last executing test programs: 8.781059547s ago: executing program 2 (id=1297): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000013c0)=0xc7f) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) 5.215294728s ago: executing program 0 (id=1317): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x18}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 4.471247378s ago: executing program 3 (id=1325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@text16={0x10, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000300)="3ef20f01d9646736dc26baf80c66b8ddc0218b66efbafc0cec66650f009642babaa000b8ed00ef26660f380604baf80c66b84a73be8066efbafc0cb80400ef66b86e0000000f23c80f21f86635080090000f23f8660f38816320baf80c66b80c27bf8766efbafc0ced", 0x69}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.059454792s ago: executing program 0 (id=1327): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.052340566s ago: executing program 1 (id=1328): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xde', 0x0) write(r1, &(0x7f0000000740)="4eac", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r1, 0x0) vmsplice(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0) 3.940780358s ago: executing program 3 (id=1329): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.784570227s ago: executing program 2 (id=1330): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x36}}]}}}]}, 0x3c}}, 0x84000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x20004000) 3.783881464s ago: executing program 3 (id=1331): timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = epoll_create1(0x80000) epoll_pwait2(r1, &(0x7f00000001c0)=[{}], 0x1, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={[0x6f]}, 0x8) 3.631053923s ago: executing program 1 (id=1332): syz_io_uring_setup(0x237, &(0x7f0000000300)={0x0, 0xa57b, 0x40, 0x8003, 0xf7}, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001000000000008000200000000000800030000000000080007"], 0xc0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) 3.606779293s ago: executing program 4 (id=1333): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r2, 0x0, 0x69) 3.535507895s ago: executing program 1 (id=1334): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xc, 0x32, 0x0, 0xffffd000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 3.438461676s ago: executing program 2 (id=1335): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b55081f0000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 3.373433502s ago: executing program 0 (id=1336): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000004c0)=@base={0x6, 0x4, 0x6, 0x600, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000100), 0x200df000, r0, 0x0, 0x80000fffe}, 0x38) 3.332611469s ago: executing program 4 (id=1337): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 3.249087814s ago: executing program 1 (id=1338): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000880)='m', 0x1}], 0x1}, 0x5) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000100), 0x4) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)='=:', 0x2}], 0x1}, 0x11) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) 3.076812295s ago: executing program 2 (id=1339): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(r1, &(0x7f0000000bc0)='./file0\x00', 0x800) move_mount(r2, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220) 2.931250547s ago: executing program 4 (id=1340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 2.62582692s ago: executing program 4 (id=1341): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20006002, &(0x7f0000000200)={0xa, 0x2, 0x7, @local, 0x6}, 0x1c) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 2.512183024s ago: executing program 3 (id=1342): socket$key(0xf, 0x3, 0x2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.201000508s ago: executing program 1 (id=1343): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 2.075366088s ago: executing program 2 (id=1344): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) 2.045974383s ago: executing program 0 (id=1345): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0x4, 0x5, r3}, 0x10) 1.952806411s ago: executing program 0 (id=1346): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) r2 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000100)=0x9) 1.778816514s ago: executing program 2 (id=1347): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000020c0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001f40)="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", 0x127}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c3", 0x8c}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000540)=""/4096, 0xfdef}], 0x1) 1.778015019s ago: executing program 0 (id=1348): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb01"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 1.269548095s ago: executing program 32 (id=1347): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000020c0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001f40)="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", 0x127}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c3", 0x8c}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000540)=""/4096, 0xfdef}], 0x1) 1.258955998s ago: executing program 3 (id=1350): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 1.257793602s ago: executing program 4 (id=1351): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000240)="f081550100a000000f0100650f011f45000fbe252e8a094d36420f705626002e660f3a176a4b00b9800000c00f20c035f70000000f22c067420f01c3460f79c20cb8c09787678eef66ba64450f6b020ced45c194710a00000005c68244bcae009066ba420066ed", 0x67}], 0x1, 0xd, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x61, &(0x7f0000000100)=[@cr4={0x1, 0x9e2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.091032014s ago: executing program 1 (id=1352): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 617.206718ms ago: executing program 4 (id=1353): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r1 = dup(r0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 0s ago: executing program 3 (id=1354): ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000000)=0x1) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x4}, 0x2) kernel console output (not intermixed with test programs): 01][ T30] audit: type=1326 audit(1762455576.524:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6069 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187498f6c9 code=0x7ffc0000 [ 88.971305][ T6107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.988269][ T939] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.988299][ T939] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.988321][ T939] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 88.989507][ T30] audit: type=1326 audit(1762455576.524:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6069 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187498f6c9 code=0x7ffc0000 [ 89.058953][ T939] usb 2-1: string descriptor 0 read error: -22 [ 89.065949][ T939] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 89.076585][ T939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.112300][ T939] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 89.238584][ T6111] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.342568][ T43] usb 2-1: USB disconnect, device number 4 [ 89.434682][ T6118] syzkaller1: entered promiscuous mode [ 89.454525][ T6118] syzkaller1: entered allmulticast mode [ 90.264157][ T939] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 90.467971][ T939] usb 2-1: Using ep0 maxpacket: 16 [ 90.479821][ T939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.545568][ T939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.567121][ T939] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 90.658037][ T939] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 90.693761][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.735447][ T939] usb 2-1: config 0 descriptor?? [ 91.057959][ T5917] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.200459][ T939] microsoft 0003:045E:07DA.0005: unknown main item tag 0x1 [ 91.237974][ T939] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 91.260936][ T939] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 91.273258][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 91.296659][ T939] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 91.318888][ T939] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 91.319501][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.336519][ T939] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 91.367001][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.398028][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 91.442781][ T939] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0005/input/input10 [ 91.456824][ T5917] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 91.502816][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.548110][ T939] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 91.553645][ T5917] usb 1-1: config 0 descriptor?? [ 91.637551][ T939] usb 2-1: USB disconnect, device number 5 [ 91.823959][ T6177] fido_id[6177]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 91.921524][ T6184] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.089411][ T5959] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.109981][ T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 92.110626][ T5917] apple 0003:05AC:0247.0006: fixing up Magic Keyboard JIS report descriptor [ 92.147178][ T5917] apple 0003:05AC:0247.0006: unknown main item tag 0x0 [ 92.163695][ T5917] apple 0003:05AC:0247.0006: unknown main item tag 0x0 [ 92.186438][ T5917] apple 0003:05AC:0247.0006: unknown main item tag 0x0 [ 92.231806][ T5917] apple 0003:05AC:0247.0006: unexpected long global item [ 92.250071][ T5917] apple 0003:05AC:0247.0006: parse failed [ 92.257059][ T5917] apple 0003:05AC:0247.0006: probe with driver apple failed with error -22 [ 92.299657][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.308056][ T5959] usb 4-1: Using ep0 maxpacket: 8 [ 92.318490][ T5959] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 92.329536][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.340127][ T5917] usb 1-1: USB disconnect, device number 2 [ 92.348374][ T5959] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 92.369547][ T43] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 92.379314][ T5959] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.379344][ T5959] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.379386][ T5959] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.379405][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.597951][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 92.606869][ T43] usb 5-1: SerialNumber: syz [ 92.634344][ T5959] usb 4-1: GET_CAPABILITIES returned 0 [ 92.653891][ T5959] usbtmc 4-1:16.0: can't read capabilities [ 92.892877][ T43] usb 5-1: 0:2 : does not exist [ 92.903041][ T5959] usb 4-1: USB disconnect, device number 3 [ 93.011509][ T43] usb 5-1: USB disconnect, device number 4 [ 93.161166][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.251697][ T6227] ip6tnl1: entered promiscuous mode [ 94.251731][ T6227] ip6tnl1: entered allmulticast mode [ 94.548903][ T6235] input: syz0 as /devices/virtual/input/input11 [ 94.608029][ T939] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.786225][ T939] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 94.806670][ T939] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.857928][ T939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 94.893704][ T939] usb 1-1: SerialNumber: syz [ 94.929792][ T6251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 95.100583][ T6256] input: syz1 as /devices/virtual/input/input12 [ 95.319264][ T5921] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.504667][ T5921] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 95.537938][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.557948][ T5917] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 95.572275][ T939] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 95.585550][ T5921] usb 4-1: Product: syz [ 95.595062][ T5921] usb 4-1: Manufacturer: syz [ 95.607553][ T5921] usb 4-1: SerialNumber: syz [ 95.718086][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 95.730304][ T5917] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 95.768551][ T5917] usb 2-1: config 16 has an invalid interface number: 3 but max is 0 [ 95.809842][ T5917] usb 2-1: config 16 has no interface number 0 [ 95.828026][ T5917] usb 2-1: config 16 interface 3 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.847764][ T5917] usb 2-1: config 16 interface 3 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.868913][ T5917] usb 2-1: config 16 interface 3 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.882000][ T5917] usb 2-1: config 16 interface 3 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.898033][ T5917] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 95.914738][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=199, SerialNumber=0 [ 95.934175][ T5917] usb 2-1: Product: syz [ 95.961472][ T5921] rtl8150 4-1:1.0: couldn't reset the device [ 95.983746][ T5921] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 96.012565][ T5962] usb 1-1: USB disconnect, device number 3 [ 96.041255][ T5962] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 96.053423][ T5921] usb 4-1: USB disconnect, device number 4 [ 96.128641][ T6284] capability: warning: `syz.2.151' uses deprecated v2 capabilities in a way that may be insecure [ 96.173529][ T5917] usb 2-1: usb_control_msg returned -32 [ 96.195997][ T5917] usbtmc 2-1:16.3: can't read capabilities [ 96.797101][ T6307] syzkaller1: entered promiscuous mode [ 96.830330][ T6307] syzkaller1: entered allmulticast mode [ 97.278654][ T5917] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.448573][ T5917] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 97.491595][ T5917] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.518053][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.547979][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.564031][ T5917] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.587980][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.617948][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.655139][ T5917] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.677102][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.697046][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.711888][ T5917] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.728593][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.744826][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.780912][ T5917] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.807713][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.824789][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.833961][ T5917] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.844612][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.856218][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.865546][ T5917] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.875767][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.888688][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.897115][ T5917] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.917464][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.936303][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.956677][ T5917] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 97.978790][ T5917] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 97.988364][ T5917] usb 1-1: Product: syz [ 97.992933][ T5917] usb 1-1: Manufacturer: syz [ 98.030048][ T5917] usb 1-1: SerialNumber: syz [ 98.039717][ T5917] usb 1-1: config 0 descriptor?? [ 98.060694][ T5917] yurex 1-1:0.0: USB YUREX device now attached to Yurex #1 [ 98.302061][ T5959] usb 1-1: USB disconnect, device number 4 [ 98.320960][ T5921] usb 2-1: USB disconnect, device number 6 [ 98.369409][ T5959] yurex 1-1:0.0: USB YUREX #1 now disconnected [ 98.398063][ T5917] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 98.454087][ T6363] netlink: 165 bytes leftover after parsing attributes in process `syz.1.174'. [ 98.488342][ T939] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 98.574322][ T5917] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 98.591578][ T5917] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 98.634390][ T5917] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 98.635241][ T6369] input: syz1 as /devices/virtual/input/input13 [ 98.655228][ T939] usb 3-1: Using