last executing test programs: 10.138077152s ago: executing program 4 (id=5193): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x118) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000440)=0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e1209004000f8ff0700a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x40084) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) r5 = io_uring_setup(0x3c93, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000001c0)={'Wc9\t', 0x0, 0x6, 0x3, 0x0, 0x0, "09000000e3ff00", "000200", "00ff0200", "798a202d", ["c2fffedbff00ffdfffffffff", "ffff08000000000000042371", "070500110800c1024b00", "38a70ed483c99b9f1600d333"]}) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r8, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) close_range(r4, r4, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x202800, 0x180) r10 = fanotify_init(0x200, 0x0) r11 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r11, 0x1, 0x0) fanotify_mark(r10, 0x21, 0x4800003e, r9, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 9.930773686s ago: executing program 2 (id=5195): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r0, &(0x7f000000cdc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r4}, 0x10) fstat(r1, 0x0) syz_fuse_handle_req(r0, &(0x7f0000009140)="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", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x78, 0x0, 0xfffffffffffffff9, {0xb, 0x4, 0x0, {0x6, 0x100, 0x80, 0x4, 0x9, 0x0, 0xb, 0x0, 0x7fffffff, 0x4000, 0x7, r5, r3, 0x9, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000002740)={0x0, 0xdaff}) 9.253657105s ago: executing program 2 (id=5198): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x0, 0xcbf, 0x4, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0x0, 0xd65}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r3, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 8.548033735s ago: executing program 4 (id=5201): socket$tipc(0x1e, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400000, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000000), 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 8.46077353s ago: executing program 2 (id=5203): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c0100001a0a010800000000000000000300000a090001"], 0x144}}, 0x4040000) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x5, [@multicast1, @private=0xa010100, @rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast]}, 0x24) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0xfffffffb, 0xff, {}, 0x0, 0x0, 0xfb}) 8.458540936s ago: executing program 4 (id=5204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003f00)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x4, 0x3, 0x3a}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) 8.334067661s ago: executing program 3 (id=5205): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e032", 0x3a}], 0x2}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}, {&(0x7f0000003300)=""/4095, 0xfff}], 0x2) 8.156406945s ago: executing program 4 (id=5207): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="770f180f", 0x4}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f00000003c0)="8c", 0x1}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 7.91286752s ago: executing program 3 (id=5210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xe}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 7.687423988s ago: executing program 3 (id=5211): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0xce8}, 0x23) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031400e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 7.3749092s ago: executing program 3 (id=5212): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x118) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000440)=0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e1209004000f8ff0700a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x40084) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) r5 = io_uring_setup(0x3c93, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000001c0)={'Wc9\t', 0x0, 0x6, 0x3, 0x0, 0x0, "09000000e3ff00", "000200", "00ff0200", "798a202d", ["c2fffedbff00ffdfffffffff", "ffff08000000000000042371", "070500110800c1024b00", "38a70ed483c99b9f1600d333"]}) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r8, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) close_range(r4, r4, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x202800, 0x180) r10 = fanotify_init(0x200, 0x0) r11 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r11, 0x1, 0x0) fanotify_mark(r10, 0x21, 0x4800003e, r9, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 5.108264359s ago: executing program 2 (id=5218): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xcabd8245) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, 0x0, 0x2000c081) syz_usb_connect(0x0, 0x286, 0x0, 0x0) 5.085684729s ago: executing program 4 (id=5219): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6b, 0xb0, 0x95, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x3, 0x2, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000240)={0x10, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) 4.493322628s ago: executing program 2 (id=5220): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x2, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x11, &(0x7f0000000000)=[{&(0x7f0000000380)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) 3.658338464s ago: executing program 2 (id=5221): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) getdents64(0xffffffffffffffff, 0x0, 0x0) 3.657946144s ago: executing program 3 (id=5222): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 3.204068605s ago: executing program 4 (id=5223): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) pread64(r1, &(0x7f0000000800)=""/45, 0x2d, 0x7) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000840)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7f, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x42, 0x2, 0x7, 0x1, 0x1, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x7f, 0xfb, 0x3}}}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 3.048695856s ago: executing program 0 (id=5224): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r0 = syz_io_uring_setup(0x34e, &(0x7f0000000300)={0x0, 0x400aee2, 0x2, 0x1, 0x317}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1808c2a, 0x0) 2.927227722s ago: executing program 3 (id=5225): getpid() r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r4, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r3, &(0x7f00000029c0)={0x2020}, 0x2020) 2.671861941s ago: executing program 0 (id=5226): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0xe4}}, 0x20050840) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x74b6, 0xe1, 0xfffffffffffffffa, 0x7, 0x2, 0x8, 0x8, 0x7ff, 0x10001, 0xfffffffffffffff3, 0x0, 0x8, 0xffffffffffffff0e, 0x0, 0x2, 0xa], 0x6000, 0x10200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)=@arm64={0x10, 0x2, 0xff, '\x00', 0x400006}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.934970484s ago: executing program 1 (id=5231): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x6, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0xaf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, r2, &(0x7f0000000780)='!', 0x6}]) dup3(r2, r0, 0x0) 1.743083465s ago: executing program 0 (id=5232): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) fsopen(&(0x7f0000000080)='tracefs\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xfe}}]}}}]}, 0x5c}}, 0x0) 1.701067203s ago: executing program 0 (id=5233): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xeab, &(0x7f0000002bc0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe9d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xe89, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffff9, "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"}}}}}}, 0x0) pipe(&(0x7f0000000080)) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0xfffffffffffffffe, 0x0, 0x4000000000009, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/53, 0xf98}], 0x1) 1.677779693s ago: executing program 1 (id=5234): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x30, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x101, 0x1}, @flat=@weak_binder={0x73622a85, 0x1001, 0x3}, @flat=@weak_binder={0x73622a85, 0x1101, 0x3}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 1.636257254s ago: executing program 1 (id=5235): socket(0x2c, 0x3, 0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0xc, 0xb, 0x0, 0x1000009, 0x52, 0x6214, 0xfa11, 0x6}, 0x0) r0 = socket$inet(0x2, 0xa, 0xffffffff) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$rtc(0xffffff9c, &(0x7f0000000000), 0x101200, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x4009, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffff1b) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x21, 0x3, 0x8000000}}, 0x50) read$FUSE(r1, &(0x7f0000004300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000080)={0x10, 0x0, r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)=""/68, 0x44}], 0x1, 0x80000000, 0xfff, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(0x0, r6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="09000000000000000000070000002800018014000400fc000000000000000000000000000000060001000a000000080007", @ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect(0x3, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e1"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) 829.62811ms ago: executing program 0 (id=5236): socket$packet(0x11, 0x2, 0x300) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40010000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) close(0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x0) 675.615835ms ago: executing program 0 (id=5237): socket(0x2c, 0x3, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0xc, 0xb, 0x0, 0x1000009, 0x52, 0x6214, 0xfa11, 0x6}, 0x0) r2 = socket$inet(0x2, 0xa, 0xffffffff) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$rtc(0xffffff9c, &(0x7f0000000000), 0x101200, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x4009, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) llistxattr(0x0, 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x21, 0x3, 0x8000000}}, 0x50) read$FUSE(r3, &(0x7f0000004300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10, 0x0, r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)=""/68, 0x44}], 0x1, 0x80000000, 0xfff, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(0x0, r8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="09000000000000000000070000002800018014000400fc000000000000000000000000000000060001000a000000080007", @ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect(0x3, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e1"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) 356.384045ms ago: executing program 1 (id=5238): openat$uinput(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x14a7, 0x100, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10d, &(0x7f0000000680)={0x0, 0x80334c, 0x40, 0x3, 0x3d2}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r0, 0x627, 0xc103fffe, 0x1, 0x0, 0x60) 185.092364ms ago: executing program 1 (id=5239): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000140)=0x8c, 0xffffffffffffffff, 0x0, 0x9, 0xc) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f", 0x7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e0003000f000000028000001294", 0x2e}], 0x1}, 0x0) 0s ago: executing program 1 (id=5240): socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r0, &(0x7f0000005740), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x8001) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) fcntl$setsig(r2, 0xa, 0x1c) sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b"], 0x0) kernel console output (not intermixed with test programs): 5535, setting to 8 [ 1432.375407][ T5915] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1432.383019][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1432.404314][ T5915] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1432.416802][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1432.428254][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1432.441527][ T5915] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1432.449694][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1432.461322][ T5915] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1432.473293][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1432.485322][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1432.500201][ T5915] usb 2-1: string descriptor 0 read error: -22 [ 1432.507757][ T5915] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1432.518048][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.541881][ T5915] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1432.604159][ T57] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1432.653598][T13724] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1432.763720][ T57] usb 3-1: Using ep0 maxpacket: 8 [ 1432.779257][ T57] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1432.793297][ T57] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1432.803131][ T57] usb 3-1: can't read configurations, error -71 [ 1432.812983][T13724] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1432.833447][T13724] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1432.833813][T13721] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1432.853424][T13724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.881551][ T5941] usb 2-1: USB disconnect, device number 109 [ 1432.892014][T22052] usb 2-1: Couldn't submit interrupt_out_urb -19 [ 1432.899553][T13724] usb 5-1: config 0 descriptor?? [ 1433.025367][T13721] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1433.035352][T13721] usb 4-1: config 0 has no interface number 0 [ 1433.041470][T13721] usb 4-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1433.070922][T13721] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1433.088783][T13721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.103791][T13721] usb 4-1: Product: syz [ 1433.115263][T13721] usb 4-1: Manufacturer: syz [ 1433.123239][T13721] usb 4-1: SerialNumber: syz [ 1433.141266][T13721] usb 4-1: config 0 descriptor?? [ 1433.152616][T13721] yurex 4-1:0.50: Could not find endpoints [ 1433.521942][T13724] usb 5-1: language id specifier not provided by device, defaulting to English [ 1433.722622][T13724] letsketch 0003:6161:4D15.005A: Device info: Њ [ 1433.733565][T13721] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1433.888204][T13721] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1433.897547][T13721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.905601][T13721] usb 2-1: Product: syz [ 1433.909762][T13721] usb 2-1: Manufacturer: syz [ 1433.914407][T13721] usb 2-1: SerialNumber: syz [ 1433.926917][T13724] letsketch 0003:6161:4D15.005A: Device info: 劸 [ 1433.930367][T13721] usb 2-1: config 0 descriptor?? [ 1433.942534][T13721] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1434.157527][T13724] usb 5-1: Max retries (5) exceeded reading string descriptor 202 [ 1434.166133][T13724] letsketch 0003:6161:4D15.005A: probe with driver letsketch failed with error -71 [ 1434.179417][T13724] usb 5-1: USB disconnect, device number 115 [ 1434.663996][ T5941] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1434.815853][ T5941] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1434.827253][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1434.841414][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1434.851957][ T5941] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1434.866176][ T5941] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1434.875632][ T5941] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1434.884767][ T5941] usb 3-1: Manufacturer: syz [ 1434.940714][ T5941] usb 3-1: config 0 descriptor?? [ 1435.191277][T13724] usb 2-1: USB disconnect, device number 110 [ 1435.371864][ T5941] appleir 0003:05AC:8243.005B: unknown main item tag 0x0 [ 1435.388403][ T5941] appleir 0003:05AC:8243.005B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1435.444204][ T5915] usb 4-1: USB disconnect, device number 112 [ 1435.801027][T22090] tipc: Resetting bearer [ 1435.822872][T22090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1435.875440][T22089] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4609'. [ 1436.099906][T22093] loop3: detected capacity change from 0 to 1 [ 1436.132610][T22093] Dev loop3: unable to read RDB block 1 [ 1436.139911][T22093] loop3: unable to read partition table [ 1436.150609][T22093] loop3: partition table beyond EOD, truncated [ 1436.158588][T22093] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1436.994278][ T57] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1437.179608][ T57] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 1437.187814][ T57] usb 2-1: config 0 has no interface number 0 [ 1437.215393][ T57] usb 2-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1437.240021][ T57] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1437.252292][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.261299][ T57] usb 2-1: Product: syz [ 1437.266429][ T57] usb 2-1: Manufacturer: syz [ 1437.271077][ T57] usb 2-1: SerialNumber: syz [ 1437.290644][ T57] usb 2-1: config 0 descriptor?? [ 1437.298421][ T57] yurex 2-1:0.50: Could not find endpoints [ 1437.395966][ T10] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1437.474865][ T5915] usb 3-1: USB disconnect, device number 116 [ 1437.577498][ T10] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1437.586566][ T10] usb 5-1: config 0 has no interface number 0 [ 1437.603680][ T10] usb 5-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1437.660981][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1437.680469][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.700734][ T10] usb 5-1: Product: syz [ 1437.734500][ T10] usb 5-1: Manufacturer: syz [ 1437.746899][ T10] usb 5-1: SerialNumber: syz [ 1437.772528][ T10] usb 5-1: config 0 descriptor?? [ 1437.873116][ T10] yurex 5-1:0.50: Could not find endpoints [ 1438.366512][T22119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4619'. [ 1438.376346][T22119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4619'. [ 1438.514221][ T5915] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1438.852446][ T5915] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1438.883282][ T5915] usb 3-1: config 0 has no interface number 0 [ 1438.905783][ T5915] usb 3-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1438.941709][ T5915] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1438.952018][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.961805][ T5915] usb 3-1: Product: syz [ 1438.968540][ T5915] usb 3-1: Manufacturer: syz [ 1438.973641][ T5915] usb 3-1: SerialNumber: syz [ 1438.996978][ T5915] usb 3-1: config 0 descriptor?? [ 1439.009888][ T5915] yurex 3-1:0.50: Could not find endpoints [ 1439.612775][ T5941] usb 2-1: USB disconnect, device number 111 [ 1439.756638][T22142] syzkaller1: entered promiscuous mode [ 1439.765358][T22142] syzkaller1: entered allmulticast mode [ 1440.253587][ T5915] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1440.341183][ T10] usb 5-1: USB disconnect, device number 116 [ 1440.405207][ T5915] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 1440.414553][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.425324][ T5915] usb 4-1: config 0 descriptor?? [ 1440.542919][T22157] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1440.645750][ T5915] usbhid 4-1:0.0: can't add hid device: -71 [ 1440.655826][ T5915] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1440.677280][ T5915] usb 4-1: USB disconnect, device number 113 [ 1440.793614][T13724] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1440.965710][T13724] usb 5-1: config 0 has an invalid interface number: 99 but max is 0 [ 1440.978537][T13724] usb 5-1: config 0 has no interface number 0 [ 1440.989278][T13724] usb 5-1: config 0 interface 99 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1023 [ 1441.007812][T13724] usb 5-1: config 0 interface 99 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1441.032852][T13724] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=79.68 [ 1441.050438][T13724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.064031][T13724] usb 5-1: Product: syz [ 1441.068207][T13724] usb 5-1: Manufacturer: syz [ 1441.073805][T13724] usb 5-1: SerialNumber: syz [ 1441.085175][T13724] usb 5-1: config 0 descriptor?? [ 1441.093849][T22157] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1441.104345][T13724] ftdi_sio 5-1:0.99: FTDI USB Serial Device converter detected [ 1441.115425][T13724] ftdi_sio ttyUSB0: unknown device type: 0x7968 [ 1441.133551][ T5941] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1441.221824][T13721] usb 3-1: USB disconnect, device number 117 [ 1441.303589][ T5941] usb 2-1: Using ep0 maxpacket: 8 [ 1441.321990][ T5941] usb 2-1: config 0 has no interfaces? [ 1441.335561][ T5941] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1441.360931][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.386590][ T5941] usb 2-1: Product: syz [ 1441.397022][ T5941] usb 2-1: Manufacturer: syz [ 1441.429858][ T5941] usb 2-1: SerialNumber: syz [ 1441.444259][ T5941] usb 2-1: config 0 descriptor?? [ 1441.514902][T22174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4644'. [ 1441.613616][T13724] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1441.672754][T22176] netlink: 'syz.2.4645': attribute type 1 has an invalid length. [ 1441.710782][T22176] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1441.745964][T22176] bond3: (slave geneve2): making interface the new active one [ 1441.761116][T22176] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1441.776755][T13724] usb 4-1: Using ep0 maxpacket: 32 [ 1441.783569][ T6072] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.793967][ T6072] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.794015][T13724] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1441.803090][ T6072] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.824824][ T6072] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.832747][T13724] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1441.845846][T13724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.864008][T13724] usb 4-1: Product: syz [ 1441.874052][T13724] usb 4-1: Manufacturer: syz [ 1441.881218][T13724] usb 4-1: SerialNumber: syz [ 1441.895710][T13724] usb 4-1: config 0 descriptor?? [ 1441.901363][T22170] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1441.912757][T13724] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input76 [ 1442.133573][T13721] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1442.171340][T13724] usb 4-1: USB disconnect, device number 114 [ 1442.177468][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1442.315146][T13721] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1442.324685][T13721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.335244][T13721] usb 3-1: config 0 descriptor?? [ 1443.431161][ T5915] usb 5-1: USB disconnect, device number 117 [ 1443.450808][ T5915] ftdi_sio 5-1:0.99: device disconnected [ 1443.553316][T13721] usb 3-1: Cannot set autoneg [ 1443.567747][T13721] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1443.598070][T13721] usb 3-1: USB disconnect, device number 118 [ 1443.936454][T13724] usb 2-1: USB disconnect, device number 112 [ 1444.540145][T13724] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1444.586016][T22233] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4667'. [ 1444.723664][T13724] usb 2-1: Using ep0 maxpacket: 8 [ 1444.730343][T13724] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1444.740560][T13724] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1444.772348][T13724] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1444.783666][T13721] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1444.813810][T13724] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1444.837569][T13724] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1444.889444][T13724] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1444.898667][T13724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.917869][T22237] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1445.106420][T13721] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1445.115426][T13721] usb 5-1: config 0 has no interface number 0 [ 1445.159054][T13724] usb 2-1: usb_control_msg returned -32 [ 1445.165049][T13724] usbtmc 2-1:16.0: can't read capabilities [ 1445.268851][T13721] usb 5-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1445.322686][T13721] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1445.333729][T13721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.341728][T13721] usb 5-1: Product: syz [ 1445.357583][T13721] usb 5-1: Manufacturer: syz [ 1445.370343][T13721] usb 5-1: SerialNumber: syz [ 1445.391462][T13721] usb 5-1: config 0 descriptor?? [ 1445.413231][T13721] yurex 5-1:0.50: Could not find endpoints [ 1445.916011][T22246] usbtmc 2-1:16.0: usb_clear_halt returned -32 [ 1446.118202][T13721] usb 2-1: USB disconnect, device number 113 [ 1446.204007][ T10] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1446.368788][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1446.380157][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1446.390854][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1446.400434][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.413088][T22248] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1446.426456][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1446.627911][ T10] usb 4-1: USB disconnect, device number 115 [ 1446.760512][T22251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4673'. [ 1446.770584][T22251] netlink: 'syz.1.4673': attribute type 13 has an invalid length. [ 1446.790476][T22251] vxlan0: entered promiscuous mode [ 1446.799486][ T3955] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1446.815098][ T3955] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1446.824384][ T3955] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1446.833429][ T3955] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1447.387631][T13721] usb 5-1: USB disconnect, device number 118 [ 1447.846726][T13721] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1448.153833][T13721] usb 5-1: Using ep0 maxpacket: 32 [ 1448.251942][T13721] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1448.479346][T13721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.873874][ T5915] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 1448.953356][T13721] usb 5-1: Product: syz [ 1448.958150][T13721] usb 5-1: Manufacturer: syz [ 1448.962955][T13721] usb 5-1: SerialNumber: syz [ 1448.976235][T13721] usb 5-1: config 0 descriptor?? [ 1448.985768][T13721] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1448.994161][T13721] dvb-usb: bulk message failed: -22 (2/0) [ 1449.004089][T13721] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1449.017501][T13721] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1449.026803][T13721] usb 5-1: media controller created [ 1449.053743][T13721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1449.082100][T13721] usb 5-1: selecting invalid altsetting 7 [ 1449.085718][ T5915] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1449.089953][T13721] cxusb: set interface failed [ 1449.102731][T13721] dvb-usb: bulk message failed: -22 (1/0) [ 1449.102899][ T5915] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1449.162510][ T5915] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1449.171736][T13721] DVB: Unable to find symbol lgdt330x_attach() [ 1449.171751][T13721] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1449.213543][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.326078][T13721] rc_core: IR keymap rc-dvico-portable not found [ 1449.332917][T13721] Registered IR keymap rc-empty [ 1449.358763][T13721] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1449.382796][T13721] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input77 [ 1449.399097][T13721] dvb-usb: schedule remote query interval to 100 msecs. [ 1449.406176][T13721] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1449.433998][T13721] usb 5-1: USB disconnect, device number 119 [ 1449.449147][ T5915] usb 3-1: usb_control_msg returned -32 [ 1449.466311][ T5915] usbtmc 3-1:16.0: can't read capabilities [ 1449.699691][T22287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4687'. [ 1449.718570][T13721] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1449.732292][T22287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4687'. [ 1449.743633][T13716] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1449.946923][T13716] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1449.968502][T13716] usb 4-1: config 0 has no interface number 0 [ 1449.990454][T13716] usb 4-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1450.219494][T13716] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1450.307992][T13716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.326272][T13716] usb 4-1: Product: syz [ 1450.336164][T13716] usb 4-1: Manufacturer: syz [ 1450.343533][T13716] usb 4-1: SerialNumber: syz [ 1450.359879][T13716] usb 4-1: config 0 descriptor?? [ 1450.377662][T13716] yurex 4-1:0.50: Could not find endpoints [ 1450.404701][T13721] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1450.583795][ T5915] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1450.626990][T13721] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 1450.635279][T13721] usb 2-1: config 0 has no interface number 0 [ 1450.641403][T13721] usb 2-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1450.670169][T13721] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1450.684996][T13721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.705422][T13721] usb 2-1: Product: syz [ 1450.714514][T13721] usb 2-1: Manufacturer: syz [ 1450.720443][T13721] usb 2-1: SerialNumber: syz [ 1450.809985][T13721] usb 2-1: config 0 descriptor?? [ 1450.829035][T13721] yurex 2-1:0.50: Could not find endpoints [ 1450.886666][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1450.899044][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1450.998517][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1451.072522][ T5915] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1451.082340][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.093312][ T5915] usb 5-1: config 0 descriptor?? [ 1451.397573][T13721] usb 3-1: USB disconnect, device number 119 [ 1451.629648][ T5915] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 1451.638347][ T5915] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 1451.658626][ T5915] plantronics 0003:047F:FFFF.005C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1452.323605][T13721] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1452.476537][ T5915] usb 4-1: USB disconnect, device number 116 [ 1452.559384][T13721] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1452.567615][T13721] usb 3-1: config 0 has no interface number 0 [ 1452.573975][T13721] usb 3-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1452.697428][T13721] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1452.710788][T13721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.719152][T13721] usb 3-1: Product: syz [ 1452.724313][T13721] usb 3-1: Manufacturer: syz [ 1452.729092][T13721] usb 3-1: SerialNumber: syz [ 1452.741258][T13721] usb 3-1: config 0 descriptor?? [ 1452.797336][T13721] yurex 3-1:0.50: Could not find endpoints [ 1452.975877][T13721] usb 2-1: USB disconnect, device number 114 [ 1453.393709][T13721] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1453.416276][T22360] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4716'. [ 1453.565814][T13721] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1453.582441][T13721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1453.605045][T13721] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1453.619781][T13721] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1453.625805][ T10] usb 5-1: USB disconnect, device number 120 [ 1453.656844][T13721] usb 2-1: Manufacturer: syz [ 1453.675935][T13721] usb 2-1: config 0 descriptor?? [ 1453.863555][T13721] rc_core: IR keymap rc-hauppauge not found [ 1453.873409][T13721] Registered IR keymap rc-empty [ 1453.891011][T13721] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1453.927717][T13721] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input79 [ 1453.980206][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 1454.006321][T13721] usb 2-1: USB disconnect, device number 115 [ 1454.013693][T13724] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1454.208316][T13724] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1454.216577][T13724] usb 4-1: config 0 has no interface number 0 [ 1454.222729][T13724] usb 4-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1454.242235][T13724] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1454.254617][T13724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.262723][T13724] usb 4-1: Product: syz [ 1454.267354][T13724] usb 4-1: Manufacturer: syz [ 1454.272043][T13724] usb 4-1: SerialNumber: syz [ 1454.280608][T13724] usb 4-1: config 0 descriptor?? [ 1454.346551][T13724] yurex 4-1:0.50: Could not find endpoints [ 1454.844583][T13721] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1455.017033][T13721] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1455.025853][T13721] usb 5-1: config 0 has no interface number 0 [ 1455.035880][T13721] usb 5-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1455.087557][T13724] usb 3-1: USB disconnect, device number 120 [ 1455.139221][T22393] loop4: detected capacity change from 0 to 7 [ 1455.150138][T22393] Dev loop4: unable to read RDB block 7 [ 1455.162913][T22393] loop4: unable to read partition table [ 1455.178811][T22393] loop4: partition table beyond EOD, truncated [ 1455.200335][T13721] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1455.209511][T22393] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1455.240118][T13721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.265388][T13721] usb 5-1: Product: syz [ 1455.279123][T22397] syzkaller1: entered promiscuous mode [ 1455.285110][T22397] syzkaller1: entered allmulticast mode [ 1455.313686][T13721] usb 5-1: Manufacturer: syz [ 1455.318403][T13721] usb 5-1: SerialNumber: syz [ 1455.333369][T13721] usb 5-1: config 0 descriptor?? [ 1455.366120][T13721] yurex 5-1:0.50: Could not find endpoints [ 1455.633712][T13721] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1455.633931][T13724] usb 3-1: new low-speed USB device number 121 using dummy_hcd [ 1455.887448][T13721] usb 2-1: Using ep0 maxpacket: 32 [ 