last executing test programs: 3m33.616922133s ago: executing program 0 (id=1719): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3fa, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 3m33.578707672s ago: executing program 0 (id=1720): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3m33.474689095s ago: executing program 0 (id=1722): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14b440, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3, 0x400, 0x3, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x3, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 3m33.358505229s ago: executing program 0 (id=1724): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x46) 3m33.262081831s ago: executing program 0 (id=1726): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000002044104d7a00000000000109022400010000200409040000010300020009210000000122030009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="40066f"], 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0xffffffffffffff74, 0x8c441) 3m33.087507828s ago: executing program 1 (id=1729): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r3, r4, 0x0, 0x0, 0x0, 0x4800, {0x8, 0x1, 0x3, 0x69, 0x201, 0x0, 0x2, 0x5, 0x4cab, 0xcd1, 0x1000, 0x40, 0x7fffffff, 0x8400, "fe1d0000341300000000000004b42703001000"}}) 3m33.031527693s ago: executing program 0 (id=1730): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0b02"], 0x0, 0x0, 0x0, 0x0}) 3m32.745213964s ago: executing program 32 (id=1730): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0b02"], 0x0, 0x0, 0x0, 0x0}) 3m32.728381967s ago: executing program 1 (id=1732): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 3m32.440112695s ago: executing program 1 (id=1735): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) 3m32.173874101s ago: executing program 1 (id=1737): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x46) 3m31.909110548s ago: executing program 1 (id=1738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(0x3) 3m30.787564088s ago: executing program 1 (id=1744): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001d40)="a31557004000000000000000000001000055", 0x12}, {&(0x7f0000000100)="644183e6152f3eadf576ac37b5d9a70a4ae7acd89ec93104", 0x18}, {&(0x7f00000036c0)="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", 0x256}], 0x3, 0x0, 0x0, 0x20004001}}], 0x1, 0xc8c5) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) 3m30.334455424s ago: executing program 33 (id=1744): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001d40)="a31557004000000000000000000001000055", 0x12}, {&(0x7f0000000100)="644183e6152f3eadf576ac37b5d9a70a4ae7acd89ec93104", 0x18}, {&(0x7f00000036c0)="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", 0x256}], 0x3, 0x0, 0x0, 0x20004001}}], 0x1, 0xc8c5) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) 3m30.324056658s ago: executing program 2 (id=1746): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 3m30.127667657s ago: executing program 2 (id=1748): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0x4148, 0x0) 3m26.944064577s ago: executing program 2 (id=1757): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 3m26.734651705s ago: executing program 2 (id=1758): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x46) 3m26.631569704s ago: executing program 2 (id=1759): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3m26.147248274s ago: executing program 2 (id=1761): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da98", 0x34}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/69, 0x45}], 0x2}, 0x0) 3m25.658642563s ago: executing program 34 (id=1761): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da98", 0x34}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/69, 0x45}], 0x2}, 0x0) 3m23.780741804s ago: executing program 3 (id=1772): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040168b800000000000000000004000500010001"], 0x1c}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3m23.582758751s ago: executing program 3 (id=1781): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r2, &(0x7f0000000480)=""/177, 0xb1, 0xe0) 3m23.472133049s ago: executing program 3 (id=1775): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=@setlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x404}}}}}}]}, 0x48}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4020) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000040)) 3m23.273285092s ago: executing program 3 (id=1778): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x46) 3m23.15862386s ago: executing program 3 (id=1779): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef", 0x6f}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000700)=""/195, 0xc3}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x10020) 3m22.759563043s ago: executing program 3 (id=1782): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) close_range(r1, r1, 0x0) 3m22.504887119s ago: executing program 35 (id=1782): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) close_range(r1, r1, 0x0) 12.266205806s ago: executing program 6 (id=3317): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0), 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="b8", 0xfe49}, {&(0x7f0000000080)="61fc4777003a5456300750e99d9d0963"}], 0x1}, 0xa6}], 0x2, 0x4008440) 12.054210644s ago: executing program 6 (id=3320): unshare(0x24020400) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r0, 0x4bfa, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) 11.75837904s ago: executing program 6 (id=3324): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000021000/0x4000)=nil, 0x4000, 0x1000002, 0x11012, r1, 0x7738f000) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) 11.049398657s ago: executing program 6 (id=3327): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) 10.840651734s ago: executing program 6 (id=3328): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000100), 0x3ff, 0x2000) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x42041) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 9.478133295s ago: executing program 6 (id=3333): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r1, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000500)=""/235, 0xeb}, {&(0x7f0000000a40)=""/6, 0x6}, {&(0x7f0000000a80)=""/17, 0x11}], 0x3}, 0x8}], 0x1, 0x2000, 0x0) 8.887424883s ago: executing program 36 (id=3333): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r1, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000500)=""/235, 0xeb}, {&(0x7f0000000a40)=""/6, 0x6}, {&(0x7f0000000a80)=""/17, 0x11}], 0x3}, 0x8}], 0x1, 0x2000, 0x0) 5.079738905s ago: executing program 7 (id=3363): timer_create(0x2, &(0x7f000049efa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_create(0x2, 0x0, &(0x7f0000000140)=0x0) clock_gettime(0x6, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {r1, r2+60000000}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0xffffffffffffffff, &(0x7f00000000c0)={{r3, r4+60000000}, {0x0, 0x9}}, 0x0) 4.896804293s ago: executing program 7 (id=3366): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="080641663151c9e0ad01"], 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000100), 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 4.731243884s ago: executing program 7 (id=3367): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.922828341s ago: executing program 7 (id=3372): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, &(0x7f0000000280)='GPL\x00'}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) 3.152689972s ago: executing program 4 (id=3377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000440)={@broadcast, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0xfc}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 2.833177028s ago: executing program 4 (id=3379): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1e, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x8) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000340), 0x2000011a) splice(r2, 0x0, r1, 0x0, 0x4ff9c, 0x0) 2.72980774s ago: executing program 5 (id=3380): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xec, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x8000000000, 0x0, 0x800000008, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}}, 0xec}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2, 