ep0 maxpacket: 16 [ 98.663407][ T939] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.675609][ T939] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.686781][ T939] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 98.696920][ T939] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 98.722557][ T939] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.723371][ T5917] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 98.733000][ T939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 98.775599][ T5917] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 98.794095][ T5917] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 98.803275][ T939] usb 3-1: SerialNumber: syz [ 98.808569][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 98.808605][ T5917] usb 5-1: Product: syz [ 98.808617][ T5917] usb 5-1: Manufacturer: syz [ 98.824841][ T5917] cdc_wdm 5-1:1.0: skipping garbage [ 98.848158][ T5917] cdc_wdm 5-1:1.0: skipping garbage [ 98.861021][ T5917] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 98.879643][ T939] hub 3-1:1.0: bad descriptor, ignoring hub [ 98.885890][ T5917] cdc_wdm 5-1:1.0: Unknown control protocol [ 98.888513][ T939] hub 3-1:1.0: probe with driver hub failed with error -5 [ 98.920915][ T939] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 99.505445][ C1] cdc_wdm 5-1:1.0: Unexpected error -71 [ 99.512437][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 99.519322][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 99.526004][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 99.533187][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 99.541235][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 99.548049][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 99.555723][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 99.563322][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 99.570329][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 99.577162][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 99.583909][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 99.590801][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 99.598046][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 99.604693][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 99.611176][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 99.617885][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 99.625280][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 99.632521][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 99.639498][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 99.646216][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 99.654730][ T5921] usb 5-1: USB disconnect, device number 5 [ 99.660870][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 100.940997][ T6419] netlink: 'syz.0.195': attribute type 13 has an invalid length. [ 100.951084][ T6419] netlink: 'syz.0.195': attribute type 17 has an invalid length. [ 101.032580][ T6419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.110499][ T5962] usb 3-1: USB disconnect, device number 5 [ 101.638705][ T6440] input: syz1 as /devices/virtual/input/input14 [ 102.102555][ T6456] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.116561][ T6455] netlink: 'syz.2.210': attribute type 11 has an invalid length. [ 102.138726][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 102.498779][ T5921] psmouse serio2: Failed to reset mouse on : -5 [ 102.517803][ T6471] netlink: 36 bytes leftover after parsing attributes in process `syz.1.218'. [ 103.244569][ T5888] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 103.448122][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 103.457031][ T5888] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 103.477943][ T5888] usb 2-1: config 0 has no interface number 0 [ 103.480514][ T5917] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 103.485562][ T5888] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.514985][ T5888] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 103.528534][ T5888] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 103.539851][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 103.548747][ T5888] usb 2-1: Product: syz [ 103.553283][ T5888] usb 2-1: SerialNumber: syz [ 103.571877][ T5888] usb 2-1: config 0 descriptor?? [ 103.610803][ T5888] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 103.643699][ T5888] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input16 [ 103.665929][ T5917] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 103.698392][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.722773][ T30] audit: type=1326 audit(1762455591.284:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187498f6c9 code=0x7ffc0000 [ 103.725488][ T5917] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 103.782252][ T30] audit: type=1326 audit(1762455591.284:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187498f6c9 code=0x7ffc0000 [ 103.800180][ T5917] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 103.847450][ T5917] usb 3-1: Manufacturer: syz [ 103.850965][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 103.868826][ T30] audit: type=1326 audit(1762455591.324:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187498f6c9 code=0x7ffc0000 [ 103.881070][ T5917] usb 3-1: config 0 descriptor?? [ 103.938537][ T30] audit: type=1326 audit(1762455591.324:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187498f6c9 code=0x7ffc0000 [ 104.036899][ T30] audit: type=1326 audit(1762455591.334:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f187498f6c9 code=0x7ffc0000 [ 104.071429][ T5917] rc_core: IR keymap rc-hauppauge not found [ 104.071449][ T5917] Registered IR keymap rc-empty [ 104.073504][ T5917] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 104.084204][ T30] audit: type=1326 audit(1762455591.334:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187498f6c9 code=0x7ffc0000 [ 104.084273][ T30] audit: type=1326 audit(1762455591.334:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187498f6c9 code=0x7ffc0000 [ 104.084311][ T30] audit: type=1326 audit(1762455591.344:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187498f6c9 code=0x7ffc0000 [ 104.084345][ T30] audit: type=1326 audit(1762455591.344:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187498f6c9 code=0x7ffc0000 [ 104.084381][ T30] audit: type=1326 audit(1762455591.344:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f187498f6c9 code=0x7ffc0000 [ 104.144964][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.194022][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.260108][ T5917] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 104.300644][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 104.342698][ T5917] usb 3-1: USB disconnect, device number 6 [ 104.421544][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.432197][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.440329][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.450452][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.468509][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.477454][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.485624][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.493927][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.502089][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 104.512293][ T939] usb 2-1: USB disconnect, device number 7 [ 104.591545][ T939] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 105.697283][ T5917] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 105.708355][ T5962] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.898025][ T5962] usb 4-1: Using ep0 maxpacket: 8 [ 105.903407][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 105.911133][ T5962] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.933083][ T5917] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.959216][ T5962] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.969753][ T5917] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.981597][ T5962] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.999392][ T5917] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.010619][ T5962] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.026913][ T5917] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.042763][ T5962] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.052325][ T5917] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.061818][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.071267][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.208023][ T939] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 106.290495][ T5921] misc userio: Buffer overflowed, userio client isn't keeping up [ 106.312897][ T5962] usb 4-1: GET_CAPABILITIES returned 0 [ 106.344051][ T5917] usb 3-1: GET_CAPABILITIES returned 0 [ 106.357180][ T5962] usbtmc 4-1:16.0: can't read capabilities [ 106.363691][ T5917] usbtmc 3-1:16.0: can't read capabilities [ 106.399831][ T939] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 106.416013][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.428959][ T939] usb 2-1: config 0 descriptor?? [ 106.554203][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 106.565101][ T5962] usb 3-1: USB disconnect, device number 7 [ 106.658982][ T939] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 106.868094][ T939] [drm:udl_init] *ERROR* Selecting channel failed [ 106.904756][ T939] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 106.930269][ T939] [drm] Initialized udl on minor 2 [ 106.956694][ T939] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 106.971675][ T939] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 106.989139][ T5888] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 106.997785][ T5888] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 107.014431][ T939] usb 2-1: USB disconnect, device number 8 [ 107.030550][ T6637] input: syz1 as /devices/virtual/input/input18 [ 107.051704][ T6637] input: failed to attach handler leds to device input18, error: -6 [ 107.067738][ T5962] usb 4-1: USB disconnect, device number 5 [ 107.147701][ T5888] IPVS: starting estimator thread 0... [ 107.247150][ T6642] process 'syz.2.268' launched './file0' with NULL argv: empty string added [ 107.268033][ T6640] IPVS: using max 33 ests per chain, 79200 per kthread [ 107.361091][ T5921] input: PS/2 Generic Mouse as /devices/serio2/input/input15 [ 107.617987][ T5921] psmouse serio2: Failed to enable mouse on [ 107.700305][ T6664] tmpfs: Unknown parameter 'óÐåÝõZåÐmHœSuLVÏŒGÿéUË9ËQ1' [ 108.042584][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'. [ 108.117385][ T6675] gretap0: entered promiscuous mode [ 108.165382][ T6675] macsec1: entered promiscuous mode [ 108.195466][ T6675] macsec1: entered allmulticast mode [ 108.221100][ T6675] gretap0: entered allmulticast mode [ 108.288767][ T6675] gretap0: left allmulticast mode [ 108.301381][ T6675] gretap0: left promiscuous mode [ 109.008044][ T5962] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 109.193281][ T5962] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 109.208092][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.247300][ T5962] usb 4-1: Product: syz [ 109.261918][ T5962] usb 4-1: Manufacturer: syz [ 109.281888][ T5962] usb 4-1: SerialNumber: syz [ 109.314086][ T5962] usb 4-1: config 0 descriptor?? [ 109.351297][ T5962] gspca_main: sq930x-2.14.0 probing 2770:930c [ 109.638981][ T5888] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 109.828184][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 109.840629][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.860074][ T5959] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 109.861665][ T5888] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 109.901319][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.927696][ T5888] usb 2-1: config 0 descriptor?? [ 110.028340][ T5959] usb 5-1: Using ep0 maxpacket: 32 [ 110.055259][ T5959] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 110.082287][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.105501][ T5959] usb 5-1: config 0 descriptor?? [ 110.174519][ T5888] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 110.322816][ T6743] tipc: Started in network mode [ 110.330048][ T5959] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 110.337719][ T6743] tipc: Node identity 8, cluster identity 4711 [ 110.347323][ T6743] tipc: Node number set to 8 [ 110.353926][ T5959] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.384632][ T5959] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 110.408554][ T5962] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 110.414683][ T5959] usb 5-1: media controller created [ 110.427410][ T5962] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 110.440376][ T5921] usb 2-1: USB disconnect, device number 9 [ 110.447163][ C1] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 110.492979][ T5962] usb 4-1: USB disconnect, device number 6 [ 110.520070][ T5959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.532568][ T6724] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 110.628254][ T5959] az6027: usb out operation failed. (-71) [ 110.648677][ T5959] az6027: usb out operation failed. (-71) [ 110.654731][ T5959] stb0899_attach: Driver disabled by Kconfig [ 110.677937][ T5959] az6027: no front-end attached [ 110.677937][ T5959] [ 110.686521][ T5959] az6027: usb out operation failed. (-71) [ 110.699136][ T5959] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 110.724980][ T5959] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 110.749514][ T5959] dvb-usb: schedule remote query interval to 400 msecs. [ 110.762001][ T5959] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 110.776841][ T5959] usb 5-1: USB disconnect, device number 6 [ 110.886076][ T5959] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 111.038647][ T6757] af_packet: tpacket_rcv: packet too big, clamped from 62 to 4294967286. macoff=82 [ 111.329120][ T6764] vivid-007: disconnect [ 111.350517][ T6763] vivid-007: reconnect [ 111.759246][ T939] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 111.825032][ T6780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.329'. [ 111.951783][ T939] usb 3-1: Using ep0 maxpacket: 8 [ 112.001077][ T939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.054603][ T939] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 112.104030][ T939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.151262][ T939] usb 3-1: config 0 descriptor?? [ 112.198544][ T5959] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 112.399170][ T5959] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.444197][ T5959] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.457620][ T939] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 112.510902][ T5959] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 112.540219][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 112.575543][ T5959] usb 2-1: SerialNumber: syz [ 112.841334][ T5959] usb 2-1: 0:2 : does not exist [ 112.846403][ T939] usb 3-1: USB disconnect, device number 8 [ 112.948303][ T5959] usb 2-1: USB disconnect, device number 10 [ 113.092753][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.577652][ T6823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.679973][ T939] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 113.784054][ T6830] syzkaller1: entered promiscuous mode [ 113.790112][ T6830] syzkaller1: entered allmulticast mode [ 113.858513][ T939] usb 4-1: Using ep0 maxpacket: 16 [ 113.882830][ T939] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 113.909128][ T939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.920068][ T939] usb 4-1: Product: syz [ 113.926671][ T939] usb 4-1: Manufacturer: syz [ 113.940285][ T939] usb 4-1: SerialNumber: syz [ 113.952369][ T939] usb 4-1: config 0 descriptor?? [ 114.391030][ T939] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 114.420704][ T939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.450136][ T939] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 114.462499][ T6850] input: syz1 as /devices/virtual/input/input20 [ 114.474078][ T939] usb 4-1: media controller created [ 114.526846][ T939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.593781][ T939] zl10353_read_register: readreg error (reg=127, ret==0) [ 114.617992][ T939] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 114.626238][ T939] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 114.638339][ T5962] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 114.660087][ T939] usb 4-1: USB disconnect, device number 7 [ 114.760211][ T939] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 