1455.892958][T13724] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1455.908634][T13721] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1455.919982][T13721] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1455.929823][T13724] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1455.955533][T13724] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1455.970583][T13724] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1455.991592][T13724] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1456.007725][T13724] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1456.081925][T13721] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1456.119329][T13721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1456.132589][T13721] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1456.144712][T13721] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1456.164650][T13721] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1456.174770][T13721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.236665][T13724] usb 3-1: string descriptor 0 read error: -22 [ 1456.246766][T13724] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1456.256719][T13724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.353137][T13721] usb 2-1: config 0 descriptor?? [ 1456.366199][T13724] adutux 3-1:168.0: interrupt endpoints not found [ 1456.554167][T22397] program syz.2.4730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1456.570954][T13721] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 116 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1456.620591][T13724] usb 4-1: USB disconnect, device number 117 [ 1456.787575][T13721] usb 2-1: USB disconnect, device number 116 [ 1456.803251][T13721] usblp0: removed [ 1456.947760][T22416] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1457.077182][T13721] usb 3-1: USB disconnect, device number 121 [ 1457.214083][T22424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4741'. [ 1457.226579][T22424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4741'. [ 1457.377701][T22426] veth0: entered promiscuous mode [ 1457.390545][T22426] veth0_to_hsr: entered promiscuous mode [ 1457.401550][T22425] veth0_to_hsr: left promiscuous mode [ 1457.408296][T22425] veth0: left promiscuous mode [ 1457.443633][ T10] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1457.486574][T13721] usb 5-1: USB disconnect, device number 121 [ 1457.695096][ T10] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1457.709121][ T10] usb 4-1: config 0 has no interface number 0 [ 1457.722581][ T10] usb 4-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1457.886850][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1457.914666][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.964465][ T10] usb 4-1: Product: syz [ 1457.969582][ T10] usb 4-1: Manufacturer: syz [ 1457.982303][ T10] usb 4-1: SerialNumber: syz [ 1458.003600][T13721] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1458.022873][ T10] usb 4-1: config 0 descriptor?? [ 1458.049734][ T10] yurex 4-1:0.50: Could not find endpoints [ 1458.103634][T13724] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1458.143601][T13721] usb 5-1: device descriptor read/64, error -71 [ 1458.153808][ T5915] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1458.452251][T13724] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1458.468364][T13724] usb 3-1: config 0 has no interface number 0 [ 1458.480713][T13724] usb 3-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1458.500192][T13724] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1458.516551][ T5915] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 1458.533712][ T5915] usb 2-1: config 0 has no interface number 0 [ 1458.540231][ T5915] usb 2-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1458.553533][T13721] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1458.554481][T13724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.578775][T13724] usb 3-1: Product: syz [ 1458.587722][ T5915] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1458.603005][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.623676][T13724] usb 3-1: Manufacturer: syz [ 1458.628347][ T5915] usb 2-1: Product: syz [ 1458.636096][ T5915] usb 2-1: Manufacturer: syz [ 1458.643252][T13724] usb 3-1: SerialNumber: syz [ 1458.651534][ T5915] usb 2-1: SerialNumber: syz [ 1458.659530][T13724] usb 3-1: config 0 descriptor?? [ 1458.677957][ T5915] usb 2-1: config 0 descriptor?? [ 1458.692574][ T5915] yurex 2-1:0.50: Could not find endpoints [ 1458.707681][T13721] usb 5-1: device descriptor read/64, error -71 [ 1458.717745][T13724] yurex 3-1:0.50: Could not find endpoints [ 1458.754117][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1458.834781][T13721] usb usb5-port1: attempt power cycle [ 1459.333577][T13721] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1459.354263][T13721] usb 5-1: device descriptor read/8, error -71 [ 1459.603746][T13721] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1459.624496][T13721] usb 5-1: device descriptor read/8, error -71 [ 1459.733954][T13721] usb usb5-port1: unable to enumerate USB device [ 1460.065813][T13724] usb 4-1: USB disconnect, device number 118 [ 1460.588198][ T5915] usb 3-1: USB disconnect, device number 122 [ 1460.744266][T13721] usb 2-1: USB disconnect, device number 117 [ 1460.976765][T22476] tipc: Resetting bearer [ 1461.026343][T13724] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1461.273688][T13721] usb 2-1: new low-speed USB device number 118 using dummy_hcd [ 1461.436697][T13721] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1461.447055][T13721] usb 2-1: config 0 has no interface number 0 [ 1461.459096][T13721] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1461.476163][T13721] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1461.494028][T13721] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1461.507406][T13721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.519521][T13721] usb 2-1: config 0 descriptor?? [ 1461.539738][T22472] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1461.555933][T13721] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1461.603835][T13724] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1461.614134][ T5915] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1461.757308][T13724] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1461.766238][T13724] usb 4-1: config 0 has no interface number 0 [ 1461.772697][T13724] usb 4-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1461.784118][T13721] usb 2-1: USB disconnect, device number 118 [ 1461.784167][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1461.805218][T13724] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1461.819245][T13724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.835196][T13724] usb 4-1: Product: syz [ 1461.947450][T22497] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1461.964375][T13724] usb 4-1: Manufacturer: syz [ 1461.969028][T13724] usb 4-1: SerialNumber: syz [ 1462.178310][T13724] usb 4-1: config 0 descriptor?? [ 1462.213551][ T5915] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1462.303287][T13724] yurex 4-1:0.50: Could not find endpoints [ 1462.525566][ T5915] usb 5-1: device descriptor read/64, error -71 [ 1462.713803][T22504] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4774'. [ 1462.805427][ T5915] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1463.027721][ T5915] usb 5-1: device descriptor read/64, error -71 [ 1463.174726][ T5915] usb usb5-port1: attempt power cycle [ 1463.373846][T13724] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1463.513896][ T5915] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1463.523519][T13724] usb 3-1: Using ep0 maxpacket: 8 [ 1463.530838][T13724] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1463.541230][ T5915] usb 5-1: device descriptor read/8, error -71 [ 1463.551375][T13724] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1463.562188][T13724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.571290][T13724] usb 3-1: Product: syz [ 1463.576212][T13724] usb 3-1: Manufacturer: syz [ 1463.580945][T13724] usb 3-1: SerialNumber: syz [ 1463.594066][T13724] usb 3-1: config 0 descriptor?? [ 1463.604565][T13724] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1463.784092][ T5915] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1463.804208][ T5915] usb 5-1: device descriptor read/8, error -71 [ 1463.913853][ T5915] usb usb5-port1: unable to enumerate USB device [ 1464.264292][T13721] usb 4-1: USB disconnect, device number 119 [ 1464.342748][T22519] syzkaller1: entered promiscuous mode [ 1464.349072][T22519] syzkaller1: entered allmulticast mode [ 1464.693623][T13721] usb 4-1: new low-speed USB device number 120 using dummy_hcd [ 1464.815811][T13724] gspca_zc3xx: reg_w_i err -71 [ 1464.845174][T13721] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1464.856509][T13721] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1464.871183][T13721] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1464.882437][T13721] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1464.898243][T13721] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1464.930179][T13721] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1464.978520][T13721] usb 4-1: string descriptor 0 read error: -22 [ 1464.986317][T13721] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1464.996187][T13721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.021946][T13721] adutux 4-1:168.0: interrupt endpoints not found [ 1465.333283][T22519] program syz.3.4780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1465.803633][T13724] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1465.843644][ T5915] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1466.032401][T13721] usb 4-1: USB disconnect, device number 120 [ 1466.107817][T13724] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1466.119462][T13724] usb 3-1: USB disconnect, device number 123 [ 1466.293597][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 1466.300943][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1466.312264][ T5915] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1466.321783][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.332451][ T5915] usb 5-1: config 0 descriptor?? [ 1466.513650][T13724] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1466.544419][ T5915] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1466.665915][T13724] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1466.674901][T13724] usb 3-1: config 0 has no interface number 0 [ 1466.683159][T13724] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1466.692543][T13724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.700972][T13724] usb 3-1: Product: syz [ 1466.705466][T13724] usb 3-1: Manufacturer: syz [ 1466.710064][T13724] usb 3-1: SerialNumber: syz [ 1466.718004][T13724] usb 3-1: config 0 descriptor?? [ 1466.953339][T13724] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1466.978625][T13724] usb 3-1: USB disconnect, device number 124 [ 1467.079796][T13721] usb 5-1: USB disconnect, device number 4 [ 1467.079796][ C0] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1467.103598][ T5915] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1467.273542][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 1467.281629][ T5915] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1467.298781][ T5915] usb 2-1: config 0 has no interface number 0 [ 1467.325046][ T5915] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1467.339553][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.354613][ T5915] usb 2-1: Product: syz [ 1467.378125][ T5915] usb 2-1: Manufacturer: syz [ 1467.392255][ T5915] usb 2-1: SerialNumber: syz [ 1467.416180][ T5915] usb 2-1: config 0 descriptor?? [ 1467.435717][ T5915] hub 2-1:0.132: bad descriptor, ignoring hub [ 1467.446424][ T5915] hub 2-1:0.132: probe with driver hub failed with error -5 [ 1467.466841][ T5915] usbhid 2-1:0.132: couldn't find an input interrupt endpoint [ 1467.603558][T13724] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1467.785999][T13724] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1467.794471][T13724] usb 4-1: config 0 has no interface number 0 [ 1467.800691][T13724] usb 4-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1467.859096][T13724] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1467.869751][T13724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.913123][T13724] usb 4-1: Product: syz [ 1467.945925][T13724] usb 4-1: Manufacturer: syz [ 1467.994188][T13724] usb 4-1: SerialNumber: syz [ 1468.047443][T13724] usb 4-1: config 0 descriptor?? [ 1468.071938][T13724] yurex 4-1:0.50: Could not find endpoints [ 1468.925310][T22570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4799'. [ 1469.717031][T22591] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4808'. [ 1469.924323][T13721] usb 2-1: USB disconnect, device number 119 [ 1470.105944][T22607] syzkaller1: entered promiscuous mode [ 1470.111478][T22607] syzkaller1: entered allmulticast mode [ 1470.123616][T13724] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1470.313650][T13724] usb 3-1: Using ep0 maxpacket: 16 [ 1470.355190][T13724] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.405669][T13724] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1470.415589][T13724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.474376][T13721] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1470.533975][T13724] usb 3-1: config 0 descriptor?? [ 1470.561147][T13724] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input80 [ 1470.639069][T13721] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 1470.653680][T13721] usb 2-1: config 0 has no interface number 0 [ 1470.660235][T13721] usb 2-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1470.678970][T13721] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1470.688722][T13721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.696958][T13721] usb 2-1: Product: syz [ 1470.701552][T13721] usb 2-1: Manufacturer: syz [ 1470.706447][T13721] usb 2-1: SerialNumber: syz [ 1470.715206][T13721] usb 2-1: config 0 descriptor?? [ 1470.723254][T13721] yurex 2-1:0.50: Could not find endpoints [ 1470.778620][ T5187] bcm5974 3-1:0.0: could not read from device [ 1470.867281][ T5187] bcm5974 3-1:0.0: could not read from device [ 1470.904910][T13724] usb 3-1: USB disconnect, device number 125 [ 1471.146849][ T5915] usb 4-1: USB disconnect, device number 121 [ 1471.181563][T22617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4819'. [ 1471.207413][T22617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4819'. [ 1471.943730][ T5915] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1472.093600][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 1472.105688][ T5915] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1472.114252][ T5915] usb 3-1: config 0 has no interface number 0 [ 1472.131437][ T5915] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1472.156241][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.178663][ T5915] usb 3-1: Product: syz [ 1472.184077][ T5915] usb 3-1: Manufacturer: syz [ 1472.210323][ T5915] usb 3-1: SerialNumber: syz [ 1472.235870][ T5915] usb 3-1: config 0 descriptor?? [ 1472.258348][ T5915] hub 3-1:0.132: bad descriptor, ignoring hub [ 1472.267944][ T5915] hub 3-1:0.132: probe with driver hub failed with error -5 [ 1472.288540][ T5915] usbhid 3-1:0.132: couldn't find an input interrupt endpoint [ 1473.131975][T13721] usb 2-1: USB disconnect, device number 120 [ 1473.905195][T13716] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 1474.092260][T13716] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.102684][T13716] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1474.126459][T13716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1474.178529][T13716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1474.201302][T13716] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1474.216454][T13716] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1474.254861][T13716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1474.268646][T13716] usb 4-1: Product: syz [ 1474.281098][T13716] usb 4-1: Manufacturer: syz [ 1474.297754][T13716] usb 4-1: SerialNumber: syz [ 1474.425694][T13721] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1474.458500][T13716] usb 4-1: config 0 descriptor?? [ 1474.637874][T13721] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 1474.663955][T13721] usb 2-1: config 0 has no interface number 0 [ 1474.686970][T13721] usb 2-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1474.729331][T13716] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1474.742785][T13716] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1474.761102][T13721] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1474.790620][T13721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.810771][T13721] usb 2-1: Product: syz [ 1474.826781][T13721] usb 2-1: Manufacturer: syz [ 1474.837797][T13721] usb 2-1: SerialNumber: syz [ 1474.925037][T13716] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 1474.932677][T13716] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1474.953151][T13721] usb 2-1: config 0 descriptor?? [ 1474.994271][T13716] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1475.049335][T13721] yurex 2-1:0.50: Could not find endpoints [ 1475.129869][T13716] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 1475.204248][ T5915] usb 3-1: USB disconnect, device number 126 [ 1475.744636][T13716] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1475.756578][T13716] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 1475.865188][T13716] usb 4-1: USB disconnect, device number 122 [ 1476.005536][T22664] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1476.253838][ T5915] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1476.637265][ T5915] usb 3-1: device descriptor read/64, error -71 [ 1477.113778][ T5915] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1477.121339][T13724] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1477.248040][T13716] usb 