0x0, &(0x7f0000000340)="b9ff", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 2.630516388s ago: executing program 8 (id=3381): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r2 = eventfd2(0xb, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x14}) readv(r2, &(0x7f0000000480)=[{&(0x7f0000000300)=""/133, 0x85}], 0x1) 2.52041906s ago: executing program 7 (id=3382): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee6, 0x0, 0x2, 0x30b}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) 2.489926666s ago: executing program 5 (id=3383): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2.222538033s ago: executing program 5 (id=3384): r0 = inotify_init1(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 2.16942129s ago: executing program 8 (id=3385): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000140)=ANY=[], 0x12f4}}, 0x0) read$alg(r1, &(0x7f0000000780)=""/4110, 0x100e) 1.975412376s ago: executing program 4 (id=3386): bind$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x0, 0xa03, 0x200}, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0), 0x20}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="b8", 0xfe49}, {&(0x7f0000000080)="61fc4777003a5456300750e99d9d0963"}], 0x1}, 0xa6}], 0x2, 0x4008440) 1.865958191s ago: executing program 7 (id=3387): r0 = io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x67c0, 0x80, 0x4000000}) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000680)="8c", 0x1}], 0x1) write$char_usb(r1, &(0x7f0000000400)="b326", 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1.865851997s ago: executing program 8 (id=3388): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0\x00', &(0x7f00000000c0)=@ethtool_ts_info}) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) 1.749764441s ago: executing program 5 (id=3389): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0xc260, 0x20000) ioctl$MON_IOCX_MFETCH(r3, 0xc00c9207, &(0x7f0000000100)={0x0, 0x0, 0xbc}) 1.66903243s ago: executing program 4 (id=3390): timer_create(0x7, &(0x7f0000000200)={0x0, 0x11}, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="a1"}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.559369932s ago: executing program 8 (id=3391): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000240)={0x100000000000000, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001640)={0x2, 0x1, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 1.240859992s ago: executing program 8 (id=3392): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, 0x0}], 0x1, 0x40801) recvfrom$unix(r1, &(0x7f0000000080)=""/115, 0x73, 0x40, 0x0, 0x0) 1.176379044s ago: executing program 5 (id=3393): r0 = io_uring_setup(0x10d7, &(0x7f00000000c0)={0x0, 0xbfff, 0x1, 0x2, 0x1d}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x103) creat(&(0x7f00000001c0)='./file0\x00', 0x8) creat(&(0x7f0000002440)='./file0\x00', 0x70) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x15, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) 929.883235ms ago: executing program 8 (id=3394): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x7}]}}, 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x4b4c, &(0x7f0000000080)) 896.183462ms ago: executing program 9 (id=3334): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0xb55cbc099b415d1, 0x34, &(0x7f00000003c0)=""/52}]}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x2) 623.673437ms ago: executing program 9 (id=3395): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x503, 0xfffffffd, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20804, 0xef01}}}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 374.211141ms ago: executing program 9 (id=3396): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x7d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) read(r0, &(0x7f00000000c0)=""/175, 0x20) 155.750347ms ago: executing program 4 (id=3397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000050013000000000014000800000000000000000000000000000000000c0016000000000000000000050012"], 0x44}}, 0x0) 98.797719ms ago: executing program 5 (id=3398): syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f0000000240)="b9") r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 19.743314ms ago: executing program 9 (id=3399): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) getdents64(r1, 0x0, 0x0) 0s ago: executing program 4 (id=3400): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001a00010029bd700000000000022020050003c80000000000080002000a01010008000100ac1414aa08000300", @ANYRES32=r2], 0x60}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) kernel console output (not intermixed with test programs): T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 358.644214][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.899660][ T24] usb 8-1: GET_CAPABILITIES returned 0 [ 358.911362][ T24] usbtmc 8-1:16.0: can't read capabilities [ 359.110016][ T5922] usb 8-1: USB disconnect, device number 10 [ 360.630350][ T30] audit: type=1326 audit(1751493546.305:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12913 comm="syz.6.2365" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f21539 code=0x0 [ 360.691544][ T5906] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 360.882149][ T5906] usb 8-1: Using ep0 maxpacket: 32 [ 360.928182][ T5906] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.980844][ T5906] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.010388][ T5906] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 361.029523][ T5906] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.049695][ T5906] usb 8-1: config 0 descriptor?? [ 361.079854][ T5906] hub 8-1:0.0: USB hub found [ 361.288302][ T5906] hub 8-1:0.0: 1 port detected [ 361.956178][ T5906] hub 8-1:0.0: activate --> -90 [ 362.372550][ T5922] usb 8-1: USB disconnect, device number 11 [ 362.915015][T12982] input: syz1 as /devices/virtual/input/input57 [ 362.951155][ T5922] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 363.128632][ T5922] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 363.151660][ T5922] usb 6-1: config 0 has no interface number 0 [ 363.183458][ T5922] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 363.222490][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.246002][ T5922] usb 6-1: Product: syz [ 363.250219][ T5922] usb 6-1: Manufacturer: syz [ 363.370275][ T5922] usb 6-1: SerialNumber: syz [ 363.385951][ T5922] usb 6-1: config 0 descriptor?? [ 363.721092][ T5832] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 363.812046][ T5922] usb 6-1: Firmware: major: 22, minor: 220, hardware type: UNKNOWN (68) [ 363.891278][ T5832] usb 7-1: Using ep0 maxpacket: 8 [ 363.915949][ T5832] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 363.947883][ T5832] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 363.982395][ T5832] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 364.031482][ T5922] usb 6-1: Read permanent extended address 00:00:00:00:00:00:00:4f from device [ 364.040582][ T5832] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 364.070759][ T5922] usb 6-1: atusb_probe: initialization failed, error = -524 [ 364.081566][ T5832] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 364.092886][ T5922] atusb 6-1:0.128: probe with driver atusb failed with error -524 [ 364.109647][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.337906][ T5922] usb 6-1: USB disconnect, device number 10 [ 364.365827][ T5832] usb 7-1: GET_CAPABILITIES returned 0 [ 364.382561][ T5832] usbtmc 7-1:16.0: can't read capabilities [ 364.797159][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.806356][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.815498][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.824626][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.843031][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.852472][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.861630][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.871928][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.881893][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.891295][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.908790][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.918055][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.928769][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.941019][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.950149][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.960350][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 