114.839914][ T5962] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 114.867716][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.895222][ T5962] usb 3-1: config 0 descriptor?? [ 114.918335][ T6863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.362'. [ 114.931395][ T5962] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 114.958831][ T6863] bond0: ARP target 170.170.170.170 is already present [ 114.973124][ T6863] bond0: option arp_ip_target: invalid value (2863311530) [ 115.160998][ T5962] gp8psk: usb in 128 operation failed. [ 115.176827][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.364'. [ 115.377820][ T5962] gp8psk: usb in 146 operation failed. [ 115.383452][ T5962] gp8psk: failed to get FW version [ 115.417498][ T5962] gp8psk: FPGA Version = 173 [ 115.624418][ T5962] gp8psk: usb in 138 operation failed. [ 115.653235][ T5962] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 115.686502][ T5962] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 115.740418][ T5962] usb 3-1: USB disconnect, device number 9 [ 116.218324][ T5962] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 116.424966][ T5962] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 116.440152][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.452720][ T5962] usb 1-1: config 0 descriptor?? [ 116.461966][ T5962] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 116.697003][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.384'. [ 116.897996][ T5921] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 117.072558][ T5921] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 117.084086][ T5921] usb 2-1: config 0 has no interface number 0 [ 117.090898][ T5921] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 117.105806][ T5921] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 117.121267][ T5921] usb 2-1: config 0 interface 255 has no altsetting 0 [ 117.130566][ T5921] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 117.141628][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.155712][ T5921] usb 2-1: config 0 descriptor?? [ 117.170417][ T5921] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 117.278372][ T5962] gspca_cpia1: usb_control_msg 02, error -71 [ 117.296073][ T5962] gspca_cpia1: usb_control_msg 05, error -71 [ 117.316880][ T5962] gspca_cpia1: usb_control_msg 04, error -71 [ 117.334254][ T5962] cpia1 1-1:0.0: probe with driver cpia1 failed with error -71 [ 117.365023][ T5962] usb 1-1: USB disconnect, device number 5 [ 117.396266][ T5921] usb 2-1: USB disconnect, device number 11 [ 117.708240][ T5888] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 117.872902][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 117.880524][ T6942] input: syz0 as /devices/virtual/input/input21 [ 117.902225][ T5888] usb 5-1: config 0 interface 0 has no altsetting 0 [ 117.909749][ T5888] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 117.954925][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.026194][ T5888] usb 5-1: config 0 descriptor?? [ 118.337761][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 118.493842][ T5888] hid (null): global environment stack underflow [ 118.500781][ T5888] hid (null): unknown global tag 0xc [ 118.506605][ T5888] hid (null): report_id 25068 is invalid [ 118.514546][ T5888] hid (null): report_id 0 is invalid [ 118.521631][ T5888] hid (null): global environment stack overflow [ 118.536368][ T5888] hid (null): unknown global tag 0xc [ 118.542021][ T939] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 118.550795][ T5888] hid (null): unknown global tag 0x58 [ 118.699662][ T939] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 118.714676][ T5917] usb 5-1: USB disconnect, device number 7 [ 118.717953][ T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.748227][ T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.767984][ T939] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 118.794882][ T939] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 118.807892][ T939] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 118.816286][ T939] usb 4-1: Manufacturer: syz [ 118.833955][ T939] usb 4-1: config 0 descriptor?? [ 118.885291][ T6965] Zero length message leads to an empty skb [ 118.985994][ T6967] netlink: 'syz.0.406': attribute type 7 has an invalid length. [ 118.998054][ T6967] netlink: 'syz.0.406': attribute type 4 has an invalid length. [ 119.005821][ T6967] netlink: 132 bytes leftover after parsing attributes in process `syz.0.406'. [ 119.267601][ T939] hid_parser_main: 832 callbacks suppressed [ 119.267630][ T939] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 119.348110][ T939] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 119.555267][ T5888] usb 4-1: USB disconnect, device number 8 [ 120.968264][ T5917] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 121.158250][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 121.175954][ T5917] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.194415][ T5917] usb 2-1: config 0 has no interface number 0 [ 121.221424][ T5917] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=2c.d8 [ 121.254428][ T5917] usb 2-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 121.308542][ T5917] usb 2-1: Product: syz [ 121.327959][ T5917] usb 2-1: Manufacturer: syz [ 121.333336][ T5917] usb 2-1: SerialNumber: syz [ 121.472312][ T5917] usb 2-1: config 0 descriptor?? [ 121.481636][ T7023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.429'. [ 121.491491][ T5917] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 121.519170][ T5917] usb 2-1: selecting invalid altsetting 1 [ 121.526343][ T5917] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 121.530170][ T939] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 121.545552][ T5917] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 121.642977][ T5917] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 121.692688][ T5917] usb 2-1: media controller created [ 121.702477][ T7010] usb 2-1: dvb_usb_ce6230: I2C read not implemented [ 121.745906][ T939] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 121.815564][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.818174][ T939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.888624][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.432'. [ 121.905461][ T939] usb 3-1: config 0 descriptor?? [ 121.919299][ T5917] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 121.951816][ T5917] zl10353_read_register: readreg error (reg=127, ret==-71) [ 121.982205][ T5917] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 121.995846][ T7029] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 122.046688][ T7029] netlink: 'syz.4.432': attribute type 2 has an invalid length. [ 122.155318][ T939] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 122.258385][ T5917] usb 2-1: USB disconnect, device number 12 [ 122.358107][ T939] [drm:udl_init] *ERROR* Selecting channel failed [ 122.459832][ T939] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 122.517714][ T939] [drm] Initialized udl on minor 2 [ 122.540443][ T939] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 122.568526][ T939] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 122.576709][ T43] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 122.621485][ T43] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 122.649555][ T939] usb 3-1: USB disconnect, device number 10 [ 122.697990][ T5962] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 122.897920][ T5962] usb 1-1: Using ep0 maxpacket: 32 [ 122.929376][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.992389][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.023043][ T5962] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 123.057076][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.109796][ T5962] usb 1-1: config 0 descriptor?? [ 123.628347][ T5962] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 123.907152][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 123.907171][ T30] audit: type=1326 audit(1762455611.474:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7078 comm="syz.4.456" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb3bb8f6c9 code=0x0 [ 124.358274][ T5962] usb 1-1: USB disconnect, device number 6 [ 124.828007][ T5917] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 125.008034][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 125.028621][ T5917] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 125.069843][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.111447][ T5917] usb 3-1: config 0 descriptor?? [ 125.135524][ T5917] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 126.125210][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880320b5000: rx timeout, send abort [ 126.136852][ T5917] gspca_sonixj: reg_w1 err -71 [ 126.158814][ T5917] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 126.184593][ T5917] usb 3-1: USB disconnect, device number 11 [ 126.428343][ T939] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 126.600393][ T939] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.621899][ T939] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 126.634610][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880320b5000: abort rx timeout. Force session deactivation [ 126.647251][ T939] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 126.667940][ T939] usb 2-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 126.721420][ T939] usb 2-1: Product: syz [ 126.725718][ T939] usb 2-1: Manufacturer: syz [ 126.747402][ T939] usb 2-1: SerialNumber: syz [ 126.764747][ T939] usb 2-1: config 0 descriptor?? [ 126.994560][ T5917] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.086414][ T5962] usb 2-1: USB disconnect, device number 13 [ 127.180257][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 127.204665][ T5917] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 127.233799][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 127.252826][ T5917] usb 1-1: Product: syz [ 127.257175][ T5917] usb 1-1: Manufacturer: syz [ 127.262293][ T5917] usb 1-1: SerialNumber: syz [ 127.338110][ T5917] usb 1-1: config 0 descriptor?? [ 127.592672][ T939] usb 1-1: USB disconnect, device number 7 [ 127.746904][ T7163] xt_hashlimit: max too large, truncated to 1048576 [ 127.867543][ T7169] capability: warning: `syz.1.496' uses 32-bit capabilities (legacy support in use) [ 128.420535][ T7186] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.501'. [ 129.268342][ T43] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 129.334127][ T30] audit: type=1326 audit(1762455616.904:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebd8f6c9 code=0x7ffc0000 [ 129.427709][ T30] audit: type=1326 audit(1762455616.904:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebd8f6c9 code=0x7ffc0000 [ 129.515904][ T43] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 129.517151][ T30] audit: type=1326 audit(1762455616.964:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdfebd8f6c9 code=0x7ffc0000 [ 129.549041][ T30] audit: type=1326 audit(1762455616.964:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebd8f6c9 code=0x7ffc0000 [ 129.569399][ T43] usb 4-1: config 0 has no interface number 0 [ 129.572525][ T30] audit: type=1326 audit(1762455616.964:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebd8f6c9 code=0x7ffc0000 [ 129.601251][ T30] audit: type=1326 audit(1762455616.964:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebd8f6c9 code=0x7ffc0000 [ 129.623672][ T30] audit: type=1326 audit(1762455616.964:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebd8f6c9 code=0x7ffc0000 [ 129.645830][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.648823][ C1] hrtimer: interrupt took 15529 ns [ 129.654891][ T30] audit: type=1326 audit(1762455616.964:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdfebd8f6c9 code=0x7ffc0000 [ 129.681331][ T30] audit: type=1326 audit(1762455616.964:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebd8f6c9 code=0x7ffc0000 [ 129.689087][ T43] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 129.703827][ T30] audit: type=1326 audit(1762455616.964:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.2.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfebd8f6c9 code=0x7ffc0000 [ 129.745500][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.780878][ T43] usb 4-1: Product: syz [ 129.810185][ T43] usb 4-1: Manufacturer: syz [ 129.831573][ T43] usb 4-1: SerialNumber: syz [ 129.861518][ T43] usb 4-1: config 0 descriptor?? [ 130.087544][ T43] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 130.147191][ T43] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 130.181184][ T43] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 130.220481][ T43] usb 4-1: media controller created [ 130.338976][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.717982][ T5917] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 131.073352][ T7266] tap0: tun_chr_ioctl cmd 1074025675 [ 131.087969][ T7266] tap0: persist enabled [ 131.098864][ T7266] tap0: tun_chr_ioctl cmd 1074025675 [ 131.104757][ T7266] tap0: persist disabled [ 131.421760][ T43] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 131.586860][ T43] usb 4-1: USB disconnect, device number 9 [ 132.038191][ T43] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 132.105572][ T7275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.542'. [ 132.182838][ T7299] netlink: 'syz.2.550': attribute type 5 has an invalid length. [ 132.208199][ T43] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 132.247942][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.258698][ T43] usb 5-1: Product: syz [ 132.263153][ T43] usb 5-1: Manufacturer: syz [ 132.267766][ T43] usb 5-1: SerialNumber: syz [ 132.309813][ T43] usb 5-1: config 0 descriptor?? [ 132.322264][ T43] hub 5-1:0.0: bad descriptor, ignoring hub [ 132.338902][ T43] hub 5-1:0.0: probe with driver hub failed with error -5 [ 132.400021][ T7306] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.478351][ T5917] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 132.534198][ T43] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 132.572141][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 132.593823][ T43] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 132.617150][ T43] usb 5-1: media controller created [ 132.647747][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.691586][ T5917] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.728396][ T5917] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 132.758601][ T5917] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.782279][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.800761][ T5917] usb 4-1: Product: syz [ 132.811225][ T5917] usb 4-1: Manufacturer: syz [ 132.816004][ T5917] usb 4-1: SerialNumber: syz [ 132.825729][ T43] DVB: Unable to find symbol dib7000p_attach() [ 132.830123][ T5917] cdc_mbim 4-1:1.0: skipping garbage [ 132.838914][ T5959] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 132.842529][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.857158][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.876595][ T43] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 132.969570][ T43] rc_core: IR keymap rc-dib0700-rc5 not found [ 132.987082][ T43] Registered IR keymap rc-empty [ 133.007068][ T43] dvb-usb: could not initialize remote control. [ 133.017120][ T43] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 133.036095][ T7302] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 133.044521][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 133.074551][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 133.085287][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 133.098300][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 133.121143][ T5959] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 133.159418][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.170610][ T7326] syzkaller1: entered promiscuous mode [ 133.180913][ T7326] syzkaller1: entered allmulticast mode [ 133.181496][ T5959] usb 2-1: Product: syz [ 133.201666][ T5959] usb 2-1: Manufacturer: syz [ 133.207201][ T5959] usb 2-1: SerialNumber: syz [ 133.220333][ T5959] usb 2-1: config 0 descriptor?? [ 133.485843][ T5959] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 133.562173][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.566'. [ 133.660306][ T7302] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 133.667559][ T5959] usb 2-1: USB disconnect, device number 15 [ 133.679975][ T5917] cdc_mbim 4-1:1.0: setting tx_max = 48 [ 133.708767][ T5917] cdc_mbim 4-1:1.0: cdc-wdm1: USB WDM device [ 