2-1: USB disconnect, device number 121 [ 1477.324492][ T5915] usb 3-1: device descriptor read/64, error -71 [ 1477.335847][T13724] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1477.344214][T13724] usb 4-1: config 0 has no interface number 0 [ 1477.356577][T13724] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1477.380464][T13724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.399189][T13724] usb 4-1: Product: syz [ 1477.404743][T13724] usb 4-1: Manufacturer: syz [ 1477.409518][T13724] usb 4-1: SerialNumber: syz [ 1477.421438][T13724] usb 4-1: config 0 descriptor?? [ 1477.433808][ T5915] usb usb3-port1: attempt power cycle [ 1477.608530][T22682] kvm: Disabled LAPIC found during irq injection [ 1477.651548][T13724] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1477.682644][T13724] usb 4-1: USB disconnect, device number 123 [ 1477.783659][ T5915] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1477.804761][ T5915] usb 3-1: device descriptor read/8, error -71 [ 1478.124211][ T5915] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1478.144816][ T5915] usb 3-1: device descriptor read/8, error -71 [ 1478.264203][ T5915] usb usb3-port1: unable to enumerate USB device [ 1478.600928][T22697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4848'. [ 1479.676333][T22721] syzkaller1: entered promiscuous mode [ 1479.683191][T22721] syzkaller1: entered allmulticast mode [ 1479.723595][T13716] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1479.896928][T13716] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1479.905842][T13716] usb 5-1: config 0 has no interface number 0 [ 1479.919584][T13716] usb 5-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1479.948830][T13716] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1479.957998][T13716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.966056][T13716] usb 5-1: Product: syz [ 1479.970315][T13716] usb 5-1: Manufacturer: syz [ 1479.983040][T13716] usb 5-1: SerialNumber: syz [ 1479.991719][T13716] usb 5-1: config 0 descriptor?? [ 1480.007790][T13716] yurex 5-1:0.50: Could not find endpoints [ 1480.157533][T22727] syz.2.4859 (22727): drop_caches: 2 [ 1480.318709][T22731] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1481.237209][T22758] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4870'. [ 1481.275167][T22758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1481.566959][T13721] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1481.747152][T13721] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1481.755557][T13721] usb 4-1: config 0 has no interface number 0 [ 1481.826343][T13721] usb 4-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1481.879832][T13721] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1481.910702][T13721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.943640][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1481.952994][T13721] usb 4-1: Product: syz [ 1481.963960][T13721] usb 4-1: Manufacturer: syz [ 1481.978947][T13721] usb 4-1: SerialNumber: syz [ 1482.006974][T13721] usb 4-1: config 0 descriptor?? [ 1482.026190][T13721] yurex 4-1:0.50: Could not find endpoints [ 1482.121808][ T10] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1482.136162][ T10] usb 3-1: config 0 has no interface number 0 [ 1482.143625][ T10] usb 3-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1482.180766][T13721] usb 5-1: USB disconnect, device number 5 [ 1482.451066][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1482.498571][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.530539][ T10] usb 3-1: Product: syz [ 1482.546264][ T10] usb 3-1: Manufacturer: syz [ 1482.552505][ T10] usb 3-1: SerialNumber: syz [ 1482.625027][ T10] usb 3-1: config 0 descriptor?? [ 1482.697967][ T10] yurex 3-1:0.50: Could not find endpoints [ 1483.783593][T13721] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1483.947416][T13721] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1483.955973][T13721] usb 5-1: config 0 has no interface number 0 [ 1483.978824][T13721] usb 5-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1484.055145][T13721] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1484.064479][T13721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.073144][T13721] usb 5-1: Product: syz [ 1484.078297][T13721] usb 5-1: Manufacturer: syz [ 1484.082965][T13721] usb 5-1: SerialNumber: syz [ 1484.090621][T13721] usb 5-1: config 0 descriptor?? [ 1484.101382][T13721] yurex 5-1:0.50: Could not find endpoints [ 1484.366720][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.373012][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.887472][ T10] usb 4-1: USB disconnect, device number 124 [ 1485.221888][ T10] usb 3-1: USB disconnect, device number 5 [ 1485.928068][T22803] netlink: 988 bytes leftover after parsing attributes in process `syz.2.4886'. [ 1485.970008][T22805] netlink: 'syz.3.4888': attribute type 2 has an invalid length. [ 1485.979586][T22805] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4888'. [ 1486.000045][T22805] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1486.595874][T13724] usb 5-1: USB disconnect, device number 6 [ 1486.693691][T13721] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1486.855145][T13721] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1486.863330][T13721] usb 4-1: config 0 has no interface number 0 [ 1486.869581][T13721] usb 4-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1486.885907][T13721] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1486.895987][T13721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.904069][T13721] usb 4-1: Product: syz [ 1486.908274][T13721] usb 4-1: Manufacturer: syz [ 1486.912862][T13721] usb 4-1: SerialNumber: syz [ 1486.922473][T13721] usb 4-1: config 0 descriptor?? [ 1486.929937][T13721] yurex 4-1:0.50: Could not find endpoints [ 1487.993569][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 1488.097488][T22835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4899'. [ 1488.106870][T22835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4899'. [ 1488.145036][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1488.157279][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1488.170749][ T10] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1488.180382][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.192523][ T10] usb 3-1: config 0 descriptor?? [ 1488.203633][T22833] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1488.441139][T22833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.479519][T22833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1488.509352][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1488.524574][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1488.543312][ T10] usb 3-1: USB disconnect, device number 6 [ 1488.577482][T22840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4901'. [ 1488.705942][T22848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4904'. [ 1489.025693][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1489.183556][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1489.196520][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 1489.218623][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1489.237691][ T10] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1489.248948][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.259943][ T10] usb 3-1: config 0 descriptor?? [ 1489.270620][T22860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1489.288274][T13716] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1489.297588][T13721] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1489.314224][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 1489.320154][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1489.371782][T13716] usb 4-1: USB disconnect, device number 125 [ 1489.466063][T13721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1489.480038][T13721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1489.491099][T13721] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1489.554518][T13721] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1489.576991][ T5941] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1489.603616][T13721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.617873][T13721] usb 2-1: config 0 descriptor?? [ 1489.692605][T22873] syzkaller1: entered promiscuous mode [ 1489.704069][T22873] syzkaller1: entered allmulticast mode [ 1489.738097][ T10] hid-rmi 0003:06CB:81A7.005D: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 1490.003778][ T5941] usb 4-1: new low-speed USB device number 126 using dummy_hcd [ 1490.033425][T22880] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4919'. [ 1490.074188][T22880] bond4: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 1490.099991][T22880] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4919'. [ 1490.109199][T22880] bond4: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 1490.124153][T13721] plantronics 0003:047F:FFFF.005E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1490.172778][T13716] usb 3-1: USB disconnect, device number 7 [ 1490.216682][ T5941] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1490.257267][ T5941] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1490.305492][ T5941] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1490.318699][ T5941] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1490.334313][ T5941] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1490.346051][ T5941] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1490.362875][ T5941] usb 4-1: string descriptor 0 read error: -22 [ 1490.383676][ T5941] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1490.403738][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.426772][ T5941] adutux 4-1:168.0: interrupt endpoints not found [ 1490.531934][T22898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4924'. [ 1490.725889][T22899] program syz.3.4915 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1491.961412][T13721] usb 4-1: USB disconnect, device number 126 [ 1492.059856][T13716] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1492.155899][ T5941] usb 2-1: USB disconnect, device number 122 [ 1492.276043][T13716] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1492.303288][T13716] usb 3-1: config 0 has no interface number 0 [ 1492.324561][T13716] usb 3-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1492.385635][T13716] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1492.404052][T13716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.427573][T13716] usb 3-1: Product: syz [ 1492.452850][T13716] usb 3-1: Manufacturer: syz [ 1492.457758][T13716] usb 3-1: SerialNumber: syz [ 1492.466463][T13716] usb 3-1: config 0 descriptor?? [ 1492.486953][T13716] yurex 3-1:0.50: Could not find endpoints [ 1493.756484][T22961] sctp: [Deprecated]: syz.0.4951 (pid 22961) Use of int in max_burst socket option. [ 1493.756484][T22961] Use struct sctp_assoc_value instead [ 1494.273585][T13716] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1494.542658][T13716] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 1494.550937][T13716] usb 2-1: config 0 has no interface number 0 [ 1494.561332][T13716] usb 2-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1494.633704][ T5941] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1494.786396][T13721] usb 3-1: USB disconnect, device number 8 [ 1494.807424][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1494.832385][ T5941] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1495.054114][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.070993][T13716] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1495.100366][ T5941] usb 5-1: config 0 descriptor?? [ 1495.114951][T13716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.130548][T22976] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1495.151185][T13716] usb 2-1: Product: syz [ 1496.413012][T13716] usb 2-1: Manufacturer: syz [ 1496.417849][T13716] usb 2-1: SerialNumber: syz [ 1496.426021][T13716] usb 2-1: config 0 descriptor?? [ 1496.442373][ T5941] elan 0003:04F3:0755.005F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 1496.478570][T13716] yurex 2-1:0.50: Could not find endpoints [ 1496.969910][ T10] usb 5-1: USB disconnect, device number 7 [ 1497.373538][T13724] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1497.546639][T13724] usb 3-1: config 0 has no interfaces? [ 1497.560681][T13724] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1497.583696][T13724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.603480][T13724] usb 3-1: Product: syz [ 1497.607646][T13724] usb 3-1: Manufacturer: syz [ 1497.632626][T13724] usb 3-1: SerialNumber: syz [ 1497.644067][T13724] usb 3-1: config 0 descriptor?? [ 1497.901881][ T10] usb 3-1: USB disconnect, device number 9 [ 1497.964684][T13724] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1498.124387][T13724] usb 5-1: Using ep0 maxpacket: 16 [ 1498.236698][T13724] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1498.246194][ T5915] usb 2-1: USB disconnect, device number 123 [ 1498.267454][T13724] usb 5-1: config 0 has no interface number 0 [ 1498.300925][T13724] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1498.311575][T23022] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1498.571747][T13724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.584290][ T10] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1498.638894][T13724] usb 5-1: Product: syz [ 1498.672830][T13724] usb 5-1: Manufacturer: syz [ 1498.700521][T23028] ip6gre1: entered promiscuous mode [ 1498.721870][T13724] usb 5-1: SerialNumber: syz [ 1498.743626][ T10] usb 4-1: device descriptor read/64, error -71 [ 1498.804800][T13724] usb 5-1: config 0 descriptor?? [ 1498.818776][T23028] ip6gre1: entered allmulticast mode [ 1499.078153][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1499.221359][T23029] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1499.440117][ T5969] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1499.469574][T13724] hub 5-1:0.132: bad descriptor, ignoring hub [ 1499.476748][ T5941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1499.494059][ T5969] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1499.521191][T13724] hub 5-1:0.132: probe with driver hub failed with error -5 [ 1499.553881][ T10] usb 4-1: device descriptor read/64, error -71 [ 1499.582288][T13724] usbhid 5-1:0.132: couldn't find an input interrupt endpoint [ 1499.663901][ T10] usb usb4-port1: attempt power cycle [ 1499.689840][T23033] syzkaller1: entered promiscuous mode [ 1499.703278][T23033] syzkaller1: entered allmulticast mode [ 1500.014339][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1500.062067][ T10] usb 4-1: device descriptor read/8, error -71 [ 1500.135136][ T5941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1500.303550][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1500.335595][ T10] usb 4-1: device descriptor read/8, error -71 [ 1500.353757][ T5941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1500.449218][ T10] usb usb4-port1: unable to enumerate USB device [ 1500.563635][ T5941] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1500.613555][T13716] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1500.737168][ T5941] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1500.746346][ T5941] usb 3-1: config 0 has no interface number 0 [ 1500.752447][ T5941] usb 3-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1500.765704][T13716] usb 2-1: Using ep0 maxpacket: 8 [ 1500.794840][T13716] usb 2-1: config 3 has an invalid interface number: 188 but max is 0 [ 1500.811093][T13716] usb 2-1: config 3 has no interface number 0 [ 1500.838110][T13716] usb 2-1: New USB device found, idVendor=041e, idProduct=3f02, bcdDevice=bd.51 [ 1500.849717][T13716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.913246][T13716] usb 2-1: Product: syz [ 1500.918428][T13716] usb 2-1: Manufacturer: syz [ 1500.923111][T13716] usb 2-1: SerialNumber: syz [ 1500.945118][ T5941] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1500.959405][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.988460][ T5941] usb 3-1: Product: syz [ 1500.992754][ T5941] usb 3-1: Manufacturer: syz [ 1501.025067][ T5941] usb 3-1: SerialNumber: syz [ 1501.079001][ T5941] usb 3-1: config 0 descriptor?? [ 1501.109052][T23051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4978'. [ 1501.142586][T13716] usb 2-1: unknown interface protocol 0x5, assuming v1 [ 1501.154787][ T5941] yurex 3-1:0.50: Could not find endpoints [ 1501.162180][T13716] usb 2-1: cannot find UAC_HEADER [ 1501.172830][T23052] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 1501.208027][T13716] snd-usb-audio 2-1:3.188: probe with driver snd-usb-audio failed with error -22 [ 1501.334597][T13716] usb 2-1: USB disconnect, device number 124 [ 1501.438162][T14338] udevd[14338]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1501.889611][T23067] syzkaller1: entered promiscuous mode [ 1501.910346][T23067] syzkaller1: entered allmulticast mode [ 1501.933764][T13716] usb 5-1: USB disconnect, device number 8 [ 1502.013767][ T5941] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1502.187051][ T5941] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1502.195413][ T5941] usb 4-1: config 0 has no interface number 0 [ 1502.204955][ T5941] usb 4-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1502.213542][ T10] usb 2-1: new low-speed USB device number 125 using dummy_hcd [ 1502.279485][ T5941] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1502.283633][T13724] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1502.317977][T23074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4987'. [ 