365.046331][ T5892] usb 7-1: USB disconnect, device number 12 [ 365.420987][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 365.591240][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 365.604735][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.621036][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.638093][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 365.671376][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.696086][ T24] usb 6-1: config 0 descriptor?? [ 365.737323][ T24] hub 6-1:0.0: USB hub found [ 365.943930][ T24] hub 6-1:0.0: 1 port detected [ 366.275033][ T5921] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 366.481165][ T5921] usb 8-1: Using ep0 maxpacket: 16 [ 366.511101][ T5921] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.525494][ T5921] usb 8-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 366.535807][ T5921] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.551946][ T5921] usb 8-1: config 0 descriptor?? [ 366.585123][ T24] hub 6-1:0.0: activate --> -90 [ 366.995225][ T24] usb 6-1-port1: cannot disable (err = -71) [ 367.001908][ T5922] usb 6-1: USB disconnect, device number 11 [ 367.015495][ T5921] cypress 0003:04B4:07B1.003C: unknown main item tag 0x0 [ 367.026259][ T5921] cypress 0003:04B4:07B1.003C: unknown main item tag 0x0 [ 367.034971][ T5921] cypress 0003:04B4:07B1.003C: unknown main item tag 0x0 [ 367.045081][ T5921] cypress 0003:04B4:07B1.003C: unknown main item tag 0x0 [ 367.073104][ T5921] cypress 0003:04B4:07B1.003C: unknown main item tag 0x0 [ 367.087920][ T5921] cypress 0003:04B4:07B1.003C: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.7-1/input0 [ 367.270524][ T5921] usb 8-1: USB disconnect, device number 12 [ 368.992095][T13040] bridge_slave_0: left allmulticast mode [ 368.997969][T13040] bridge_slave_0: left promiscuous mode [ 369.007244][T13040] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.101438][ T24] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 369.213869][T13040] bridge_slave_1: left allmulticast mode [ 369.219596][T13040] bridge_slave_1: left promiscuous mode [ 369.241278][T13040] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.282794][T13040] bond0: (slave bond_slave_0): Releasing backup interface [ 369.325119][T13040] bond0: (slave bond_slave_1): Releasing backup interface [ 369.386520][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.400990][ T24] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 369.424346][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.446662][T13040] team0: Port device team_slave_0 removed [ 369.446791][ T24] usb 8-1: config 0 descriptor?? [ 369.485552][T13040] team0: Port device team_slave_1 removed [ 369.498363][T13040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.515192][T13040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.528746][T13040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.538552][T13040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.696136][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 369.709955][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 369.758035][ T24] usb 8-1: USB disconnect, device number 13 [ 370.240971][ T24] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 370.377434][ T5832] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 370.416057][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 370.423340][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.440324][T13094] loop9: detected capacity change from 0 to 7 [ 370.440978][ T24] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 370.455652][T13094] loop9: [POWERTEC] p1 p2 [ 370.462466][T13094] loop9: p1 start 1600481121 is beyond EOD, truncated [ 370.469547][T13094] loop9: p2 size 1680801792 extends beyond EOD, truncated [ 370.476174][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.517208][ T24] usb 8-1: config 0 descriptor?? [ 370.561040][ T5832] usb 5-1: Using ep0 maxpacket: 16 [ 370.574300][ T5848] udevd[5848]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 370.604733][ T5832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.640066][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 370.659826][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 370.688616][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 370.717785][ T5832] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.765750][ T5832] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 370.781027][ T5832] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 370.789112][ T5832] usb 5-1: Manufacturer: syz [ 370.825012][ T5832] usb 5-1: config 0 descriptor?? [ 370.942685][ T24] mcp2221 0003:04D8:00DD.003D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 371.132727][ T5832] rc_core: IR keymap rc-hauppauge not found [ 371.146379][ T5832] Registered IR keymap rc-empty [ 371.168144][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.191398][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.235708][ T5832] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 371.264874][ T5832] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input58 [ 371.293497][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.341167][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.357321][ T5922] usb 8-1: USB disconnect, device number 14 [ 371.379881][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.427393][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.474606][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.501360][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.517003][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d8fec00: rx timeout, send abort [ 371.532060][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.571400][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.591475][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.614752][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 371.657878][ T5832] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 371.685360][ T5832] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 371.731630][ T5832] usb 5-1: USB disconnect, device number 39 [ 372.017115][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d8ff000: rx timeout, send abort [ 372.026078][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d8fec00: abort rx timeout. Force session deactivation [ 372.222945][ T5922] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 372.392250][ T5922] usb 7-1: Using ep0 maxpacket: 32 [ 372.410556][ T5922] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 372.453584][ T5922] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 372.515342][ T5922] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 372.525584][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d8ff000: abort rx timeout. Force session deactivation [ 372.544996][ T5922] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 372.571090][ T5922] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 372.594242][ T5922] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 372.626189][ T5922] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 372.636182][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.660822][ T5922] usb 7-1: config 0 descriptor?? [ 372.920042][ T5922] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 373.240277][T13153] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 373.415744][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880579f8800: rx timeout, send abort [ 373.621222][ T5832] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 373.726610][ T5922] usb 7-1: USB disconnect, device number 13 [ 373.763341][ T5922] usblp0: removed [ 373.783144][ T5832] usb 6-1: Using ep0 maxpacket: 8 [ 373.793968][ T5832] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 373.804798][ T5832] usb 6-1: config 179 has no interface number 0 [ 373.813951][ T5832] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 373.826324][ T5832] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 373.841909][ T5832] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 373.866384][ T5832] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 373.911211][ T5832] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 373.915864][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880579fa400: rx timeout, send abort [ 373.928067][ T5832] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 373.933157][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880579f8800: abort rx timeout. Force session deactivation [ 373.970791][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.997483][T13155] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 374.313630][ T5922] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input59 [ 374.432822][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880579fa400: abort rx timeout. Force session deactivation [ 374.490019][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035180000: rx timeout, send abort [ 374.542173][T13155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.561556][T13155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.791118][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 374.791123][ T24] usb 6-1: USB disconnect, device number 12 [ 374.806454][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 374.998396][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035180000: abort rx timeout. Force session deactivation [ 375.692548][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2469'. [ 375.701892][T13196] netlink: 'syz.5.2469': attribute type 15 has an invalid length. [ 375.709799][T13196] netlink: 'syz.5.2469': attribute type 18 has an invalid length. [ 375.724631][T13196] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.733466][T13196] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.742455][T13196] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.748879][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2470'. [ 375.751223][T13196] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.751511][T13196] vxlan0: entered promiscuous mode [ 375.768822][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2470'. [ 376.739238][T13209] loop2: detected capacity change from 0 to 7 [ 376.745858][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058978c00: rx timeout, send abort [ 376.756169][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058978c00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 376.777265][ T5848] Dev loop2: unable to read RDB block 7 [ 376.787760][ T5848] loop2: unable to read partition table [ 376.811393][ T5848] loop2: partition table beyond EOD, truncated [ 376.822182][T13209] Dev loop2: unable to read RDB block 7 [ 376.829545][T13209] loop2: unable to read partition table [ 376.845935][T13209] loop2: partition table beyond EOD, truncated [ 376.852608][T13209] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 377.144180][T13218] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.152562][T13222] netlink: 'syz.8.2481': attribute type 16 has an invalid length. [ 377.160426][T13222] netlink: 'syz.8.2481': attribute type 17 has an invalid length. [ 377.171835][T13218] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.203558][T13223] netlink: 'syz.8.2481': attribute type 16 has an invalid length. [ 377.220865][T13223] netlink: 'syz.8.2481': attribute type 17 has an invalid length. [ 377.261117][T13222] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.268371][T13222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.302497][T13222] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.309824][T13222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.401173][ T5906] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 377.500794][T13223] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.508949][T13223] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.571478][ T5906] usb 7-1: Using ep0 maxpacket: 16 [ 377.590789][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.621748][ T5906] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 377.651402][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.704656][T13223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.708516][ T5906] usb 7-1: config 0 descriptor?? [ 377.733195][T13223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.846188][T13234] loop2: detected capacity change from 0 to 7 [ 377.857014][ T5848] Dev loop2: unable to read RDB block 7 [ 377.871287][ T5848] loop2: unable to read partition table [ 377.879384][ T5848] loop2: partition table beyond EOD, truncated [ 377.923166][T13234] Dev loop2: unable to read RDB block 7 [ 377.929041][T13234] loop2: unable to read partition table [ 377.975748][T13234] loop2: partition table beyond EOD, truncated [ 378.006689][T13234] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 378.041053][ T5832] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 378.075407][T13223] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.098325][T13223] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.145824][ T5906] mcp2221 0003:04D8:00DD.003E: unknown main item tag 0x0 [ 378.148918][T13223] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.160494][ T5906] mcp2221 0003:04D8:00DD.003E: unknown main item tag 0x0 [ 378.178566][T13223] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.210253][ T5906] mcp2221 0003:04D8:00DD.003E: unknown main item tag 0x0 [ 378.229931][ T5832] usb 8-1: Using ep0 maxpacket: 16 [ 378.241322][ T5906] mcp2221 0003:04D8:00DD.003E: unknown main item tag 0x0 [ 378.251333][ T5832] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.263387][ T5906] mcp2221 0003:04D8:00DD.003E: unknown main item tag 0x0 [ 378.281292][ T5832] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.297506][ T5906] mcp2221 0003:04D8:00DD.003E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 378.310483][ T5832] usb 8-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 378.322521][ T5832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.334566][ T5832] usb 8-1: config 0 descriptor?? [ 378.578245][ T5920] usb 7-1: USB disconnect, device number 14 [ 378.676350][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.686105][T13247] bond0: entered promiscuous mode [ 378.686585][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.692335][T13247] bond_slave_0: entered promiscuous mode [ 378.705407][T13247] bond_slave_1: entered promiscuous mode [ 378.807198][ T5832] apple 0003:05AC:0274.003F: unknown main item tag 0x4 [ 378.841471][ T5832] apple 0003:05AC:0274.003F: unexpected long global item [ 378.864679][ T5832] apple 0003:05AC:0274.003F: parse failed [ 378.870678][ T5832] apple 0003:05AC:0274.003F: probe with driver apple failed with error -22 [ 379.031322][ T5832] usb 8-1: USB disconnect, device number 15 [ 379.214821][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2500'. [ 379.289093][ T30] audit: type=1326 audit(1751493564.965:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.8.2502" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 379.374825][ T30] audit: type=1326 audit(1751493564.965:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.8.2502" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 379.416281][ T30] audit: type=1326 audit(1751493564.965:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.8.2502" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 379.471058][ T30] audit: type=1326 audit(1751493564.965:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.8.2502" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 379.575338][ T30] audit: type=1326 audit(1751493564.975:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.8.2502" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 379.676866][ T30] audit: type=1326 audit(1751493564.975:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.8.2502" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 379.738339][ T30] audit: type=1326 audit(1751493564.975:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.8.2502" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 379.769394][ T30] audit: type=1326 audit(1751493564.975:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.8.2502" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 379.866872][ T30] audit: type=1326 audit(1751493564.975:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.8.2502" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 379.941177][ T30] audit: type=1326 audit(1751493564.975:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.8.2502" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 380.541492][ T5906] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 380.713737][ T5906] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 380.728368][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.740698][ T5906] usb 6-1: config 0 descriptor?? [ 380.976967][ T5906] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 381.076884][ T5906] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 381.110802][ T5906] [drm] Initialized udl on minor 2 [ 381.218716][ T5906] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 381.273208][ T5906] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 381.433513][ T5832] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 381.459879][ T5832] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 381.467701][ T5906] usb 6-1: USB disconnect, device number 13 [ 381.693110][T13324] bond_slave_0: entered promiscuous mode [ 381.699333][T13324] bond_slave_1: entered promiscuous mode [ 381.719438][T13324] macvlan2: entered promiscuous mode [ 381.726410][T13324] bond0: entered promiscuous mode [ 381.738590][T13324] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 384.702754][T13397] syzkaller0: mtu greater than device maximum [ 385.074659][T13412] netlink: 'syz.7.2565': attribute type 1 has an invalid length. [ 385.210864][T13412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 385.300266][T13414] bond2: (slave geneve2): making interface the new active one [ 385.324437][T13414] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 385.358791][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2567'. [ 385.511122][T13414] syz.7.2565 (13414) used greatest stack depth: 18872 bytes left [ 385.719751][T13429] kvm: user requested TSC rate below hardware speed [ 385.841111][T13434] syzkaller0: mtu greater than device maximum [ 386.499914][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2587'. [ 386.515430][ T5832] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 386.663015][T13469] loop4: detected capacity change from 0 to 524255232 [ 386.700660][ T5832] usb 9-1: Using ep0 maxpacket: 32 [ 386.712534][ T5832] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 386.732609][ T5832] usb 9-1: config 0 has no interface number 0 [ 386.743686][ T5832] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 386.784609][ T5832] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.803520][ T5832] usb 9-1: Product: syz [ 386.834242][ T5832] usb 9-1: Manufacturer: syz [ 386.839583][ T5832] usb 9-1: SerialNumber: syz [ 386.858226][ T5832] usb 9-1: config 0 descriptor?? [ 386.876280][ T5906] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 386.905668][ T5832] smsc95xx v2.0.0 [ 387.054413][ T5906] usb 6-1: Using ep0 maxpacket: 8 [ 387.073066][ T5906] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 387.116541][ T5906] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 387.139306][ T5906] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 387.170316][ T5906] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 387.186625][ T5906] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 387.200304][ T5906] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 387.222786][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.291048][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 387.458282][ T5906] usb 6-1: GET_CAPABILITIES returned 0 [ 387.484699][ T5906] usbtmc 6-1:16.0: can't read capabilities [ 387.491393][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.531049][ T10] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 387.571048][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.597342][ T10] usb 7-1: config 0 descriptor?? [ 387.618822][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 387.828184][ T5922] usb 6-1: USB disconnect, device number 14 [ 387.835024][T13465] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 387.874916][T13492] usb 6-1: usbtmc_ioctl_clear_out_halt returned -19 [ 388.037079][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 388.067820][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 388.088462][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 388.095873][T13501] loop4: detected capacity change from 0 to 524255232 [ 388.119661][ T5832] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 388.158754][ T5832] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 388.179638][ T5832] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 388.192258][ T5832] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 388.226214][ T5832] usb 9-1: USB disconnect, device number 13 [ 388.298056][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 388.318800][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 388.327749][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 388.340418][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 388.348171][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 388.377966][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 388.387029][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 388.397290][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 388.406398][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 388.417070][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 388.429018][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 388.439010][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 388.459216][ T10] pwc: Registered as video103. [ 388.467901][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input60 [ 388.510160][ T10] usb 7-1: USB disconnect, device number 15 [ 388.859318][T13514] loop9: detected capacity change from 0 to 7 [ 388.877636][T13514] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 388.894995][T13514] loop9: partition table partially beyond EOD, truncated [ 388.902849][T13514] loop9: p1 size 501170297 extends beyond EOD, truncated [ 389.107990][ T5848] udevd[5848]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 389.338311][T13525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2613'. [ 391.031346][ T5921] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 391.199872][T13584] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2637'. [ 391.216780][ T5921] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 391.234924][T13584] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.243804][T13584] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.252613][T13584] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.261492][T13584] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.270225][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.279556][ T5921] usb 6-1: Product: syz [ 391.284231][T13584] vxlan0: entered promiscuous mode [ 391.294227][ T5921] usb 6-1: Manufacturer: syz [ 391.298870][ T5921] usb 6-1: SerialNumber: syz [ 391.319915][ T5921] usb 6-1: config 0 descriptor?? [ 391.401358][ T24] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 391.563240][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.638548][ T24] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 391.666289][T13594] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2640'. [ 391.686070][T13594] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2640'. [ 391.688194][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.697614][T13594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.741553][ T24] usb 7-1: config 0 descriptor?? [ 391.747785][ T5921] airspy 6-1:0.0: Board ID: 00 [ 391.761070][ T5921] airspy 6-1:0.0: Firmware version: [ 392.167549][T13602] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2644'. [ 392.184827][ T24] keytouch 0003:0926:3333.0040: fixing up Keytouch IEC report descriptor [ 392.209273][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0040/input/input61 [ 392.391843][ T24] keytouch 0003:0926:3333.0040: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 392.553930][ T5921] airspy 6-1:0.0: usb_control_msg() failed -71 request 0f [ 392.600724][ T5921] airspy 6-1:0.0: Registered as swradio24 [ 392.617696][ T5921] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 392.644688][ T5921] usb 6-1: USB disconnect, device number 15 [ 394.197250][ T5922] usb 7-1: USB disconnect, device number 16 [ 