133.773692][ T5917] wwan wwan0: port wwan0mbim0 attached [ 133.806996][ T5917] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 8e:85:9a:3e:73:09 [ 133.867380][ T7310] adutux: No device or device unplugged -19 [ 133.901283][ T43] usb 4-1: USB disconnect, device number 10 [ 133.930281][ T43] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 134.044030][ T43] wwan wwan0: port wwan0mbim0 disconnected [ 134.378836][ T5917] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 134.549322][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 134.564110][ T5917] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 134.586955][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.607261][ T5917] usb 3-1: Product: syz [ 134.612158][ T5917] usb 3-1: Manufacturer: syz [ 134.620249][ T5917] usb 3-1: SerialNumber: syz [ 134.649221][ T5917] usb 3-1: config 0 descriptor?? [ 134.678481][ T5917] gspca_main: se401-2.14.0 probing 047d:5003 [ 134.948032][ T5959] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 135.064696][ T5917] gspca_se401: ExtraFeatures: 79 [ 135.070727][ T5917] gspca_se401: Frame size: 0x0 1/16th janggu [ 135.163009][ T5959] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 135.196374][ T5959] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 135.239172][ T5959] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 135.255931][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.273371][ T5917] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input23 [ 135.308744][ T7356] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 135.322807][ T7356] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 135.339011][ T5917] usb 3-1: USB disconnect, device number 12 [ 135.409352][ T5959] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.624024][ T43] usb 2-1: USB disconnect, device number 16 [ 135.747714][ T7374] loop7: detected capacity change from 0 to 7 [ 135.766080][ T7374] Dev loop7: unable to read RDB block 7 [ 135.772842][ T7374] loop7: unable to read partition table [ 135.779536][ T7374] loop7: partition table beyond EOD, truncated [ 135.785900][ T7374] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 136.341522][ T7387] netlink: 104 bytes leftover after parsing attributes in process `syz.1.589'. [ 136.880496][ T7405] sctp: [Deprecated]: syz.1.597 (pid 7405) Use of int in max_burst socket option deprecated. [ 136.880496][ T7405] Use struct sctp_assoc_value instead [ 136.907736][ T7407] loop8: detected capacity change from 0 to 8 [ 136.918491][ T5959] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 136.931589][ T7407] Dev loop8: unable to read RDB block 8 [ 136.937683][ T7407] loop8: unable to read partition table [ 136.945382][ T7407] loop8: partition table beyond EOD, truncated [ 136.965627][ T7407] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 137.088068][ T5959] usb 1-1: Using ep0 maxpacket: 32 [ 137.105347][ T5959] usb 1-1: config 0 interface 0 has no altsetting 0 [ 137.144951][ T5959] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 137.177930][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.186105][ T5959] usb 1-1: Product: syz [ 137.214184][ T5959] usb 1-1: Manufacturer: syz [ 137.228067][ T5959] usb 1-1: SerialNumber: syz [ 137.260104][ T5959] usb 1-1: config 0 descriptor?? [ 137.507915][ T5962] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 137.702777][ T5959] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 137.718016][ T5962] usb 3-1: Using ep0 maxpacket: 32 [ 137.746191][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.772989][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.807391][ T5962] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 137.829762][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.847679][ T5962] usb 3-1: config 0 descriptor?? [ 138.105673][ T5959] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 138.121800][ T5959] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 138.213674][ T43] usb 5-1: USB disconnect, device number 8 [ 138.292833][ T43] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 138.295462][ T5962] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 138.349463][ T5959] usb 1-1: USB disconnect, device number 8 [ 138.544544][ T7442] syzkaller1: entered promiscuous mode [ 138.545510][ T5962] usb 3-1: USB disconnect, device number 13 [ 138.550858][ T7442] syzkaller1: entered allmulticast mode [ 139.253322][ T7464] netlink: 44 bytes leftover after parsing attributes in process `syz.2.622'. [ 139.622745][ T7478] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.629'. [ 139.869172][ T5962] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 140.041527][ T5962] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.064737][ T5962] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.083116][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.094590][ T5962] usb 4-1: Product: syz [ 140.099449][ T5962] usb 4-1: Manufacturer: syz [ 140.120755][ T5962] usb 4-1: SerialNumber: syz [ 140.903193][ T7523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.944396][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.649'. [ 141.165421][ T5962] cdc_ncm 4-1:1.0: bind() failure [ 141.184159][ T5962] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 141.220837][ T5962] cdc_ncm 4-1:1.1: bind() failure [ 141.236980][ T5962] usb 4-1: USB disconnect, device number 11 [ 142.075609][ T7560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 142.299038][ T7570] IPVS: sh: FWM 3 0x00000003 - no destination available [ 142.340689][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 143.205595][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'. [ 143.633422][ T7610] netlink: 116 bytes leftover after parsing attributes in process `syz.3.686'. [ 144.157963][ T939] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 144.317887][ T939] usb 4-1: Using ep0 maxpacket: 16 [ 144.336722][ T939] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 144.367086][ T939] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 144.400657][ T939] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.460871][ T939] usb 4-1: config 1 interface 0 has no altsetting 0 [ 144.483982][ T939] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 144.510541][ T939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.553061][ T939] usb 4-1: Product: syz [ 144.563326][ T939] usb 4-1: Manufacturer: syz [ 144.579946][ T939] usb 4-1: SerialNumber: syz [ 144.820816][ T939] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 144.868322][ T43] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 145.039375][ T5921] usb 4-1: USB disconnect, device number 12 [ 145.048255][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 145.075486][ T43] usb 3-1: config 0 has an invalid interface number: 38 but max is 0 [ 145.094446][ T43] usb 3-1: config 0 has no interface number 0 [ 145.104928][ T43] usb 3-1: config 0 interface 38 has no altsetting 0 [ 145.127939][ T43] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=7f.b3 [ 145.142268][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.153678][ T43] usb 3-1: Product: syz [ 145.158678][ T939] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 145.168675][ T43] usb 3-1: Manufacturer: syz [ 145.174716][ T43] usb 3-1: SerialNumber: syz [ 145.191395][ T43] usb 3-1: config 0 descriptor?? [ 145.203734][ T43] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 145.264352][ T7619] usblp0: removed [ 145.338023][ T939] usb 2-1: Using ep0 maxpacket: 8 [ 145.352305][ T939] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 145.364686][ T939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.399550][ T939] usb 2-1: Product: syz [ 145.409162][ T939] usb 2-1: Manufacturer: syz [ 145.420205][ T939] usb 2-1: SerialNumber: syz [ 145.440741][ T939] usb 2-1: config 0 descriptor?? [ 145.454848][ T939] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 145.534746][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 146.065133][ T43] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input24 [ 146.119242][ T939] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 146.166597][ T939] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 146.201136][ T939] usb 2-1: USB disconnect, device number 17 [ 146.310059][ T5921] usb 3-1: USB disconnect, device number 14 [ 146.477163][ T7699] syzkaller1: entered promiscuous mode [ 146.487104][ T7699] syzkaller1: entered allmulticast mode [ 147.615514][ T7742] syzkaller1: entered promiscuous mode [ 147.653473][ T7742] syzkaller1: entered allmulticast mode [ 148.320958][ T7767] veth0: entered promiscuous mode [ 148.336771][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.754'. [ 149.418331][ T984] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 149.527947][ T939] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 149.571039][ T984] usb 3-1: Using ep0 maxpacket: 8 [ 149.581612][ T984] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.595302][ T984] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.609165][ T984] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.623469][ T984] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.637429][ T984] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.647763][ T984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.691125][ T939] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 149.699910][ T939] usb 2-1: config 0 has no interface number 0 [ 149.706476][ T939] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 149.718339][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.747478][ T939] usb 2-1: config 0 descriptor?? [ 149.771590][ T939] usb 2-1: selecting invalid altsetting 1 [ 149.779848][ T939] dvb_ttusb_budget: ttusb_init_controller: error [ 149.786783][ T939] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 149.850032][ T939] DVB: Unable to find symbol cx22700_attach() [ 149.876855][ T984] usb 3-1: GET_CAPABILITIES returned 0 [ 149.883876][ T984] usbtmc 3-1:16.0: can't read capabilities [ 149.904796][ T939] DVB: Unable to find symbol tda10046_attach() [ 149.914722][ T939] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 150.001895][ T984] usb 2-1: USB disconnect, device number 18 [ 150.008530][ T5962] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 150.113251][ T5959] usb 3-1: USB disconnect, device number 15 [ 150.178124][ T5962] usb 4-1: Using ep0 maxpacket: 32 [ 150.191914][ T5962] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 150.210862][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.222849][ T5962] usb 4-1: config 0 descriptor?? [ 150.239740][ T5962] gspca_main: sunplus-2.14.0 probing 041e:400b [ 150.573358][ T5959] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 150.759529][ T5959] usb 1-1: Using ep0 maxpacket: 16 [ 150.782331][ T5959] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 150.798008][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.806677][ T5959] usb 1-1: Product: syz [ 150.812230][ T5959] usb 1-1: Manufacturer: syz [ 150.816963][ T5959] usb 1-1: SerialNumber: syz [ 150.834926][ T5959] usb 1-1: config 0 descriptor?? [ 150.862295][ T5959] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 150.891449][ T5959] usb 1-1: Detected FT232H [ 151.081498][ T5959] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 151.274391][ T5962] gspca_sunplus: reg_w_riv err -71 [ 151.285376][ T5962] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 151.307188][ T5962] usb 4-1: USB disconnect, device number 13 [ 151.538532][ T5959] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 151.731787][ T5959] usb 1-1: USB disconnect, device number 9 [ 151.778657][ T5959] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 151.804447][ T5959] ftdi_sio 1-1:0.0: device disconnected [ 151.887987][ T5888] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 152.039467][ T7872] syzkaller1: entered promiscuous mode [ 152.045127][ T7872] syzkaller1: entered allmulticast mode [ 152.057925][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 152.089008][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.110682][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.121533][ T5888] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 152.131637][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.148687][ T5888] usb 5-1: config 0 descriptor?? [ 152.618940][ T5888] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 152.704365][ T7892] input: syz0 as /devices/virtual/input/input25 [ 152.795572][ T7895] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.842858][ T939] usb 5-1: USB disconnect, device number 9 [ 152.941740][ T7893] fido_id[7893]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 153.248037][ T5959] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 153.437905][ T5959] usb 1-1: Using ep0 maxpacket: 32 [ 153.472541][ T5959] usb 1-1: config 0 has an invalid interface number: 250 but max is 0 [ 153.495972][ T5959] usb 1-1: config 0 has no interface number 0 [ 153.517189][ T5959] usb 1-1: config 0 interface 250 has no altsetting 0 [ 153.539148][ T5959] usb 1-1: New USB device found, idVendor=093a, idProduct=262c, bcdDevice=ae.31 [ 153.555661][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.565892][ T5959] usb 1-1: Product: syz [ 153.570393][ T5959] usb 1-1: Manufacturer: syz [ 153.575618][ T5959] usb 1-1: SerialNumber: syz [ 153.578305][ T939] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 153.592903][ T5959] usb 1-1: config 0 descriptor?? [ 153.634904][ T5959] gspca_main: gspca_pac7302-2.14.0 probing 093a:262c [ 153.760198][ T939] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 153.778333][ T5888] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 153.807997][ T939] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 153.844622][ T939] usb 4-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 153.878135][ T939] usb 4-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 153.927939][ T939] usb 4-1: config 220 has no interface number 2 [ 153.954455][ T939] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 153.988087][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 153.999947][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.021580][ T939] usb 4-1: config 220 interface 0 has no altsetting 0 [ 154.037940][ T5888] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 154.048019][ T939] usb 4-1: config 220 interface 76 has no altsetting 0 [ 154.087923][ T939] usb 4-1: config 220 interface 1 has no altsetting 0 [ 154.095232][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.123973][ T939] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 154.143445][ T5888] usb 2-1: config 0 descriptor?? [ 154.163464][ T939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.180016][ T939] usb 4-1: Product: syz [ 154.184940][ T939] usb 4-1: Manufacturer: syz [ 154.190025][ T939] usb 4-1: SerialNumber: syz [ 154.264879][ T7929] input: syz1 as /devices/virtual/input/input26 [ 154.429191][ T939] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 154.447133][ T939] uvcvideo 4-1:220.0: No valid video chain found. [ 154.457310][ T939] usb 4-1: selecting invalid altsetting 0 [ 154.467735][ T5959] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input27 [ 154.487021][ T939] usb 4-1: selecting invalid altsetting 0 [ 154.506622][ T7935] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 154.517930][ T939] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 154.583581][ T939] usb 4-1: USB disconnect, device number 14 [ 154.618672][ T5888] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 154.717671][ T5921] usb 1-1: USB disconnect, device number 10 [ 154.998419][ T5888] usb 2-1: USB disconnect, device number 19 [ 155.477093][ T7955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.368060][ T984] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 156.417192][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 156.417209][ T30] audit: type=1326 audit(1762455643.984:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3bb8f6c9 code=0x7ffc0000 [ 156.523306][ T30] audit: type=1326 audit(1762455643.984:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb3bb2b779 code=0x7ffc0000 [ 156.586542][ T984] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 156.600870][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.617580][ T30] audit: type=1326 audit(1762455643.984:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb3bb2b779 code=0x7ffc0000 [ 156.642565][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.652983][ T984] usb 4-1: Product: syz [ 156.668835][ T984] usb 4-1: Manufacturer: syz [ 156.684739][ T984] usb 4-1: SerialNumber: syz [ 156.700385][ T984] usb 4-1: config 0 descriptor?? [ 156.708405][ T30] audit: type=1326 