1502.365561][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.417996][ T5941] usb 4-1: Product: syz [ 1502.422175][ T5941] usb 4-1: Manufacturer: syz [ 1502.430346][ T5941] usb 4-1: SerialNumber: syz [ 1502.451652][T13724] usb 5-1: Using ep0 maxpacket: 16 [ 1502.459831][T13724] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1502.474805][T13724] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1502.475428][ T5941] usb 4-1: config 0 descriptor?? [ 1502.586768][ T10] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1502.696325][ T10] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1502.730766][ T5941] yurex 4-1:0.50: Could not find endpoints [ 1502.744310][ T10] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1502.755141][ T10] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1502.769057][T13724] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1502.778200][T13724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.786580][T13724] usb 5-1: Product: syz [ 1502.794108][ T10] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1502.926091][T13724] usb 5-1: Manufacturer: syz [ 1502.951230][ T10] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1502.964621][T13724] usb 5-1: SerialNumber: syz [ 1502.987068][ T10] usb 2-1: string descriptor 0 read error: -22 [ 1502.994851][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1503.004787][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.024425][ T10] adutux 2-1:168.0: interrupt endpoints not found [ 1503.180667][T13724] usb 5-1: 0:2 : does not exist [ 1503.196163][T13724] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1503.221822][T13724] usb 5-1: USB disconnect, device number 9 [ 1503.236743][T23067] program syz.1.4984 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1503.269416][T14338] udevd[14338]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1503.467630][T13724] usb 3-1: USB disconnect, device number 10 [ 1503.713641][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1503.776412][ T5941] usb 2-1: USB disconnect, device number 125 [ 1504.583587][T13724] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1504.717671][ T5941] usb 4-1: USB disconnect, device number 5 [ 1504.733812][T13716] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1504.763583][T13724] usb 2-1: Using ep0 maxpacket: 8 [ 1504.786346][T13724] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1504.853842][T13724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.894709][T13724] usb 2-1: Product: syz [ 1504.910118][T13724] usb 2-1: Manufacturer: syz [ 1504.934158][T13716] usb 5-1: Using ep0 maxpacket: 16 [ 1504.943950][T13716] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1504.952247][T13716] usb 5-1: config 0 has no interface number 0 [ 1504.964957][T13716] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1504.974677][T13724] usb 2-1: SerialNumber: syz [ 1504.979420][T13716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.982026][T13724] usb 2-1: config 0 descriptor?? [ 1505.006446][T13716] usb 5-1: Product: syz [ 1505.023590][T13716] usb 5-1: Manufacturer: syz [ 1505.043613][T13716] usb 5-1: SerialNumber: syz [ 1505.067566][T13716] usb 5-1: config 0 descriptor?? [ 1505.076375][T13716] hub 5-1:0.132: bad descriptor, ignoring hub [ 1505.083212][T13716] hub 5-1:0.132: probe with driver hub failed with error -5 [ 1505.092659][T13716] usbhid 5-1:0.132: couldn't find an input interrupt endpoint [ 1505.180339][T23113] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1505.208234][T13724] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1505.297933][T23116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5002'. [ 1506.092480][T23131] syzkaller1: entered promiscuous mode [ 1506.099497][T23131] syzkaller1: entered allmulticast mode [ 1506.286073][T23135] tipc: Resetting bearer [ 1506.318705][ T3450] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.352400][ T3450] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.386912][ T3450] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.443630][ T3450] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.643964][T13724] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1506.662957][T13724] usb 2-1: USB disconnect, device number 126 [ 1506.986695][T23162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5021'. [ 1506.998719][T23162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5021'. [ 1507.010407][T23162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5021'. [ 1507.365046][T13716] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1507.594210][T13721] usb 5-1: USB disconnect, device number 10 [ 1507.763822][T13716] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1507.772945][T13716] usb 4-1: config 0 has no interface number 0 [ 1507.779365][T13716] usb 4-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1507.983622][T13724] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1508.038830][ T30] audit: type=1326 audit(1768445756.127:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23174 comm="syz.0.5026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7fc00000 [ 1508.100317][T13716] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1508.132667][T13716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.161533][T13716] usb 4-1: Product: syz [ 1508.243499][T13724] usb 3-1: Using ep0 maxpacket: 16 [ 1508.452019][T13724] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1508.533635][T13724] usb 3-1: config 0 has no interface number 0 [ 1508.540010][T13724] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1508.555567][T13724] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1508.565932][T13724] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1508.576245][T13724] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1508.585435][T13724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.636964][T13724] usb 3-1: Product: syz [ 1509.758907][T13724] usb 3-1: Manufacturer: syz [ 1510.003647][T13724] usb 3-1: SerialNumber: syz [ 1510.014446][T13724] usb 3-1: config 0 descriptor?? [ 1510.213107][T23177] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1510.223909][T23177] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1510.296808][T13716] usb 4-1: Manufacturer: syz [ 1510.308589][T13716] usb 4-1: SerialNumber: syz [ 1510.349994][T13716] usb 4-1: config 0 descriptor?? [ 1510.450878][T23182] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1510.480016][ T30] audit: type=1326 audit(1768445758.567:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23174 comm="syz.0.5026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70cd558 code=0x7fc00000 [ 1510.583325][T23177] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1510.624624][T23177] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1510.791634][T23187] syzkaller0: entered promiscuous mode [ 1510.797262][T23187] syzkaller0: entered allmulticast mode [ 1510.973042][T13716] usb 4-1: can't set config #0, error -71 [ 1511.003775][T13716] usb 4-1: USB disconnect, device number 6 [ 1511.285916][T13724] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1511.539808][T13724] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1511.558660][T13724] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 1511.569476][T13724] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 1511.585543][T13724] usb 3-1: USB disconnect, device number 11 [ 1512.515488][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1512.596259][T13724] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 1512.817224][T23196] syzkaller1: entered promiscuous mode [ 1512.822726][T23196] syzkaller1: entered allmulticast mode [ 1512.865936][T13724] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1512.901554][T13724] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1512.964550][T13724] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1512.976270][T13724] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1512.995477][T13724] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1513.006665][T13724] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1513.023316][T13724] usb 3-1: string descriptor 0 read error: -22 [ 1513.045505][T13724] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1513.083245][T13724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.112818][T13724] adutux 3-1:168.0: interrupt endpoints not found [ 1513.266662][T23217] syzkaller1: entered promiscuous mode [ 1513.272369][T23217] syzkaller1: entered allmulticast mode [ 1513.313232][T23220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5041'. [ 1513.325760][T23195] program syz.2.5033 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1513.337741][T13721] usb 3-1: USB disconnect, device number 12 [ 1513.344407][T23220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5041'. [ 1513.409479][T13716] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1513.580781][T13716] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1513.758817][T13716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1514.022604][T13716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1514.032808][T13716] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1514.075781][T13716] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1514.087467][T13716] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1514.100953][T13716] usb 5-1: Manufacturer: syz [ 1514.114122][T13716] usb 5-1: config 0 descriptor?? [ 1514.536070][T13716] appleir 0003:05AC:8243.0060: unknown main item tag 0x0 [ 1514.557105][T13716] appleir 0003:05AC:8243.0060: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1514.747609][ T10] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1514.953989][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1514.999458][ T10] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1515.018520][ T10] usb 2-1: config 0 has no interface number 0 [ 1515.037742][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1515.057404][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.076578][T13724] usb 5-1: USB disconnect, device number 11 [ 1515.110205][ T10] usb 2-1: Product: syz [ 1515.118818][ T10] usb 2-1: Manufacturer: syz [ 1515.134746][ T10] usb 2-1: SerialNumber: syz [ 1515.147818][ T10] usb 2-1: config 0 descriptor?? [ 1515.164931][ T10] hub 2-1:0.132: bad descriptor, ignoring hub [ 1515.171244][ T10] hub 2-1:0.132: probe with driver hub failed with error -5 [ 1515.184625][ T10] usbhid 2-1:0.132: couldn't find an input interrupt endpoint [ 1516.173584][T13716] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1516.323655][T13716] usb 5-1: Using ep0 maxpacket: 16 [ 1516.344704][T13716] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1516.353496][T13716] usb 5-1: config 0 has no interface number 0 [ 1516.378225][T13716] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1516.649300][T13716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.709274][T13716] usb 5-1: Product: syz [ 1516.779224][T13716] usb 5-1: Manufacturer: syz [ 1516.798636][T13716] usb 5-1: SerialNumber: syz [ 1516.860963][T13716] usb 5-1: config 0 descriptor?? [ 1516.892143][T13716] hub 5-1:0.132: bad descriptor, ignoring hub [ 1516.902736][T13716] hub 5-1:0.132: probe with driver hub failed with error -5 [ 1517.454494][T13716] usbhid 5-1:0.132: couldn't find an input interrupt endpoint [ 1517.921403][T23285] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1517.993920][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1518.082746][T23289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5062'. [ 1518.124202][T13721] usb 2-1: USB disconnect, device number 127 [ 1518.168436][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1518.184969][T13724] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1518.192939][ T10] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1518.205287][ T10] usb 3-1: config 0 has no interface number 0 [ 1518.219134][ T10] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1518.255161][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1518.275154][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.289451][ T10] usb 3-1: Product: syz [ 1518.300022][ T10] usb 3-1: Manufacturer: syz [ 1518.312249][ T10] usb 3-1: SerialNumber: syz [ 1518.340328][ T10] usb 3-1: config 0 descriptor?? [ 1518.356054][T13724] usb 4-1: config 0 has an invalid interface number: 99 but max is 0 [ 1518.356265][T23282] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1518.364548][T13724] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.418442][T13724] usb 4-1: config 0 has no interface number 0 [ 1518.429789][T13724] usb 4-1: config 0 interface 99 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1518.460544][T13724] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=79.68 [ 1518.496056][T13724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.517495][T13724] usb 4-1: Product: syz [ 1518.526721][T13724] usb 4-1: Manufacturer: syz [ 1518.539374][T13724] usb 4-1: SerialNumber: syz [ 1518.564529][T13724] usb 4-1: config 0 descriptor?? [ 1518.584101][T13724] ftdi_sio 4-1:0.99: FTDI USB Serial Device converter detected [ 1518.615410][T13724] ftdi_sio ttyUSB0: unknown device type: 0x7968 [ 1518.631333][T23282] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1518.916244][T23295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5065'. [ 1519.110595][T23297] netlink: 32266 bytes leftover after parsing attributes in process `syz.1.5066'. [ 1519.453596][T13724] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1519.603520][T13724] usb 2-1: Using ep0 maxpacket: 32 [ 1519.610186][T13724] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 1519.618727][T13724] usb 2-1: config 0 has no interface number 0 [ 1519.627045][T13724] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1519.636894][T13724] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1519.645410][T13724] usb 2-1: Product: syz [ 1519.649689][T13724] usb 2-1: Manufacturer: syz [ 1519.662316][T13724] usb 2-1: config 0 descriptor?? [ 1519.823814][T13721] usb 5-1: USB disconnect, device number 12 [ 1519.873012][ T30] audit: type=1326 audit(1768445767.957:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23304 comm="syz.4.5070" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x0 [ 1519.953111][T13721] usb 2-1: USB disconnect, device number 2 [ 1520.072663][ T10] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1520.084585][ T10] asix 3-1:0.188: probe with driver asix failed with error -71 [ 1520.101981][ T10] usb 3-1: USB disconnect, device number 13 [ 1520.570863][T23312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5072'. [ 1520.671353][T13721] usb 4-1: USB disconnect, device number 7 [ 1520.684892][T13721] ftdi_sio 4-1:0.99: device disconnected [ 1521.000566][T23330] netlink: 264 bytes leftover after parsing attributes in process `syz.0.5076'. [ 1521.075615][T23331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1521.249888][T13716] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1521.474051][T13724] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1521.709637][T23343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1521.733382][T13724] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1521.767395][T23341] syzkaller1: entered promiscuous mode [ 1521.772974][T23341] syzkaller1: entered allmulticast mode [ 1521.831907][T13724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.963038][T23344] netlink: 252 bytes leftover after parsing attributes in process `syz.2.5080'. [ 1521.995317][T13724] usb 2-1: Product: syz [ 1522.010899][T23344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1522.073877][T13724] usb 2-1: Manufacturer: syz [ 1522.078593][T13724] usb 2-1: SerialNumber: syz [ 1522.086464][T13724] usb 2-1: config 0 descriptor?? [ 1522.100781][T13724] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 003 [ 1522.276614][T13716] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1522.508275][T13724] (null): failure reading functionality [ 1522.526946][T13724] i2c i2c-2: failure reading functionality [ 1522.564864][T13724] i2c i2c-2: connected i2c-tiny-usb device [ 1523.073654][T13716] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1523.229034][T13716] usb 4-1: Using ep0 maxpacket: 32 [ 1523.244838][T13716] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1523.262670][T13716] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1523.278742][T13716] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1523.299477][T13716] usb 4-1: Product: syz [ 1523.305282][T13716] usb 4-1: Manufacturer: syz [ 1523.319662][T13716] usb 4-1: SerialNumber: syz [ 1523.338582][T13716] usb 4-1: config 0 descriptor?? [ 1523.355226][T23352] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1523.374529][T13716] hub 4-1:0.0: bad descriptor, ignoring hub [ 1523.380422][T13716] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1524.020328][T13716] usb 2-1: USB disconnect, device number 3 [ 1524.586922][ T57] usb 4-1: USB disconnect, device number 8 [ 1524.877125][T23368] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1525.167844][ T57] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1525.424751][ T57] usb 2-1: config 0 has an invalid interface number: 99 but max is 0 [ 1525.447895][ T57] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1525.487200][ T57] usb 2-1: config 0 has no interface number 0 [ 1525.505936][ T57] usb 2-1: config 0 interface 99 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1525.523638][T13716] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1525.534869][ T57] usb 2-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=79.68 [ 1525.544004][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.552387][ T57] usb 