last executing test programs: 8.957976326s ago: executing program 4 (id=4885): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xfffffffb, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 8.534833356s ago: executing program 4 (id=4887): syz_usb_connect(0x2, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000095e7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24"], 0x0) 6.408343825s ago: executing program 4 (id=4897): syz_usb_connect(0x0, 0x0, 0x0, 0x0) 5.746829305s ago: executing program 4 (id=4899): futex(0x0, 0xd, 0x1, &(0x7f0000000440), 0x0, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000080)=0x1000, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2245, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)) unshare(0x8040480) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x51, 0x7f7f, 0x0, {0x9, 0x1}, {0x52, 0x2}, @period={0x58, 0x6, 0x2, 0x7f, 0xf800, {0x6, 0x93, 0xe, 0x2}, 0x0, 0x0}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) fstat(0xffffffffffffffff, 0x0) r3 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x7, '\x00', @string=0x0}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) 5.280228892s ago: executing program 3 (id=4902): syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffff6, 0x2) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a00), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = syz_io_uring_setup(0x3, &(0x7f0000000440)={0x0, 0x74c2, 0x800, 0x1, 0x3d2}, &(0x7f00000004c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000b00)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x3, 0xc000000, 0x0, 0x0, 0x12, 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x8014) 5.101601961s ago: executing program 3 (id=4904): openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(0x0) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x83c}}, './file1\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x38, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r6, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001f00)}}, 0x10) 4.838571456s ago: executing program 1 (id=4906): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(r4, 0x3516, 0x0, 0x40030000000000, 0x0, 0x0) 3.096771953s ago: executing program 4 (id=4907): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r3 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x0) fallocate(r3, 0x0, 0x0, 0x200401) 2.780860451s ago: executing program 1 (id=4910): io_setup(0x6, &(0x7f0000000100)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00'}) r1 = socket(0xa, 0x3, 0x87) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x4, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r6, 0x0, 0x0, 0x4000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00'}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) 2.34452583s ago: executing program 0 (id=4912): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x6) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, 0x0) 2.079614653s ago: executing program 0 (id=4914): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="0406"], 0x7) 1.898997673s ago: executing program 0 (id=4916): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) 1.85483135s ago: executing program 2 (id=4917): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) memfd_create(&(0x7f0000000440)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xff\xff\xff\xff\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfc^\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11X\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x9f\x0f\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) 1.732420266s ago: executing program 3 (id=4918): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x40305828, &(0x7f0000000200)={{r0}, "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"}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$FUSE_WRITE(r2, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 1.666554809s ago: executing program 0 (id=4919): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x1}, 0x1) 1.331399179s ago: executing program 0 (id=4920): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x3859, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="01", 0x1, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)}, 0x2) 1.259751293s ago: executing program 3 (id=4921): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0xffffffffffffffff, 0x102, 0xed3, 0x2, 0x5, 0xc000, 0xfffffffc, r2, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffd, 0x6, 0x5d3186ca, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0xa0, 0x0, 0x100000001, {{0xfffffffffffffffd, 0x0, 0x7, 0x5, 0xfffffffb, 0x3, {0x0, 0x7fff, 0x6, 0x100000008, 0x4, 0x1, 0x1ff, 0x9, 0x0, 0x2000, 0xfffffffc, 0x0, 0xee01, 0x43, 0x4}}, {0x0, 0x2}}}, 0x0, 0x0}) 1.120233761s ago: executing program 0 (id=4922): socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.039741205s ago: executing program 3 (id=4923): syz_usb_connect(0x0, 0x0, 0x0, 0x0) 980.281991ms ago: executing program 4 (id=4924): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000240), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x9040}, 0xa205271dd71584c5) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xff, @loopback}, 0x1c) r7 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000190c0)=[@in6={0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}]}, &(0x7f00000002c0)=0x10) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) 785.000903ms ago: executing program 2 (id=4925): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31010000000900010073797a310000000020000380"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 695.666618ms ago: executing program 2 (id=4926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 563.823341ms ago: executing program 1 (id=4927): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000019000120000000000000000002", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0xc091}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xef, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000001}, 0x40000) 563.356781ms ago: executing program 2 (id=4928): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) epoll_pwait(r0, 0x0, 0x0, 0x9, &(0x7f0000000040)={[0x4]}, 0x8) 470.575027ms ago: executing program 1 (id=4929): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x3, 0x1, 'T'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8) 379.864973ms ago: executing program 1 (id=4930): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x1}, 0x1) 239.93343ms ago: executing program 3 (id=4931): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000340)={0x3, r4, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) 239.704403ms ago: executing program 2 (id=4932): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff91, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 138.243399ms ago: executing program 1 (id=4933): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0}) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 0s ago: executing program 2 (id=4934): pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): er 42 [ 1520.811827][T23912] FAULT_INJECTION: forcing a failure. [ 1520.811827][T23912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1520.896073][T23912] CPU: 1 UID: 0 PID: 23912 Comm: syz.2.4514 Tainted: G L syzkaller #0 PREEMPT(full) [ 1520.896101][T23912] Tainted: [L]=SOFTLOCKUP [ 1520.896117][T23912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1520.896127][T23912] Call Trace: [ 1520.896134][T23912] [ 1520.896141][T23912] dump_stack_lvl+0xe8/0x150 [ 1520.896168][T23912] should_fail_ex+0x412/0x560 [ 1520.896195][T23912] _copy_from_iter+0x1d3/0x1670 [ 1520.896220][T23912] ? __alloc_frozen_pages_noprof+0x1de/0x380 [ 1520.896248][T23912] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1520.896272][T23912] ? __pfx__copy_from_iter+0x10/0x10 [ 1520.896296][T23912] ? __pfx___mutex_lock+0x10/0x10 [ 1520.896316][T23912] ? aa_file_perm+0x50e/0x15e0 [ 1520.896334][T23912] ? page_copy_sane+0x4e/0x270 [ 1520.896360][T23912] copy_page_from_iter+0xdd/0x170 [ 1520.896379][T23912] anon_pipe_write+0xa0b/0x1480 [ 1520.896399][T23912] ? __pfx_aa_file_perm+0x10/0x10 [ 1520.896430][T23912] ? __pfx_anon_pipe_write+0x10/0x10 [ 1520.896449][T23912] ? apparmor_file_permission+0x1f4/0x300 [ 1520.896471][T23912] ? bpf_lsm_file_permission+0x9/0x20 [ 1520.896490][T23912] ? security_file_permission+0x75/0x260 [ 1520.896511][T23912] ? rw_verify_area+0x255/0x4d0 [ 1520.896527][T23912] ? import_ubuf+0xfb/0x1d0 [ 1520.896546][T23912] aio_write+0x5cd/0x870 [ 1520.896568][T23912] ? __pfx_aio_write+0x10/0x10 [ 1520.896613][T23912] io_submit_one+0x7bb/0x14c0 [ 1520.896642][T23912] ? __pfx_io_submit_one+0x10/0x10 [ 1520.896671][T23912] ? __might_fault+0xaf/0x130 [ 1520.896688][T23912] __se_sys_io_submit+0x195/0x340 [ 1520.896706][T23912] ? __pfx___se_sys_io_submit+0x10/0x10 [ 1520.896720][T23912] ? ksys_write+0x242/0x270 [ 1520.896748][T23912] do_syscall_64+0x14d/0xf80 [ 1520.896765][T23912] ? trace_irq_disable+0x3b/0x150 [ 1520.896793][T23912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.896809][T23912] ? clear_bhb_loop+0x40/0x90 [ 1520.896829][T23912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.896845][T23912] RIP: 0033:0x7f7b5f59c799 [ 1520.896859][T23912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1520.896873][T23912] RSP: 002b:00007f7b604ff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1520.896891][T23912] RAX: ffffffffffffffda RBX: 00007f7b5f815fa0 RCX: 00007f7b5f59c799 [ 1520.896903][T23912] RDX: 0000200000000300 RSI: 000000000000f000 RDI: 00007f7b604ce000 [ 1520.896914][T23912] RBP: 00007f7b604ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1520.896924][T23912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1520.896933][T23912] R13: 00007f7b5f816038 R14: 00007f7b5f815fa0 R15: 00007f7b5f93fa48 [ 1520.896957][T23912] [ 1521.562963][ T5917] usb 1-1: USB disconnect, device number 59 [ 1521.820208][T23920] syzkaller0: entered promiscuous mode [ 1521.850440][T23920] syzkaller0: entered allmulticast mode [ 1521.987335][ T5917] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1522.088167][T23574] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1522.150624][T23928] ptrace attach of "./syz-executor exec"[18055] was attempted by "./syz-executor exec"[23928] [ 1522.167645][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 1522.202151][ T5917] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1522.221196][ T5917] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.241670][ T5917] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1522.259537][T23574] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1522.269191][T23574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.271146][ T5917] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1522.300335][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.303825][T23574] usb 4-1: config 0 descriptor?? [ 1522.313646][ T5917] usb 1-1: Product: syz [ 1522.330265][ T5917] usb 1-1: Manufacturer: syz [ 1522.336883][ T5917] usb 1-1: SerialNumber: syz [ 1522.337947][T23574] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1522.540279][T23925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1522.552468][T23925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1522.570041][T23574] gspca_cpia1: usb_control_msg 05, error -71 [ 1522.591911][T23574] gspca_cpia1: usb_control_msg 01, error -71 [ 1522.615220][T23574] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 1522.653424][T23574] usb 4-1: USB disconnect, device number 43 [ 1522.718302][T16890] usb 5-1: USB disconnect, device number 95 [ 1522.790694][ T5917] usb 1-1: cannot find UAC_HEADER [ 1522.866666][ T5917] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1522.888672][ T5917] usb 1-1: USB disconnect, device number 60 [ 1522.924887][T22195] udevd[22195]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1523.678702][T23942] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4520'. [ 1524.100085][T16890] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1524.271925][T16890] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1524.282391][T16890] usb 1-1: no configurations [ 1524.287056][T16890] usb 1-1: can't read configurations, error -22 [ 1524.367807][T23574] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1524.557462][T23574] usb 5-1: Using ep0 maxpacket: 8 [ 1524.567428][T23574] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1524.577015][T23574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.585328][T23574] usb 5-1: Product: syz [ 1524.589851][T23574] usb 5-1: Manufacturer: syz [ 1524.594525][T23574] usb 5-1: SerialNumber: syz [ 1524.614520][T23574] usb 5-1: config 0 descriptor?? [ 1524.628902][T23574] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1524.926440][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1525.956555][T23574] gspca_sonixj: reg_w1 err -110 [ 1526.007452][T23574] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 1526.341992][ T5917] usb 5-1: USB disconnect, device number 96 [ 1526.548617][T23961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1527.047871][T23986] netlink: 'syz.3.4529': attribute type 4 has an invalid length. [ 1527.220308][T23967] could not allocate digest TFM handle hmac(sha256-ce) [ 1527.429264][T23574] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1528.467244][T23574] usb 4-1: Using ep0 maxpacket: 16 [ 1528.673246][T23574] usb 4-1: config 0 has no interfaces? [ 1528.777787][T23574] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1528.817345][T23574] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1528.828423][T23574] usb 4-1: Manufacturer: syz [ 1528.862953][T23574] usb 4-1: config 0 descriptor?? [ 1529.933366][T24012] tipc: Enabling of bearer rejected, failed to enable media [ 1530.105415][T24012] tipc: Enabling of bearer rejected, failed to enable media [ 1530.202331][ T5917] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1530.411233][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1530.478940][T24024] ptrace attach of "./syz-executor exec"[16992] was attempted by "./syz-executor exec"[24024] [ 1530.499943][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1530.510421][ T5917] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1530.527866][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.549252][T24024] syzkaller0: entered promiscuous mode [ 1530.554851][T24024] syzkaller0: entered allmulticast mode [ 1530.566302][ T5917] usb 2-1: config 0 descriptor?? [ 1531.128588][T23574] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1531.151209][ T5917] playstation 0003:054C:0BA0.0037: unknown main item tag 0x0 [ 1531.178415][ T5917] playstation 0003:054C:0BA0.0037: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0 [ 1531.297433][T23574] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1531.321886][T23574] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1531.350265][ T5917] playstation 0003:054C:0BA0.0037: Failed to retrieve feature with reportID 18: -71 [ 1531.407462][T23574] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 1531.422741][T23574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.427662][ T5917] playstation 0003:054C:0BA0.0037: Failed to retrieve DualShock4 pairing info: -71 [ 1531.444382][T23574] usb 3-1: Product: syz [ 1531.468605][T23574] usb 3-1: Manufacturer: syz [ 1531.473277][T23574] usb 3-1: SerialNumber: syz [ 1531.591585][ T5917] playstation 0003:054C:0BA0.0037: Failed to get MAC address from DualShock4 [ 1531.602391][T16887] usb 4-1: USB disconnect, device number 44 [ 1531.650985][ T5917] playstation 0003:054C:0BA0.0037: Failed to create dualshock4. [ 1531.715699][ T5917] playstation 0003:054C:0BA0.0037: probe with driver playstation failed with error -71 [ 1531.819894][ T5917] usb 2-1: USB disconnect, device number 43 [ 1534.151531][T23574] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1534.185043][T23574] usb 3-1: USB disconnect, device number 26 [ 1534.518335][T24065] ptrace attach of "./syz-executor exec"[17506] was attempted by "./syz-executor exec"[24065] [ 1534.545374][T24065] syzkaller0: entered promiscuous mode [ 1534.551189][T24065] syzkaller0: entered allmulticast mode [ 1534.708684][T23574] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1534.904315][T23574] usb 4-1: Using ep0 maxpacket: 32 [ 1534.977447][T23574] usb 4-1: config 0 has an invalid interface number: 23 but max is 0 [ 1534.994406][T23574] usb 4-1: config 0 has no interface number 0 [ 1535.026813][T23574] usb 4-1: config 0 interface 23 has no altsetting 0 [ 1535.062903][T23574] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 1535.076203][T23574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.264245][T23574] usb 4-1: Product: syz [ 1535.406671][T23574] usb 4-1: Manufacturer: syz [ 1535.578856][T23574] usb 4-1: SerialNumber: syz [ 1535.589528][T23574] usb 4-1: config 0 descriptor?? [ 1536.043988][T23574] usb 4-1: can't set config #0, error -71 [ 1536.062526][T23574] usb 4-1: USB disconnect, device number 45 [ 1536.135895][T24076] netlink: 'syz.0.4551': attribute type 4 has an invalid length. [ 1536.597559][ T5917] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1536.767307][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 1536.775791][ T5917] usb 1-1: config 0 has no interfaces? [ 1536.791336][ T5917] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1536.811420][ T5917] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1536.859011][T24086] tipc: Enabling of bearer rejected, failed to enable media [ 1536.909495][ T5917] usb 1-1: Manufacturer: syz [ 1536.939199][ T5917] usb 1-1: config 0 descriptor?? [ 1536.957376][T23574] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 1537.015645][T24089] tipc: Enabling of bearer rejected, failed to enable media [ 1537.082685][T24088] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1537.139024][T23574] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1537.148917][T23574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.457996][T23574] usb 5-1: config 0 descriptor?? [ 1537.774312][T23574] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1537.999894][T23574] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1538.008524][T23574] [drm] Initialized udl on minor 2 [ 1538.067395][ T5917] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1538.194195][T23574] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1538.203216][T23574] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1538.302926][ T5917] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1538.312448][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.323700][ T5917] usb 3-1: Product: syz [ 1538.331555][ T5917] usb 3-1: Manufacturer: syz [ 1538.341533][ T5917] usb 3-1: SerialNumber: syz [ 1538.409443][T16890] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1538.420680][T16890] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1538.430966][T23574] usb 5-1: USB disconnect, device number 97 [ 1538.437509][T16890] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1538.777045][ T5917] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1538.789180][ T5917] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1540.006220][T23574] usb 1-1: USB disconnect, device number 63 [ 1540.108693][T24113] ptrace attach of "./syz-executor exec"[16992] was attempted by "./syz-executor exec"[24113] [ 1540.149440][T24113] syzkaller0: entered promiscuous mode [ 1540.158527][T24113] syzkaller0: entered allmulticast mode [ 1540.463978][ T5917] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 1540.483811][ T5917] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1540.534457][ T5917] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1540.548001][T23574] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1540.571323][ T5917] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1540.613117][ T5917] usb 3-1: USB disconnect, device number 27 [ 1540.646292][T16890] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 1540.713035][T23574] usb 1-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 1540.726028][T23574] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.768040][T23574] usb 1-1: Product: syz [ 1540.791318][T23574] usb 1-1: Manufacturer: syz [ 1540.805907][T23574] usb 1-1: SerialNumber: syz [ 1540.823124][T23574] usb 1-1: config 0 descriptor?? [ 1540.834507][T23574] hub 1-1:0.0: bad descriptor, ignoring hub [ 1540.847451][T23574] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1540.880180][T23574] usbsevseg 1-1:0.0: USB 7 Segment device now attached [ 1540.942105][T16890] usb 4-1: config 1 interface 0 altsetting 16 endpoint 0x82 is Bulk; changing to Interrupt [ 1540.960397][T16890] usb 4-1: config 1 interface 0 altsetting 16 endpoint 0x3 is Bulk; changing to Interrupt [ 1541.004830][T16890] usb 4-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1541.027632][T16890] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1541.060993][T16890] usb 4-1: string descriptor 0 read error: -22 [ 1541.067455][T16890] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1541.076626][T16890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.134533][T24120] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1541.156983][T24120] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1541.182331][T16890] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1541.398092][T24120] netlink: 'syz.3.4563': attribute type 2 has an invalid length. [ 1541.643051][T24133] netlink: 'syz.3.4563': attribute type 2 has an invalid length. [ 1541.796291][T24138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1541.803799][T24120] !: entered promiscuous mode [ 1541.894546][T24133] !: left promiscuous mode [ 1543.072710][T24149] tipc: Enabling of bearer rejected, failed to enable media [ 1543.087457][T24149] tipc: Enabling of bearer rejected, failed to enable media [ 1543.385164][ T5917] usb 4-1: USB disconnect, device number 46 [ 1543.656730][T24157] netlink: 'syz.3.4572': attribute type 4 has an invalid length. [ 1543.699593][ T5917] usb 1-1: USB disconnect, device number 64 [ 1543.716971][ T5917] usbsevseg 1-1:0.0: USB 7 Segment now disconnected [ 1544.017297][ T5918] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1544.037727][ T5917] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1544.290117][T16890] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1544.307753][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 1544.316414][ T5917] usb 4-1: config 0 has no interfaces? [ 1544.323990][ T5917] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1544.333893][ T5917] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1544.342313][ T5917] usb 4-1: Manufacturer: syz [ 1544.387751][ T5917] usb 4-1: config 0 descriptor?? [ 1544.417350][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 1544.424484][ T5918] usb 2-1: config index 0 descriptor too short (expected 2322, got 18) [ 1544.443788][ T5918] usb 2-1: config 147 has too many interfaces: 245, using maximum allowed: 32 [ 1544.460531][ T5918] usb 2-1: config 147 has an invalid descriptor of length 65, skipping remainder of the config [ 1544.488188][T16890] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1544.497490][ T5918] usb 2-1: config 147 has 0 interfaces, different from the descriptor's value: 245 [ 1544.527308][T16887] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 1544.527324][T16890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.550708][ T5918] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1544.560256][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.569857][T16890] usb 5-1: config 0 descriptor?? [ 1544.597569][ T5918] usb 2-1: Product: syz [ 1544.601964][ T5918] usb 2-1: Manufacturer: syz [ 1544.606725][ T5918] usb 2-1: SerialNumber: syz [ 1544.817790][ T30] audit: type=1326 audit(1774504993.304:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24158 comm="syz.4.4574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb8119c799 code=0x20000000 [ 1544.937440][T16887] usb 1-1: not running at top speed; connect to a high speed hub [ 1544.980274][T16887] usb 1-1: config 127 has an invalid interface number: 53 but max is 1 [ 1544.989861][T16887] usb 1-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 1545.040441][T16887] usb 1-1: config 127 has an invalid interface number: 116 but max is 1 [ 1545.110208][T16887] usb 1-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 1545.165654][T16887] usb 1-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 1545.195260][T16887] usb 1-1: config 127 has an invalid interface number: 169 but max is 1 [ 1545.233378][T16887] usb 1-1: config 127 has 3 interfaces, different from the descriptor's value: 2 [ 1545.255478][T16887] usb 1-1: config 127 has no interface number 0 [ 1545.282095][T16887] usb 1-1: config 127 has no interface number 1 [ 1545.294107][T16887] usb 1-1: config 127 has no interface number 2 [ 1545.315995][T16887] usb 1-1: config 127 interface 53 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1545.353126][T16887] usb 1-1: config 127 interface 53 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1545.414961][T16887] usb 1-1: config 127 interface 53 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1545.455363][T16887] usb 1-1: config 127 interface 53 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 1545.486017][T16887] usb 1-1: config 127 interface 53 altsetting 7 has an endpoint descriptor with address 0x98, changing to 0x88 [ 1545.525484][T16887] usb 1-1: config 127 interface 53 altsetting 7 has a duplicate endpoint with address 0x88, skipping [ 1545.563168][T16887] usb 1-1: config 127 interface 53 altsetting 7 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1545.563261][T16887] usb 1-1: config 127 interface 53 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1545.633000][T16887] usb 1-1: config 127 interface 53 altsetting 7 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1545.653592][T16887] usb 1-1: config 127 interface 116 altsetting 12 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1545.667237][T16887] usb 1-1: config 127 interface 116 altsetting 12 has a duplicate endpoint with address 0x2, skipping [ 1545.667369][T16887] usb 1-1: config 127 interface 116 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 1545.667399][T16887] usb 1-1: config 127 interface 116 altsetting 12 has 6 endpoint descriptors, different from the interface descriptor's value: 16 [ 1545.667452][T16887] usb 1-1: too many endpoints for config 127 interface 169 altsetting 239: 59, using maximum allowed: 30 [ 1545.667497][T16887] usb 1-1: config 127 interface 169 altsetting 239 has a duplicate endpoint with address 0x8A, skipping [ 1545.667549][T16887] usb 1-1: config 127 interface 169 altsetting 239 has a duplicate endpoint with address 0x3, skipping [ 1545.667576][T16887] usb 1-1: config 127 interface 169 altsetting 239 has a duplicate endpoint with address 0x6, skipping [ 1545.667631][T16887] usb 1-1: config 127 interface 169 altsetting 239 has a duplicate endpoint with address 0x5, skipping [ 1545.667650][T16887] usb 1-1: config 127 interface 169 altsetting 239 has a duplicate endpoint with address 0xA, skipping [ 1545.667668][T16887] usb 1-1: config 127 interface 169 altsetting 239 has a duplicate endpoint with address 0x4, skipping [ 1545.667704][T16887] usb 1-1: config 127 interface 169 altsetting 239 has an invalid descriptor for endpoint zero, skipping [ 1545.667730][T16887] usb 1-1: config 127 interface 169 altsetting 239 has a duplicate endpoint with address 0xA, skipping [ 1545.667776][T16887] usb 1-1: config 127 interface 169 altsetting 239 has 10 endpoint descriptors, different from the interface descriptor's value: 59 [ 1545.667805][T16887] usb 1-1: config 127 interface 53 has no altsetting 0 [ 1545.667821][T16887] usb 1-1: config 127 interface 116 has no altsetting 0 [ 1545.667835][T16887] usb 1-1: config 127 interface 169 has no altsetting 0 [ 1545.696444][T16887] usb 1-1: New USB device found, idVendor=2040, idProduct=d863, bcdDevice=5d.ea [ 1545.696480][T16887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.696522][T16887] usb 1-1: Product: 㸬簒퐲䟧ᐂ䱘Ԧꛙ怊笯粕筻羋࿥憄ㇸ瘝煮㦑◣﫦⏿쩁夼˧ₐⴈ⺰߇⭲쐡趘媔Ⰷ焥橝맿ꍂ鈺쮤⁨遷藽ꝍ혞⣶潾㜅蝥媞砌⪟꣙᳟꾊⃀භꁩ柛啉揻몕뉤辍㣎ᩣ骶챿⍜訬ꋸ酌搌腧ᛞ맢ⷽﳯꋃ珉䑘䲗嘤폦懑㞟짷䯅媒⠱瀣앱殞≷㟲鰫ᙯ㤈暍찷ꃵ簳 [ 1545.697131][T16887] usb 1-1: Manufacturer: 턾﹮걯뮸뱼㛺닊఻䥇ꖤ奘槮渝軕鱽䭙䠤߄䢛㩄쭰曬뒡爋脕튡䮭扎렽ᬘ榚嘛㙬⡌㝫덅预稣萬좯媯根턳ບ蟰ኁ荵ꠇ婥ത㠚㻎Ḿ페欝뻐໲⣁퓎ⅱ䕊婩㺋谫剜〿Ჳꡱ闂魮厒近떺ꅜ沾䈗暋ශ鬩ﰢ㶀㐷ㄏἱⶸᦼ뾝፿㮼਱❖孔ᐼ駯놕ල벫軉冒胷㢄沛䋬 [ 1545.698799][T16887] usb 1-1: SerialNumber: љ [ 1546.038590][ T5917] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1546.044134][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.044200][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.276200][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 1546.280623][ T5917] usb 3-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 1546.280659][ T5917] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1546.284506][ T5917] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1546.284564][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.284588][ T5917] usb 3-1: Product: syz [ 1546.284605][ T5917] usb 3-1: Manufacturer: syz [ 1546.284622][ T5917] usb 3-1: SerialNumber: syz [ 1546.580021][T16887] usb 1-1: USB disconnect, device number 65 [ 1546.861760][ T5917] usb 3-1: 0:2 : does not exist [ 1546.884627][ T5917] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1547.136595][ T5918] usb 2-1: USB disconnect, device number 44 [ 1547.198519][ T5917] usb 3-1: USB disconnect, device number 28 [ 1547.209442][T24181] ptrace attach of "./syz-executor exec"[17506] was attempted by "./syz-executor exec"[24181] [ 1547.262531][T21837] udevd[21837]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1547.336963][T23574] usb 4-1: USB disconnect, device number 47 [ 1547.348757][T16890] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1547.359968][T24182] syzkaller0: entered promiscuous mode [ 1547.365517][T24182] syzkaller0: entered allmulticast mode [ 1547.393012][T16890] [drm:udl_init] *ERROR* Selecting channel failed [ 1547.470890][T16890] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1547.503989][T16890] [drm] Initialized udl on minor 2 [ 1547.517311][T16890] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1547.536363][T16890] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1547.836606][T23574] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1547.848204][T16890] usb 5-1: USB disconnect, device number 98 [ 1547.876308][T23574] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1548.077273][ T5917] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1548.318927][ T5917] usb 2-1: device descriptor read/64, error -71 [ 1548.721047][ T5917] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1548.721068][T16890] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1548.887311][T16890] usb 1-1: device descriptor read/64, error -71 [ 1548.897285][ T5917] usb 2-1: device descriptor read/64, error -71 [ 1549.020066][ T5917] usb usb2-port1: attempt power cycle [ 1549.060613][T24209] netlink: 'syz.2.4584': attribute type 1 has an invalid length. [ 1549.076189][T24209] netlink: 'syz.2.4584': attribute type 2 has an invalid length. [ 1549.183324][T16890] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1549.677337][T16890] usb 1-1: device descriptor read/64, error -71 [ 1549.787525][T16890] usb usb1-port1: attempt power cycle [ 1549.830217][T24215] tipc: Enabling of bearer rejected, failed to enable media [ 1549.838582][ T5917] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1549.856698][T24215] tipc: Enabling of bearer