ T30] audit: type=1326 audit(1772813580.470:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.2.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 419.420868][ T30] audit: type=1326 audit(1772813583.230:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.3.2100" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95f6c code=0x7ffc0000 [ 419.524149][ T30] audit: type=1326 audit(1772813583.230:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.3.2100" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95f6c code=0x7ffc0000 [ 419.546495][ T30] audit: type=1326 audit(1772813583.230:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.3.2100" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f95f6c code=0x7ffc0000 [ 422.328890][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2118'. [ 422.357609][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2118'. [ 425.486814][ T29] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 425.639520][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 425.662355][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 425.675622][ T29] usb 4-1: config 4 interface 0 has no altsetting 0 [ 425.694071][ T29] usb 4-1: string descriptor 0 read error: -22 [ 425.713087][ T29] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 425.735076][ T29] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 425.788085][ T29] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 425.822689][ T29] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 425.849487][ T29] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 425.862469][ T29] usb 4-1: media controller created [ 425.892825][T11827] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 425.899187][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 425.899363][T11827] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 425.921958][T11827] vhci_hcd vhci_hcd.0: Device attached [ 425.937827][T11828] usbip_core: unknown command [ 425.943067][T11828] vhci_hcd: unknown pdu 1469903664 [ 425.948961][T11828] usbip_core: unknown command [ 425.955164][ T7728] vhci_hcd vhci_hcd.4: stop threads [ 425.960714][ T7728] vhci_hcd vhci_hcd.4: release socket [ 425.966113][ T7728] vhci_hcd vhci_hcd.4: disconnect device [ 426.987827][ T29] zl10353_read_register: readreg error (reg=127, ret==0) [ 427.054298][ T29] usb 4-1: USB disconnect, device number 52 [ 427.721005][T11865] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 427.757121][T11865] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 427.776246][T11865] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 427.866814][ T5827] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 428.028527][ T5827] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 428.037774][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.056005][ T5827] usb 4-1: config 0 descriptor?? [ 428.072055][ T5827] cp210x 4-1:0.0: cp210x converter detected [ 428.086785][ T5890] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 428.246769][ T29] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 428.259317][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.283058][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.294782][ T5890] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 428.304090][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.314653][ T5890] usb 5-1: config 0 descriptor?? [ 428.337979][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2160'. [ 428.347250][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2160'. [ 428.363445][ T5827] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 428.372154][ T5827] cp210x 4-1:0.0: querying part number failed [ 428.383436][ T5827] usb 4-1: cp210x converter now attached to ttyUSB0 [ 428.403784][ T5827] usb 4-1: USB disconnect, device number 53 [ 428.417469][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 428.437049][ T29] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 428.437767][ T5827] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 428.446138][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.446162][ T29] usb 2-1: Product: syz [ 428.446176][ T29] usb 2-1: Manufacturer: syz [ 428.481632][ T29] usb 2-1: SerialNumber: syz [ 428.513857][ T5827] cp210x 4-1:0.0: device disconnected [ 428.541463][ T5890] usbhid 5-1:0.0: can't add hid device: -71 [ 428.547757][ T29] usb 2-1: config 0 descriptor?? [ 428.578384][ T5890] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 428.621137][ T5890] usb 5-1: USB disconnect, device number 63 [ 428.855775][T11889] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2169'. [ 428.874744][T11889] bridge_slave_1: left allmulticast mode [ 428.884290][T11889] bridge_slave_1: left promiscuous mode [ 428.897681][T11889] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.951806][T11889] bridge_slave_0: left allmulticast mode [ 428.961106][T11889] bridge_slave_0: left promiscuous mode [ 428.975939][T11889] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.998828][ T29] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 429.010040][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 429.023978][ T29] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 429.032568][ T5890] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 