2-1: Product: syz [ 1525.560514][ T57] usb 2-1: Manufacturer: syz [ 1525.566773][ T57] usb 2-1: SerialNumber: syz [ 1525.577800][ T57] usb 2-1: config 0 descriptor?? [ 1525.599835][ T57] ftdi_sio 2-1:0.99: FTDI USB Serial Device converter detected [ 1525.617091][ T57] ftdi_sio ttyUSB0: unknown device type: 0x7968 [ 1525.695906][T23375] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1525.734133][T13716] usb 3-1: Using ep0 maxpacket: 16 [ 1525.745946][T13716] usb 3-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 1525.756450][T13716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.796726][T13716] usb 3-1: config 0 descriptor?? [ 1526.254137][ T57] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1526.415012][T23385] nvme_fabrics: missing parameter 'transport=%s' [ 1526.421805][T23385] nvme_fabrics: missing parameter 'nqn=%s' [ 1526.437919][ T57] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1526.447965][ T57] usb 4-1: config 0 has no interface number 0 [ 1526.470526][ T57] usb 4-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1526.498794][ T57] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1526.508772][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.524894][ T57] usb 4-1: Product: syz [ 1526.529425][ T57] usb 4-1: Manufacturer: syz [ 1526.534364][ T57] usb 4-1: SerialNumber: syz [ 1526.552358][ T57] usb 4-1: config 0 descriptor?? [ 1526.563053][ T57] yurex 4-1:0.50: Could not find endpoints [ 1527.023608][T13721] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1527.402505][T23404] netlink: 252 bytes leftover after parsing attributes in process `syz.0.5100'. [ 1527.437963][T23404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1527.464463][T13721] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1527.474222][ T57] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1527.489602][T13721] usb 5-1: config 0 has no interface number 0 [ 1527.500241][T13716] pegasus 3-1:0.0: can't locate MII phy, using default [ 1527.515539][T13721] usb 5-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1527.683059][T13716] pegasus 3-1:0.0: eth1, D-Link DSB-650TX, a2:11:cf:39:5c:d7 [ 1528.493501][T13716] usb 3-1: USB disconnect, device number 14 [ 1528.531009][ T57] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1528.538240][T13721] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1528.611304][T13721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.628264][T13721] usb 5-1: Product: syz [ 1528.631076][ T57] usb 2-1: USB disconnect, device number 4 [ 1528.671176][T13721] usb 5-1: Manufacturer: syz [ 1528.689191][T13721] usb 5-1: SerialNumber: syz [ 1528.781243][ T57] ftdi_sio 2-1:0.99: device disconnected [ 1528.788124][T13721] usb 5-1: config 0 descriptor?? [ 1528.811068][T13721] yurex 5-1:0.50: Could not find endpoints [ 1528.997836][ T57] usb 4-1: USB disconnect, device number 9 [ 1529.125781][T23419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5103'. [ 1529.402262][ T30] audit: type=1326 audit(1768445777.487:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23418 comm="syz.3.5104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56539 code=0x7fc00000 [ 1529.913523][T13716] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1530.160256][T13721] usb 5-1: USB disconnect, device number 13 [ 1530.170809][T13716] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 1530.215518][T13716] usb 2-1: config 0 has no interface number 0 [ 1530.252783][T13716] usb 2-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1530.434164][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1530.443594][T13716] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1530.452924][T13716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.502790][T13716] usb 2-1: Product: syz [ 1530.517123][T13716] usb 2-1: Manufacturer: syz [ 1530.537114][T13716] usb 2-1: SerialNumber: syz [ 1530.585961][T13716] usb 2-1: config 0 descriptor?? [ 1530.637662][T13716] yurex 2-1:0.50: Could not find endpoints [ 1531.293638][T23464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5112'. [ 1532.100559][ T30] audit: type=1326 audit(1768445780.187:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23418 comm="syz.3.5104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f56558 code=0x7fc00000 [ 1532.514924][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1532.703556][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1532.712533][ T10] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1532.721222][ T10] usb 5-1: config 0 has no interface number 0 [ 1532.844792][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1532.870190][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.889760][ T10] usb 5-1: Product: syz [ 1532.906353][ T10] usb 5-1: Manufacturer: syz [ 1532.926187][ T10] usb 5-1: SerialNumber: syz [ 1532.950885][ T10] usb 5-1: config 0 descriptor?? [ 1532.977706][ T10] hub 5-1:0.132: bad descriptor, ignoring hub [ 1533.073146][T13724] usb 2-1: USB disconnect, device number 5 [ 1533.085310][ T57] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1533.140203][ T10] hub 5-1:0.132: probe with driver hub failed with error -5 [ 1533.155974][ T10] usbhid 5-1:0.132: couldn't find an input interrupt endpoint [ 1533.343503][ T57] usb 3-1: Using ep0 maxpacket: 16 [ 1533.374552][ T57] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1533.383540][ T57] usb 3-1: config 0 has no interface number 0 [ 1533.396707][ T57] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1533.405794][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.414745][ T57] usb 3-1: Product: syz [ 1533.418966][ T57] usb 3-1: Manufacturer: syz [ 1533.423704][ T57] usb 3-1: SerialNumber: syz [ 1533.443814][ T57] usb 3-1: config 0 descriptor?? [ 1533.459719][ T57] hub 3-1:0.132: bad descriptor, ignoring hub [ 1533.472359][ T57] hub 3-1:0.132: probe with driver hub failed with error -5 [ 1533.521830][ T57] usbhid 3-1:0.132: couldn't find an input interrupt endpoint [ 1533.543578][T13724] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1533.708887][T13724] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 1533.717751][T13724] usb 2-1: config 0 has no interface number 0 [ 1533.725740][T13724] usb 2-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1533.762871][T13724] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1533.795288][T23492] netlink: 252 bytes leftover after parsing attributes in process `syz.0.5119'. [ 1533.805792][T13724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.855859][T13724] usb 2-1: Product: syz [ 1533.895471][T13724] usb 2-1: Manufacturer: syz [ 1533.904881][T13716] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1533.916245][T13724] usb 2-1: SerialNumber: syz [ 1533.930984][T23493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1533.957652][T13724] usb 2-1: config 0 descriptor?? [ 1534.060093][T13724] yurex 2-1:0.50: Could not find endpoints [ 1535.014445][T13716] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1535.384019][T13716] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1535.465267][T13724] usb 5-1: USB disconnect, device number 14 [ 1535.580119][T13716] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.590924][T13716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1535.614479][T13716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1535.630745][T13716] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1535.648324][T13716] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1535.668600][T23502] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1535.679541][T13716] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1535.689395][T23502] bond5 (unregistering): Released all slaves [ 1535.699284][T13716] usb 4-1: Manufacturer: syz [ 1535.717476][T13716] usb 4-1: config 0 descriptor?? [ 1536.046746][T13716] rc_core: IR keymap rc-hauppauge not found [ 1536.052771][T13716] Registered IR keymap rc-empty [ 1536.058201][T13716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1536.083659][T13716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1536.104810][T13716] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1536.118245][T13716] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input82 [ 1536.133364][T13716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1536.153649][T13716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1536.173637][T13716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1536.193922][T13716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1536.213554][T13716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1536.233630][T13716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1536.253581][T13716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1536.273715][T13716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1536.293619][T13716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1536.313684][T13716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1536.336739][T13716] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1536.345925][T13716] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1536.486833][T13716] usb 4-1: USB disconnect, device number 10 [ 1536.550395][T13721] usb 3-1: USB disconnect, device number 15 [ 1536.727440][T23519] netlink: 252 bytes leftover after parsing attributes in process `syz.4.5127'. [ 1536.780170][T23519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1536.863259][T23522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5129'. [ 1537.099068][T13724] usb 2-1: USB disconnect, device number 6 [ 1538.073540][ T57] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1538.223526][ T57] usb 2-1: Using ep0 maxpacket: 16 [ 1538.267362][ T57] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1538.432421][ T57] usb 2-1: config 0 has no interface number 0 [ 1538.456998][ T57] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1538.896322][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.966475][ T57] usb 2-1: Product: syz [ 1539.001277][ T57] usb 2-1: Manufacturer: syz [ 1539.028047][ T57] usb 2-1: SerialNumber: syz [ 1539.101592][ T57] usb 2-1: config 0 descriptor?? [ 1539.142823][ T57] hub 2-1:0.132: bad descriptor, ignoring hub [ 1539.193034][ T57] hub 2-1:0.132: probe with driver hub failed with error -5 [ 1539.275275][ T57] usbhid 2-1:0.132: couldn't find an input interrupt endpoint [ 1541.514009][T13716] usb 2-1: USB disconnect, device number 7 [ 1541.625136][T23596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5155'. [ 1541.821739][T23604] netlink: 252 bytes leftover after parsing attributes in process `syz.0.5156'. [ 1542.280011][T23606] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1542.296550][ T57] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1542.972735][T23619] syzkaller1: entered promiscuous mode [ 1542.993939][ T57] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1543.015765][T23619] syzkaller1: entered allmulticast mode [ 1543.050177][T23619] netlink: 'syz.2.5160': attribute type 64 has an invalid length. [ 1543.133546][T13716] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1543.162479][T23619] netlink: 'syz.2.5160': attribute type 4 has an invalid length. [ 1543.200089][T23619] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5160'. [ 1543.209242][T13721] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1543.317790][T13716] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1543.357590][T13716] usb 4-1: config 0 has no interface number 0 [ 1543.373546][T13721] usb 2-1: Using ep0 maxpacket: 32 [ 1543.389856][T13716] usb 4-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1543.403148][ T5941] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 1543.414236][T13721] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1543.457517][T13721] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1543.480571][T13716] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1543.513326][T13721] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1543.524151][T13716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.532125][T13716] usb 4-1: Product: syz [ 1543.569811][T13721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1543.588421][T13716] usb 4-1: Manufacturer: syz [ 1543.613721][T13716] usb 4-1: SerialNumber: syz [ 1543.624422][T13721] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1543.634919][ T5941] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1543.656518][T13716] usb 4-1: config 0 descriptor?? [ 1543.686161][ T5941] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1543.707801][T13721] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1543.732656][T13716] yurex 4-1:0.50: Could not find endpoints [ 1543.777043][ T5941] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1543.800151][T13721] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1543.839636][ T5941] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1543.865626][T13721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.896599][T13721] usb 2-1: config 0 descriptor?? [ 1544.027595][ T5941] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1544.079534][ T5941] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1544.144538][T13721] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1544.174151][ T5941] usb 3-1: string descriptor 0 read error: -22 [ 1544.186898][ T5941] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1544.251272][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.290145][T13721] usb 2-1: USB disconnect, device number 8 [ 1544.319104][T13721] usblp0: removed [ 1544.331645][ T5941] adutux 3-1:168.0: interrupt endpoints not found [ 1544.533135][T23619] program syz.2.5160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1544.544907][T13716] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1544.562105][ T5941] usb 3-1: USB disconnect, device number 16 [ 1544.687285][T23630] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5163'. [ 1544.698698][T23630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5163'. [ 1544.716080][T13716] usb 5-1: Using ep0 maxpacket: 16 [ 1544.727496][T13716] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1544.736018][T13721] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1544.744338][T13716] usb 5-1: config 0 has no interface number 0 [ 1544.774094][T13716] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1544.804927][T13716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.835844][T13716] usb 5-1: Product: syz [ 1544.862846][T13716] usb 5-1: Manufacturer: syz [ 1544.893578][T13721] usb 2-1: Using ep0 maxpacket: 32 [ 1544.901123][T13721] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1544.915118][T13716] usb 5-1: SerialNumber: syz [ 1544.923229][T13721] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1544.944240][T13716] usb 5-1: config 0 descriptor?? [ 1544.952524][T13716] hub 5-1:0.132: bad descriptor, ignoring hub [ 1544.962410][T13721] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1544.972044][T13716] hub 5-1:0.132: probe with driver hub failed with error -5 [ 1544.990688][T13716] usbhid 5-1:0.132: couldn't find an input interrupt endpoint [ 1544.998357][T13721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1545.050434][T13721] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1545.088180][T13721] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1545.131416][T13721] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1545.179653][T13721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.226485][T13721] usb 2-1: config 0 descriptor?? [ 1545.446920][T13721] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1545.503710][ T57] usb 4-1: USB disconnect, device number 11 [ 1545.771687][ C1] usblp0: nonzero read bulk status received: -71 [ 1545.779587][T23621] usblp0: error -71 reading from printer [ 1545.780991][T13721] usb 2-1: USB disconnect, device number 9 [ 1545.799918][T13721] usblp0: removed [ 1545.809281][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.815833][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.514502][T23657] syzkaller1: entered promiscuous mode [ 1546.520057][T23657] syzkaller1: entered allmulticast mode [ 1547.183627][T13721] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1547.263581][T13724] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1547.306309][T23674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5179'. [ 1547.354231][ T57] usb 5-1: USB disconnect, device number 15 [ 1547.355225][T13721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1547.391360][T13721] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1547.454614][T13721] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1547.457177][T13724] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1547.482383][T13721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.484643][T13724] usb 3-1: config 0 has no interface number 0 [ 1547.507138][T13724] usb 3-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1547.573823][T13721] usb 2-1: config 0 descriptor?? [ 1547.574484][T23679] syzkaller0: entered promiscuous mode [ 1547.579502][T23669] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1547.584531][T23679] syzkaller0: entered allmulticast mode [ 1547.627600][T13724] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1547.645461][T13724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.665475][T13724] usb 3-1: Product: syz [ 1547.669864][T13724] usb 3-1: Manufacturer: syz [ 1547.678334][T13724] usb 3-1: SerialNumber: syz [ 1547.693295][T13724] usb 3-1: config 0 descriptor?? [ 1547.718401][T13724] yurex 3-1:0.50: Could not find endpoints [ 1547.895837][T23669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1547.955843][T23669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1548.031509][T13721] usbhid 2-1:0.0: can't add