rejected, failed to enable media [ 1549.873470][ T5917] usb 2-1: device descriptor read/8, error -71 [ 1550.187273][ T5917] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1550.213596][ T5917] usb 2-1: device descriptor read/8, error -71 [ 1550.317346][T16890] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1550.327627][ T5917] usb usb2-port1: unable to enumerate USB device [ 1550.337937][T16890] usb 1-1: device descriptor read/8, error -71 [ 1550.377451][ T5918] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1550.548301][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 1550.571995][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1550.589709][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1550.589740][T16890] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1550.624325][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1550.641984][ T5918] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1550.652490][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.664645][ T5918] usb 4-1: config 0 descriptor?? [ 1550.672640][T16890] usb 1-1: device descriptor read/8, error -71 [ 1550.787290][ T5917] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1550.797755][T16890] usb usb1-port1: unable to enumerate USB device [ 1550.977595][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 1550.984770][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1551.006896][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1551.021449][ T5917] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1551.032658][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1551.072307][ T5917] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1551.098021][ T5917] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1551.118941][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.137607][ T5918] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0038/input/input73 [ 1551.194560][ T5917] usb 5-1: config 0 descriptor?? [ 1551.212060][T24220] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1551.248149][ T5918] appleir 0003:05AC:8241.0038: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 1551.617733][T24235] netlink: 'syz.0.4590': attribute type 4 has an invalid length. [ 1552.067432][ T5918] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1552.187455][ T5917] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1552.227715][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 1552.237226][ T5918] usb 1-1: config 0 has no interfaces? [ 1552.246590][ T5918] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1552.256216][ T5918] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1552.264838][ T5918] usb 1-1: Manufacturer: syz [ 1552.287654][T14103] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1552.297034][ T5918] usb 1-1: config 0 descriptor?? [ 1552.365871][ T5917] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1552.397099][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.427667][T16887] usb 4-1: reset high-speed USB device number 48 using dummy_hcd [ 1552.461331][ T5917] usb 2-1: config 0 descriptor?? [ 1552.511388][T14103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1552.542391][T14103] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1552.637519][T14103] usb 3-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 1552.650413][T14103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.734623][ T30] audit: type=1326 audit(1774505001.234:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24232 comm="syz.1.4591" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5707f9c799 code=0x20000000 [ 1553.132669][T14103] usb 3-1: config 0 descriptor?? [ 1553.317630][T14907] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1553.455546][T16890] usb 5-1: USB disconnect, device number 99 [ 1553.605249][T14103] aquacomputer_d5next 0003:0C70:F014.0039: unknown main item tag 0x0 [ 1553.621859][T14103] aquacomputer_d5next 0003:0C70:F014.0039: unknown main item tag 0x0 [ 1553.676432][T14103] aquacomputer_d5next 0003:0C70:F014.0039: unknown main item tag 0x0 [ 1553.725778][T14103] aquacomputer_d5next 0003:0C70:F014.0039: unknown main item tag 0x0 [ 1553.769303][T24246] ptrace attach of "./syz-executor exec"[16992] was attempted by "./syz-executor exec"[24246] [ 1553.802625][T14103] aquacomputer_d5next 0003:0C70:F014.0039: unknown main item tag 0x0 [ 1553.855862][T14103] aquacomputer_d5next 0003:0C70:F014.0039: unknown main item tag 0x0 [ 1553.897095][T14103] aquacomputer_d5next 0003:0C70:F014.0039: unknown main item tag 0x0 [ 1553.917659][T14103] aquacomputer_d5next 0003:0C70:F014.0039: unknown main item tag 0x0 [ 1553.942411][T14103] aquacomputer_d5next 0003:0C70:F014.0039: unknown main item tag 0x0 [ 1553.953173][ T5918] usb 4-1: USB disconnect, device number 48 [ 1553.979433][T14103] aquacomputer_d5next 0003:0C70:F014.0039: unknown main item tag 0x0 [ 1554.008876][T24246] syzkaller0: entered promiscuous mode [ 1554.014709][T24246] syzkaller0: entered allmulticast mode [ 1554.057835][T14103] aquacomputer_d5next 0003:0C70:F014.0039: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.2-1/input0 [ 1554.258400][T14103] usb 3-1: USB disconnect, device number 29 [ 1554.421269][T24252] fido_id[24252]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1554.682894][ T5917] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1554.697032][ T5917] [drm:udl_init] *ERROR* Selecting channel failed [ 1554.775451][T24258] syzkaller1: entered promiscuous mode [ 1554.781305][T24258] syzkaller1: entered allmulticast mode [ 1554.910613][ T5917] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1554.949301][ T5917] [drm] Initialized udl on minor 2 [ 1554.959149][ T5917] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1555.038490][T14103] usb 1-1: USB disconnect, device number 70 [ 1555.115990][ T5917] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1555.153635][T24264] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4598'. [ 1555.178721][T16887] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1555.186814][T16887] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1555.205638][ T5917] usb 2-1: USB disconnect, device number 49 [ 1557.647402][T16890] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 1557.819491][T16890] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1557.833058][T16890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.870011][T16890] usb 4-1: config 0 descriptor?? [ 1558.441498][T16890] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1558.735628][T16890] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1558.808369][T16890] [drm] Initialized udl on minor 2 [ 1558.831421][T24299] netlink: 'syz.2.4604': attribute type 4 has an invalid length. [ 1558.953485][T16890] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1558.980494][T16890] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1559.173151][T23574] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1559.203724][T23574] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1559.212032][T16890] usb 4-1: USB disconnect, device number 49 [ 1559.222911][T23574] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1559.857359][T14103] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1559.977563][T24313] ptrace attach of "./syz-executor exec"[17855] was attempted by "./syz-executor exec"[24313] [ 1560.034118][T14103] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1560.054046][T14103] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.060700][T24314] syzkaller0: entered promiscuous mode [ 1560.071092][T24314] syzkaller0: entered allmulticast mode [ 1560.173477][T14103] usb 1-1: config 0 descriptor?? [ 1560.344173][T24319] netlink: 'syz.1.4608': attribute type 4 has an invalid length. [ 1560.651517][ T30] audit: type=1326 audit(1774505009.154:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24306 comm="syz.0.4606" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c0059c799 code=0x20000000 [ 1560.847403][T16890] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1561.097268][T16890] usb 2-1: Using ep0 maxpacket: 16 [ 1561.135193][T16890] usb 2-1: config 0 has no interfaces? [ 1561.194806][T16890] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1561.263305][T16890] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1561.329725][T16890] usb 2-1: Manufacturer: syz [ 1561.374067][T16890] usb 2-1: config 0 descriptor?? [ 1561.757284][ T5917] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1562.455409][T14103] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1562.495710][ T5917] usb 4-1: config 0 has no interfaces? [ 1562.504085][ T5917] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1562.513532][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.524310][T14103] [drm:udl_init] *ERROR* Selecting channel failed [ 1562.547607][T14103] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1562.565331][T14103] [drm] Initialized udl on minor 2 [ 1562.585544][ T5917] usb 4-1: config 0 descriptor?? [ 1562.649097][T14103] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1562.659452][T14103] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1562.666389][ T5918] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1562.713356][ T5918] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1562.730726][T14103] usb 1-1: USB disconnect, device number 71 [ 1562.754532][ T5918] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1563.114900][T24340] syzkaller0: entered promiscuous mode [ 1563.120594][T24340] syzkaller0: entered allmulticast mode [ 1563.847270][T14103] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1563.931008][ T5917] usb 2-1: USB disconnect, device number 50 [ 1564.270735][T14103] usb 1-1: Using ep0 maxpacket: 32 [ 1564.344433][ T5917] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1564.353649][T14103] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1564.362220][T14103] usb 1-1: config 0 has no interface number 0 [ 1564.372296][T14103] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1564.390762][T14103] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.406920][T14103] usb 1-1: Product: syz [ 1564.415922][T14103] usb 1-1: Manufacturer: syz [ 1564.458489][T14103] usb 1-1: SerialNumber: syz [ 1564.482704][T14103] usb 1-1: config 0 descriptor?? [ 1564.496897][T14103] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1564.608826][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 1564.629307][ T5917] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 1564.641043][ T5917] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1564.666831][ T5917] usb 2-1: config 0 has no interface number 0 [ 1564.677253][ T5917] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 1564.770590][ T5917] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 1564.793357][T14103] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1564.825956][ T5917] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1564.840570][T14103] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1564.850486][ T5917] usb 2-1: config 0 interface 52 has no altsetting 0 [ 1564.867341][ T5917] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 1564.876695][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 1564.897689][ T5917] usb 2-1: Product: syz [ 1564.905595][ T5917] usb 2-1: SerialNumber: syz [ 1564.969738][T24345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1564.980765][ T5917] usb 2-1: config 0 descriptor?? [ 1564.988091][T24345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1565.265602][ T5917] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input74 [ 1565.452466][T16890] usb 2-1: USB disconnect, device number 51 [ 1565.452693][ C1] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1566.120005][T24358] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4618'. [ 1566.188170][T24359] tmpfs: Unknown parameter 'rootmode' [ 1568.055633][T24352] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1568.071524][ T5917] usb 4-1: USB disconnect, device number 50 [ 1568.093016][T24356] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4615'. [ 1568.411806][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1568.414281][T16890] usb 1-1: USB disconnect, device number 72 [ 1568.457991][T16890] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1568.480191][T24369] ptrace attach of "./syz-executor exec"[18055] was attempted by "./syz-executor exec"[24369] [ 1568.509265][T16890] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1568.564873][T16890] quatech2 1-1:0.51: device disconnected [ 1568.643399][ T5917] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1568.684271][T24376] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1568.709671][T24369] syzkaller0: entered promiscuous mode [ 1568.715226][T24369] syzkaller0: entered allmulticast mode [ 1568.847587][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 1568.871587][ T5917] usb 4-1: config 0 has an invalid interface number: 111 but max is 1 [ 1568.878085][T23574] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1568.908496][ T5917] usb 4-1: config 0 has no interface number 1 [ 1568.926761][ T5917] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1568.957359][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.957404][T16890] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1568.965410][ T5917] usb 4-1: Product: syz [ 1568.965432][ T5917] usb 4-1: Manufacturer: syz [ 1568.965448][ T5917] usb 4-1: SerialNumber: syz [ 1569.005733][ T5917] usb 4-1: config 0 descriptor?? [ 1569.046163][ T5917] snd-usb-6fire 4-1:0.111: too many cards registered. [ 1569.129985][T24381] tipc: Enabling of bearer rejected, failed to enable media [ 1569.153327][T24381] tipc: Enabling of bearer rejected, failed to enable media [ 1569.201614][T16890] usb 1-1: Using ep0 maxpacket: 32 [ 1569.212723][T16890] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1569.215503][ T5917] snd-usb-6fire 4-1:0.0: too many cards registered. [ 1569.283573][T23574] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1569.294236][T16890] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1569.309476][T23574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.317863][T16890] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1569.332412][T16890] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1569.342673][T23574] usb 5-1: config 0 descriptor?? [ 1569.361129][ T5917] usb 4-1: USB disconnect, device number 51 [ 1569.400392][T16890] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1569.421888][T16890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.481092][T16890] usb 1-1: config 0 descriptor?? [ 1569.572253][ T30] audit: type=1326 audit(1774505018.074:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24364 comm="syz.4.4621" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb8119c799 code=0x20000000 [ 1569.911433][T16890] hid_parser_main: 28 callbacks suppressed [ 1569.911453][T16890] hid-thrustmaster 0003:044F:B65D.003A: unknown main item tag 0x0 [ 1569.966298][T16890] hid-thrustmaster 0003:044F:B65D.003A: unknown main item tag 0x0 [ 1570.006437][T16890] hid-thrustmaster 0003:044F:B65D.003A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 1570.027320][ T5917] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1570.039658][T16890] hid-thrustmaster 0003:044F:B65D.003A: Unexpected non-int endpoint [ 1570.133662][T24386] netlink: 'syz.1.4626': attribute type 4 has an invalid length. [ 1570.283726][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 1570.327354][ T5917] usb 4-1: config 0 has an invalid interface number: 111 but max is 1 [ 1570.335751][ T5917] usb 4-1: config 0 has no interface number 1 [ 1570.397779][ T5917] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1570.426600][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.450966][ C0] hid-thrustmaster 0003:044F:B65D.003A: URB to get model id failed with error -71 [ 1570.456843][ T5918] usb 1-1: USB disconnect, device number 73 [ 1570.486137][ T5917] usb 4-1: Product: syz [ 1570.497822][ T5917] usb 4-1: Manufacturer: syz [ 1570.502648][ T5917] usb 4-1: SerialNumber: syz [ 1570.558162][ T5917] usb 4-1: config 0 descriptor?? [ 1570.567294][T14103] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1570.641151][ T5917] snd-usb-6fire 4-1:0.111: too many cards registered. [ 1570.672969][ T5917] snd-usb-6fire 4-1:0.0: too many cards registered. [ 1570.737292][T14103] usb 2-1: Using ep0 maxpacket: 16 [ 1570.745162][T14103] usb 2-1: config 0 has no interfaces? [ 1570.752983][T14103] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1570.764033][T14103] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1570.810026][T14103] usb 2-1: Manufacturer: syz [ 1570.890484][T14103] usb 2-1: config 0 descriptor?? [ 1571.637392][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1571.721841][T23574] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1571.740553][T23574] [drm:udl_init] *ERROR* Selecting channel failed [ 1571.846275][T23574] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1571.869950][T23574] [drm] Initialized udl on minor 2 [ 1571.884808][T23574] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1571.921151][T23574] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1571.928197][T16890] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1571.972354][T16890] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1571.988974][T23574] usb 5-1: USB disconnect, device number 100 [ 1572.005188][T16890] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1572.339420][T23574] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1572.502113][T23574] usb 5-1: config 0 has no interfaces? [ 1572.515100][T23574] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1572.541894][T23574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.563599][T23574] usb 5-1: config 0 descriptor?? [ 1572.794368][T14103] usb 5-1: USB disconnect, device number 101 [ 1573.027292][ T5917] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1573.179935][ T5917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.192760][ T5917] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1573.227344][ T5917] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 1573.245689][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.260869][ T5917] usb 3-1: Product: syz [ 1573.267992][ T5917] usb 3-1: Manufacturer: syz [ 1573.275877][ T5917] usb 3-1: SerialNumber: syz [ 1573.289210][ T5917] usb 3-1: config 0 descriptor?? [ 1573.437541][T23574] usb 4-1: USB disconnect, device number 52 [ 1573.625147][T16890] usb 2-1: USB disconnect, device number 52 [ 1573.777293][T16893] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1573.798010][T23574] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1573.844075][T24428] netlink: 'syz.1.4635': attribute type 10 has an invalid length. [ 1573.853273][T24428] veth1_vlan: left allmulticast mode [ 1573.862831][T24428] veth1_vlan: left promiscuous mode [ 1573.871341][T24428] team0: Device veth1_vlan failed to register rx_handler [ 1573.936265][T16893] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1573.948181][T16893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.954789][T24431] ptrace attach of "./syz-executor exec"[17506] was attempted by "./syz-executor exec"[24431] [ 1573.957759][T23574] usb 4-1: Using ep0 maxpacket: 32 [ 1573.975483][T16893] usb 5-1: config 0 descriptor?? [ 1573.990868][T16893] cp210x 5-1:0.0: cp210x converter detected [ 1574.002952][T23574] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1574.014728][T23574] usb 4-1: config 0 has no interface number 0 [ 1574.022279][T24431] syzkaller0: entered promiscuous mode [ 1574.030327][T24431] syzkaller0: entered allmulticast mode [ 1574.037058][T23574] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1574.058463][T23574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.066640][T23574] usb 4-1: Product: syz [ 1574.071127][T23574] usb 4-1: Manufacturer: syz [ 1574.075867][T23574] usb 4-1: SerialNumber: syz [ 1574.092084][T23574] usb 4-1: config 0 descriptor?? [ 1574.102535][T23574] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1574.193178][T16893] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1574.205978][T16893] cp210x 5-1:0.0: querying part number failed [ 1574.218295][T16893] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1574.306594][T23574] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1574.322670][T23574] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 1574.507297][T24420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1574.519355][T24420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1574.820942][T24437] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4633'. [ 1574.926409][T24439] FAULT_INJECTION: forcing a failure. [ 1574.926409][T24439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1574.926593][T24439] CPU: 0 UID: 0 PID: 24439 Comm: syz.0.4639 Tainted: G L syzkaller #0 PREEMPT(full) [ 1574.926627][T24439] Tainted: [L]=SOFTLOCKUP [ 1574.926636][T24439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1574.926653][T24439] Call Trace: [ 1574.926662][T24439] [ 1574.926672][T24439] dump_stack_lvl+0xe8/0x150 [ 1574.926710][T24439] should_fail_ex+0x412/0x560 [ 1574.926747][T24439] _copy_from_user+0x2d/0xb0 [ 1574.926775][T24439] input_event_from_user+0xb1/0x290 [ 1574.926870][T24439] ? __pfx_input_event_from_user+0x10/0x10 [ 1574.926926][T24439] evdev_write+0x2c7/0x4c0 [ 1574.926981][T24439] ? __pfx_evdev_write+0x10/0x10 [ 1574.927008][T24439] ? bpf_lsm_file_permission+0x9/0x20 [ 1574.927029][T24439] ? security_file_permission+0x75/0x260 [ 1574.927050][T24439] ? rw_verify_area+0x255/0x4d0 [ 1574.927085][T24439] ? __pfx_evdev_write+0x10/0x10 [ 1574.927109][T24439] vfs_write+0x29a/0xb90 [ 1574.927140][T24439] ? __pfx_vfs_write+0x10/0x10 [ 1574.927164][T24439] ? __fget_files+0x2a/0x420 [ 1574.927204][T24439] ? __fget_files+0x2a/0x420 [ 1574.927235][T24439] ? __fget_files+0x3a0/0x420 [ 1574.927267][T24439] ? __fget_files+0x2a/0x420 [ 1574.927311][T24439] ksys_write+0x150/0x270 [ 1574.927330][T24439] ? __pfx_ksys_write+0x10/0x10 [ 1574.927356][T24439] do_syscall_64+0x14d/0xf80 [ 1574.927400][T24439] ? trace_irq_disable+0x3b/0x150 [ 1574.927432][T24439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.927454][T24439] ? clear_bhb_loop+0x40/0x90 [ 1574.927485][T24439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.927501][T24439] RIP: 0033:0x7f7c0059c799 [ 1574.927516][T24439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1574.927547][T24439] RSP: 002b:00007f7c0145a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1574.927571][T24439] RAX: ffffffffffffffda RBX: 00007f7c00815fa0 RCX: 00007f7c0059c799 [ 1574.927587][T24439] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000005 [ 1574.927601][T24439] RBP: 00007f7c0145a090 R08: 0000000000000000 R09: 0000000000000000 [ 1574.927614][T24439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1574.927627][T24439] R13: 00007f7c00816038 R14: 00007f7c00815fa0 R15: 00007f7c0093fa48 [ 1574.927661][T24439] [ 1574.937641][T14103] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1575.130788][T14103] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1575.235000][T14103] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1575.245283][T14103] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.253777][T14103] usb 2-1: Product: syz [ 1575.258436][T14103] usb 2-1: Manufacturer: syz [ 1575.263214][T14103] usb 2-1: SerialNumber: syz [ 1575.637004][ T5917] usb 3-1: USB disconnect, device number 30 [ 1576.288799][T14103] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1576.295398][T14103] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1576.303710][T14103] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1576.453203][T23574] usb 5-1: USB disconnect, device number 102 [ 1576.472424][T23574] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1576.498614][T23574] cp210x 5-1:0.0: device disconnected [ 1576.602877][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1576.610519][ T5917] usb 4-1: USB disconnect, device number 53 [ 1576.642752][ T5917] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1576.660398][T24456] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4644'. [ 1576.676918][ T5917] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 1576.699869][T14103] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 1576.708549][ T5917] quatech2 4-1:0.51: device disconnected [ 1576.746095][T14103] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1576.796069][T14103] usb 2-1: USB disconnect, device number 53 [ 1576.828410][T14103] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 1576.844401][T24463] netlink: 'syz.3.4645': attribute type 4 has an invalid length. [ 1577.347277][T23574] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1577.359781][ T5917] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1577.547840][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 1577.551612][T23574] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 1577.564015][T23574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.570156][ T5917] usb 4-1: config 0 has no interfaces? [ 1577.581106][ T5917] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1577.592316][T23574] usb 5-1: Product: syz [ 1577.596757][ T5917] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1577.610625][T23574] usb 5-1: Manufacturer: syz [ 1577.615316][T23574] usb 5-1: SerialNumber: syz [ 1577.625262][ T5917] usb 4-1: Manufacturer: syz [ 1577.662293][T23574] usb 5-1: config 0 descriptor?? [ 1577.683368][ T5917] usb 4-1: config 0 descriptor?? [ 1577.718712][T23574] hub 5-1:0.0: bad descriptor, ignoring hub [ 1577.725446][T23574] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1577.736359][T23574] usbsevseg 5-1:0.0: USB 7 Segment device now attached [ 1579.096267][T24485] sg_write: data in/out 262111/98 bytes for SCSI command 0x0-- guessing data in; [ 1579.096267][T24485] program syz.2.4648 not setting count and/or reply_len properly [ 1579.168369][T24485] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4648'. [ 1579.515779][T24488] ptrace attach of "./syz-executor exec"[17506] was attempted by "./syz-executor exec"[24488] [ 1579.585413][T24488] syzkaller0: entered promiscuous mode [ 1579.593529][T24488] syzkaller0: entered allmulticast mode [ 1579.905419][T24492] xt_hashlimit: size too large, truncated to 1048576 [ 1579.989041][T23574] usb 4-1: USB disconnect, device number 54 [ 1580.647552][T14103] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1580.727632][T23574] usb 5-1: USB disconnect, device number 103 [ 1580.734805][T23574] usbsevseg 5-1:0.0: USB 7 Segment now disconnected [ 1580.817449][T14103] usb 4-1: Using ep0 maxpacket: 16 [ 1580.835494][T14103] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 1580.858745][T14103] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1580.874807][T14103] usb 4-1: Product: syz [ 1580.879118][T14103] usb 4-1: SerialNumber: syz [ 1580.904680][T14103] usb 4-1: config 0 descriptor?? [ 1580.921679][T14103] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1580.935293][T14103] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1580.944961][T14103] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1580.957301][T23574] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1580.967745][T14103] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1581.087366][T16893] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1581.114578][T23574] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1581.125881][T16890] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1581.133899][T23574] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1581.145701][T23574] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1581.146059][T14103] usb 4-1: USB disconnect, device number 55 [ 1581.163703][T23574] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1581.180209][T23574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.195346][T23574] usb 2-1: config 0 descriptor?? [ 1581.239030][T16893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1581.250293][T16893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1581.260174][T16893] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1581.273510][T16890] usb 5-1: device descriptor read/64, error -71 [ 1581.279887][T16893] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1581.289098][T16893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.306104][T16893] usb 1-1: config 0 descriptor?? [ 1581.527392][T16890] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1581.628021][T23574] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1581.657751][T16890] usb 5-1: device descriptor read/64, error -71 [ 1581.804713][T16890] usb usb5-port1: attempt power cycle [ 1581.815603][T16893] plantronics 0003:047F:FFFF.003C: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1582.047358][T16893] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1582.181244][T24529] netlink: 'syz.3.4661': attribute type 4 has an invalid length. [ 1582.189332][T16890] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1582.217851][T16893] usb 3-1: Using ep0 maxpacket: 16 [ 1582.267886][T16890] usb 5-1: device descriptor read/8, error -71 [ 1582.277468][T16893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1582.354777][T16893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1582.509672][T16893] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 1582.524948][T16893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.543255][T16893] usb 3-1: Product: syz [ 1582.554009][T16893] usb 3-1: Manufacturer: syz [ 1582.562028][T16893] usb 3-1: SerialNumber: syz [ 1582.683955][T16890] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1582.708212][T16890] usb 5-1: device descriptor read/8, error -71 [ 1582.714964][T16893] usb 3-1: config 0 descriptor?? [ 1582.782762][T16893] kobil_sct 3-1:0.0: KOBIL USB smart card terminal converter detected [ 1582.818517][T16890] usb usb5-port1: unable to enumerate USB device [ 1582.825717][T16893] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1582.837562][T14103] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1583.021425][T14103] usb 4-1: Using ep0 maxpacket: 16 [ 1583.031662][T14103] usb 4-1: config 0 has no interfaces? [ 1583.040586][T14103] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1583.050151][T14103] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1583.058491][T14103] usb 4-1: Manufacturer: syz [ 1583.065634][T14103] usb 4-1: config 0 descriptor?? [ 1583.077283][T16893] usb 2-1: reset high-speed USB device number 54 using dummy_hcd [ 1583.207322][T16893] usb 2-1: device descriptor read/64, error -32 [ 1583.700893][T16893] usb 2-1: reset high-speed USB device number 54 using dummy_hcd [ 1583.934970][T24537] ptrace attach of "./syz-executor exec"[18055] was attempted by "./syz-executor exec"[24537] [ 1583.955724][T24537] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 1583.968889][T24537] syzkaller0: entered promiscuous mode [ 1583.975657][T24537] syzkaller0: entered allmulticast mode [ 1584.041801][ T5940] usb 1-1: USB disconnect, device number 74 [ 1584.151477][T24539] x_tables: duplicate underflow at hook 1 [ 1584.173892][T24541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1584.379934][ T30] audit: type=1326 audit(1774505032.884:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24542 comm="syz.0.4665" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c0059c799 code=0x0 [ 1584.489774][T16890] usb 2-1: USB disconnect, device number 