audit(1762455643.984:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb3bb2b779 code=0x7ffc0000 [ 156.731826][ T30] audit: type=1326 audit(1762455643.984:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb3bb2b779 code=0x7ffc0000 [ 156.756543][ T30] audit: type=1326 audit(1762455643.984:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb3bb2b779 code=0x7ffc0000 [ 156.781638][ T30] audit: type=1326 audit(1762455643.984:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb3bb2b779 code=0x7ffc0000 [ 156.834437][ T30] audit: type=1326 audit(1762455643.984:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb3bb2b779 code=0x7ffc0000 [ 156.921937][ T30] audit: type=1326 audit(1762455643.984:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb3bb2b779 code=0x7ffc0000 [ 157.070304][ T30] audit: type=1326 audit(1762455643.984:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb3bb2b779 code=0x7ffc0000 [ 157.176083][ T8001] input: syz1 as /devices/virtual/input/input28 [ 157.209669][ T984] usb 4-1: Firmware version (0.0) predates our first public release. [ 157.237951][ T984] usb 4-1: Please update to version 0.2 or newer [ 157.248243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 157.256854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 157.265446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 157.287742][ T984] usb 4-1: Firmware: build [ 157.297945][ T5921] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 157.459247][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 157.473061][ T5921] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 157.492814][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.521329][ T984] usb 4-1: USB disconnect, device number 15 [ 157.534595][ T5921] usb 3-1: Product: syz [ 157.552633][ T5921] usb 3-1: Manufacturer: syz [ 157.571099][ T5921] usb 3-1: SerialNumber: syz [ 157.617184][ T8011] kvm: user requested TSC rate below hardware speed [ 157.643145][ T5921] usb 3-1: config 0 descriptor?? [ 157.685068][ T8013] batadv_slave_1: entered promiscuous mode [ 157.722315][ T8012] batadv_slave_1: left promiscuous mode [ 158.074155][ T5921] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 158.121419][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 158.142214][ T5921] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 158.207937][ T5921] usb 3-1: media controller created [ 158.265494][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.275620][ T7999] dtv5100: wlen = 0, aborting. [ 158.379124][ T5921] zl10353_read_register: readreg error (reg=127, ret==0) [ 158.394382][ T5921] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 158.444458][ T5921] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 158.459734][ T5921] usb 3-1: USB disconnect, device number 16 [ 158.533678][ T8043] input: syz0 as /devices/virtual/input/input29 [ 158.539212][ T5921] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 158.848213][ T5959] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 159.011978][ T5959] usb 2-1: config 0 has no interfaces? [ 159.036740][ T5959] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 159.069443][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.122434][ T5959] usb 2-1: config 0 descriptor?? [ 159.221385][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.883'. [ 159.437260][ T5959] usb 2-1: USB disconnect, device number 20 [ 160.727995][ T5888] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 160.918160][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 160.925265][ T5888] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 160.938202][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.950939][ T5888] usb 5-1: config 0 descriptor?? [ 160.963066][ T5888] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 161.358229][ T5921] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 161.558019][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 161.565913][ T5921] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 161.578671][ T5921] usb 2-1: config 1 has no interface number 0 [ 161.586484][ T5921] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 161.600680][ T5921] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 161.614082][ T5921] usb 2-1: config 1 interface 105 has no altsetting 0 [ 161.638714][ T5959] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 161.650811][ T5921] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 161.663264][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.668024][ T5962] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 161.674197][ T5921] usb 2-1: Product: syz [ 161.686975][ T5921] usb 2-1: Manufacturer: syz [ 161.696166][ T5921] usb 2-1: SerialNumber: syz [ 161.709351][ T8108] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 161.719261][ T8108] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 161.808084][ T5959] usb 4-1: Using ep0 maxpacket: 16 [ 161.821643][ T5959] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 161.833521][ T5962] usb 1-1: Using ep0 maxpacket: 32 [ 161.839833][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.848954][ T5959] usb 4-1: Product: syz [ 161.853796][ T5959] usb 4-1: Manufacturer: syz [ 161.858908][ T5959] usb 4-1: SerialNumber: syz [ 161.868055][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.881514][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.893765][ T5959] usb 4-1: config 0 descriptor?? [ 161.905988][ T5959] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 161.914313][ T5962] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 161.926148][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.951411][ T5962] usb 1-1: config 0 descriptor?? [ 162.015085][ T5888] usb 5-1: USB disconnect, device number 10 [ 162.130000][ T939] usb 4-1: USB disconnect, device number 16 [ 162.141843][ T8108] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 162.151650][ T8108] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 162.389681][ T5962] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 162.661534][ T939] usb 1-1: USB disconnect, device number 11 [ 162.768279][ T5921] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 162.795113][ T5921] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 162.815789][ T5921] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 16:19:cf:c5:d6:c4 [ 162.817974][ T5962] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 162.835136][ T5921] usb 2-1: USB disconnect, device number 21 [ 162.849406][ T5921] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 162.969096][ T5921] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 162.984860][ T5921] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 162.999347][ T5921] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 163.018066][ T5962] usb 5-1: Using ep0 maxpacket: 8 [ 163.038863][ T5962] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 163.050183][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.065396][ T5962] usb 5-1: Product: syz [ 163.071139][ T5962] usb 5-1: Manufacturer: syz [ 163.076926][ T5962] usb 5-1: SerialNumber: syz [ 163.092083][ T5962] usb 5-1: config 0 descriptor?? [ 163.104010][ T5962] gspca_main: se401-2.14.0 probing 047d:5003 [ 163.321672][ T8135] geneve2: entered promiscuous mode [ 163.327956][ T8135] geneve2: entered allmulticast mode [ 163.338339][ T939] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 163.498321][ T939] usb 4-1: Using ep0 maxpacket: 32 [ 163.509737][ T939] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 163.519637][ T939] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 163.528771][ T939] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 163.543918][ T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 163.555742][ T939] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 163.568398][ T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 163.581860][ T939] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 163.593499][ T939] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 163.607708][ T939] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 163.619483][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.633387][ T939] usb 4-1: config 0 descriptor?? [ 163.651465][ T8131] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 163.708049][ T5959] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 163.720040][ T5962] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 163.871840][ T939] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 163.878264][ T5959] usb 2-1: Using ep0 maxpacket: 32 [ 163.902794][ T5959] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 163.917409][ T5959] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 163.925418][ T939] usb 5-1: USB disconnect, device number 11 [ 163.928596][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 163.945994][ T5959] usb 2-1: Product: syz [ 163.955280][ T5959] usb 2-1: Manufacturer: syz [ 163.960311][ T5959] usb 2-1: SerialNumber: syz [ 163.976232][ T5959] usb 2-1: config 0 descriptor?? [ 163.982936][ T8137] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 163.996768][ T5959] hub 2-1:0.0: bad descriptor, ignoring hub [ 164.004763][ T5959] hub 2-1:0.0: probe with driver hub failed with error -5 [ 164.083144][ C0] usblp0: nonzero read bulk status received: -71 [ 164.092502][ T8131] usblp0: error -71 reading from printer [ 164.102491][ C1] usblp0: nonzero read bulk status received: -71 [ 164.112393][ T5959] usb 4-1: USB disconnect, device number 17 [ 164.121644][ T5959] usblp0: removed [ 164.329522][ T939] usb 2-1: USB disconnect, device number 22 [ 164.787108][ T8161] netlink: 40 bytes leftover after parsing attributes in process `syz.0.924'. [ 164.799749][ T8161] netlink: 40 bytes leftover after parsing attributes in process `syz.0.924'. [ 165.331052][ T8183] netlink: 6 bytes leftover after parsing attributes in process `syz.0.932'. [ 165.349917][ T8183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.889187][ T5959] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 166.059878][ T5959] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 166.069852][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.080873][ T5959] usb 5-1: config 0 descriptor?? [ 166.091344][ T5959] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 166.315573][ T8215] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.705382][ T5959] gspca_cpia1: usb_control_msg 01, error -32 [ 166.716718][ T5959] gspca_cpia1: usb_control_msg 01, error -71 [ 166.723698][ T5959] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 166.736014][ T5959] usb 5-1: USB disconnect, device number 12 [ 166.958002][ T939] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 167.107951][ T939] usb 2-1: Using ep0 maxpacket: 16 [ 167.115253][ T939] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 167.128444][ T939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 167.142388][ T939] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 167.151822][ T939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.160025][ T939] usb 2-1: Product: syz [ 167.164328][ T939] usb 2-1: Manufacturer: syz [ 167.168995][ T939] usb 2-1: SerialNumber: syz [ 167.176881][ T939] usb 2-1: config 0 descriptor?? [ 167.184289][ T939] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 167.193635][ T939] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 167.795224][ T939] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 167.816580][ T939] em28xx 2-1:0.0: Config register raw data: 0x41 [ 168.052361][ T939] usb 2-1: USB disconnect, device number 23 [ 168.080959][ T939] em28xx 2-1:0.0: Disconnecting em28xx [ 168.123263][ T939] em28xx 2-1:0.0: Freeing device [ 168.770649][ T939] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 168.929754][ T939] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 168.946265][ T939] usb 3-1: config 7 has no interface number 0 [ 168.956803][ T939] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 168.967226][ T939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.975627][ T939] usb 3-1: Product: syz [ 168.980034][ T939] usb 3-1: Manufacturer: syz [ 168.984820][ T939] usb 3-1: SerialNumber: syz [ 169.548384][ T5888] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 169.720895][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.738681][ T5888] usb 1-1: config 0 has no interfaces? [ 169.755798][ T5888] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 169.765439][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 169.776643][ T5888] usb 1-1: SerialNumber: syz [ 169.797317][ T5888] usb 1-1: config 0 descriptor?? [ 169.804997][ T939] as10x_usb: device has been detected [ 169.831062][ T939] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 169.868735][ T939] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 170.035872][ T5959] usb 1-1: USB disconnect, device number 12 [ 170.095046][ T939] as10x_usb: error during firmware upload part1 [ 170.103113][ T939] Registered device Elgato EyeTV DTT Deluxe [ 170.118893][ T939] usb 3-1: USB disconnect, device number 17 [ 170.184713][ T939] Unregistered device Elgato EyeTV DTT Deluxe [ 170.205548][ T939] as10x_usb: device has been disconnected [ 170.600972][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.987'. [ 171.038637][ T5959] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 171.124181][ T8334] mmap: syz.1.994 (8334) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 171.178287][ T5962] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 171.228383][ T5959] usb 3-1: Using ep0 maxpacket: 16 [ 171.240856][ T5959] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 171.288263][ T5959] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.322715][ T5959] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.369963][ T5959] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 171.379789][ T5962] usb 1-1: Using ep0 maxpacket: 8 [ 171.398125][ T5962] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.408785][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.417016][ T5959] usb 3-1: Product: syz [ 171.432580][ T5962] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 171.472435][ T5959] usb 3-1: Manufacturer: syz [ 171.477086][ T5959] usb 3-1: SerialNumber: syz [ 171.482246][ T5962] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 171.518051][ T5962] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 171.539176][ T5962] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 171.548784][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.581328][ T5962] hub 1-1:1.0: bad descriptor, ignoring hub [ 171.587343][ T5962] hub 1-1:1.0: probe with driver hub failed with error -5 [ 171.603675][ T5962] cdc_wdm 1-1:1.0: skipping garbage [ 171.609420][ T5962] cdc_wdm 1-1:1.0: skipping garbage [ 171.639644][ T5962] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 171.654857][ T5962] cdc_wdm 1-1:1.0: Unknown control protocol [ 171.915385][ T5959] usb 3-1: 0:2 : does not exist [ 172.341630][ T8329] usb 1-1: reset high-speed USB device number 13 using dummy_hcd [ 172.482182][ T8366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1006'. [ 172.533138][ T5959] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 172.584114][ T5959] usb 3-1: USB disconnect, device number 18 [ 172.685492][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.897561][ T8378] ptrace attach of ""[8379] was attempted by "./syz-executor exec"[8378] [ 172.909636][ T5888] usb 1-1: USB disconnect, device number 13 [ 173.328196][ T8392] warning: `syz.3.1019' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 173.548373][ T5888] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 173.558568][ T5959] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 173.579021][ T8400] usb usb8: usbfs: process 8400 (syz.3.1022) did not claim interface 0 before use [ 173.698166][ T8404] input: syz0 as /devices/virtual/input/input31 [ 173.708321][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 173.716234][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.728244][ T5959] usb 2-1: Using ep0 maxpacket: 8 [ 173.735442][ T5888] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 173.740841][ T5839] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 173.744963][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.764574][ T5959] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 173.774265][ T5959] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.775091][ T5888] usb 3-1: config 0 descriptor?? [ 173.794294][ T5959] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 173.807742][ T5959] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.819395][ T5959] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.868301][ T5959] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 