429.048676][ T29] usb 2-1: media controller created [ 429.063491][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 429.202030][ T29] zl10353_read_register: readreg error (reg=127, ret==0) [ 429.215939][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.229977][ T29] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 429.238497][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.257910][ T29] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 429.281115][ T5890] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 429.291722][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.302232][ T29] usb 2-1: USB disconnect, device number 52 [ 429.334322][ T5890] usb 5-1: config 0 descriptor?? [ 429.364383][ T29] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 429.636685][ T5827] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 429.756500][ T5890] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 429.936709][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 429.944988][ T5890] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001A/input/input20 [ 429.971978][ T5827] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 429.993994][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.013940][ T5827] usb 4-1: Product: syz [ 430.021587][ T5827] usb 4-1: Manufacturer: syz [ 430.033631][ T5827] usb 4-1: SerialNumber: syz [ 430.049868][ T5827] usb 4-1: config 0 descriptor?? [ 430.086354][ T5890] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 430.121042][ T5890] usb 5-1: USB disconnect, device number 64 [ 430.228091][T11907] fido_id[11907]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 430.473067][ T5827] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 430.489751][ T5827] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 430.633435][ T5827] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 430.647317][ T5827] usb 4-1: media controller created [ 430.665371][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 431.227006][ T5827] zl10353_read_register: readreg error (reg=127, ret==0) [ 431.234214][ T5827] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 431.244848][ T5827] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 431.256974][T11920] ------------[ cut here ]------------ [ 431.262707][T11920] usb 4-1: BOGUS control dir, pipe 80003680 doesn't match bRequestType c0 [ 431.269620][ T5827] usb 4-1: USB disconnect, device number 54 [ 431.271482][T11920] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1052/0x18b0, CPU#1: syz.4.2181/11920 [ 431.287821][T11920] Modules linked in: [ 431.292035][T11920] CPU: 1 UID: 0 PID: 11920 Comm: syz.4.2181 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.303079][T11920] Tainted: [L]=SOFTLOCKUP [ 431.307472][T11920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.317761][T11920] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 431.323485][T11920] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 431.343143][T11920] RSP: 0000:ffffc900063e76c8 EFLAGS: 00010246 [ 431.349285][T11920] RAX: 0000000000000000 RBX: ffff888029dd7d00 RCX: 0000000080003680 [ 431.357268][T11920] RDX: ffff88806f6876c0 RSI: ffffffff8c7ef860 RDI: ffffffff901ecd50 [ 431.365224][T11920] RBP: 1ffff1100661a87c R08: 00000000000000c0 R09: 0000000000000000 [ 431.373199][T11920] R10: ffffc900063e77c0 R11: fffff52000c7cf04 R12: ffff88805b360100 [ 431.381213][T11920] R13: ffff8880330d43e0 R14: 0000000080003680 R15: ffff88806f6876c0 [ 431.389360][T11920] FS: 0000000000000000(0000) GS:ffff888125563000(0063) knlGS:00000000f548db40 [ 431.398462][T11920] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 431.405037][T11920] CR2: 000000000c42a13f CR3: 0000000054b0c000 CR4: 00000000003526f0 [ 431.413156][T11920] Call Trace: [ 431.416420][T11920] [ 431.419485][T11920] ? __init_swait_queue_head+0xa9/0x150 [ 431.425103][T11920] usb_start_wait_urb+0x12b/0x510 [ 431.430170][T11920] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 431.435717][T11920] usb_control_msg+0x232/0x3e0 [ 431.440588][T11920] dtv5100_i2c_msg+0x231/0x2f0 [ 431.445410][T11920] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 431.450365][T11920] __i2c_transfer+0x79a/0x2020 [ 431.455201][T11920] ? rt_mutex_lock_nested+0x170/0x1e0 [ 431.460743][T11920] ? i2c_transfer+0xc8/0x2d0 [ 431.465342][T11920] i2c_transfer+0x1cc/0x2d0 [ 431.469890][T11920] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 431.475530][T11920] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 431.481692][T11920] ? _copy_from_user+0x94/0xb0 [ 431.486682][T11920] i2cdev_write+0x113/0x1e0 [ 431.491177][T11920] vfs_writev+0x4bd/0x990 [ 431.495519][T11920] ? __pfx_i2cdev_write+0x10/0x10 [ 431.500564][T11920] ? __pfx_vfs_writev+0x10/0x10 [ 431.505492][T11920] ? __fget_files+0x2a/0x420 [ 431.510098][T11920] ? __fget_files+0x3a0/0x420 [ 431.514777][T11920] ? __fget_files+0x2a/0x420 [ 431.519383][T11920] do_writev+0x154/0x2e0 [ 431.523741][T11920] ? __pfx_do_writev+0x10/0x10 [ 431.528547][T11920] __do_fast_syscall_32+0x20d/0x640 [ 431.533790][T11920] ? do_fast_syscall_32+0x33/0x70 [ 431.538904][T11920] ? asm_int80_emulation+0x1a/0x20 [ 431.544030][T11920] ? do_int80_emulation+0x274/0x4d0 [ 431.549316][T11920] ? trace_irq_disable+0x3b/0x150 [ 