396.617343][T13718] syzkaller1: entered promiscuous mode [ 396.631398][T13718] syzkaller1: entered allmulticast mode [ 397.111508][ T30] kauditd_printk_skb: 872 callbacks suppressed [ 397.111525][ T30] audit: type=1326 audit(1751493582.795:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13741 comm="syz.7.2696" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa4539 code=0x0 [ 397.839028][T13765] pim6reg1: entered promiscuous mode [ 397.847879][T13765] pim6reg1: entered allmulticast mode [ 397.982595][T13769] netlink: 'syz.4.2707': attribute type 1 has an invalid length. [ 398.163973][T13769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 398.265769][T13775] bond1: (slave geneve2): making interface the new active one [ 398.276877][T13775] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 398.521003][ T5921] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 398.690226][ T5921] usb 8-1: Using ep0 maxpacket: 32 [ 398.717815][ T5921] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 398.745717][ T5921] usb 8-1: config 0 has no interface number 0 [ 398.766476][T13797] netlink: 'syz.4.2716': attribute type 16 has an invalid length. [ 398.821128][ T5921] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 398.829404][T13795] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.840134][T13795] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.841508][T13800] netlink: 'syz.4.2716': attribute type 16 has an invalid length. [ 398.873654][T13797] netlink: 'syz.4.2716': attribute type 17 has an invalid length. [ 398.879763][ T5921] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.883329][T13800] netlink: 'syz.4.2716': attribute type 17 has an invalid length. [ 398.908088][ T5921] usb 8-1: Product: syz [ 398.921590][ T5921] usb 8-1: Manufacturer: syz [ 398.943601][ T5921] usb 8-1: SerialNumber: syz [ 398.975790][ T5921] usb 8-1: config 0 descriptor?? [ 398.994873][ T5921] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 399.079346][T13797] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.086644][T13797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.143978][T13797] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.151359][T13797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.637733][T13800] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.645471][T13800] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.967503][T13800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.985949][T13800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.174078][T13800] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.183481][T13800] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.192631][T13800] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.201646][T13800] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.265561][T13800] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.275264][T13800] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.285042][T13800] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.294478][T13800] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.309803][T13781] veth0_macvtap: left promiscuous mode [ 400.381577][T13781] veth0_macvtap: entered promiscuous mode [ 400.418222][ T5921] usb 8-1: qt2_attach - failed to power on unit: -71 [ 400.425939][ T5921] quatech2 8-1:0.51: probe with driver quatech2 failed with error -71 [ 400.447083][ T5921] usb 8-1: USB disconnect, device number 16 [ 401.071833][ T5921] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 401.197376][ T61] veth0_macvtap: left promiscuous mode [ 401.265999][ T5921] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 401.283168][ T5921] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 401.300458][ T5921] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 401.317906][ T5921] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.805583][ T5921] aiptek 9-1:17.0: Aiptek using 400 ms programming speed [ 401.818120][ T5921] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input62 [ 401.830300][ T5921] input: failed to attach handler kbd to device input62, error: -5 [ 401.861637][ T10] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 401.869842][ T5922] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 401.912607][ T5921] usb 9-1: USB disconnect, device number 14 [ 402.027953][T13872] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2746'. [ 402.037713][ T5922] usb 7-1: Using ep0 maxpacket: 32 [ 402.057130][ T10] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 402.069264][T13872] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2746'. [ 402.079469][ T10] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 402.090615][ T10] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 402.099963][ T5922] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 402.115028][ T5922] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 402.123870][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.132037][ T5922] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 402.144174][ T5922] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 402.154527][T13867] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 402.165025][ T5922] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 402.174998][ T5922] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 402.203133][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 402.225512][ T5922] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 402.251232][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.291174][ T5922] usb 7-1: config 0 descriptor?? [ 402.465872][ T10] usb 8-1: USB disconnect, device number 17 [ 402.527357][ T5922] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 402.685609][ T30] audit: type=1326 audit(1751493588.365:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.8.2750" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x0 [ 402.707237][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.755702][ T10] usb 7-1: USB disconnect, device number 17 [ 402.769927][ T10] usblp0: removed [ 403.455997][T13900] syzkaller1: entered promiscuous mode [ 403.471458][T13900] syzkaller1: entered allmulticast mode [ 404.778147][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b355400: rx timeout, send abort [ 404.786818][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802b355400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 405.322769][ T5921] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 405.461162][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 405.461250][ T43] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 405.501094][ T5921] usb 7-1: Using ep0 maxpacket: 32 [ 405.510863][ T5921] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 405.519437][ T5921] usb 7-1: config 0 has no interface number 0 [ 405.525793][ T5921] usb 7-1: config 0 interface 184 has no altsetting 0 [ 405.536308][ T5921] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 405.545563][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.554156][ T5921] usb 7-1: Product: syz [ 405.558642][ T5921] usb 7-1: Manufacturer: syz [ 405.563415][ T5921] usb 7-1: SerialNumber: syz [ 405.570448][ T5921] usb 7-1: config 0 descriptor?? [ 405.578294][ T5921] smsc75xx v1.0.0 [ 405.631674][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 405.638571][ T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 405.641157][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 405.648255][ T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 405.660077][ T43] usb 8-1: config 0 interface 0 has no altsetting 0 [ 405.662856][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 405.672460][ T43] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 405.678495][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 405.687222][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.703531][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 405.705400][ T43] usb 8-1: Product: syz [ 405.719350][ T43] usb 8-1: Manufacturer: syz [ 405.721927][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 405.724212][ T43] usb 8-1: SerialNumber: syz [ 405.742420][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 405.746203][ T43] usb 8-1: config 0 descriptor?? [ 405.758720][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.773874][ T10] usb 6-1: config 0 descriptor?? [ 405.989561][ T10] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 406.165303][T13940] loop4: detected capacity change from 0 to 7 [ 406.173782][ T43] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 406.188911][ T6159] loop4: [POWERTEC] p1 p2 p3 [ 406.211731][ T6159] loop4: p1 start 1600481121 is beyond EOD, truncated [ 406.218621][ T6159] loop4: p2 start 33554432 is beyond EOD, truncated [ 406.238133][ T6159] loop4: p3 start 131072 is beyond EOD, truncated [ 406.258080][T13940] loop4: [POWERTEC] p1 p2 p3 [ 406.275484][T13940] loop4: p1 start 1600481121 is beyond EOD, truncated [ 406.304980][T13940] loop4: p2 start 33554432 is beyond EOD, truncated [ 406.321994][T13940] loop4: p3 start 131072 is beyond EOD, truncated [ 406.607192][ T5921] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 406.637409][T13949] loop2: detected capacity change from 0 to 7 [ 406.648197][ T6159] Dev loop2: unable to read RDB block 7 [ 406.653975][ T6159] loop2: unable to read partition table [ 406.660081][ T6159] loop2: partition table beyond EOD, truncated [ 406.671270][T13949] Dev loop2: unable to read RDB block 7 [ 406.676941][T13949] loop2: unable to read partition table [ 406.686404][T13949] loop2: partition table beyond EOD, truncated [ 406.693365][T13949] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 406.745018][T13952] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2779'. [ 406.803207][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2779'. [ 406.835038][ T5921] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 406.871291][ T5921] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 406.881126][ T5921] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 406.892717][ T5921] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 406.908155][ T5921] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 406.950056][ T5921] usb 7-1: USB disconnect, device number 18 [ 406.963156][ T5920] usb 6-1: USB disconnect, device number 16 [ 406.999916][ T5920] usblp0: removed [ 407.204304][ T5921] usb 8-1: USB disconnect, device number 18 [ 410.161024][ T10] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 410.342032][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.376027][ T10] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 410.429430][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.479052][ T10] usb 7-1: config 0 descriptor?? [ 410.621130][ T5920] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 410.656617][T14063] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 410.757645][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 410.785015][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 410.831231][ T10] usb 7-1: USB disconnect, device number 19 [ 410.841032][ T5920] usb 9-1: Using ep0 maxpacket: 32 [ 410.853981][ T5920] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 410.880265][ T5920] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 410.906760][ T5920] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 410.931167][ T43] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 410.969876][ T5920] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 411.051448][ T5920] usb 9-1: config 0 interface 0 has no altsetting 0 [ 411.094429][ T5920] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 411.134556][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 411.157607][ T5920] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 411.182165][ T43] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 411.210554][ T5920] usb 9-1: Product: syz [ 411.214934][T14078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2818'. [ 411.220666][ T43] usb 6-1: config 0 has no interface number 0 [ 411.230388][ T5920] usb 9-1: Manufacturer: syz [ 411.255867][ T5920] usb 9-1: SerialNumber: syz [ 411.265985][ T43] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 411.278022][T14078] netlink: 'syz.4.2818': attribute type 7 has an invalid length. [ 411.288501][ T5920] usb 9-1: config 0 descriptor?? [ 411.295826][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.310864][T14078] netlink: 'syz.4.2818': attribute type 8 has an invalid length. [ 411.325367][ T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 411.326392][ T5920] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 411.335584][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2818'. [ 411.351319][ T43] usb 6-1: Product: syz [ 411.356231][ T43] usb 6-1: Manufacturer: syz [ 411.360839][ T43] usb 6-1: SerialNumber: syz [ 411.388334][ T5920] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 411.404475][ T43] usb 6-1: config 0 descriptor?? [ 411.418724][ T43] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 411.513091][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 411.552392][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.586011][ T10] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 411.617403][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.636751][ T10] usb 7-1: config 0 descriptor?? [ 411.675670][ T5832] usb 9-1: USB disconnect, device number 15 [ 411.681721][ C0] ldusb 9-1:0.0: usb_submit_urb failed (-19) [ 411.708340][ T5832] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 411.767608][T14065] veth0_macvtap: left promiscuous mode [ 411.836819][T14065] veth0_macvtap: entered promiscuous mode [ 411.899666][ T43] usb 6-1: qt2_attach - failed to power on unit: -71 [ 411.908670][ T43] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 411.979037][ T43] usb 6-1: USB disconnect, device number 17 [ 411.997810][T14087] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 412.003154][ T5920] syzkaller1: tun_net_xmit 90 [ 412.059723][T14087] syzkaller1: Linktype set failed because interface is up [ 412.084797][ T36] syzkaller1: tun_net_xmit 86 [ 412.256921][ T10] mcp2221 0003:04D8:00DD.0041: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 412.749095][ T5832] usb 7-1: USB disconnect, device number 20 [ 413.047655][ T30] audit: type=1326 audit(1751493598.725:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14103 comm="syz.4.2827" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x0 [ 413.077971][ T36] veth0_macvtap: left promiscuous mode [ 413.251875][ T43] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 413.418623][ T5920] IPVS: starting estimator thread 0... [ 413.429378][ T43] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 413.451021][ T43] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 413.461198][ T43] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 413.477257][ T43] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 413.487342][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 413.496025][ T43] usb 9-1: Product: syz [ 413.500446][ T43] usb 9-1: Manufacturer: syz [ 413.511114][T14115] IPVS: using max 33 ests per chain, 79200 per kthread [ 413.518302][ T43] usb 9-1: SerialNumber: syz [ 413.759089][ T43] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 413.998272][ T5920] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 414.048258][ T5922] usb 9-1: USB disconnect, device number 16 [ 414.089010][ T5922] usblp0: removed [ 414.165358][ T5920] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.213823][ T5920] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.246083][ T5920] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 414.279204][ T5920] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 414.309921][ T5920] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.322728][ T5920] usb 8-1: config 0 descriptor?? [ 414.688846][T14154] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2844'. [ 414.743181][ T5920] plantronics 0003:047F:FFFF.0042: reserved main item tag 0xe [ 414.761132][ T5832] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 414.775229][ T5920] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 414.806385][ T5920] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 414.943466][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.952430][ T5920] usb 8-1: USB disconnect, device number 19 [ 414.966913][ T5832] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 414.979171][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.027904][ T5832] usb 5-1: config 0 descriptor?? [ 415.091046][ T5922] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 415.247169][ T5832] usbhid 