173.890428][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.942368][ T5839] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.973095][ T5839] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.014422][ T5839] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 174.027311][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.144984][ T5959] usb 2-1: usb_control_msg returned -32 [ 174.153354][ T5959] usbtmc 2-1:16.0: can't read capabilities [ 174.271537][ T5888] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 174.289656][ T5839] usb 1-1: usb_control_msg returned -32 [ 174.297701][ T5839] usbtmc 1-1:16.0: can't read capabilities [ 174.298104][ T8419] netlink: 'syz.4.1031': attribute type 13 has an invalid length. [ 174.324987][ T8419] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 174.336933][ T8419] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 174.345436][ T8419] gretap1: entered promiscuous mode [ 174.358746][ T8419] gretap1: entered allmulticast mode [ 174.416370][ T8421] gretap0: entered promiscuous mode [ 174.545743][ T8423] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 174.553050][ T5839] IPVS: starting estimator thread 0... [ 174.648442][ T8426] IPVS: using max 30 ests per chain, 72000 per kthread [ 174.786058][ T43] usb 3-1: USB disconnect, device number 19 [ 174.877153][ T8437] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1038'. [ 175.467451][ T8459] netlink: 'syz.2.1048': attribute type 29 has an invalid length. [ 175.479161][ T8459] netlink: 'syz.2.1048': attribute type 29 has an invalid length. [ 175.489151][ T8459] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1048'. [ 175.500504][ T8459] unsupported nla_type 58 [ 175.677943][ T5839] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 175.841948][ T5839] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 175.851328][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.862648][ T5839] usb 5-1: config 0 descriptor?? [ 175.977961][ T5962] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 176.080911][ T5839] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 176.159777][ T5962] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 176.169276][ T5962] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 176.178842][ T5962] usb 3-1: config 150 has no interface number 0 [ 176.185442][ T5962] usb 3-1: config 150 interface 204 has no altsetting 0 [ 176.194770][ T5962] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 176.204794][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.214460][ T5962] usb 3-1: Product: syz [ 176.218936][ T5962] usb 3-1: Manufacturer: syz [ 176.223570][ T5962] usb 3-1: SerialNumber: syz [ 176.291523][ T5839] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 176.298434][ T5839] [drm] Initialized udl on minor 2 [ 176.340263][ T5959] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 176.444009][ T5962] xr_serial 3-1:150.204: skipping garbage [ 176.450048][ T5962] xr_serial 3-1:150.204: xr_serial converter detected [ 176.499607][ T5959] usb 4-1: Using ep0 maxpacket: 8 [ 176.506375][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.519376][ T5959] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 176.529129][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.541959][ T5959] usb 4-1: config 0 descriptor?? [ 176.684657][ T5839] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffe0 [ 176.692921][ T5839] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 176.701443][ T5917] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 176.716732][ T5839] usb 5-1: USB disconnect, device number 13 [ 176.723356][ T5917] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 176.743693][ T5917] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 176.768762][ T5959] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior2 [ 177.021556][ T5959] usb 4-1: USB disconnect, device number 18 [ 177.244695][ T5962] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 177.253483][ T5962] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 177.272131][ T5962] usb 3-1: USB disconnect, device number 20 [ 177.280741][ T5962] xr_serial 3-1:150.204: device disconnected [ 178.197903][ T8490] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.884344][ T8508] sctp: [Deprecated]: syz.4.1067 (pid 8508) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.884344][ T8508] Use struct sctp_sack_info instead [ 178.969620][ T5839] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 179.130051][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.141687][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.152705][ T5839] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.167615][ T5839] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.180314][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.196293][ T5839] usb 3-1: config 0 descriptor?? [ 179.718041][ T8429] usbtmc 2-1:16.0: usbtmc_ioctl_request failed -110 [ 179.752089][ T5962] usb 2-1: USB disconnect, device number 24 [ 179.818200][ T5839] plantronics 0003:047F:FFFF.000F: hiddev2,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 179.833916][ T5921] usb 1-1: USB disconnect, device number 14 [ 179.887370][ T5839] usb 3-1: USB disconnect, device number 21 [ 180.078627][ T8511] fido_id[8511]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 181.182921][ T8554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.668150][ T5962] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 181.847901][ T5962] usb 5-1: Using ep0 maxpacket: 16 [ 181.882897][ T5962] usb 5-1: unable to get BOS descriptor or descriptor too short [ 181.892068][ T5962] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 181.928050][ T5962] usb 5-1: can't read configurations, error -71 [ 182.157983][ T5921] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 182.309008][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 182.319647][ T5921] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 182.329214][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.337271][ T5921] usb 2-1: Product: syz [ 182.342041][ T5921] usb 2-1: Manufacturer: syz [ 182.346643][ T5921] usb 2-1: SerialNumber: syz [ 182.353204][ T5921] usb 2-1: config 0 descriptor?? [ 182.397956][ T5888] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 182.569806][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.586765][ T5921] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 182.594658][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.606200][ T5888] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 182.615929][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.641823][ T5888] usb 1-1: config 0 descriptor?? [ 182.674292][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1105'. [ 182.683842][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1105'. [ 182.699899][ T8600] ip6gretap1: entered allmulticast mode [ 182.778006][ T5962] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 182.966695][ T5962] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.008091][ T5962] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 183.020234][ T5962] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 183.037950][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.054761][ T5962] usb 5-1: config 0 descriptor?? [ 183.073864][ T5888] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 183.074202][ T5962] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 183.092259][ T5888] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 183.099120][ T5962] dvb-usb: bulk message failed: -22 (3/0) [ 183.112832][ T5962] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 183.124064][ T5888] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0010/input/input33 [ 183.136561][ T5962] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 183.162431][ T5962] usb 5-1: media controller created [ 183.172721][ T5962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.205659][ T5888] cm6533_jd 0003:0D8C:0022.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 183.229881][ T5962] dvb-usb: bulk message failed: -22 (6/0) [ 183.259106][ T5962] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 183.317147][ T5962] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input34 [ 183.317239][ T5888] usb 1-1: USB disconnect, device number 15 [ 183.349002][ T5962] dvb-usb: schedule remote query interval to 150 msecs. [ 183.370651][ T5962] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 183.454871][ T8616] fido_id[8616]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 183.529632][ T5962] dvb-usb: bulk message failed: -22 (1/0) [ 183.536525][ T5962] dvb-usb: error while querying for an remote control event. [ 183.579900][ T5921] gspca_sunplus: reg_w_riv err -71 [ 183.605388][ T5921] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 183.634074][ T5921] usb 2-1: USB disconnect, device number 25 [ 183.728318][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 183.734130][ T5917] dvb-usb: error while querying for an remote control event. [ 183.743546][ T8624] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1115'. [ 183.803650][ T8626] netlink: 'syz.2.1116': attribute type 29 has an invalid length. [ 183.812872][ T8626] netlink: 'syz.2.1116': attribute type 29 has an invalid length. [ 183.829581][ T8626] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1116'. [ 183.920479][ T8596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.932032][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 183.947600][ T5917] dvb-usb: error while querying for an remote control event. [ 183.956207][ T8596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.975153][ T5888] usb 5-1: USB disconnect, device number 15 [ 184.029899][ T5888] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 185.118148][ T5962] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 185.308182][ T5962] usb 4-1: Using ep0 maxpacket: 32 [ 185.317699][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.335846][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.373660][ T5962] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 185.406396][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.437637][ T5962] usb 4-1: config 0 descriptor?? [ 185.623677][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'. [ 185.662884][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'. [ 185.739569][ T8686] netlink: 'syz.2.1139': attribute type 1 has an invalid length. [ 185.947839][ T5962] savu 0003:1E7D:2D5A.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 186.160406][ T5921] usb 4-1: USB disconnect, device number 19 [ 186.194291][ T8701] input: syz1 as /devices/virtual/input/input35 [ 186.773965][ T8720] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 187.224589][ T8737] syzkaller1: entered promiscuous mode [ 187.262175][ T8737] syzkaller1: entered allmulticast mode [ 188.246792][ T8773] kvm: MWAIT instruction emulated as NOP! [ 188.806944][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1185'. [ 188.852131][ T8801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.885276][ T8801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.900488][ T8801] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 188.914330][ T8801] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 189.125049][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1188'. [ 189.137102][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1188'. [ 189.971035][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1191'. [ 189.998953][ T8817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1191'. [ 191.243095][ T8868] input: syz0 as /devices/virtual/input/input36 [ 192.226485][ T8889] kvm: kvm [8887]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 193.120782][ T8922] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1231'. [ 194.280255][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.288207][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.767995][ T5917] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 194.932712][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 194.944613][ T8981] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.956730][ T5917] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 194.970072][ T5917] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 194.989880][ T5917] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.003564][ T5917] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 195.074858][ T5917] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 195.088245][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.100192][ T5917] usb 1-1: Product: syz [ 195.104854][ T5917] usb 1-1: Manufacturer: syz [ 195.120775][ T5917] usb 1-1: SerialNumber: syz [ 195.144721][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 195.175874][ T5917] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input37 [ 195.205847][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1257'. [ 195.232204][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1257'. [ 195.367735][ T8993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1259'. [ 195.382455][ T8993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1259'. [ 195.388146][ T5917] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 195.410313][ T5917] (id 0x00) [ 195.547585][ T5917] rc_core: IR keymap rc-imon-pad not found [ 195.578306][ T5917] Registered IR keymap rc-empty [ 195.586758][ T5917] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 195.588158][ T8998] netlink: 'syz.4.1261': attribute type 1 has an invalid length. [ 195.621201][ T5917] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 195.685426][ T5917] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 195.743845][ T5917] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input38 [ 195.789412][ T5917] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:16> initialized [ 195.914085][ T43] usb 1-1: USB disconnect, device number 16 [ 196.039411][ T9004] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.061855][ T9004] bond1: (slave bond2): making interface the new active one [ 196.072842][ T9004] bond1: (slave bond2): Enslaving as an active interface with an up link [ 196.320509][ T9020] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 196.355958][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 196.363059][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 196.363104][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 196.372168][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 196.379751][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 198.378295][ T5962] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 198.558658][ T5962] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 198.600955][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.633412][ T5962] usb 5-1: config 0 descriptor?? [ 198.673305][ T5962] cp210x 5-1:0.0: cp210x converter detected [ 199.106316][ T5962] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 199.107440][ T9071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.129059][ T9071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.188218][ T5962] usb 5-1: cp210x converter now attached to ttyUSB0 [ 199.374894][ T5888] usb 5-1: USB disconnect, device number 16 [ 199.427257][ T5888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 199.452772][ T5888] cp210x 5-1:0.0: device disconnected [ 200.258640][ T5888] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 200.428337][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 200.440006][ T5888] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 200.458257][ T5888] usb 5-1: config 0 has no interface number 0 [ 200.471298][ T5888] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 200.500773][ T5888] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 200.517983][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.537603][ T5888] usb 5-1: Product: syz [ 200.548526][ T5888] usb 5-1: Manufacturer: syz [ 200.557320][ T5888] usb 5-1: SerialNumber: syz [ 200.579094][ T5888] usb 5-1: config 0 descriptor?? [ 200.599012][ T5888] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 200.628057][ T5888] em28xx 5-1:0.132: Video interface 132 found: [ 200.677936][ T5962] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 200.830480][ T5962] usb 2-1: Using ep0 maxpacket: 16 [ 200.864125][ T5962] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.894524][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.908857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 200.919001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c0!!! [ 200.958236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 200.968714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 