hid device: -71 [ 1548.038169][T13721] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1548.108438][T13721] usb 2-1: USB disconnect, device number 10 [ 1548.408448][T23689] netlink: 'syz.4.5185': attribute type 1 has an invalid length. [ 1548.437772][T23689] macvlan0: entered promiscuous mode [ 1548.443080][T23689] macvlan0: entered allmulticast mode [ 1548.449569][T23689] bond5: entered promiscuous mode [ 1548.456075][T23689] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1548.466751][T23689] bond5: left promiscuous mode [ 1548.553596][T13721] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1548.713535][T13721] usb 2-1: Using ep0 maxpacket: 32 [ 1548.724133][T13721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 1548.743792][T13721] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1548.760681][T13721] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1548.775248][T13721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.799332][T13721] usb 2-1: config 0 descriptor?? [ 1548.819969][T13721] hub 2-1:0.0: bad descriptor, ignoring hub [ 1548.832527][T13721] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1549.553327][T13721] hid-multitouch 0003:0EEF:72C4.0061: reserved main item tag 0xd [ 1549.649397][T13721] hid-multitouch 0003:0EEF:72C4.0061: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 1549.894079][T23708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1549.917697][ T5941] usb 3-1: USB disconnect, device number 17 [ 1549.990600][T23708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1550.036035][T13721] usb 2-1: USB disconnect, device number 11 [ 1550.181274][T23715] syzkaller1: entered promiscuous mode [ 1550.194158][T23715] syzkaller1: entered allmulticast mode [ 1550.207455][T23715] netlink: 'syz.4.5193': attribute type 64 has an invalid length. [ 1550.222144][T23715] netlink: 'syz.4.5193': attribute type 4 has an invalid length. [ 1550.230454][T23715] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5193'. [ 1550.483581][T13724] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 1550.644963][T13724] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1550.655615][T13724] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1550.669756][T13724] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1550.680498][T13724] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1550.694756][T13724] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1550.705370][T13724] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1550.721099][T13724] usb 5-1: string descriptor 0 read error: -22 [ 1550.727417][T13724] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1550.736784][T13724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.749371][T13724] adutux 5-1:168.0: interrupt endpoints not found [ 1550.978281][T23715] program syz.4.5193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1551.559882][T13721] usb 5-1: USB disconnect, device number 16 [ 1551.564139][T23734] netlink: 'syz.1.5200': attribute type 10 has an invalid length. [ 1552.053552][T23748] netlink: 252 bytes leftover after parsing attributes in process `syz.2.5203'. [ 1552.163509][T13724] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1552.180889][T23754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1552.351687][T13724] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 1552.360320][T13724] usb 2-1: config 0 has no interface number 0 [ 1552.383777][T13724] usb 2-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1552.486592][T13716] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1552.617265][T13724] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1552.673669][T13716] usb 5-1: Using ep0 maxpacket: 8 [ 1552.674977][T13724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.700002][T13724] usb 2-1: Product: syz [ 1552.714649][T13716] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1552.722796][T13716] usb 5-1: config 0 has no interface number 0 [ 1552.738471][T13716] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1552.769598][T13716] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1552.805916][T13716] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1552.817265][T13716] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1552.832634][T13716] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1552.842826][T13716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.851056][T13724] usb 2-1: Manufacturer: syz [ 1552.883585][T13724] usb 2-1: SerialNumber: syz [ 1552.916649][T13724] usb 2-1: config 0 descriptor?? [ 1552.932832][T13724] yurex 2-1:0.50: Could not find endpoints [ 1552.950652][T13716] usb 5-1: config 0 descriptor?? [ 1552.986108][T13716] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1552.989123][T23767] syzkaller1: entered promiscuous mode [ 1553.017165][T23767] syzkaller1: entered allmulticast mode [ 1553.085599][T23768] netlink: 'syz.3.5212': attribute type 64 has an invalid length. [ 1553.097241][T23768] netlink: 'syz.3.5212': attribute type 4 has an invalid length. [ 1553.108068][T23768] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5212'. [ 1553.397229][T13724] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 1553.565377][T13724] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1553.578346][T13724] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1553.599740][T13724] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1553.615281][T13724] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1553.639439][T13724] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1553.653254][T13724] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1553.684822][T13724] usb 4-1: string descriptor 0 read error: -22 [ 1553.692477][T13724] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1553.708011][T13724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.731760][T13724] adutux 4-1:168.0: interrupt endpoints not found [ 1553.990926][T23768] program syz.3.5212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1554.779020][T13724] usb 2-1: USB disconnect, device number 12 [ 1555.100770][T13724] usb 5-1: USB disconnect, device number 17 [ 1555.100872][ C1] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 1555.130706][T13724] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1555.463624][ T57] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1555.553853][T13724] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1555.613591][ T57] usb 2-1: Using ep0 maxpacket: 16 [ 1555.620157][ T57] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1555.628591][ T57] usb 2-1: config 0 has no interface number 0 [ 1555.648281][ T57] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1555.648598][T13716] usb 4-1: USB disconnect, device number 12 [ 1555.663677][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.671672][ T57] usb 2-1: Product: syz [ 1555.683670][ T57] usb 2-1: Manufacturer: syz [ 1555.688318][ T57] usb 2-1: SerialNumber: syz [ 1555.705414][ T57] usb 2-1: config 0 descriptor?? [ 1555.716451][T13724] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1555.734242][ T57] hub 2-1:0.132: bad descriptor, ignoring hub [ 1555.740488][ T57] hub 2-1:0.132: probe with driver hub failed with error -5 [ 1555.748602][T13724] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1555.762876][ T57] usbhid 2-1:0.132: couldn't find an input interrupt endpoint [ 1555.770456][T13724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.792339][T13724] usb 5-1: config 0 descriptor?? [ 1555.814130][T13724] pwc: Askey VC010 type 2 USB webcam detected. [ 1556.019784][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880277bfc00: rx timeout, send abort [ 1556.202982][T13724] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1556.217225][T13724] pwc: recv_control_msg error -32 req 02 val 2700 [ 1556.225714][T23790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1556.235665][T13724] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1556.242995][T23790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1556.253286][T13724] pwc: recv_control_msg error -32 req 04 val 1000 [ 1556.260464][T13724] pwc: recv_control_msg error -32 req 04 val 1300 [ 1556.267750][T13724] pwc: recv_control_msg error -32 req 04 val 1400 [ 1556.479976][T13724] pwc: recv_control_msg error -71 req 02 val 2100 [ 1556.486931][T13724] pwc: recv_control_msg error -71 req 04 val 1500 [ 1556.493859][T13724] pwc: recv_control_msg error -71 req 02 val 2500 [ 1556.500627][T13724] pwc: recv_control_msg error -71 req 02 val 2400 [ 1556.507974][T13724] pwc: recv_control_msg error -71 req 02 val 2600 [ 1556.515468][T13724] pwc: recv_control_msg error -71 req 02 val 2900 [ 1556.519883][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b58d400: rx timeout, send abort [ 1556.522292][T13724] pwc: recv_control_msg error -71 req 02 val 2800 [ 1556.530212][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880277bfc00: abort rx timeout. Force session deactivation [ 1556.537065][T13724] pwc: recv_control_msg error -71 req 04 val 1100 [ 1556.553883][T13724] pwc: recv_control_msg error -71 req 04 val 1200 [ 1556.563914][T13724] pwc: Registered as video103. [ 1556.582053][T13724] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input83 [ 1556.632017][T13724] usb 5-1: USB disconnect, device number 18 [ 1556.883540][T13716] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1557.030140][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b58d400: abort rx timeout. Force session deactivation [ 1557.040456][T13716] usb 3-1: Using ep0 maxpacket: 32 [ 1557.047110][T13716] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1557.067110][T13716] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1557.077131][T13716] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1557.085655][T13716] usb 3-1: Product: syz [ 1557.089877][T13716] usb 3-1: Manufacturer: syz [ 1557.094511][T13716] usb 3-1: SerialNumber: syz [ 1557.100962][T13716] usb 3-1: config 0 descriptor?? [ 1557.106924][T23797] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1557.115128][T13716] hub 3-1:0.0: bad descriptor, ignoring hub [ 1557.121037][T13716] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1557.317009][T13716] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1557.513959][T13716] usb 5-1: Using ep0 maxpacket: 32 [ 1557.541105][T13716] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1557.554446][T13716] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1557.563961][T13716] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1557.572276][T13716] usb 5-1: Product: syz [ 1557.577342][T13716] usb 5-1: Manufacturer: syz [ 1557.581948][T13716] usb 5-1: SerialNumber: syz [ 1557.600068][T13716] usb 5-1: config 0 descriptor?? [ 1557.621306][T23799] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1557.631619][T13716] hub 5-1:0.0: bad descriptor, ignoring hub [ 1557.638391][T13716] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1557.651489][T13716] chaoskey 5-1:0.0: Unable to register with hwrng [ 1558.005863][T23814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1558.018006][T23814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1558.041100][T23816] netlink: 'syz.1.5227': attribute type 5 has an invalid length. [ 1558.049123][T23816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5227'. [ 1558.054263][T13716] usb 2-1: USB disconnect, device number 13 [ 1558.088962][T23816] bond3: down delay (48426) is not a multiple of miimon (2558), value rounded to 46044 ms [ 1558.099085][T23816] bond3: peer notification delay (2365) is not a multiple of miimon (2558), value rounded to 0 ms [ 1558.130383][T23816] netlink: 'syz.1.5227': attribute type 5 has an invalid length. [ 1558.138412][T23816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5227'. [ 1558.147774][T23816] bond3: down delay (48426) is not a multiple of miimon (2558), value rounded to 46044 ms [ 1558.158387][T23816] bond3: peer notification delay (2365) is not a multiple of miimon (2558), value rounded to 0 ms [ 1558.305082][T22717] raw-gadget.1 gadget.2: failed to queue suspend event [ 1558.370374][T23806] raw-gadget.1 gadget.2: failed to queue disconnect event [ 1558.734172][ T57] usb 5-1: USB disconnect, device number 19 [ 1558.913533][ T57] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1559.063520][ T57] usb 2-1: Using ep0 maxpacket: 16 [ 1559.070187][ T57] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1559.078800][ T57] usb 2-1: config 0 has no interface number 0 [ 1559.087486][ T57] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1559.096863][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.105029][ T57] usb 2-1: Product: syz [ 1559.109209][ T57] usb 2-1: Manufacturer: syz [ 1559.114063][ T57] usb 2-1: SerialNumber: syz [ 1559.121023][ T57] usb 2-1: config 0 descriptor?? [ 1559.127591][ T57] hub 2-1:0.132: bad descriptor, ignoring hub [ 1559.133750][ T57] hub 2-1:0.132: probe with driver hub failed with error -5 [ 1559.142045][ T57] usbhid 2-1:0.132: couldn't find an input interrupt endpoint [ 1559.443894][ T57] usb 2-1: USB disconnect, device number 14 [ 1559.470031][T23840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5236'. [ 1560.181299][T23849] netdevsim netdevsim1 : renamed from netdevsim0 [ 1560.259565][T23851] [ 1560.261920][T23851] ===================================================== [ 1560.268845][T23851] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1560.276302][T23851] syzkaller #0 Tainted: G L [ 1560.282272][T23851] ----------------------------------------------------- [ 1560.289197][T23851] syz.1.5240/23851 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1560.296920][T23851] ffffffff8dc0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 1560.305638][T23851] [ 1560.305638][T23851] and this task is already holding: [ 1560.312989][T23851] ffff8880432a32a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1560.321665][T23851] which would create a new lock dependency: [ 1560.327539][T23851] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1560.335077][T23851] [ 1560.335077][T23851] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1560.344496][T23851] (&dev->event_lock#2){..-.}-{3:3} [ 1560.344516][T23851] [ 1560.344516][T23851] ... which became SOFTIRQ-irq-safe at: [ 1560.357358][T23851] lock_acquire+0x107/0x340 [ 1560.361922][T23851] _raw_spin_lock_irqsave+0x40/0x60 [ 1560.367182][T23851] input_event+0x76/0xe0 [ 1560.371487][T23851] atp_complete_geyser_3_4+0xf6d/0x1e80 [ 1560.377092][T23851] __usb_hcd_giveback_urb+0x376/0x540 [ 1560.382553][T23851] dummy_timer+0x85f/0x45b0 [ 1560.387124][T23851] __hrtimer_run_queues+0x51c/0xc30 [ 1560.392381][T23851] hrtimer_run_softirq+0x187/0x2b0 [ 1560.397552][T23851] handle_softirqs+0x22b/0x7c0 [ 1560.402373][T23851] __irq_exit_rcu+0x60/0x150 [ 1560.407023][T23851] irq_exit_rcu+0x9/0x30 [ 1560.411322][T23851] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1560.417014][T23851] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1560.423052][T23851] _raw_spin_unlock_irqrestore+0x47/0x80 [ 1560.428744][T23851] dummy_urb_enqueue+0x58a/0x780 [ 1560.433744][T23851] usb_hcd_submit_urb+0x328/0x1b80 [ 1560.438917][T23851] atp_open+0x63/0xc0 [ 1560.442961][T23851] input_open_device+0x1d3/0x390 [ 1560.447960][T23851] mousedev_connect+0x2c0/0x3a0 [ 1560.452868][T23851] input_register_device+0xd00/0x1170 [ 1560.458302][T23851] atp_probe+0xb3b/0x1020 [ 1560.462690][T23851] usb_probe_interface+0x668/0xc90 [ 1560.467866][T23851] really_probe+0x26d/0xad0 [ 1560.472427][T23851] __driver_probe_device+0x18c/0x320 [ 1560.477773][T23851] driver_probe_device+0x4f/0x240 [ 1560.482856][T23851] __device_attach_driver+0x279/0x430 [ 1560.488288][T23851] bus_for_each_drv+0x251/0x2e0 [ 1560.493207][T23851] __device_attach+0x2b8/0x430 [ 1560.498028][T23851] device_initial_probe+0xa1/0xd0 [ 1560.503113][T23851] bus_probe_device+0x12a/0x220 [ 1560.508024][T23851] device_add+0x7b6/0xb80 [ 1560.512411][T23851] usb_set_configuration+0x1a87/0x2110 [ 1560.517931][T23851] usb_generic_driver_probe+0x8d/0x150 [ 1560.523489][T23851] usb_probe_device+0x1c4/0x3c0 [ 1560.528401][T23851] really_probe+0x26d/0xad0 [ 1560.532962][T23851] __driver_probe_device+0x18c/0x320 [ 1560.538304][T23851] driver_probe_device+0x4f/0x240 [ 1560.543386][T23851] __device_attach_driver+0x279/0x430 [ 1560.548815][T23851] bus_for_each_drv+0x251/0x2e0 [ 1560.553727][T23851] __device_attach+0x2b8/0x430 [ 1560.558548][T23851] device_initial_probe+0xa1/0xd0 [ 1560.563633][T23851] bus_probe_device+0x12a/0x220 [ 1560.568545][T23851] device_add+0x7b6/0xb80 [ 1560.572934][T23851] usb_new_device+0xa39/0x1720 [ 1560.577757][T23851] hub_event+0x29b1/0x4ef0 [ 1560.582239][T23851] process_scheduled_works+0xad1/0x1770 [ 1560.587842][T23851] worker_thread+0x8a0/0xda0 [ 1560.592489][T23851] kthread+0x711/0x8a0 [ 1560.596617][T23851] ret_from_fork+0x510/0xa50 [ 1560.601264][T23851] ret_from_fork_asm+0x1a/0x30 [ 1560.606090][T23851] [ 1560.606090][T23851] to a SOFTIRQ-irq-unsafe lock: [ 1560.613079][T23851] (tasklist_lock){.+.