54 [ 1584.885449][T14907] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1585.136608][T16890] usb 4-1: USB disconnect, device number 56 [ 1585.539206][T16893] usb 3-1: USB disconnect, device number 31 [ 1585.607771][T16893] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1585.637506][T16890] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1585.647881][T16893] kobil_sct 3-1:0.0: device disconnected [ 1585.706131][T24566] input: syz1 as /devices/virtual/input/input75 [ 1585.781435][T24569] fuse: Bad value for 'fd' [ 1585.799531][T24569] FAULT_INJECTION: forcing a failure. [ 1585.799531][T24569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1585.814189][T24569] CPU: 0 UID: 0 PID: 24569 Comm: syz.0.4674 Tainted: G L syzkaller #0 PREEMPT(full) [ 1585.814224][T24569] Tainted: [L]=SOFTLOCKUP [ 1585.814233][T24569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1585.814247][T24569] Call Trace: [ 1585.814256][T24569] [ 1585.814266][T24569] dump_stack_lvl+0xe8/0x150 [ 1585.814305][T24569] should_fail_ex+0x412/0x560 [ 1585.814343][T24569] _copy_from_user+0x2d/0xb0 [ 1585.814370][T24569] input_event_from_user+0xb1/0x290 [ 1585.814396][T24569] ? __pfx_input_event_from_user+0x10/0x10 [ 1585.814441][T24569] uinput_write+0x281/0xfe0 [ 1585.814567][T24569] ? __pfx_uinput_write+0x10/0x10 [ 1585.814593][T24569] ? bpf_lsm_file_permission+0x9/0x20 [ 1585.814621][T24569] ? security_file_permission+0x75/0x260 [ 1585.814649][T24569] ? rw_verify_area+0x255/0x4d0 [ 1585.814673][T24569] ? __pfx_uinput_write+0x10/0x10 [ 1585.814699][T24569] vfs_write+0x29a/0xb90 [ 1585.814732][T24569] ? __pfx_vfs_write+0x10/0x10 [ 1585.814759][T24569] ? __fget_files+0x2a/0x420 [ 1585.814794][T24569] ? __fget_files+0x2a/0x420 [ 1585.814825][T24569] ? __fget_files+0x3a0/0x420 [ 1585.814856][T24569] ? __fget_files+0x2a/0x420 [ 1585.814896][T24569] ksys_write+0x150/0x270 [ 1585.814924][T24569] ? __pfx_ksys_write+0x10/0x10 [ 1585.814960][T24569] do_syscall_64+0x14d/0xf80 [ 1585.814986][T24569] ? trace_irq_disable+0x3b/0x150 [ 1585.815018][T24569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.815040][T24569] ? clear_bhb_loop+0x40/0x90 [ 1585.815068][T24569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.815089][T24569] RIP: 0033:0x7f7c0059c799 [ 1585.815110][T24569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1585.815128][T24569] RSP: 002b:00007f7c01439028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1585.815152][T24569] RAX: ffffffffffffffda RBX: 00007f7c00816090 RCX: 00007f7c0059c799 [ 1585.815168][T24569] RDX: 000000000000fe4f RSI: 0000200000000000 RDI: 0000000000000003 [ 1585.815182][T24569] RBP: 00007f7c01439090 R08: 0000000000000000 R09: 0000000000000000 [ 1585.815196][T24569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1585.815209][T24569] R13: 00007f7c00816128 R14: 00007f7c00816090 R15: 00007f7c0093fa48 [ 1585.815244][T24569] [ 1586.063009][T16890] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1586.078453][T16890] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1586.088845][T16890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.109048][T16890] usb 4-1: config 0 descriptor?? [ 1586.157964][T16890] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1586.383951][T24580] ptrace attach of "./syz-executor exec"[17506] was attempted by "./syz-executor exec"[24580] [ 1586.420406][T24580] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 1586.442562][T24580] syzkaller0: entered promiscuous mode [ 1586.454609][T24580] syzkaller0: entered allmulticast mode [ 1586.637272][T16890] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1586.857318][T16890] usb 3-1: Using ep0 maxpacket: 16 [ 1586.868262][T16890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1586.889026][T16890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1586.903446][T16890] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 1586.919076][T16890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.929759][T16890] usb 3-1: Product: syz [ 1586.934087][T16890] usb 3-1: Manufacturer: syz [ 1586.939479][T16890] usb 3-1: SerialNumber: syz [ 1586.983572][T16890] usb 3-1: config 0 descriptor?? [ 1587.096987][T16890] kobil_sct 3-1:0.0: KOBIL USB smart card terminal converter detected [ 1587.150242][T16890] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1587.390092][T24592] FAULT_INJECTION: forcing a failure. [ 1587.390092][T24592] name failslab, interval 1, probability 0, space 0, times 0 [ 1587.486226][T24592] CPU: 0 UID: 0 PID: 24592 Comm: syz.0.4682 Tainted: G L syzkaller #0 PREEMPT(full) [ 1587.486264][T24592] Tainted: [L]=SOFTLOCKUP [ 1587.486273][T24592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1587.486287][T24592] Call Trace: [ 1587.486296][T24592] [ 1587.486306][T24592] dump_stack_lvl+0xe8/0x150 [ 1587.486343][T24592] should_fail_ex+0x412/0x560 [ 1587.486382][T24592] should_failslab+0xa8/0x100 [ 1587.486410][T24592] ? __kernfs_new_node+0xe9/0x8e0 [ 1587.486444][T24592] kmem_cache_alloc_noprof+0x87/0x650 [ 1587.486468][T24592] ? up_write+0x1ab/0x410 [ 1587.486496][T24592] __kernfs_new_node+0xe9/0x8e0 [ 1587.486527][T24592] ? kernfs_add_one+0x477/0x5c0 [ 1587.486565][T24592] ? __pfx___kernfs_new_node+0x10/0x10 [ 1587.486600][T24592] ? kernfs_root+0x1c/0x230 [ 1587.486637][T24592] ? kernfs_root+0x1c/0x230 [ 1587.486668][T24592] ? kernfs_root+0x1c/0x230 [ 1587.486697][T24592] ? kernfs_root+0x1c/0x230 [ 1587.486734][T24592] kernfs_new_node+0x102/0x210 [ 1587.486772][T24592] kernfs_create_dir_ns+0x44/0x130 [ 1587.486798][T24592] internal_create_group+0x425/0x1180 [ 1587.486836][T24592] ? bus_add_device+0x15d/0x780 [ 1587.486971][T24592] ? sysfs_create_groups+0xa0/0x120 [ 1587.487009][T24592] ? device_add_attrs+0x55d/0x5b0 [ 1587.487036][T24592] ? __pfx_internal_create_group+0x10/0x10 [ 1587.487070][T24592] ? kobject_put+0x516/0x560 [ 1587.487105][T24592] dpm_sysfs_add+0x6a/0x270 [ 1587.487175][T24592] device_add+0x4d8/0xb70 [ 1587.487206][T24592] input_register_device+0x9d3/0x1160 [ 1587.487281][T24592] uinput_create_device+0x422/0x670 [ 1587.487316][T24592] uinput_ioctl_handler+0x417/0x14a0 [ 1587.487348][T24592] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 1587.487385][T24592] ? __fget_files+0x2a/0x420 [ 1587.487416][T24592] ? __fget_files+0x3a0/0x420 [ 1587.487454][T24592] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1587.487483][T24592] ? __pfx_uinput_ioctl+0x10/0x10 [ 1587.487508][T24592] __se_sys_ioctl+0xfc/0x170 [ 1587.487537][T24592] do_syscall_64+0x14d/0xf80 [ 1587.487562][T24592] ? trace_irq_disable+0x3b/0x150 [ 1587.487595][T24592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.487617][T24592] ? clear_bhb_loop+0x40/0x90 [ 1587.487644][T24592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.487669][T24592] RIP: 0033:0x7f7c0059c799 [ 1587.487690][T24592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1587.487709][T24592] RSP: 002b:00007f7c0145a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1587.487733][T24592] RAX: ffffffffffffffda RBX: 00007f7c00815fa0 RCX: 00007f7c0059c799 [ 1587.487750][T24592] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1587.487764][T24592] RBP: 00007f7c0145a090 R08: 0000000000000000 R09: 0000000000000000 [ 1587.487778][T24592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1587.487791][T24592] R13: 00007f7c00816038 R14: 00007f7c00815fa0 R15: 00007f7c0093fa48 [ 1587.487825][T24592] [ 1588.190128][T24602] syzkaller0: entered promiscuous mode [ 1588.196095][T24602] syzkaller0: entered allmulticast mode [ 1588.326677][T14103] usb 4-1: USB disconnect, device number 57 [ 1588.347282][T16890] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1588.460413][T24609] tipc: Enabling of bearer rejected, failed to enable media [ 1588.567255][T16890] usb 5-1: Using ep0 maxpacket: 8 [ 1588.610498][T16890] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1588.619713][T16890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.627834][T16890] usb 5-1: Product: syz [ 1588.632042][T16890] usb 5-1: Manufacturer: syz [ 1588.636680][T16890] usb 5-1: SerialNumber: syz [ 1588.651486][T16890] usb 5-1: config 0 descriptor?? [ 1588.892594][T16893] usb 3-1: USB disconnect, device number 32 [ 1588.916625][T16893] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1588.941893][T16890] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1588.951375][T16893] kobil_sct 3-1:0.0: device disconnected [ 1589.054225][T24613] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1589.134283][T24613] libceph: resolve '4' (ret=-3): failed [ 1589.443674][T24617] syzkaller0: entered promiscuous mode [ 1589.452468][T24617] syzkaller0: entered allmulticast mode [ 1589.929070][T24624] program syz.2.4692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1589.942444][T16890] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1589.966046][T16890] usb 5-1: USB disconnect, device number 108 [ 1590.131095][T24626] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3901993312 (7803986624 ns) > initial count (6429106268 ns). Using initial count to start timer. [ 1590.371067][T24613] netlink: 'syz.3.4688': attribute type 1 has an invalid length. [ 1590.407350][T14103] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1590.420650][T24613] netlink: 'syz.3.4688': attribute type 2 has an invalid length. [ 1590.587538][T14103] usb 3-1: Using ep0 maxpacket: 32 [ 1590.601570][T14103] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1590.617548][T14103] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.636093][T14103] usb 3-1: Product: syz [ 1590.649667][T14103] usb 3-1: Manufacturer: syz [ 1590.654369][T14103] usb 3-1: SerialNumber: syz [ 1590.677251][T16890] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1590.680960][T14103] usb 3-1: config 0 descriptor?? [ 1590.817819][T16893] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1590.953623][T16890] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1590.965844][T16890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.985510][T16890] usb 2-1: config 0 descriptor?? [ 1591.127309][T16893] usb 1-1: Using ep0 maxpacket: 8 [ 1591.134660][T16893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1591.150712][T16893] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1591.162700][T24628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1591.172129][T24628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1591.194097][T16893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.213685][T16893] usb 1-1: Product: syz [ 1591.221014][T16893] usb 1-1: Manufacturer: syz [ 1591.227781][T16890] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1591.228524][T14103] airspy 3-1:0.0: Board ID: 00 [ 1591.247355][T14103] airspy 3-1:0.0: Firmware version: [ 1591.253016][T16893] usb 1-1: SerialNumber: syz [ 1591.269304][T16893] usb 1-1: config 0 descriptor?? [ 1591.285187][T16893] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1591.541360][T16890] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1591.564484][T16890] [drm] Initialized udl on minor 2 [ 1591.640444][T16890] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1591.660508][T16890] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1591.698893][T24654] syzkaller0: entered promiscuous mode [ 1591.704493][T24654] syzkaller0: entered allmulticast mode [ 1591.744131][T24654] tcf_pedit_act: 7 callbacks suppressed [ 1591.744153][T24654] tc action pedit 'at' offset -2147483647 out of bounds [ 1591.757377][T24654] tc action pedit 'at' offset -2147483647 out of bounds [ 1591.764373][T24654] tc action pedit 'at' offset -2147483647 out of bounds [ 1591.771467][T24654] tc action pedit 'at' offset -2147483647 out of bounds [ 1591.778489][T24654] tc action pedit 'at' offset -2147483647 out of bounds [ 1591.785508][T24654] tc action pedit 'at' offset -2147483647 out of bounds [ 1591.792582][T24654] tc action pedit 'at' offset -2147483647 out of bounds [ 1591.799606][T24654] tc action pedit 'at' offset -2147483647 out of bounds [ 1591.806642][T24654] tc action pedit 'at' offset -2147483647 out of bounds [ 1591.813688][T24654] tc action pedit 'at' offset -2147483647 out of bounds [ 1591.820758][T24654] 0: reclassify loop, rule prio 0, protocol 800 [ 1591.937893][ T5940] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1591.938978][ T5917] usb 2-1: USB disconnect, device number 55 [ 1591.946897][ T5940] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1592.117442][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1592.235231][T14103] airspy 3-1:0.0: usb_control_msg() failed -71 request 0f [ 1592.245568][T14103] airspy 3-1:0.0: Registered as swradio24 [ 1592.253177][T14103] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1592.302727][T14103] usb 3-1: USB disconnect, device number 33 [ 1592.458855][ T5917] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1592.619041][ T5917] usb 4-1: device descriptor read/64, error -71 [ 1592.877581][ T5917] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1593.037286][ T5917] usb 4-1: device descriptor read/64, error -71 [ 1593.168110][ T5917] usb usb4-port1: attempt power cycle [ 1593.296039][T16893] gspca_zc3xx: reg_w_i err -71 [ 1593.677274][ T5917] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1593.818049][ T5917] usb 4-1: device descriptor read/8, error -71 [ 1593.907499][T16893] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1593.914217][T16893] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1593.928313][T24681] binder: BINDER_SET_CONTEXT_MGR already set [ 1593.934752][T24681] binder: 24680:24681 ioctl 4018620d 200000004a80 returned -16 [ 1593.954029][T16893] usb 1-1: USB disconnect, device number 75 [ 1594.078264][ T5917] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1594.091583][T24685] binder: BINDER_SET_CONTEXT_MGR already set [ 1594.129466][T24685] binder: 24683:24685 ioctl 4018620d 200000004a80 returned -16 [ 1594.138210][ T5917] usb 4-1: device descriptor read/8, error -71 [ 1594.247690][ T5917] usb usb4-port1: unable to enumerate USB device [ 1594.577693][ T5917] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1594.607279][T14103] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1594.747281][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 1594.752627][T14103] usb 5-1: device descriptor read/64, error -71 [ 1594.760689][ T5917] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 1594.769649][ T5917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.780040][ T5917] usb 3-1: config 0 has no interface number 0 [ 1594.786294][ T5917] usb 3-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1594.799610][ T5917] usb 3-1: config 0 interface 196 has no altsetting 0 [ 1594.809392][ T5917] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1594.818860][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.826946][ T5917] usb 3-1: Product: syz [ 1594.831308][ T5917] usb 3-1: Manufacturer: syz [ 1594.836001][ T5917] usb 3-1: SerialNumber: syz [ 1594.843987][ T5917] usb 3-1: config 0 descriptor?? [ 1595.007333][T14103] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1595.147434][T14103] usb 5-1: device descriptor read/64, error -71 [ 1595.287885][T14103] usb usb5-port1: attempt power cycle [ 1595.687302][T16893] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1595.687302][T14103] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1595.785909][T14103] usb 5-1: device descriptor read/8, error -71 [ 1595.910297][T24704] syzkaller0: entered promiscuous mode [ 1595.919883][T24704] syzkaller0: entered allmulticast mode [ 1595.963446][T16893] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1595.972955][T16893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.991026][T16893] usb 2-1: config 0 descriptor?? [ 1596.058971][T14103] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1596.088373][T14103] usb 