200.979780][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1311'. [ 201.009520][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 201.023056][ T5888] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 201.067997][ T5962] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 201.108129][ T5962] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.162458][ T5962] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 201.184442][ T5962] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 201.201948][ T9122] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.210969][ T9122] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.219853][ T5962] usb 2-1: Manufacturer: syz [ 201.232123][ T5962] usb 2-1: config 0 descriptor?? [ 201.558786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 201.643560][ T9122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.650302][ T5962] rc_core: IR keymap rc-hauppauge not found [ 201.662541][ T9122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.692268][ T5962] Registered IR keymap rc-empty [ 201.709500][ T5962] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 201.751128][ T5962] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 201.804769][ T5962] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 201.854110][ T5962] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input40 [ 201.917873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 201.927097][ T5962] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 201.959372][ T5962] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.048276][ T5962] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.088631][ T5962] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.118201][ T5962] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.181338][ T5962] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.188171][ T5888] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 202.208206][ T5888] em28xx 5-1:0.132: board has no eeprom [ 202.218047][ T5962] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.297880][ T5888] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 202.310650][ T5962] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.319740][ T5888] em28xx 5-1:0.132: analog set to bulk mode. [ 202.350900][ T5962] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.381459][ T9149] em28xx 5-1:0.132: Registering V4L2 extension [ 202.399307][ T5962] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.401180][ T5888] usb 5-1: USB disconnect, device number 17 [ 202.466356][ T5888] em28xx 5-1:0.132: Disconnecting em28xx [ 202.481200][ T5962] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 202.511474][ T5962] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 202.535609][ T9123] geneve2: entered promiscuous mode [ 202.541620][ T9123] geneve2: entered allmulticast mode [ 202.565615][ T5962] usb 2-1: USB disconnect, device number 26 [ 202.823379][ T9149] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 202.848180][ T9149] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 202.897922][ T9149] em28xx 5-1:0.132: No AC97 audio processor [ 202.929323][ T9149] usb 5-1: Decoder not found [ 202.934194][ T9149] em28xx 5-1:0.132: failed to create media graph [ 202.985471][ T9149] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 203.022425][ T9149] em28xx 5-1:0.132: Remote control support is not available for this card. [ 203.047950][ T5888] em28xx 5-1:0.132: Closing input extension [ 203.119966][ T5888] em28xx 5-1:0.132: Freeing device [ 205.071016][ T9226] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 205.085129][ T9226] syzkaller1: Refused to change device type [ 205.385948][ T9231] dlm: non-version read from control device 216 [ 205.446458][ T9231] dlm: non-version read from control device 216 [ 205.453092][ T9231] dlm: non-version read from control device 216 [ 205.460200][ T9231] dlm: non-version read from control device 216 [ 205.466639][ T9231] dlm: non-version read from control device 216 [ 205.474626][ T9231] dlm: non-version read from control device 216 [ 205.494763][ T9231] dlm: non-version read from control device 216 [ 205.517990][ T9231] dlm: non-version read from control device 216 [ 205.535242][ T9231] dlm: non-version read from control device 216 [ 205.558457][ T9231] dlm: non-version read from control device 216 [ 205.564779][ T9231] dlm: non-version read from control device 216 [ 205.588965][ T9231] dlm: non-version read from control device 216 [ 205.595569][ T9231] dlm: non-version read from control device 216 [ 205.602474][ T9231] dlm: non-version read from control device 216 [ 205.629113][ T9231] dlm: non-version read from control device 216 [ 205.635455][ T9231] dlm: non-version read from control device 216 [ 205.641869][ T9231] dlm: non-version read from control device 216 [ 205.648303][ T9231] dlm: non-version read from control device 216 [ 205.654610][ T9231] dlm: non-version read from control device 216 [ 205.662370][ T9231] dlm: non-version read from control device 216 [ 205.670721][ T9231] dlm: non-version read from control device 216 [ 205.699042][ T9231] dlm: non-version read from control device 216 [ 205.705353][ T9231] dlm: non-version read from control device 216 [ 205.713406][ T9231] dlm: non-version read from control device 216 [ 205.720672][ T9231] dlm: non-version read from control device 216 [ 205.728104][ T9231] dlm: non-version read from control device 216 [ 205.745397][ T9231] dlm: non-version read from control device 216 [ 205.751922][ T9231] dlm: non-version read from control device 216 [ 205.758613][ T9231] dlm: non-version read from control device 216 [ 205.765378][ T9231] dlm: non-version read from control device 216 [ 205.784318][ T9231] dlm: non-version read from control device 216 [ 205.798162][ T9231] dlm: non-version read from control device 216 [ 205.804680][ T9231] dlm: non-version read from control device 216 [ 205.812536][ T9231] dlm: non-version read from control device 216 [ 205.820156][ T9231] dlm: non-version read from control device 216 [ 205.826614][ T9231] dlm: non-version read from control device 216 [ 205.835676][ T9231] dlm: non-version read from control device 216 [ 205.843894][ T9231] dlm: non-version read from control device 216 [ 205.850748][ T9231] dlm: non-version read from control device 216 [ 205.857254][ T9231] dlm: non-version read from control device 216 [ 205.867569][ T9231] dlm: non-version read from control device 216 [ 205.875671][ T9231] dlm: non-version read from control device 216 [ 205.884081][ T9231] dlm: non-version read from control device 216 [ 205.890575][ T9231] dlm: non-version read from control device 216 [ 205.896897][ T9231] dlm: non-version read from control device 216 [ 205.904783][ T9231] dlm: non-version read from control device 216 [ 205.911210][ T9231] dlm: non-version read from control device 216 [ 205.917488][ T9231] dlm: non-version read from control device 216 [ 205.924877][ T9231] dlm: non-version read from control device 216 [ 205.932213][ T9231] dlm: non-version read from control device 216 [ 205.938841][ T9231] dlm: non-version read from control device 216 [ 205.945114][ T9231] dlm: non-version read from control device 216 [ 205.951893][ T9231] dlm: non-version read from control device 216 [ 205.958626][ T9231] dlm: non-version read from control device 216 [ 205.965035][ T9231] dlm: non-version read from control device 216 [ 205.972882][ T9231] dlm: non-version read from control device 216 [ 205.979416][ T9231] dlm: non-version read from control device 216 [ 205.985680][ T9231] dlm: non-version read from control device 216 [ 205.993208][ T9231] dlm: non-version read from control device 216 [ 205.999688][ T9231] dlm: non-version read from control device 216 [ 206.006158][ T9231] dlm: non-version read from control device 216 [ 206.013419][ T9231] dlm: non-version read from control device 216 [ 206.019968][ T9231] dlm: non-version read from control device 216 [ 206.026283][ T9231] dlm: non-version read from control device 216 [ 206.033375][ T9231] dlm: non-version read from control device 216 [ 206.068411][ T9231] dlm: non-version read from control device 216 [ 206.077931][ T9231] dlm: non-version read from control device 216 [ 206.097424][ T9231] dlm: non-version read from control device 216 [ 206.104142][ T1159] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.118372][ T9231] dlm: non-version read from control device 216 [ 206.124909][ T9231] dlm: non-version read from control device 216 [ 206.157440][ T9231] dlm: non-version read from control device 216 [ 206.164153][ T9231] dlm: non-version read from control device 216 [ 206.171215][ T9231] dlm: non-version read from control device 216 [ 206.180851][ T9231] dlm: non-version read from control device 216 [ 206.187262][ T9231] dlm: non-version read from control device 216 [ 206.197060][ T9231] dlm: non-version read from control device 216 [ 206.203809][ T9231] dlm: non-version read from control device 216 [ 206.234067][ T9231] dlm: non-version read from control device 216 [ 206.254668][ T9231] dlm: non-version read from control device 216 [ 206.260634][ T1159] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.264355][ T9231] dlm: non-version read from control device 216 [ 206.347118][ T1159] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.359550][ T5888] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 206.461008][ T1159] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.528224][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 206.538273][ T5888] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 206.557256][ T5888] usb 1-1: config 179 has no interface number 0 [ 206.624781][ T5888] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 206.647155][ T5888] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 206.695978][ T5888] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 206.751392][ T5888] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 206.797698][ T5888] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 206.839250][ T5888] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 206.879859][ T1159] bridge_slave_1: left allmulticast mode [ 206.902898][ T1159] bridge_slave_1: left promiscuous mode [ 206.910156][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.920582][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.936105][ T9242] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 206.986875][ T1159] bridge_slave_0: left allmulticast mode [ 207.035863][ T1159] bridge_slave_0: left promiscuous mode [ 207.062616][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.128379][ T9130] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 207.247288][ T9126] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input41 [ 207.327915][ T9130] usb 2-1: Using ep0 maxpacket: 32 [ 207.367480][ T9130] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 207.418042][ T9130] usb 2-1: config 0 has no interface number 0 [ 207.424195][ T9130] usb 2-1: config 0 interface 12 has no altsetting 0 [ 207.426340][ T9242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.480103][ T9130] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 207.491867][ T9242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.528789][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.549174][ T9130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.551349][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.557281][ T9130] usb 2-1: Product: syz [ 207.557300][ T9130] usb 2-1: Manufacturer: syz [ 207.557313][ T9130] usb 2-1: SerialNumber: syz [ 207.581503][ T9130] usb 2-1: config 0 descriptor?? [ 207.590048][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.602446][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.616691][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.878436][ T9131] usb 1-1: USB disconnect, device number 17 [ 207.878455][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 207.893163][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 207.902187][ C1] ================================================================== [ 207.910261][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23d/0x290 [ 207.918193][ C1] Read of size 4 at addr ffff88802780305c by task sed/9266 [ 207.925399][ C1] [ 207.927753][ C1] CPU: 1 UID: 0 PID: 9266 Comm: sed Not tainted syzkaller #0 PREEMPT(full) [ 207.927777][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 207.927796][ C1] Call Trace: [ 207.927803][ C1] [ 207.927810][ C1] dump_stack_lvl+0x189/0x250 [ 207.927839][ C1] ? __kasan_check_byte+0x12/0x40 [ 207.927857][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.927882][ C1] ? lock_release+0x4b/0x3e0 [ 207.927903][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 207.927930][ C1] print_report+0xca/0x240 [ 207.927952][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 207.927975][ C1] kasan_report+0x118/0x150 [ 207.927996][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 207.928023][ C1] do_raw_spin_lock+0x23d/0x290 [ 207.928047][ C1] ? __wake_up_common_lock+0x2f/0x1f0 [ 207.928070][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 207.928097][ C1] _raw_spin_lock_irqsave+0xb3/0xf0 [ 207.928121][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 207.928143][ C1] ? kcov_remote_stop+0x78/0x6d0 [ 207.928163][ C1] __wake_up_common_lock+0x2f/0x1f0 [ 207.928192][ C1] __usb_hcd_giveback_urb+0x3b0/0x540 [ 207.928218][ C1] dummy_timer+0x85f/0x44c0 [ 207.928246][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 207.928282][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 207.928300][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 207.928317][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 207.928335][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 207.928353][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 207.928384][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 207.928402][ C1] ? read_tsc+0x9/0x20 [ 207.928428][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 207.928449][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 207.928470][ C1] handle_softirqs+0x286/0x870 [ 207.928488][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 207.928509][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 207.928529][ C1] __irq_exit_rcu+0xca/0x1f0 [ 207.928548][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 207.928570][ C1] irq_exit_rcu+0x9/0x30 [ 207.928587][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 207.928611][ C1] [ 207.928617][ C1] [ 207.928625][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 207.928655][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 207.928675][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 ab fc d0 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 207.928692][ C1] RSP: 0018:ffffc9000b8a7398 EFLAGS: 00000206 [ 207.928710][ C1] RAX: 3bb4101471382800 RBX: 0000000000000000 RCX: 3bb4101471382800 [ 207.928723][ C1] RDX: 0000000000000000 RSI: ffffffff8d8f46a3 RDI: ffffffff8bbf0760 [ 207.928737][ C1] RBP: ffffffff81738d25 R08: 0000000000000000 R09: ffffffff81738d25 [ 207.928749][ C1] R10: ffffc9000b8a7558 R11: ffffffff81ac2f50 R12: 0000000000000002 [ 207.928762][ C1] R13: ffffffff8df3d660 R14: 0000000000000000 R15: 0000000000000246 [ 207.928777][ C1] ? unwind_next_frame+0xa5/0x2390 [ 207.928799][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 207.928825][ C1] ? unwind_next_frame+0xa5/0x2390 [ 207.928854][ C1] ? unwind_next_frame+0xa5/0x2390 [ 207.928874][ C1] ? do_group_exit+0x21c/0x2d0 [ 207.928900][ C1] ? unwind_next_frame+0xa5/0x2390 [ 207.928922][ C1] unwind_next_frame+0xc2/0x2390 [ 207.928944][ C1] ? unwind_next_frame+0xa5/0x2390 [ 207.928968][ C1] ? unwind_next_frame+0xa5/0x2390 [ 207.928989][ C1] ? do_exit+0x648/0x2300 [ 207.929014][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 207.929038][ C1] arch_stack_walk+0x11c/0x150 [ 207.929063][ C1] ? do_group_exit+0x21c/0x2d0 [ 207.929090][ C1] stack_trace_save+0x9c/0xe0 [ 207.929114][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 207.929134][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 207.929156][ C1] ? kernel_text_address+0xa5/0xe0 [ 207.929185][ C1] kasan_save_stack+0x3e/0x60 [ 207.929209][ C1] ? kasan_save_stack+0x3e/0x60 [ 207.929232][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 207.929253][ C1] ? call_rcu+0x157/0x9c0 [ 207.929273][ C1] ? kmem_cache_free+0x4b5/0x690 [ 207.929299][ C1] ? exit_mmap+0x537/0xb40 [ 207.929323][ C1] ? __mmput+0x118/0x430 [ 207.929341][ C1] ? exit_mm+0x1da/0x2c0 [ 207.929363][ C1] ? do_exit+0x648/0x2300 [ 207.929386][ C1] ? do_group_exit+0x21c/0x2d0 [ 207.929428][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 207.929451][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 