431.554365][T11920] do_fast_syscall_32+0x33/0x70 [ 431.559246][T11920] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 431.565564][T11920] RIP: 0023:0xf709ef6c [ 431.569646][T11920] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 431.589393][T11920] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 431.597834][T11920] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 431.605803][T11920] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 431.613889][T11920] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 431.621889][T11920] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 431.630036][T11920] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 431.638020][T11920] [ 431.641095][T11920] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 431.648356][T11920] CPU: 1 UID: 0 PID: 11920 Comm: syz.4.2181 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.659354][T11920] Tainted: [L]=SOFTLOCKUP [ 431.663653][T11920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.673701][T11920] Call Trace: [ 431.676969][T11920] [ 431.679887][T11920] vpanic+0x56c/0xa60 [ 431.683886][T11920] ? __pfx__printk+0x10/0x10 [ 431.688457][T11920] ? __pfx_vpanic+0x10/0x10 [ 431.692941][T11920] ? is_bpf_text_address+0x292/0x2b0 [ 431.698205][T11920] ? is_bpf_text_address+0x26/0x2b0 [ 431.703388][T11920] panic+0xc5/0xd0 [ 431.707094][T11920] ? __pfx_panic+0x10/0x10 [ 431.711503][T11920] __warn+0x315/0x4f0 [ 431.715466][T11920] ? usb_submit_urb+0x1052/0x18b0 [ 431.720476][T11920] ? usb_submit_urb+0x1052/0x18b0 [ 431.725485][T11920] __report_bug+0x29a/0x540 [ 431.730070][T11920] ? unwind_get_return_address+0x4d/0x90 [ 431.735712][T11920] ? usb_submit_urb+0x1052/0x18b0 [ 431.740722][T11920] ? __pfx___report_bug+0x10/0x10 [ 431.745734][T11920] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 431.751575][T11920] ? lockdep_hardirqs_on+0x7a/0x110 [ 431.756792][T11920] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 431.762586][T11920] ? stack_depot_save_flags+0x3f3/0x810 [ 431.768192][T11920] report_bug_entry+0x19a/0x290 [ 431.773032][T11920] ? usb_submit_urb+0x1114/0x18b0 [ 431.778041][T11920] ? usb_submit_urb+0x1119/0x18b0 [ 431.783049][T11920] handle_bug+0xce/0x200 [ 431.787276][T11920] exc_invalid_op+0x1a/0x50 [ 431.791850][T11920] asm_exc_invalid_op+0x1a/0x20 [ 431.796683][T11920] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 431.802354][T11920] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 431.822082][T11920] RSP: 0000:ffffc900063e76c8 EFLAGS: 00010246 [ 431.828138][T11920] RAX: 0000000000000000 RBX: ffff888029dd7d00 RCX: 0000000080003680 [ 431.836266][T11920] RDX: ffff88806f6876c0 RSI: ffffffff8c7ef860 RDI: ffffffff901ecd50 [ 431.844234][T11920] RBP: 1ffff1100661a87c R08: 00000000000000c0 R09: 0000000000000000 [ 431.852209][T11920] R10: ffffc900063e77c0 R11: fffff52000c7cf04 R12: ffff88805b360100 [ 431.860185][T11920] R13: ffff8880330d43e0 R14: 0000000080003680 R15: ffff88806f6876c0 [ 431.868152][T11920] ? usb_submit_urb+0x10a3/0x18b0 [ 431.873171][T11920] ? __init_swait_queue_head+0xa9/0x150 [ 431.878706][T11920] usb_start_wait_urb+0x12b/0x510 [ 431.883725][T11920] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 431.889266][T11920] usb_control_msg+0x232/0x3e0 [ 431.894017][T11920] dtv5100_i2c_msg+0x231/0x2f0 [ 431.898771][T11920] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 431.903608][T11920] __i2c_transfer+0x79a/0x2020 [ 431.908362][T11920] ? rt_mutex_lock_nested+0x170/0x1e0 [ 431.913718][T11920] ? i2c_transfer+0xc8/0x2d0 [ 431.918315][T11920] i2c_transfer+0x1cc/0x2d0 [ 431.922808][T11920] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 431.928427][T11920] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 431.934569][T11920] ? _copy_from_user+0x94/0xb0 [ 431.939322][T11920] i2cdev_write+0x113/0x1e0 [ 431.943812][T11920] vfs_writev+0x4bd/0x990 [ 431.948140][T11920] ? __pfx_i2cdev_write+0x10/0x10 [ 431.953148][T11920] ? __pfx_vfs_writev+0x10/0x10 [ 431.957987][T11920] ? __fget_files+0x2a/0x420 [ 431.962564][T11920] ? __fget_files+0x3a0/0x420 [ 431.967221][T11920] ? __fget_files+0x2a/0x420 [ 431.971796][T11920] do_writev+0x154/0x2e0 [ 431.976027][T11920] ? __pfx_do_writev+0x10/0x10 [ 431.980779][T11920] __do_fast_syscall_32+0x20d/0x640 [ 431.985963][T11920] ? do_fast_syscall_32+0x33/0x70 [ 431.990964][T11920] ? asm_int80_emulation+0x1a/0x20 [ 431.996056][T11920] ? do_int80_emulation+0x274/0x4d0 [ 432.001240][T11920] ? trace_irq_disable+0x3b/0x150 [ 432.006268][T11920] do_fast_syscall_32+0x33/0x70 [ 432.011202][T11920] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 432.017520][T11920] RIP: 0023:0xf709ef6c [ 432.021579][T11920] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 432.041173][T11920] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 432.049616][T11920] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 432.057613][T11920] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 432.065592][T11920] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 432.073547][T11920] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 432.081587][T11920] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 432.089574][T11920] [ 432.092853][T11920] Kernel Offset: disabled [ 432.097193][T11920] Rebooting in 86400 seconds..