+}-{3:3} [ 1560.613100][T23851] [ 1560.613100][T23851] ... which became SOFTIRQ-irq-unsafe at: [ 1560.625680][T23851] ... [ 1560.625685][T23851] lock_acquire+0x107/0x340 [ 1560.632799][T23851] _raw_read_lock+0x36/0x50 [ 1560.637361][T23851] __do_wait+0xde/0x740 [ 1560.641577][T23851] do_wait+0x1e8/0x4f0 [ 1560.645708][T23851] kernel_wait+0xab/0x170 [ 1560.650102][T23851] call_usermodehelper_exec_work+0xbe/0x230 [ 1560.656051][T23851] process_scheduled_works+0xad1/0x1770 [ 1560.661662][T23851] worker_thread+0x8a0/0xda0 [ 1560.666311][T23851] kthread+0x711/0x8a0 [ 1560.670440][T23851] ret_from_fork+0x510/0xa50 [ 1560.675087][T23851] ret_from_fork_asm+0x1a/0x30 [ 1560.679920][T23851] [ 1560.679920][T23851] other info that might help us debug this: [ 1560.679920][T23851] [ 1560.690118][T23851] Chain exists of: [ 1560.690118][T23851] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 1560.690118][T23851] [ 1560.703122][T23851] Possible interrupt unsafe locking scenario: [ 1560.703122][T23851] [ 1560.711409][T23851] CPU0 CPU1 [ 1560.716748][T23851] ---- ---- [ 1560.722095][T23851] lock(tasklist_lock); [ 1560.726323][T23851] local_irq_disable(); [ 1560.733051][T23851] lock(&dev->event_lock#2); [ 1560.740228][T23851] lock(&f_owner->lock); [ 1560.747055][T23851] [ 1560.750488][T23851] lock(&dev->event_lock#2); [ 1560.755321][T23851] [ 1560.755321][T23851] *** DEADLOCK *** [ 1560.755321][T23851] [ 1560.763438][T23851] 2 locks held by syz.1.5240/23851: [ 1560.768610][T23851] #0: ffff888030d10fa0 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b0/0x4f0 [ 1560.777111][T23851] #1: ffff8880432a32a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1560.786216][T23851] [ 1560.786216][T23851] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1560.796596][T23851] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1560.802390][T23851] IN-SOFTIRQ-W at: [ 1560.806605][T23851] lock_acquire+0x107/0x340 [ 1560.813256][T23851] _raw_spin_lock_irqsave+0x40/0x60 [ 1560.820603][T23851] input_event+0x76/0xe0 [ 1560.826996][T23851] atp_complete_geyser_3_4+0xf6d/0x1e80 [ 1560.834708][T23851] __usb_hcd_giveback_urb+0x376/0x540 [ 1560.842231][T23851] dummy_timer+0x85f/0x45b0 [ 1560.848884][T23851] __hrtimer_run_queues+0x51c/0xc30 [ 1560.856229][T23851] hrtimer_run_softirq+0x187/0x2b0 [ 1560.863483][T23851] handle_softirqs+0x22b/0x7c0 [ 1560.870389][T23851] __irq_exit_rcu+0x60/0x150 [ 1560.877129][T23851] irq_exit_rcu+0x9/0x30 [ 1560.883517][T23851] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1560.891297][T23851] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1560.899421][T23851] _raw_spin_unlock_irqrestore+0x47/0x80 [ 1560.907203][T23851] dummy_urb_enqueue+0x58a/0x780 [ 1560.914299][T23851] usb_hcd_submit_urb+0x328/0x1b80 [ 1560.921575][T23851] atp_open+0x63/0xc0 [ 1560.927707][T23851] input_open_device+0x1d3/0x390 [ 1560.934792][T23851] mousedev_connect+0x2c0/0x3a0 [ 1560.941788][T23851] input_register_device+0xd00/0x1170 [ 1560.949306][T23851] atp_probe+0xb3b/0x1020 [ 1560.955781][T23851] usb_probe_interface+0x668/0xc90 [ 1560.963039][T23851] really_probe+0x26d/0xad0 [ 1560.969688][T23851] __driver_probe_device+0x18c/0x320 [ 1560.977125][T23851] driver_probe_device+0x4f/0x240 [ 1560.984304][T23851] __device_attach_driver+0x279/0x430 [ 1560.991824][T23851] bus_for_each_drv+0x251/0x2e0 [ 1560.998850][T23851] __device_attach+0x2b8/0x430 [ 1561.005757][T23851] device_initial_probe+0xa1/0xd0 [ 1561.012931][T23851] bus_probe_device+0x12a/0x220 [ 1561.020014][T23851] device_add+0x7b6/0xb80 [ 1561.026484][T23851] usb_set_configuration+0x1a87/0x2110 [ 1561.034088][T23851] usb_generic_driver_probe+0x8d/0x150 [ 1561.041710][T23851] usb_probe_device+0x1c4/0x3c0 [ 1561.048707][T23851] really_probe+0x26d/0xad0 [ 1561.055355][T23851] __driver_probe_device+0x18c/0x320 [ 1561.062794][T23851] driver_probe_device+0x4f/0x240 [ 1561.069964][T23851] __device_attach_driver+0x279/0x430 [ 1561.077479][T23851] bus_for_each_drv+0x251/0x2e0 [ 1561.084485][T23851] __device_attach+0x2b8/0x430 [ 1561.091392][T23851] device_initial_probe+0xa1/0xd0 [ 1561.098562][T23851] bus_probe_device+0x12a/0x220 [ 1561.105564][T23851] device_add+0x7b6/0xb80 [ 1561.112035][T23851] usb_new_device+0xa39/0x1720 [ 1561.118942][T23851] hub_event+0x29b1/0x4ef0 [ 1561.125503][T23851] process_scheduled_works+0xad1/0x1770 [ 1561.133191][T23851] worker_thread+0x8a0/0xda0 [ 1561.139923][T23851] kthread+0x711/0x8a0 [ 1561.146134][T23851] ret_from_fork+0x510/0xa50 [ 1561.152865][T23851] ret_from_fork_asm+0x1a/0x30 [ 1561.159776][T23851] INITIAL USE at: [ 1561.163905][T23851] lock_acquire+0x107/0x340 [ 1561.170463][T23851] _raw_spin_lock_irqsave+0x40/0x60 [ 1561.177722][T23851] input_inject_event+0xa5/0x340 [ 1561.184719][T23851] kbd_led_trigger_activate+0xbc/0x100 [ 1561.192237][T23851] led_trigger_set+0x52d/0x950 [ 1561.199058][T23851] led_trigger_set_default+0x260/0x2a0 [ 1561.206572][T23851] led_classdev_register_ext+0x73d/0x960 [ 1561.214265][T23851] input_leds_connect+0x517/0x790 [ 1561.221350][T23851] input_register_device+0xd00/0x1170 [ 1561.228784][T23851] atkbd_connect+0x73b/0xa50 [ 1561.235432][T23851] serio_driver_probe+0x82/0xd0 [ 1561.242336][T23851] really_probe+0x26d/0xad0 [ 1561.248893][T23851] __driver_probe_device+0x18c/0x320 [ 1561.256246][T23851] driver_probe_device+0x4f/0x240 [ 1561.263354][T23851] __driver_attach+0x349/0x650 [ 1561.270176][T23851] bus_for_each_dev+0x233/0x2b0 [ 1561.277085][T23851] serio_handle_event+0x1f9/0x8d0 [ 1561.284165][T23851] process_scheduled_works+0xad1/0x1770 [ 1561.291772][T23851] worker_thread+0x8a0/0xda0 [ 1561.298415][T23851] kthread+0x711/0x8a0 [ 1561.304541][T23851] ret_from_fork+0x510/0xa50 [ 1561.311184][T23851] ret_from_fork_asm+0x1a/0x30 [ 1561.318010][T23851] } [ 1561.320744][T23851] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 1561.330005][T23851] -> (&client->buffer_lock){....}-{3:3} { [ 1561.335883][T23851] INITIAL USE at: [ 1561.339922][T23851] lock_acquire+0x107/0x340 [ 1561.346314][T23851] _raw_spin_lock+0x2e/0x40 [ 1561.352705][T23851] evdev_handle_get_val+0x70/0x9f0 [ 1561.359700][T23851] evdev_ioctl_handler+0x1202/0x1f10 [ 1561.366870][T23851] __ia32_compat_sys_ioctl+0x543/0x840 [ 1561.374211][T23851] __do_fast_syscall_32+0x1dc/0x570 [ 1561.381290][T23851] do_fast_syscall_32+0x34/0x80 [ 1561.388024][T23851] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1561.396238][T23851] } [ 1561.398886][T23851] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 1561.407215][T23851] ... acquired at: [ 1561.411165][T23851] _raw_spin_lock+0x2e/0x40 [ 1561.415816][T23851] evdev_handle_get_val+0x70/0x9f0 [ 1561.421075][T23851] evdev_ioctl_handler+0x1202/0x1f10 [ 1561.426507][T23851] __ia32_compat_sys_ioctl+0x543/0x840 [ 1561.432109][T23851] __do_fast_syscall_32+0x1dc/0x570 [ 1561.437469][T23851] do_fast_syscall_32+0x34/0x80 [ 1561.442470][T23851] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1561.448944][T23851] [ 1561.451245][T23851] -> (&new->fa_lock){....}-{3:3} { [ 1561.456428][T23851] INITIAL USE at: [ 1561.460393][T23851] lock_acquire+0x107/0x340 [ 1561.466603][T23851] _raw_write_lock_irq+0x3d/0x50 [ 1561.473247][T23851] fasync_remove_entry+0xf1/0x1c0 [ 1561.479982][T23851] sock_fasync+0x85/0xf0 [ 1561.485935][T23851] __fput+0x8a2/0xa70 [ 1561.491627][T23851] task_work_run+0x1d4/0x260 [ 1561.497930][T23851] exit_to_user_mode_loop+0xef/0x4e0 [ 1561.504923][T23851] __do_fast_syscall_32+0x398/0x570 [ 1561.511828][T23851] do_fast_syscall_32+0x34/0x80 [ 1561.518386][T23851] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1561.526429][T23851] INITIAL READ USE at: [ 1561.530819][T23851] lock_acquire+0x107/0x340 [ 1561.537466][T23851] _raw_read_lock_irqsave+0x48/0x60 [ 1561.544896][T23851] kill_fasync+0x199/0x4d0 [ 1561.551465][T23851] sock_wake_async+0x137/0x160 [ 1561.558372][T23851] sk_wake_async+0x184/0x280 [ 1561.565192][T23851] mptcp_worker+0x4a4/0x1240 [ 1561.572014][T23851] process_scheduled_works+0xad1/0x1770 [ 1561.579699][T23851] worker_thread+0x8a0/0xda0 [ 1561.586429][T23851] kthread+0x711/0x8a0 [ 1561.592641][T23851] ret_from_fork+0x510/0xa50 [ 1561.599372][T23851] ret_from_fork_asm+0x1a/0x30 [ 1561.606278][T23851] } [ 1561.608836][T23851] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1561.617564][T23851] ... acquired at: [ 1561.621423][T23851] _raw_read_lock_irqsave+0x48/0x60 [ 1561.626764][T23851] kill_fasync+0x199/0x4d0 [ 1561.631327][T23851] evdev_pass_values+0x627/0xbd0 [ 1561.636406][T23851] evdev_events+0x1e6/0x340 [ 1561.641050][T23851] input_pass_values+0x288/0x890 [ 1561.646130][T23851] input_event_dispose+0x330/0x6b0 [ 1561.651386][T23851] input_inject_event+0x1dd/0x340 [ 1561.656557][T23851] evdev_write+0x2fc/0x480 [ 1561.661120][T23851] vfs_write+0x27e/0xb30 [ 1561.665508][T23851] ksys_write+0x145/0x250 [ 1561.669982][T23851] __do_fast_syscall_32+0x1dc/0x570 [ 1561.675325][T23851] do_fast_syscall_32+0x34/0x80 [ 1561.680317][T23851] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1561.686795][T23851] [ 1561.689092][T23851] -> (&f_owner->lock){....}-{3:3} { [ 1561.694275][T23851] INITIAL USE at: [ 1561.698137][T23851] lock_acquire+0x107/0x340 [ 1561.704173][T23851] _raw_write_lock_irq+0x3d/0x50 [ 1561.710642][T23851] __f_setown+0x67/0x370 [ 1561.716421][T23851] generic_setlease+0xb6c/0xea0 [ 1561.722806][T23851] do_fcntl_add_lease+0x34d/0x460 [ 1561.729363][T23851] fcntl_setlease+0x123/0x180 [ 1561.735572][T23851] do_fcntl+0x867/0x1a50 [ 1561.741349][T23851] do_compat_fcntl64+0x477/0x720 [ 1561.747823][T23851] __do_fast_syscall_32+0x1dc/0x570 [ 1561.754555][T23851] do_fast_syscall_32+0x34/0x80 [ 1561.760942][T23851] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1561.768811][T23851] INITIAL READ USE at: [ 1561.773113][T23851] lock_acquire+0x107/0x340 [ 1561.779585][T23851] _raw_read_lock_irqsave+0x48/0x60 [ 1561.786751][T23851] send_sigio+0x38/0x370 [ 1561.792964][T23851] kill_fasync+0x24d/0x4d0 [ 1561.799352][T23851] lease_break_callback+0x26/0x30 [ 1561.806348][T23851] __break_lease+0x6e3/0x1490 [ 1561.812992][T23851] do_dentry_open+0x73a/0x1420 [ 1561.819727][T23851] vfs_open+0x3b/0x340 [ 1561.825768][T23851] path_openat+0x340e/0x3dd0 [ 1561.832327][T23851] do_filp_open+0x1fa/0x410 [ 1561.838793][T23851] do_sys_openat2+0x121/0x200 [ 1561.845441][T23851] __ia32_compat_sys_open+0x117/0x140 [ 1561.852785][T23851] __do_fast_syscall_32+0x1dc/0x570 [ 1561.859956][T23851] do_fast_syscall_32+0x34/0x80 [ 1561.866774][T23851] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1561.875072][T23851] } [ 1561.877542][T23851] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1561.886359][T23851] ... acquired at: [ 1561.890136][T23851] _raw_read_lock_irqsave+0x48/0x60 [ 1561.895486][T23851] send_sigio+0x38/0x370 [ 1561.899875][T23851] kill_fasync+0x24d/0x4d0 [ 1561.904439][T23851] lease_break_callback+0x26/0x30 [ 1561.909613][T23851] __break_lease+0x6e3/0x1490 [ 1561.914440][T23851] do_dentry_open+0x73a/0x1420 [ 1561.919350][T23851] vfs_open+0x3b/0x340 [ 1561.923565][T23851] path_openat+0x340e/0x3dd0 [ 1561.928314][T23851] do_filp_open+0x1fa/0x410 [ 1561.932963][T23851] do_sys_openat2+0x121/0x200 [ 1561.937787][T23851] __ia32_compat_sys_open+0x117/0x140 [ 1561.943311][T23851] __do_fast_syscall_32+0x1dc/0x570 [ 1561.948657][T23851] do_fast_syscall_32+0x34/0x80 [ 1561.953654][T23851] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1561.960128][T23851] [ 1561.962436][T23851] [ 1561.962436][T23851] the dependencies between the lock to be acquired [ 1561.962442][T23851] and SOFTIRQ-irq-unsafe lock: [ 1561.975992][T23851] -> (tasklist_lock){.+.+}-{3:3} { [ 1561.981084][T23851] HARDIRQ-ON-R at: [ 1561.985035][T23851] lock_acquire+0x107/0x340 [ 1561.991158][T23851] _raw_read_lock+0x36/0x50 [ 1561.997281][T23851] __do_wait+0xde/0x740 [ 1562.003061][T23851] do_wait+0x1e8/0x4f0 [ 1562.008752][T23851] kernel_wait+0xab/0x170 [ 1562.014706][T23851] call_usermodehelper_exec_work+0xbe/0x230 [ 1562.022223][T23851] process_scheduled_works+0xad1/0x1770 [ 1562.029389][T23851] worker_thread+0x8a0/0xda0 [ 1562.035609][T23851] kthread+0x711/0x8a0 [ 1562.041300][T23851] ret_from_fork+0x510/0xa50 [ 1562.047510][T23851] ret_from_fork_asm+0x1a/0x30 [ 1562.053896][T23851] SOFTIRQ-ON-R at: [ 1562.057849][T23851] lock_acquire+0x107/0x340 [ 1562.063971][T23851] _raw_read_lock+0x36/0x50 [ 1562.070095][T23851] __do_wait+0xde/0x740 [ 1562.075873][T23851] do_wait+0x1e8/0x4f0 [ 1562.081564][T23851] kernel_wait+0xab/0x170 [ 1562.087524][T23851] call_usermodehelper_exec_work+0xbe/0x230 [ 1562.095037][T23851] process_scheduled_works+0xad1/0x1770 [ 1562.102204][T23851] worker_thread+0x8a0/0xda0 [ 1562.108415][T23851] kthread+0x711/0x8a0 [ 1562.114105][T23851] ret_from_fork+0x510/0xa50 [ 1562.120317][T23851] ret_from_fork_asm+0x1a/0x30 [ 1562.126707][T23851] INITIAL USE at: [ 1562.130578][T23851] lock_acquire+0x107/0x340 [ 1562.136616][T23851] _raw_write_lock_irq+0x3d/0x50 [ 1562.143086][T23851] copy_process+0x2185/0x3950 [ 1562.149297][T23851] kernel_clone+0x21e/0x820 [ 1562.155336][T23851] user_mode_thread+0xdd/0x140 [ 1562.161636][T23851] rest_init+0x23/0x300 [ 1562.167327][T23851] start_kernel+0x381/0x3d0 [ 1562.173366][T23851] x86_64_start_reservations+0x24/0x30 [ 1562.180361][T23851] x86_64_start_kernel+0x143/0x1c0 [ 1562.187009][T23851] common_startup_64+0x13e/0x147 [ 1562.193573][T23851] INITIAL READ USE at: [ 1562.197874][T23851] lock_acquire+0x107/0x340 [ 1562.204403][T23851] _raw_read_lock+0x36/0x50 [ 1562.210887][T23851] __do_wait+0xde/0x740 [ 1562.217018][T23851] do_wait+0x1e8/0x4f0 [ 1562.223060][T23851] kernel_wait+0xab/0x170 [ 1562.229369][T23851] call_usermodehelper_exec_work+0xbe/0x230 [ 1562.237232][T23851] process_scheduled_works+0xad1/0x1770 [ 1562.244749][T23851] worker_thread+0x8a0/0xda0 [ 1562.251312][T23851] kthread+0x711/0x8a0 [ 1562.257356][T23851] ret_from_fork+0x510/0xa50 [ 1562.263915][T23851] ret_from_fork_asm+0x1a/0x30 [ 1562.270656][T23851] } [ 1562.273137][T23851] ... key at: [] tasklist_lock+0x18/0x40 [ 1562.280832][T23851] ... acquired at: [ 1562.284611][T23851] _raw_read_lock+0x36/0x50 [ 1562.289261][T23851] send_sigurg+0x12b/0x420 [ 1562.293829][T23851] sk_send_sigurg+0x6c/0x2e0 [ 1562.298571][T23851] queue_oob+0x420/0x4f0 [ 1562.302975][T23851] unix_stream_sendmsg+0xc32/0xde0 [ 1562.308244][T23851] __sock_sendmsg+0x21c/0x270 [ 1562.313072][T23851] ____sys_sendmsg+0x52d/0x820 [ 1562.317985][T23851] ___sys_sendmsg+0x21f/0x2a0 [ 1562.322811][T23851] __sys_sendmmsg+0x28e/0x430 [ 1562.327638][T23851] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1562.333336][T23851] __do_fast_syscall_32+0x1dc/0x570 [ 1562.338695][T23851] do_fast_syscall_32+0x34/0x80 [ 1562.343701][T23851] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1562.350180][T23851] [ 1562.352476][T23851] [ 1562.352476][T23851] stack backtrace: [ 1562.358340][T23851] CPU: 0 UID: 0 PID: 23851 Comm: syz.1.5240 Tainted: G L syzkaller #0 PREEMPT(full) [ 1562.358355][T23851] Tainted: [L]=SOFTLOCKUP [ 1562.358359][T23851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1562.358367][T23851] Call Trace: [ 1562.358374][T23851] [ 1562.358380][T23851] dump_stack_lvl+0xe8/0x150 [ 1562.358394][T23851] __lock_acquire+0x2a95/0x2cf0 [ 1562.358409][T23851] ? send_sigurg+0x12b/0x420 [ 1562.358423][T23851] lock_acquire+0x107/0x340 [ 1562.358432][T23851] ? send_sigurg+0x12b/0x420 [ 1562.358447][T23851] _raw_read_lock+0x36/0x50 [ 1562.358457][T23851] ? send_sigurg+0x12b/0x420 [ 1562.358469][T23851] send_sigurg+0x12b/0x420 [ 1562.358483][T23851] sk_send_sigurg+0x6c/0x2e0 [ 1562.358498][T23851] queue_oob+0x420/0x4f0 [ 1562.358509][T23851] ? __pfx_queue_oob+0x10/0x10 [ 1562.358520][T23851] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1562.358532][T23851] unix_stream_sendmsg+0xc32/0xde0 [ 1562.358545][T23851] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1562.358555][T23851] ? __asan_memset+0x22/0x50 [ 1562.358569][T23851] ? __import_iovec+0x5d4/0x7f0 [ 1562.358580][T23851] ? aa_sock_msg_perm+0xda/0x1b0 [ 1562.358593][T23851] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1562.358602][T23851] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1562.358612][T23851] __sock_sendmsg+0x21c/0x270 [ 1562.358627][T23851] ____sys_sendmsg+0x52d/0x820 [ 1562.358640][T23851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1562.358654][T23851] ___sys_sendmsg+0x21f/0x2a0 [ 1562.358666][T23851] ? __pfx____sys_sendmsg+0x10/0x10 [ 1562.358677][T23851] ? __pfx___futex_wait+0x10/0x10 [ 1562.358689][T23851] ? __perf_event_task_sched_in+0x15ec/0x17e0 [ 1562.358701][T23851] ? __pfx_futex_wake_mark+0x10/0x10 [ 1562.358718][T23851] ? __fget_files+0x2a/0x420 [ 1562.358729][T23851] ? __fget_files+0x3a0/0x420 [ 1562.358743][T23851] __sys_sendmmsg+0x28e/0x430 [ 1562.358755][T23851] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1562.358766][T23851] ? do_futex+0x333/0x420 [ 1562.358781][T23851] ? rcu_is_watching+0x15/0xb0 [ 1562.358793][T23851] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1562.358808][T23851] __do_fast_syscall_32+0x1dc/0x570 [ 1562.358819][T23851] ? lockdep_hardirqs_on+0x7b/0x110 [ 1562.358828][T23851] ? do_fast_syscall_32+0x34/0x80 [ 1562.358839][T23851] ? irqentry_exit+0x10f/0x670 [ 1562.358849][T23851] do_fast_syscall_32+0x34/0x80 [ 1562.358860][T23851] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1562.358882][T23851] RIP: 0023:0xf7f01539 [ 1562.358897][T23851] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1562.358906][T23851] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1562.358918][T23851] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080006c40 [ 1562.358926][T23851] RDX: 0000000000000001 RSI: 0000000000040015 RDI: 0000000000000000 [ 1562.358932][T23851] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1562.358938][T23851] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1562.358945][T23851] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1562.358954][T23851] [ 1562.943473][T13721] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1563.104810][T13721] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1563.115049][T13721] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1563.124272][T13721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.135719][T13721] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1563.343333][ T57] usb 2-1: USB disconnect, device number 15 [ 1563.926078][T13724] usb 3-1: USB disconnect, device number 18 [ 1566.913554][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!