207.929472][ C1] call_rcu+0x157/0x9c0 [ 207.929498][ C1] ? __pfx_call_rcu+0x10/0x10 [ 207.929524][ C1] ? exit_mmap+0x537/0xb40 [ 207.929548][ C1] kmem_cache_free+0x4b5/0x690 [ 207.929577][ C1] exit_mmap+0x537/0xb40 [ 207.929603][ C1] ? uprobe_clear_state+0x20f/0x290 [ 207.929622][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 207.929651][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 207.929685][ C1] ? __pfx_exit_aio+0x10/0x10 [ 207.929706][ C1] ? uprobe_clear_state+0x27c/0x290 [ 207.929726][ C1] __mmput+0x118/0x430 [ 207.929742][ C1] exit_mm+0x1da/0x2c0 [ 207.929764][ C1] ? __pfx_exit_mm+0x10/0x10 [ 207.929786][ C1] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 207.929807][ C1] ? rcu_is_watching+0x15/0xb0 [ 207.929828][ C1] do_exit+0x648/0x2300 [ 207.929853][ C1] ? rcu_is_watching+0x15/0xb0 [ 207.929877][ C1] ? __pfx_do_exit+0x10/0x10 [ 207.929901][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 207.929922][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.929948][ C1] do_group_exit+0x21c/0x2d0 [ 207.929975][ C1] __x64_sys_exit_group+0x3f/0x40 [ 207.930000][ C1] x64_sys_call+0x21f7/0x2200 [ 207.930016][ C1] do_syscall_64+0xfa/0xfa0 [ 207.930040][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.930064][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.930083][ C1] ? clear_bhb_loop+0x60/0xb0 [ 207.930103][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.930121][ C1] RIP: 0033:0x7ff24a3946c5 [ 207.930152][ C1] Code: Unable to access opcode bytes at 0x7ff24a39469b. [ 207.930163][ C1] RSP: 002b:00007ffeb81571a8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 207.930182][ C1] RAX: ffffffffffffffda RBX: 00007ff24a495fe8 RCX: 00007ff24a3946c5 [ 207.930197][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 207.930210][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 207.930222][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 207.930235][ C1] R13: 0000000000000000 R14: 00007ff24a494680 R15: 00007ff24a496000 [ 207.930255][ C1] [ 207.930262][ C1] [ 208.560034][ C1] Allocated by task 5888: [ 208.564344][ C1] kasan_save_track+0x3e/0x80 [ 208.569019][ C1] __kasan_kmalloc+0x93/0xb0 [ 208.573598][ C1] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 208.579046][ C1] xpad_probe+0x428/0x1fc0 [ 208.583451][ C1] usb_probe_interface+0x668/0xc30 [ 208.588824][ C1] really_probe+0x26d/0x9e0 [ 208.593339][ C1] __driver_probe_device+0x18c/0x2f0 [ 208.598726][ C1] driver_probe_device+0x4f/0x430 [ 208.603841][ C1] __device_attach_driver+0x2ce/0x530 [ 208.609296][ C1] bus_for_each_drv+0x251/0x2e0 [ 208.614151][ C1] __device_attach+0x2b8/0x400 [ 208.618904][ C1] bus_probe_device+0x185/0x260 [ 208.623746][ C1] device_add+0x7b6/0xb50 [ 208.628062][ C1] usb_set_configuration+0x1a87/0x20e0 [ 208.633508][ C1] usb_generic_driver_probe+0x8d/0x150 [ 208.638951][ C1] usb_probe_device+0x1c4/0x390 [ 208.643795][ C1] really_probe+0x26d/0x9e0 [ 208.648284][ C1] __driver_probe_device+0x18c/0x2f0 [ 208.653555][ C1] driver_probe_device+0x4f/0x430 [ 208.658576][ C1] __device_attach_driver+0x2ce/0x530 [ 208.664020][ C1] bus_for_each_drv+0x251/0x2e0 [ 208.668857][ C1] __device_attach+0x2b8/0x400 [ 208.673602][ C1] bus_probe_device+0x185/0x260 [ 208.678439][ C1] device_add+0x7b6/0xb50 [ 208.682840][ C1] usb_new_device+0xa39/0x16f0 [ 208.687614][ C1] hub_event+0x2958/0x4a20 [ 208.692012][ C1] process_scheduled_works+0xae1/0x17b0 [ 208.697657][ C1] worker_thread+0x8a0/0xda0 [ 208.702235][ C1] kthread+0x711/0x8a0 [ 208.706595][ C1] ret_from_fork+0x4bc/0x870 [ 208.711172][ C1] ret_from_fork_asm+0x1a/0x30 [ 208.715917][ C1] [ 208.718226][ C1] Freed by task 9131: [ 208.722188][ C1] kasan_save_track+0x3e/0x80 [ 208.726888][ C1] __kasan_save_free_info+0x46/0x50 [ 208.732077][ C1] __kasan_slab_free+0x5c/0x80 [ 208.736826][ C1] kfree+0x19a/0x6d0 [ 208.740792][ C1] xpad_disconnect+0x350/0x480 [ 208.745545][ C1] usb_unbind_interface+0x26e/0x910 [ 208.750726][ C1] device_release_driver_internal+0x4d9/0x800 [ 208.756901][ C1] bus_remove_device+0x34d/0x410 [ 208.761823][ C1] device_del+0x511/0x8e0 [ 208.766233][ C1] usb_disable_device+0x3e9/0x8a0 [ 208.771356][ C1] usb_disconnect+0x330/0x950 [ 208.776032][ C1] hub_event+0x1cf5/0x4a20 [ 208.780434][ C1] process_scheduled_works+0xae1/0x17b0 [ 208.785988][ C1] worker_thread+0x8a0/0xda0 [ 208.790574][ C1] kthread+0x711/0x8a0 [ 208.794632][ C1] ret_from_fork+0x4bc/0x870 [ 208.799209][ C1] ret_from_fork_asm+0x1a/0x30 [ 208.803966][ C1] [ 208.806281][ C1] Last potentially related work creation: [ 208.811976][ C1] kasan_save_stack+0x3e/0x60 [ 208.816645][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 208.821835][ C1] insert_work+0x3d/0x330 [ 208.826158][ C1] __queue_work+0xcd2/0xfb0 [ 208.830756][ C1] queue_work_on+0x181/0x270 [ 208.835342][ C1] xpad_irq_in+0xb57/0x2590 [ 208.839834][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 208.845196][ C1] dummy_timer+0x85f/0x44c0 [ 208.849683][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 208.854865][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 208.859962][ C1] handle_softirqs+0x286/0x870 [ 208.864719][ C1] __irq_exit_rcu+0xca/0x1f0 [ 208.869320][ C1] irq_exit_rcu+0x9/0x30 [ 208.873573][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 208.879194][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 208.885170][ C1] [ 208.887475][ C1] Second to last potentially related work creation: [ 208.894035][ C1] kasan_save_stack+0x3e/0x60 [ 208.898713][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 208.903937][ C1] insert_work+0x3d/0x330 [ 208.908304][ C1] __queue_work+0xcd2/0xfb0 [ 208.912796][ C1] queue_work_on+0x181/0x270 [ 208.917372][ C1] xpad_irq_in+0xb57/0x2590 [ 208.921861][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 208.927348][ C1] dummy_timer+0x85f/0x44c0 [ 208.931942][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 208.937137][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 208.942253][ C1] handle_softirqs+0x286/0x870 [ 208.947002][ C1] __irq_exit_rcu+0xca/0x1f0 [ 208.951575][ C1] irq_exit_rcu+0x9/0x30 [ 208.955800][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 208.961435][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 208.967398][ C1] [ 208.969733][ C1] The buggy address belongs to the object at ffff888027803000 [ 208.969733][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 208.983770][ C1] The buggy address is located 92 bytes inside of [ 208.983770][ C1] freed 1024-byte region [ffff888027803000, ffff888027803400) [ 208.997726][ C1] [ 209.000038][ C1] The buggy address belongs to the physical page: [ 209.006446][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27800 [ 209.015197][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 209.023685][ C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 209.031676][ C1] page_type: f5(slab) [ 209.035644][ C1] raw: 00fff00000000040 ffff88801a026dc0 0000000000000000 dead000000000001 [ 209.044301][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 209.052876][ C1] head: 00fff00000000040 ffff88801a026dc0 0000000000000000 dead000000000001 [ 209.061618][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 209.070279][ C1] head: 00fff00000000003 ffffea00009e0001 00000000ffffffff 00000000ffffffff [ 209.078932][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 209.087579][ C1] page dumped because: kasan: bad access detected [ 209.094069][ C1] page_owner tracks the page as allocated [ 209.099766][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 23, tgid 23 (ksoftirqd/1), ts 161388835704, free_ts 161381422540 [ 209.118867][ C1] post_alloc_hook+0x240/0x2a0 [ 209.123649][ C1] get_page_from_freelist+0x2365/0x2440 [ 209.129270][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 209.135154][ C1] alloc_pages_mpol+0x232/0x4a0 [ 209.140346][ C1] allocate_slab+0x96/0x350 [ 209.145049][ C1] ___slab_alloc+0xe94/0x18a0 [ 209.149709][ C1] __slab_alloc+0x65/0x100 [ 209.154170][ C1] __kmalloc_noprof+0x471/0x7f0 [ 209.159118][ C1] ieee802_11_parse_elems_full+0x152/0x2ab0 [ 209.165013][ C1] ieee80211_inform_bss+0x10c/0x10a0 [ 209.170411][ C1] cfg80211_inform_single_bss_data+0xd05/0x1ac0 [ 209.176907][ C1] cfg80211_inform_bss_data+0x203/0x3b40 [ 209.182527][ C1] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 209.188579][ C1] ieee80211_bss_info_update+0x749/0x9e0 [ 209.194216][ C1] ieee80211_scan_rx+0x593/0xa20 [ 209.199158][ C1] ieee80211_rx_list+0x210c/0x2b90 [ 209.204438][ C1] page last free pid 5200 tgid 5200 stack trace: [ 209.210921][ C1] __free_frozen_pages+0xbc4/0xd30 [ 209.216027][ C1] __put_partials+0x146/0x170 [ 209.220692][ C1] put_cpu_partial+0x1f2/0x2e0 [ 209.225574][ C1] __slab_free+0x2b9/0x390 [ 209.229980][ C1] qlist_free_all+0x97/0x140 [ 209.234654][ C1] kasan_quarantine_reduce+0x148/0x160 [ 209.240105][ C1] __kasan_slab_alloc+0x22/0x80 [ 209.245214][ C1] __kmalloc_noprof+0x3c3/0x7f0 [ 209.250055][ C1] tomoyo_realpath_from_path+0xe3/0x5d0 [ 209.255699][ C1] tomoyo_path_perm+0x213/0x4b0 [ 209.260776][ C1] security_inode_getattr+0x12f/0x330 [ 209.266158][ C1] __x64_sys_newfstat+0xfc/0x200 [ 209.271137][ C1] do_syscall_64+0xfa/0xfa0 [ 209.275651][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.281540][ C1] [ 209.283857][ C1] Memory state around the buggy address: [ 209.289476][ C1] ffff888027802f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 209.297525][ C1] ffff888027802f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 209.305572][ C1] >ffff888027803000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.313617][ C1] ^ [ 209.320626][ C1] ffff888027803080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.328865][ C1] ffff888027803100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.336910][ C1] ================================================================== [ 209.344967][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 209.352159][ C1] CPU: 1 UID: 0 PID: 9266 Comm: sed Not tainted syzkaller #0 PREEMPT(full) [ 209.360883][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 209.370929][ C1] Call Trace: [ 209.374721][ C1] [ 209.377551][ C1] dump_stack_lvl+0x99/0x250 [ 209.382134][ C1] ? __asan_memcpy+0x40/0x70 [ 209.386716][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.391905][ C1] ? __pfx__printk+0x10/0x10 [ 209.396493][ C1] vpanic+0x237/0x6d0 [ 209.400470][ C1] ? __pfx_vpanic+0x10/0x10 [ 209.404971][ C1] panic+0xb9/0xc0 [ 209.408690][ C1] ? __pfx_panic+0x10/0x10 [ 209.413190][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 209.419091][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 209.424125][ C1] check_panic_on_warn+0x89/0xb0 [ 209.429071][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 209.434275][ C1] end_report+0x78/0x160 [ 209.438509][ C1] kasan_report+0x129/0x150 [ 209.443000][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 209.448015][ C1] do_raw_spin_lock+0x23d/0x290 [ 209.452856][ C1] ? __wake_up_common_lock+0x2f/0x1f0 [ 209.458231][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 209.463601][ C1] _raw_spin_lock_irqsave+0xb3/0xf0 [ 209.468787][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 209.474663][ C1] ? kcov_remote_stop+0x78/0x6d0 [ 209.479586][ C1] __wake_up_common_lock+0x2f/0x1f0 [ 209.484782][ C1] __usb_hcd_giveback_urb+0x3b0/0x540 [ 209.490142][ C1] dummy_timer+0x85f/0x44c0 [ 209.494640][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 209.500005][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 209.504936][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 209.509859][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 209.514779][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 209.519967][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 209.525949][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 209.531665][ C1] ? read_tsc+0x9/0x20 [ 209.535744][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 209.541553][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 209.546674][ C1] handle_softirqs+0x286/0x870 [ 209.551446][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 209.556218][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 209.561499][ C1] __irq_exit_rcu+0xca/0x1f0 [ 209.566083][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 209.571283][ C1] irq_exit_rcu+0x9/0x30 [ 209.575513][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 209.581141][ C1] [ 209.584129][ C1] [ 209.587048][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 209.593028][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 209.598427][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 ab fc d0 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 209.618117][ C1] RSP: 0018:ffffc9000b8a7398 EFLAGS: 00000206 [ 209.624197][ C1] RAX: 3bb4101471382800 RBX: 0000000000000000 RCX: 3bb4101471382800 [ 209.632194][ C1] RDX: 0000000000000000 RSI: ffffffff8d8f46a3 RDI: ffffffff8bbf0760 [ 209.640188][ C1] RBP: ffffffff81738d25 R08: 0000000000000000 R09: ffffffff81738d25 [ 209.648250][ C1] R10: ffffc9000b8a7558 R11: ffffffff81ac2f50 R12: 0000000000000002 [ 209.656220][ C1] R13: ffffffff8df3d660 R14: 0000000000000000 R15: 0000000000000246 [ 209.664209][ C1] ? unwind_next_frame+0xa5/0x2390 [ 209.669400][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 209.675548][ C1] ? unwind_next_frame+0xa5/0x2390 [ 209.680653][ C1] ? unwind_next_frame+0xa5/0x2390 [ 209.685755][ C1] ? do_group_exit+0x21c/0x2d0 [ 209.690510][ C1] ? unwind_next_frame+0xa5/0x2390 [ 209.695608][ C1] unwind_next_frame+0xc2/0x2390 [ 209.700530][ C1] ? unwind_next_frame+0xa5/0x2390 [ 209.705633][ C1] ? unwind_next_frame+0xa5/0x2390 [ 209.710731][ C1] ? do_exit+0x648/0x2300 [ 209.715056][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 209.721283][ C1] arch_stack_walk+0x11c/0x150 [ 209.726037][ C1] ? do_group_exit+0x21c/0x2d0 [ 209.730794][ C1] stack_trace_save+0x9c/0xe0 [ 209.735464][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 209.740864][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 209.746051][ C1] ? kernel_text_address+0xa5/0xe0 [ 209.751189][ C1] kasan_save_stack+0x3e/0x60 [ 209.755860][ C1] ? kasan_save_stack+0x3e/0x60 [ 209.760701][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 209.766057][ C1] ? call_rcu+0x157/0x9c0 [ 209.770405][ C1] ? kmem_cache_free+0x4b5/0x690 [ 209.775332][ C1] ? exit_mmap+0x537/0xb40 [ 209.779741][ C1] ? __mmput+0x118/0x430 [ 209.783965][ C1] ? exit_mm+0x1da/0x2c0 [ 209.788193][ C1] ? do_exit+0x648/0x2300 [ 209.792508][ C1] ? do_group_exit+0x21c/0x2d0 [ 209.797273][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 209.802463][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 209.808601][ C1] call_rcu+0x157/0x9c0 [ 209.812747][ C1] ? __pfx_call_rcu+0x10/0x10 [ 209.817426][ C1] ? exit_mmap+0x537/0xb40 [ 209.821839][ C1] kmem_cache_free+0x4b5/0x690 [ 209.826597][ C1] exit_mmap+0x537/0xb40 [ 209.830830][ C1] ? uprobe_clear_state+0x20f/0x290 [ 209.836019][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 209.840770][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 209.846835][ C1] ? __pfx_exit_aio+0x10/0x10 [ 209.851588][ C1] ? uprobe_clear_state+0x27c/0x290 [ 209.856774][ C1] __mmput+0x118/0x430 [ 209.860832][ C1] exit_mm+0x1da/0x2c0 [ 209.865009][ C1] ? __pfx_exit_mm+0x10/0x10 [ 209.869591][ C1] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 209.875032][ C1] ? rcu_is_watching+0x15/0xb0 [ 209.879781][ C1] do_exit+0x648/0x2300 [ 209.883933][ C1] ? rcu_is_watching+0x15/0xb0 [ 209.888694][ C1] ? __pfx_do_exit+0x10/0x10 [ 209.893280][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 209.898466][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.903664][ C1] do_group_exit+0x21c/0x2d0 [ 209.908252][ C1] __x64_sys_exit_group+0x3f/0x40 [ 209.913283][ C1] x64_sys_call+0x21f7/0x2200 [ 209.917967][ C1] do_syscall_64+0xfa/0xfa0 [ 209.922547][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.927750][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.933856][ C1] ? clear_bhb_loop+0x60/0xb0 [ 209.938520][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.944405][ C1] RIP: 0033:0x7ff24a3946c5 [ 209.948807][ C1] Code: Unable to access opcode bytes at 0x7ff24a39469b. [ 209.955895][ C1] RSP: 002b:00007ffeb81571a8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 209.964469][ C1] RAX: ffffffffffffffda RBX: 00007ff24a495fe8 RCX: 00007ff24a3946c5 [ 209.972429][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 209.980381][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 209.988334][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 209.996378][ C1] R13: 0000000000000000 R14: 00007ff24a494680 R15: 00007ff24a496000 [ 210.004585][ C1] [ 210.008022][ C1] Kernel Offset: disabled [ 210.012327][ C1] Rebooting in 86400 seconds..