5-1: device descriptor read/8, error -71 [ 1596.208895][T14103] usb usb5-port1: unable to enumerate USB device [ 1596.259867][ T30] audit: type=1326 audit(1774505044.764:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24693 comm="syz.1.4717" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5707f9c799 code=0x20000000 [ 1596.617300][T14103] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1596.667388][ T5940] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1596.767319][T14103] usb 4-1: Using ep0 maxpacket: 8 [ 1596.781135][T14103] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1596.789654][T14103] usb 4-1: config 179 has no interface number 0 [ 1596.796206][T14103] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1596.823079][T14103] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1596.834990][T14103] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1596.850223][ T5940] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1596.862050][ T5940] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1596.882985][T14103] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1596.902567][T14103] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1596.917093][T14103] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1596.946969][ T5940] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1596.978064][T14103] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.024087][T24706] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1597.047878][ T5917] ipheth 3-1:0.196: Unable to find endpoints [ 1597.086603][ T5917] usb 3-1: USB disconnect, device number 34 [ 1597.125969][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.166186][T24708] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1597.181410][ T5940] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1597.535688][ T5917] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input77 [ 1597.573153][ T5940] usb 1-1: USB disconnect, device number 76 [ 1597.652359][T24716] syz.2.4723: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1597.673615][T24716] CPU: 1 UID: 0 PID: 24716 Comm: syz.2.4723 Tainted: G L syzkaller #0 PREEMPT(full) [ 1597.673650][T24716] Tainted: [L]=SOFTLOCKUP [ 1597.673663][T24716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1597.673677][T24716] Call Trace: [ 1597.673687][T24716] [ 1597.673697][T24716] dump_stack_lvl+0xe8/0x150 [ 1597.673738][T24716] warn_alloc+0x249/0x340 [ 1597.673767][T24716] ? stack_trace_save+0xa9/0x100 [ 1597.673795][T24716] ? __pfx_warn_alloc+0x10/0x10 [ 1597.673830][T24716] ? kasan_save_track+0x4f/0x80 [ 1597.673855][T24716] ? kasan_save_track+0x3e/0x80 [ 1597.673877][T24716] ? __kasan_kmalloc+0x93/0xb0 [ 1597.673903][T24716] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1597.673927][T24716] ? xskq_create+0x56/0x170 [ 1597.673950][T24716] ? xsk_setsockopt+0x54c/0x990 [ 1597.673982][T24716] ? do_sock_setsockopt+0x17c/0x1b0 [ 1597.674007][T24716] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1597.674030][T24716] ? do_syscall_64+0x14d/0xf80 [ 1597.674059][T24716] __vmalloc_node_range_noprof+0x132/0x1730 [ 1597.674125][T24716] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1597.674160][T24716] ? __kasan_kmalloc+0x93/0xb0 [ 1597.674193][T24716] vmalloc_user_noprof+0xad/0xe0 [ 1597.674217][T24716] ? xskq_create+0xbf/0x170 [ 1597.674240][T24716] xskq_create+0xbf/0x170 [ 1597.674265][T24716] xsk_init_queue+0x8a/0xe0 [ 1597.674303][T24716] xsk_setsockopt+0x54c/0x990 [ 1597.674336][T24716] ? irqentry_exit+0x59e/0x620 [ 1597.674364][T24716] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1597.674405][T24716] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1597.674441][T24716] ? do_sock_setsockopt+0x15e/0x1b0 [ 1597.674467][T24716] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1597.674502][T24716] do_sock_setsockopt+0x17c/0x1b0 [ 1597.674532][T24716] __x64_sys_setsockopt+0x13d/0x1b0 [ 1597.674563][T24716] do_syscall_64+0x14d/0xf80 [ 1597.674588][T24716] ? trace_irq_disable+0x3b/0x150 [ 1597.674627][T24716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.674650][T24716] ? clear_bhb_loop+0x40/0x90 [ 1597.674675][T24716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.674698][T24716] RIP: 0033:0x7f7b5f59c799 [ 1597.674720][T24716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1597.674740][T24716] RSP: 002b:00007f7b604de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1597.674764][T24716] RAX: ffffffffffffffda RBX: 00007f7b5f816090 RCX: 00007f7b5f59c799 [ 1597.674781][T24716] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1597.674794][T24716] RBP: 00007f7b5f632c99 R08: 0000000000000004 R09: 0000000000000000 [ 1597.674808][T24716] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1597.674822][T24716] R13: 00007f7b5f816128 R14: 00007f7b5f816090 R15: 00007f7b5f93fa48 [ 1597.674859][T24716] [ 1597.674947][T24716] Mem-Info: [ 1597.991483][T24718] netlink: 'syz.4.4724': attribute type 27 has an invalid length. [ 1598.000062][T24718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4724'. [ 1598.013433][T14103] usb 4-1: USB disconnect, device number 62 [ 1598.019541][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1598.019597][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1598.054236][T24718] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1598.150978][T24716] active_anon:22892 inactive_anon:2 isolated_anon:0 [ 1598.150978][T24716] active_file:19770 inactive_file:40615 isolated_file:0 [ 1598.150978][T24716] unevictable:768 dirty:166 writeback:0 [ 1598.150978][T24716] slab_reclaimable:11663 slab_unreclaimable:145079 [ 1598.150978][T24716] mapped:32420 shmem:17782 pagetables:1473 [ 1598.150978][T24716] sec_pagetables:0 bounce:0 [ 1598.150978][T24716] kernel_misc_reclaimable:0 [ 1598.150978][T24716] free:1224654 free_pcp:8932 free_cma:0 [ 1598.299460][T16893] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1598.325873][T16893] [drm:udl_init] *ERROR* Selecting channel failed [ 1598.346028][T24716] Node 0 active_anon:91068kB inactive_anon:8kB active_file:79004kB inactive_file:162264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130012kB dirty:664kB writeback:0kB shmem:69592kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13180kB pagetables:5448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1598.395266][T24722] veth1_to_hsr: entered promiscuous mode [ 1598.417843][T24722] macsec1: entered promiscuous mode [ 1598.423446][T24722] macsec1: entered allmulticast mode [ 1598.434263][T16893] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1598.445050][T24722] veth1_to_hsr: entered allmulticast mode [ 1598.463532][T16893] [drm] Initialized udl on minor 2 [ 1598.476133][T24716] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:68kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1598.493514][T16893] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1598.542878][T24729] netlink: 'syz.1.4728': attribute type 32 has an invalid length. [ 1598.575311][T24716] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1598.600074][T16893] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1598.630678][T24731] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4728'. [ 1598.649782][ T5940] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1598.659990][T24731] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.4728'. [ 1598.670214][T24716] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1598.676060][T24716] Node 0 DMA32 free:952224kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:91168kB inactive_anon:8kB active_file:79004kB inactive_file:162264kB unevictable:1536kB writepending:664kB zspages:0kB present:3129332kB managed:2552688kB mlocked:0kB bounce:0kB free_pcp:36852kB local_pcp:16740kB free_cma:0kB [ 1598.714306][T16893] usb 2-1: USB disconnect, device number 56 [ 1598.720893][ T5940] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1598.757276][T14103] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1598.761147][T24716] lowmem_reserve[]: 0 0 0 0 0 [ 1598.795265][T24716] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1598.836193][T24716] lowmem_reserve[]: 0 0 0 0 0 [ 1598.841858][T24716] Node 1 Normal free:3929456kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1598.875769][T24716] lowmem_reserve[]: 0 0 0 0 0 [ 1598.884934][T24716] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1598.906738][T24716] Node 0 DMA32: 2422*4kB (UM) 4210*8kB (UME) 3294*16kB (UM) 268*32kB (UME) 294*64kB (UME) 477*128kB (UME) 406*256kB (UME) 273*512kB (UME) 175*1024kB (UME) 4*2048kB (UME) 82*4096kB (UM) = 951496kB [ 1598.978597][T14103] usb 3-1: Using ep0 maxpacket: 16 [ 1598.990062][T24716] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1599.016999][T24716] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 12*16kB (U) 10*32kB (UM) 5*64kB (U) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 958*4096kB (UM) = 3929456kB [ 1599.035445][T24716] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1599.045889][T24716] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1599.056017][T24716] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1599.066964][T24716] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1599.077023][T14103] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1599.078563][T24716] 78160 total pagecache pages [ 1599.099903][T24716] 2 pages in swap cache [ 1599.104260][T24716] Free swap = 124988kB [ 1599.108510][T14103] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1599.132838][T24716] Total swap = 124996kB [ 1599.137846][T24716] 2097051 pages RAM [ 1599.142014][T24716] 0 pages HighMem/MovableOnly [ 1599.148983][T24716] 427044 pages reserved [ 1599.153399][T24716] 0 pages cma reserved [ 1599.153570][T14103] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1599.157999][T16893] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 1599.208647][T14103] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.227262][ T5917] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1599.294488][T14103] usb 3-1: Product: syz [ 1599.303754][T14103] usb 3-1: Manufacturer: syz [ 1599.317579][T14103] usb 3-1: SerialNumber: syz [ 1599.340422][T16893] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1599.371089][T24745] syzkaller0: entered promiscuous mode [ 1599.397125][T24745] syzkaller0: entered allmulticast mode [ 1599.405181][T16893] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1599.407633][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 1599.435189][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1599.448066][T16893] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1599.459206][T16893] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1599.473112][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1599.483707][T16893] usb 5-1: config 1 has no interface number 0 [ 1599.498276][T16893] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1599.507438][ T5917] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1599.507586][ T5917] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1599.555697][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.583761][ T5917] usb 4-1: config 0 descriptor?? [ 1599.608266][T16893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.702194][T16893] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1599.930816][T16893] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 1600.010896][T16893] snd_usb_pod 5-1:1.1: invalid control EP [ 1600.016841][T16893] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 1600.030398][T16893] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1600.041945][T16893] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1600.228473][ T5917] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.003D/input/input78 [ 1600.339763][T16893] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 1600.401720][ T5917] appleir 0003:05AC:8241.003D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 1600.505110][T16893] usb 1-1: config index 0 descriptor too short (expected 8192, got 36) [ 1600.523020][T16893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.549959][T16893] usb 1-1: config 0 has no interfaces? [ 1600.559023][T16893] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1600.568671][T16893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.599505][T16893] usb 1-1: config 0 descriptor?? [ 1600.633231][T14103] usb 3-1: 0:2 : does not exist [ 1600.983370][T14103] usb 3-1: USB disconnect, device number 35 [ 1601.380293][T22195] udevd[22195]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1601.527286][ T5917] usb 4-1: reset high-speed USB device number 63 using dummy_hcd [ 1601.537590][T14103] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1601.734014][T14103] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1601.782508][T14103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.846516][T14103] usb 3-1: config 0 descriptor?? [ 1601.918849][T16893] usb 5-1: USB disconnect, device number 113 [ 1602.300303][ T30] audit: type=1326 audit(1774505050.744:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24761 comm="syz.2.4734" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b5f59c799 code=0x20000000 [ 1602.509012][T16887] usb 4-1: USB disconnect, device number 63 [ 1602.909372][T16887] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1603.083519][T16887] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1603.092890][T16887] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1603.112441][T16887] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1603.123047][T16887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.133182][T16887] usb 2-1: Product: syz [ 1603.138561][T16887] usb 2-1: Manufacturer: syz [ 1603.143508][T16887] usb 2-1: SerialNumber: syz [ 1603.166950][T16887] usb 2-1: config 0 descriptor?? [ 1603.180668][T16887] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1603.267294][ T5918] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1603.420362][ T5918] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1603.429980][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.448311][ T5918] usb 4-1: config 0 descriptor?? [ 1603.513755][T16893] usb 1-1: USB disconnect, device number 77 [ 1603.666694][ T5918] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1603.861779][T24773] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4736'. [ 1603.872776][T24773] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4736'. [ 1603.906248][T14103] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1603.931789][ T5918] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 3 [ 1603.947531][ T5918] [drm] Initialized udl on minor 3 [ 1603.952963][T14103] [drm:udl_init] *ERROR* Selecting channel failed [ 1604.090966][ T5918] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1604.099240][T14103] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1604.118495][ T5918] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1604.125288][T14103] [drm] Initialized udl on minor 2 [ 1604.151957][T14103] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1604.166693][T14103] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1604.187386][ T5917] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1604.200602][T14103] usb 3-1: USB disconnect, device number 36 [ 1604.211207][ T5917] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1604.305250][T24242] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1604.318906][ T5918] usb 4-1: USB disconnect, device number 64 [ 1604.331882][T24242] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1604.394537][T24242] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1604.501869][T24773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1604.546166][T24773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1604.601589][T16887] gspca_sunplus: reg_r err -71 [ 1604.607922][T16887] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1604.619221][T16887] usb 2-1: USB disconnect, device number 57 [ 1605.909345][T24823] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1605.915913][T24823] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1605.936640][T24823] vhci_hcd vhci_hcd.0: Device attached [ 1605.945748][T24823] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 1605.952419][T24823] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1605.963774][T24823] vhci_hcd vhci_hcd.0: Device attached [ 1605.978624][T24823] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 1605.985267][T24823] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1605.997703][T24823] vhci_hcd vhci_hcd.0: Device attached [ 1606.034473][T24823] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(15) [ 1606.041152][T24823] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1606.088206][T24834] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18) [ 1606.094896][T24834] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1606.150839][T24823] vhci_hcd vhci_hcd.0: Device attached [ 1606.154561][T24834] vhci_hcd vhci_hcd.0: Device attached [ 1606.179524][T16893] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1606.197027][T24837] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(17) [ 1606.203704][T24837] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1606.258202][T24823] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1606.278010][T24837] vhci_hcd vhci_hcd.0: Device attached [ 1606.295815][T24823] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1606.334963][T24823] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(26) [ 1606.341648][T24823] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1606.357376][T24823] vhci_hcd vhci_hcd.0: Device attached [ 1606.395780][T24823] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1606.460426][T24838] vhci_hcd: connection closed [ 1606.460744][T21919] vhci_hcd vhci_hcd.2: stop threads [ 1606.476762][T24831] vhci_hcd: connection closed [ 1606.476769][T24840] vhci_hcd: connection closed [ 1606.483305][T24827] vhci_hcd: connection closed [ 1606.487560][T24835] vhci_hcd: connection closed [ 1606.488486][T24829] vhci_hcd: connection closed [ 1606.498438][T24824] vhci_hcd: connection reset by peer [ 1606.611113][T21919] vhci_hcd vhci_hcd.2: release socket [ 1606.624291][T21919] vhci_hcd vhci_hcd.2: disconnect device [ 1606.637317][T21919] vhci_hcd vhci_hcd.2: stop threads [ 1606.648400][T21919] vhci_hcd vhci_hcd.2: release socket [ 1606.659893][T21919] vhci_hcd vhci_hcd.2: disconnect device [ 1606.672920][T21919] vhci_hcd vhci_hcd.2: stop threads [ 1606.690204][T21919] vhci_hcd vhci_hcd.2: release socket [ 1606.701298][T21919] vhci_hcd vhci_hcd.2: disconnect device [ 1606.715633][T21919] vhci_hcd vhci_hcd.2: stop threads [ 1606.728785][T21919] vhci_hcd vhci_hcd.2: release socket [ 1606.744660][T21919] vhci_hcd vhci_hcd.2: disconnect device [ 1606.754810][T21919] vhci_hcd vhci_hcd.2: stop threads [ 1606.764819][T21919] vhci_hcd vhci_hcd.2: release socket [ 1606.978859][T21919] vhci_hcd vhci_hcd.2: disconnect device [ 1607.002713][T21919] vhci_hcd vhci_hcd.2: stop threads [ 1607.020746][T21919] vhci_hcd vhci_hcd.2: release socket [ 1607.059009][T21919] vhci_hcd vhci_hcd.2: disconnect device [ 1607.232612][T21919] vhci_hcd vhci_hcd.2: stop threads [ 1607.262118][T21919] vhci_hcd vhci_hcd.2: release socket [ 1607.278213][T24851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4759'. [ 1607.296244][T21919] vhci_hcd vhci_hcd.2: disconnect device [ 1607.483248][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.490985][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.107537][T16890] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1609.267307][T16890] usb 4-1: Using ep0 maxpacket: 32 [ 1609.274986][T16890] usb 4-1: config 139 has an invalid interface number: 49 but max is 0 [ 1609.284159][T16890] usb 4-1: config 139 has no interface number 0 [ 1609.290615][T16890] usb 4-1: config 139 interface 49 has no altsetting 0 [ 1609.362355][T16890] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 1609.372892][T16890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.381653][T16890] usb 4-1: Product: syz [ 1609.386237][T16890] usb 4-1: Manufacturer: syz [ 1609.396820][T16890] usb 4-1: SerialNumber: syz [ 1609.691768][T16890] radio-usb-si4713 4-1:139.49: Si4713 development board discovered: (10C4:8244) [ 1609.743416][T16890] radio-usb-si4713 4-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 1609.770602][T16890] usbhid 4-1:139.49: couldn't find an input interrupt endpoint [ 1609.816141][T16890] usb 4-1: USB disconnect, device number 65 [ 1610.983866][T16890] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1611.005501][T16890] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1611.239677][T16890] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1611.320979][T16893] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1611.472174][T16890] usb 4-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 1611.491924][T16890] usb 4-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 1611.506725][T16890] usb 4-1: Product: syz [ 1611.515169][T16890] usb 4-1: Manufacturer: syz [ 1611.525168][T16890] usb 4-1: SerialNumber: syz [ 1611.553676][T16890] usb 4-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 1611.574507][T16890] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1611.598430][T16890] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 1611.613486][T16890] usb 4-1: media controller created [ 1611.656067][T16890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1611.736448][T16890] usb 4-1: selecting invalid altsetting 1 [ 1611.765112][T16890] set interface failed [ 1611.773829][T16890] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1611.818725][T16890] error writing reg: 0xff, val: 0x00 [ 1611.954995][T16890] dvb_usb_mxl111sf 4-1:2.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1612.061228][T16890] usb 4-1: USB disconnect, device number 66 [ 1612.508271][T23574] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1612.532750][T24929] lo: Caught tx_queue_len zero misconfig [ 1612.588670][ T5940] usb usb38-port1: attempt power cycle [ 1612.698227][T23574] usb 2-1: Using ep0 maxpacket: 32 [ 1612.705533][T23574] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1612.717444][T23574] usb 2-1: config 0 has no interface number 0 [ 1612.727740][T23574] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1612.751725][T23574] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1612.765387][T23574] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.774263][T23574] usb 2-1: Product: syz [ 1612.783758][T23574] usb 2-1: Manufacturer: syz [ 1612.789253][T23574] usb 2-1: SerialNumber: syz [ 1612.821651][T23574] usb 2-1: config 0 descriptor?? [ 1612.834614][T23574] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1612.845824][T23574] em28xx 2-1:0.132: Video interface 132 found: [ 1612.923989][T24938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1612.943733][T24938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1612.957634][T24938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1613.148855][ T5940] usb usb38-port1: unable to enumerate USB device [ 1613.245300][T23574] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1613.878232][T23574] em28xx 2-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1613.897619][T23574] em28xx 2-1:0.132: failed to read eeprom (err=-5) [ 1613.917534][T23574] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1613.997392][T23574] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1614.005603][T23574] em28xx 2-1:0.132: analog set to bulk mode. [ 1614.014802][ T5940] em28xx 2-1:0.132: Registering V4L2 extension [ 1614.047725][T23574] usb 2-1: USB disconnect, device number 58 [ 1614.055236][T23574] em28xx 2-1:0.132: Disconnecting em28xx [ 1614.209053][ T5940] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1614.216365][ T5940] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1614.226101][ T5940] em28xx 2-1:0.132: No AC97 audio processor [ 1614.227653][T16887] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1614.249990][ T5940] usb 2-1: Decoder not found [ 1614.254976][ T5940] em28xx 2-1:0.132: failed to create media graph [ 1614.263548][ T5940] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1614.275619][ T5940] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1614.294705][T23574] em28xx 2-1:0.132: Closing input extension [ 1614.317619][T23574] em28xx 2-1:0.132: Freeing device [ 1614.417307][T16887] usb 5-1: Using ep0 maxpacket: 16 [ 1614.424567][T16887] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1614.445504][T16887] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1614.471825][T16887] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1614.680636][T16887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.702263][T16887] usb 5-1: Product: syz [ 1614.706513][T16887] usb 5-1: Manufacturer: syz [ 1614.727621][T16887] usb 5-1: SerialNumber: syz [ 1614.960717][T16887] usb 5-1: 0:2 : does not exist [ 1615.067462][T16887] usb 5-1: USB disconnect, device number 114 [ 1615.113265][T22195] udevd[22195]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1616.001214][T25004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4815'. [ 1616.225064][T25008] syzkaller0: entered promiscuous mode [ 1616.267411][T25008] syzkaller0: entered allmulticast mode [ 1617.347218][ T5918] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1617.536150][ T5918] usb 4-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 1617.556483][ T5918] usb 4-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 1617.577957][ T5918] usb 4-1: Product: syz [ 1617.587529][ T5918] usb 4-1: Manufacturer: syz [ 1617.607234][ T5918] usb 4-1: SerialNumber: syz [ 1617.636827][ T5918] usb 4-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 1617.672993][ T5918] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1617.703953][ T5918] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 1617.720672][ T5918] usb 4-1: media controller created [ 1617.754090][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1617.793705][ T5918] usb 4-1: selecting invalid altsetting 1 [ 1617.807277][ T5918] set interface failed [ 1617.807312][ T5918] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1617.834993][ T5918] error writing reg: 0xff, val: 0x00 [ 1617.964739][ T5918] dvb_usb_mxl111sf 4-1:2.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1618.012256][ T5918] usb 4-1: USB disconnect, device number 67 [ 1618.138009][T25041] netlink: 'syz.4.4825': attribute type 10 has an invalid length. [ 1618.201489][T25041] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1619.945555][T25068] batadv_slave_1: entered promiscuous mode [ 1619.964276][T25068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4838'. [ 1619.994891][T25068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1620.072536][T25068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1620.183088][T25067] batadv_slave_1: left promiscuous mode [ 1620.647950][ T5940] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1620.707296][T23574] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1620.849053][ T5940] usb 4-1: config 253 has an invalid interface number: 82 but max is 0 [ 1620.857767][ T5940] usb 4-1: config 253 has no interface number 0 [ 1620.864628][ T5940] usb 4-1: config 253 interface 82 has no altsetting 0 [ 1620.909370][T25089] netlink: 496 bytes leftover after parsing attributes in process `syz.1.4847'. [ 1621.027274][T23574] usb 3-1: Using ep0 maxpacket: 32 [ 1621.035438][T23574] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1621.044273][T23574] usb 3-1: config 0 has no interface number 0 [ 1621.057563][T23574] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1621.070655][ T5940] usb 4-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=ec.7d [ 1621.080577][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.089550][ T5940] usb 4-1: Product: syz [ 1621.096250][T23574] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1621.117240][ T5940] usb 4-1: Manufacturer: syz [ 1621.121915][ T5940] usb 4-1: SerialNumber: syz [ 1621.127199][T23574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.135278][T23574] usb 3-1: Product: syz [ 1621.151804][T23574] usb 3-1: Manufacturer: syz [ 1621.156531][T23574] usb 3-1: SerialNumber: syz [ 1621.176304][T23574] usb 3-1: config 0 descriptor?? [ 1621.199309][T23574] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1621.248654][T23574] em28xx 3-1:0.132: Video interface 132 found: [ 1621.389300][ T5940] rtl8150 4-1:253.82: couldn't find required endpoints [ 1621.407783][ T5940] rtl8150 4-1:253.82: probe with driver rtl8150 failed with error -5 [ 1621.439060][ T5940] usb 4-1: USB disconnect, device number 68 [ 1621.606494][T23574] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1622.027062][T23574] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1622.042368][T23574] em28xx 3-1:0.132: board has no eeprom [ 1622.077422][ T5918] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1622.107313][T23574] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1622.115661][T23574] em28xx 3-1:0.132: analog set to bulk mode. [ 1622.134806][ T5940] em28xx 3-1:0.132: Registering V4L2 extension [ 1622.264392][T23574] usb 3-1: USB disconnect, device number 37 [ 1622.305417][T23574] em28xx 3-1:0.132: Disconnecting em28xx [ 1622.337222][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 1622.357489][ T5918] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.370101][ T5918] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1622.385321][ T5918] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1622.398709][ T5918] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1622.440264][ T5918] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1622.449793][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.458333][ T5918] usb 1-1: Product: syz [ 1622.463585][ T5918] usb 1-1: Manufacturer: syz [ 1622.470141][ T5918] usb 1-1: SerialNumber: syz [ 1622.494065][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1622.514684][ T5918] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input79 [ 1622.707286][T16893] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1622.728246][ T5918] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1622.745759][ T5918] (id 0x00) [ 1622.796638][ T5940] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1622.845972][ T5940] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1622.868758][T16893] usb 4-1: Using ep0 maxpacket: 32 [ 1622.907616][T16893] usb 4-1: config 139 has an invalid interface number: 49 but max is 0 [ 1622.915917][T16893] usb 4-1: config 139 has no interface number 0 [ 1622.947192][ T5940] em28xx 3-1:0.132: No AC97 audio processor [ 1622.966151][T16893] usb 4-1: config 139 interface 49 has no altsetting 0 [ 1623.002656][ T5940] usb 3-1: Decoder not found [ 1623.014278][ T5940] em28xx 3-1:0.132: failed to create media graph [ 1623.021923][T16893] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 1623.044673][ T5940] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1623.057055][T16893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.067341][ T5918] rc_core: IR keymap rc-imon-pad not found [ 1623.076449][ T5918] Registered IR keymap rc-empty [ 1623.085252][ T5918] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1623.099373][ T5940] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1623.118911][ T5918] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1623.137732][T16893] usb 4-1: Product: syz [ 1623.147243][T16893] usb 4-1: Manufacturer: syz [ 1623.151914][T16893] usb 4-1: SerialNumber: syz [ 1623.157047][T23574] em28xx 3-1:0.132: Closing input extension [ 1623.257768][ T5918] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 1623.271367][T23574] em28xx 3-1:0.132: Freeing device [ 1623.279942][T25137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.315693][T25137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.326289][ T5918] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input80 [ 1623.394747][ T5918] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:78> initialized [ 1623.442356][T16893] radio-usb-si4713 4-1:139.49: Si4713 development board discovered: (10C4:8244) [ 1623.488859][ T5918] usb 1-1: USB disconnect, device number 78 [ 1623.546475][T16893] radio-usb-si4713 4-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 1623.677256][T16893] usbhid 4-1:139.49: couldn't find an input interrupt endpoint [ 1623.724329][T16893] usb 4-1: USB disconnect, device number 69 [ 1624.181819][T25148] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20003 [ 1624.413369][T25154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4871'. [ 1624.847369][ T5918] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 1624.967276][T16887] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1625.018865][ T5918] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1625.027084][ T5918] usb 5-1: config 0 has no interface number 0 [ 1625.033525][ T5918] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1625.043822][ T5918] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1625.053303][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.061466][ T5918] usb 5-1: Product: syz [ 1625.065667][ T5918] usb 5-1: Manufacturer: syz [ 1625.070392][ T5918] usb 5-1: SerialNumber: syz [ 1625.078774][ T5918] usb 5-1: config 0 descriptor?? [ 1625.097344][ T5940] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1625.127337][T16887] usb 4-1: Using ep0 maxpacket: 16 [ 1625.135078][T16887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1625.145760][T16887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1625.157412][T16887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1625.170130][T16887] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1625.180364][T16887] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1625.199462][T16887] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1625.209169][T16887] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1625.220066][T16887] usb 4-1: Manufacturer: syz [ 1625.228717][T16887] usb 4-1: config 0 descriptor?? [ 1625.258359][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 1625.265573][ T5940] usb 3-1: config 139 has an invalid interface number: 49 but max is 0 [ 1625.274401][ T5940] usb 3-1: config 139 has no interface number 0 [ 1625.281364][ T5940] usb 3-1: config 139 interface 49 has no altsetting 0 [ 1625.291650][ T5940] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 1625.301174][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.310405][ T5940] usb 3-1: Product: syz [ 1625.314706][ T5940] usb 3-1: Manufacturer: syz [ 1625.320316][ T5940] usb 3-1: SerialNumber: syz [ 1625.437450][T16893] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1625.517378][T16887] rc_core: IR keymap rc-hauppauge not found [ 1625.523398][T16887] Registered IR keymap rc-empty [ 1625.530214][T16887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1625.559731][ T5940] radio-usb-si4713 3-1:139.49: Si4713 development board discovered: (10C4:8244) [ 1625.569668][T16887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1625.590642][ T5940] radio-usb-si4713 3-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 1625.606956][ T5940] usbhid 3-1:139.49: couldn't find an input interrupt endpoint [ 1625.618275][T16893] usb 2-1: Using ep0 maxpacket: 32 [ 1625.631663][ T5940] usb 3-1: USB disconnect, device number 38 [ 1625.640593][T16887] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1625.653015][T16893] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1625.678010][T16893] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1625.682842][T16887] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input81 [ 1625.700746][T16893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1625.706542][T16893] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1625.722080][T16887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1625.730474][T16893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.740947][T16893] usb 2-1: Product: syz [ 1625.745599][T16893] usb 2-1: Manufacturer: syz [ 1625.755300][T16893] usb 2-1: SerialNumber: syz [ 1625.767615][T16887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1625.775642][T16893] usb 2-1: config 0 descriptor?? [ 1625.797802][T16887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1625.817356][T16887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1625.847341][T16887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1625.867475][T16887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1625.887893][T16887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1625.901809][ T5918] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1625.915728][T16887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1625.947356][T16887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1625.967551][T16887] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1625.997837][T16887] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1626.013372][T16887] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1626.028298][T16887] usb 4-1: USB disconnect, device number 70 [ 1626.216539][T16893] gs_usb 2-1:0.0: Configuring for 154 interfaces [ 1626.527821][T25158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4873'. [ 1626.637339][T16893] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1626.882477][T16893] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 2 (-EPROTO) [ 1626.928086][ T5918] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1626.939557][ T5918] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 1626.967723][ T5918] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 1627.004531][ T5918] usb 5-1: USB disconnect, device number 115 [ 1627.078439][T16893] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 1627.130195][T16893] usb 2-1: USB disconnect, device number 59 [ 1627.252507][T25188] syzkaller0: entered promiscuous mode [ 1627.259249][T25188] syzkaller0: entered allmulticast mode [ 1628.057657][T16893] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 1628.209171][T16893] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1628.217824][T16893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.467344][T16893] usb 5-1: config 0 has no interface number 0 [ 1628.492435][T16893] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1628.510530][T16893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.627258][T16893] usb 5-1: Product: syz [ 1628.631500][T16893] usb 5-1: Manufacturer: syz [ 1628.636456][T16893] usb 5-1: SerialNumber: syz [ 1628.648043][T16893] usb 5-1: config 0 descriptor?? [ 1628.658386][T16893] hub 5-1:0.31: bad descriptor, ignoring hub [ 1628.664418][T16893] hub 5-1:0.31: probe with driver hub failed with error -5 [ 1628.799218][T16893] uvcvideo 5-1:0.31: Found UVC 0.00 device syz (046d:08c3) [ 1628.862333][T25204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1628.983885][T16893] uvcvideo 5-1:0.31: No valid video chain found. [ 1629.048738][T16893] usb 5-1: USB disconnect, device number 116 [ 1629.527400][T23574] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1629.677786][T23574] usb 3-1: Using ep0 maxpacket: 16 [ 1629.713774][T23574] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 1629.722490][T23574] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1629.781706][T23574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 55, changing to 9 [ 1629.814001][T23574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 8496, setting to 1024 [ 1629.835022][T23574] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1629.867539][T23574] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1629.891492][T23574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.928526][T23574] usb 3-1: config 0 descriptor?? [ 1629.965471][T23574] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input82 [ 1630.171953][T25227] input: syz1 as /devices/virtual/input/input83 [ 1630.222809][T25206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1630.303994][T25206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1630.402130][ T5918] usb 3-1: USB disconnect, device number 39 [ 1631.107483][T23574] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1631.267591][T23574] usb 1-1: Using ep0 maxpacket: 32 [ 1631.274859][T23574] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.313138][T23574] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1631.327568][T23574] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1631.348056][T23574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.372559][T23574] usb 1-1: config 0 descriptor?? [ 1631.387481][T23574] hub 1-1:0.0: USB hub found [ 1631.677479][T23574] hub 1-1:0.0: 1 port detected [ 1632.769458][T16893] hub 1-1:0.0: activate --> -90 [ 1632.949150][T23574] usb 1-1: USB disconnect, device number 79 [ 1634.062216][T14907] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3 [ 1635.357280][T23574] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1635.528760][T25304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4927'. [ 1635.543779][T23574] usb 1-1: Using ep0 maxpacket: 32 [ 1635.551831][T23574] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1635.567715][T23574] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1635.578048][T23574] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1635.590293][T23574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.608089][T23574] usb 1-1: config 0 descriptor?? [ 1635.627070][T23574] hub 1-1:0.0: USB hub found [ 1635.916795][T23574] hub 1-1:0.0: 1 port detected [ 1636.130692][T17854] ------------[ cut here ]------------ [ 1636.136746][T17854] refcnt < 0 [ 1636.136780][T17854] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0xff/0x2c0, CPU#1: kworker/u9:2/17854 [ 1636.151260][T17854] Modules linked in: [ 1636.155702][T17854] CPU: 1 UID: 0 PID: 17854 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1636.166959][T17854] Tainted: [L]=SOFTLOCKUP [ 1636.171385][T17854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1636.181593][T17854] Workqueue: hci1 hci_conn_timeout [ 1636.186776][T17854] RIP: 0010:hci_conn_timeout+0xff/0x2c0 [ 1636.192489][T17854] Code: 48 89 df e8 c3 98 09 00 eb 07 e8 2c d6 23 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 97 a8 fe ff e8 12 d6 23 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 1636.212275][T17854] RSP: 0018:ffffc90004c27ab0 EFLAGS: 00010293 [ 1636.218582][T17854] RAX: ffffffff8aa1cc1e RBX: ffff88805a03c000 RCX: ffff88807eb6bd00 [ 1636.226611][T17854] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1636.234699][T17854] RBP: 00000000ffffffff R08: ffff88805a03c013 R09: 1ffff1100b407802 [ 1636.243302][T17854] R10: dffffc0000000000 R11: ffffed100b407803 R12: dffffc0000000000 [ 1636.251414][T17854] R13: ffff888027960418 R14: ffff88805a03ca40 R15: ffff88805a03c010 [ 1636.259492][T17854] FS: 0000000000000000(0000) GS:ffff88812555d000(0000) knlGS:0000000000000000 [ 1636.268549][T17854] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1636.275184][T17854] CR2: 00007feb8205cd58 CR3: 0000000027306000 CR4: 00000000003526f0 [ 1636.283714][T17854] DR0: 000000000000000a DR1: 0000000000000000 DR2: 0000000000000000 [ 1636.291836][T17854] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1636.299909][T17854] Call Trace: [ 1636.303240][T17854] [ 1636.306212][T17854] ? process_scheduled_works+0xa8d/0x18c0 [ 1636.312092][T17854] process_scheduled_works+0xb6e/0x18c0 [ 1636.317932][T17854] ? __pfx_process_scheduled_works+0x10/0x10 [ 1636.324025][T17854] ? assign_work+0x3d5/0x5e0 [ 1636.328753][T17854] worker_thread+0xa53/0xfc0 [ 1636.333435][T17854] kthread+0x388/0x470 [ 1636.337656][T17854] ? __pfx_worker_thread+0x10/0x10 [ 1636.342920][T17854] ? __pfx_kthread+0x10/0x10 [ 1636.347674][T17854] ret_from_fork+0x51e/0xb90 [ 1636.352380][T17854] ? __pfx_ret_from_fork+0x10/0x10 [ 1636.357640][T17854] ? __switch_to+0xc7d/0x1450 [ 1636.362393][T17854] ? __pfx_kthread+0x10/0x10 [ 1636.367037][T17854] ret_from_fork_asm+0x1a/0x30 [ 1636.371949][T17854] [ 1636.375043][T17854] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1636.382370][T17854] CPU: 1 UID: 0 PID: 17854 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1636.393548][T17854] Tainted: [L]=SOFTLOCKUP [ 1636.397908][T17854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1636.408009][T17854] Workqueue: hci1 hci_conn_timeout [ 1636.413188][T17854] Call Trace: [ 1636.416518][T17854] [ 1636.419507][T17854] vpanic+0x56c/0xa60 [ 1636.423558][T17854] ? __pfx__printk+0x10/0x10 [ 1636.428206][T17854] ? __pfx_vpanic+0x10/0x10 [ 1636.432773][T17854] ? is_bpf_text_address+0x292/0x2b0 [ 1636.438129][T17854] ? is_bpf_text_address+0x26/0x2b0 [ 1636.443418][T17854] panic+0xc5/0xd0 [ 1636.447185][T17854] ? __pfx_panic+0x10/0x10 [ 1636.451668][T17854] ? ret_from_fork_asm+0x1a/0x30 [ 1636.456661][T17854] __warn+0x315/0x4f0 [ 1636.460693][T17854] ? hci_conn_timeout+0xff/0x2c0 [ 1636.465692][T17854] ? hci_conn_timeout+0xff/0x2c0 [ 1636.471110][T17854] __report_bug+0x29a/0x540 [ 1636.475652][T17854] ? __pfx_stack_trace_save+0x10/0x10 [ 1636.481054][T17854] ? hci_conn_timeout+0xff/0x2c0 [ 1636.486027][T17854] ? __pfx___report_bug+0x10/0x10 [ 1636.491084][T17854] ? add_lock_to_list+0xc7/0x100 [ 1636.496064][T17854] ? lockdep_unlock+0x5d/0xd0 [ 1636.500768][T17854] ? __lock_acquire+0x146e/0x2cf0 [ 1636.505838][T17854] ? hci_conn_timeout+0xff/0x2c0 [ 1636.510799][T17854] report_bug+0x16a/0x220 [ 1636.515150][T17854] ? hci_conn_timeout+0xff/0x2c0 [ 1636.520123][T17854] ? hci_conn_timeout+0x101/0x2c0 [ 1636.525173][T17854] handle_bug+0x9c/0x200 [ 1636.529447][T17854] exc_invalid_op+0x1a/0x50 [ 1636.533975][T17854] asm_exc_invalid_op+0x1a/0x20 [ 1636.538852][T17854] RIP: 0010:hci_conn_timeout+0xff/0x2c0 [ 1636.544423][T17854] Code: 48 89 df e8 c3 98 09 00 eb 07 e8 2c d6 23 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 97 a8 fe ff e8 12 d6 23 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 1636.564065][T17854] RSP: 0018:ffffc90004c27ab0 EFLAGS: 00010293 [ 1636.570162][T17854] RAX: ffffffff8aa1cc1e RBX: ffff88805a03c000 RCX: ffff88807eb6bd00 [ 1636.578164][T17854] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1636.586170][T17854] RBP: 00000000ffffffff R08: ffff88805a03c013 R09: 1ffff1100b407802 [ 1636.594161][T17854] R10: dffffc0000000000 R11: ffffed100b407803 R12: dffffc0000000000 [ 1636.602170][T17854] R13: ffff888027960418 R14: ffff88805a03ca40 R15: ffff88805a03c010 [ 1636.610177][T17854] ? hci_conn_timeout+0xfe/0x2c0 [ 1636.615150][T17854] ? process_scheduled_works+0xa8d/0x18c0 [ 1636.620909][T17854] process_scheduled_works+0xb6e/0x18c0 [ 1636.626541][T17854] ? __pfx_process_scheduled_works+0x10/0x10 [ 1636.632569][T17854] ? assign_work+0x3d5/0x5e0 [ 1636.637201][T17854] worker_thread+0xa53/0xfc0 [ 1636.641848][T17854] kthread+0x388/0x470 [ 1636.645940][T17854] ? __pfx_worker_thread+0x10/0x10 [ 1636.651076][T17854] ? __pfx_kthread+0x10/0x10 [ 1636.655697][T17854] ret_from_fork+0x51e/0xb90 [ 1636.660315][T17854] ? __pfx_ret_from_fork+0x10/0x10 [ 1636.665453][T17854] ? __switch_to+0xc7d/0x1450 [ 1636.670163][T17854] ? __pfx_kthread+0x10/0x10 [ 1636.674893][T17854] ret_from_fork_asm+0x1a/0x30 [ 1636.679748][T17854] [ 1636.683407][T17854] Kernel Offset: disabled [ 1636.687757][T17854] Rebooting in 86400 seconds..