5-1:0.0: can't add hid device: -71 [ 415.254836][ T5922] usb 9-1: Using ep0 maxpacket: 32 [ 415.265909][ T5832] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 415.274904][ T5922] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 415.291300][ T5832] usb 5-1: USB disconnect, device number 40 [ 415.297732][ T5922] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 415.314291][ T5922] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 415.324774][ T5922] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 415.352753][ T5922] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 415.378362][ T5922] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 415.414917][ T5922] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 415.431070][ T5922] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.451971][ T5922] usb 9-1: config 0 descriptor?? [ 415.712931][ T5922] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 415.755733][ T5920] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 415.951304][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 415.978142][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.006824][ T24] usb 9-1: USB disconnect, device number 17 [ 416.030687][ T5920] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 416.047416][ T24] usblp0: removed [ 416.080127][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.187643][ T5920] usb 5-1: config 0 descriptor?? [ 416.374547][T14187] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2858'. [ 416.653737][ T5920] mcp2221 0003:04D8:00DD.0043: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 417.103535][ T5832] usb 5-1: USB disconnect, device number 41 [ 417.763063][ T5832] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 417.927098][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.969944][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.122984][ T5832] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 418.201812][ T5832] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 418.239678][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.267495][ T5832] usb 7-1: config 0 descriptor?? [ 418.736034][ T5832] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 418.978405][ T5832] usb 7-1: USB disconnect, device number 21 [ 419.010686][T14236] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.2877'. [ 420.211285][ T24] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 420.382941][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.400596][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.411656][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 420.424997][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 420.435788][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.448523][ T24] usb 7-1: config 0 descriptor?? [ 420.890042][ T24] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 421.081744][ T24] usb 7-1: USB disconnect, device number 22 [ 421.363492][T14293] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2899'. [ 421.681134][ T43] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 421.841063][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 421.858595][ T43] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 421.877457][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.887518][ T43] usb 5-1: Product: syz [ 421.891919][ T43] usb 5-1: Manufacturer: syz [ 421.896949][ T43] usb 5-1: SerialNumber: syz [ 421.919681][ T43] usb 5-1: config 0 descriptor?? [ 421.944378][ T43] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 422.081024][ T5832] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 422.252778][ T5832] usb 6-1: config index 0 descriptor too short (expected 32786, got 18) [ 422.261390][ T24] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 422.279304][ T5832] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 422.288867][ T5832] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 422.299191][ T5832] usb 6-1: Manufacturer: syz [ 422.310767][ T5832] usb 6-1: config 0 descriptor?? [ 422.318172][ T5832] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 422.327058][ T5832] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 422.433149][ T24] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 422.444317][ T24] usb 9-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 422.458287][ T24] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 422.467454][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.485370][ T24] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 422.511221][ T5921] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 422.536706][ T24] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 422.545845][ T5922] usb 6-1: USB disconnect, device number 18 [ 422.548093][ T5922] ftdi_sio 6-1:0.0: device disconnected [ 422.560428][ T7449] udevd[7449]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.706409][ T9] usb 9-1: USB disconnect, device number 18 [ 422.752767][ T5921] usb 7-1: Using ep0 maxpacket: 16 [ 422.760933][ T5921] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 422.769538][ T5921] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.780802][ T5921] usb 7-1: config 0 has no interface number 0 [ 422.789922][ T5921] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 422.799560][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.807724][ T5921] usb 7-1: Product: syz [ 422.812525][ T5921] usb 7-1: Manufacturer: syz [ 422.817328][ T5921] usb 7-1: SerialNumber: syz [ 422.826355][ T5921] usb 7-1: config 0 descriptor?? [ 422.836261][ T5921] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 422.843218][ T5921] usb 7-1: No valid video chain found. [ 423.052145][ T9] usb 7-1: USB disconnect, device number 23 [ 423.154420][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2910'. [ 423.187542][ T43] gspca_stk1135: reg_w 0xd err -71 [ 423.193847][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 423.200236][ T43] gspca_stk1135: Sensor write failed [ 423.205926][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 423.213106][ T43] gspca_stk1135: Sensor write failed [ 423.218875][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 423.227618][ T43] gspca_stk1135: Sensor read failed [ 423.233219][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 423.239663][ T43] gspca_stk1135: Sensor read failed [ 423.246623][ T43] gspca_stk1135: Detected sensor type unknown (0x0) [ 423.258855][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 423.268094][ T43] gspca_stk1135: Sensor read failed [ 423.286870][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 423.298819][ T43] gspca_stk1135: Sensor read failed [ 423.305288][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 423.317681][ T43] gspca_stk1135: Sensor write failed [ 423.335235][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 423.342620][ T43] gspca_stk1135: Sensor write failed [ 423.348313][ T43] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 423.377879][ T43] usb 5-1: USB disconnect, device number 42 [ 423.564889][T14326] usb usb8: usbfs: process 14326 (syz.5.2915) did not claim interface 0 before use [ 423.826100][T14332] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 424.745463][T14357] syz_tun: entered allmulticast mode [ 424.772951][T14356] syz_tun: left allmulticast mode [ 425.191070][ T5921] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 425.363343][ T5921] usb 9-1: Using ep0 maxpacket: 32 [ 425.371360][ T5921] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.401637][ T5921] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.438091][ T5921] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 425.461253][ T5921] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 425.489310][ T5921] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.524964][ T5921] usb 9-1: config 0 descriptor?? [ 426.017191][ T5921] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5011.0046/input/input63 [ 426.082295][ T5921] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5011.0046/input/input64 [ 426.181585][T14361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.222014][T14361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.257236][ T5921] kye 0003:0458:5011.0046: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.8-1/input0 [ 426.443424][ T5922] usb 9-1: USB disconnect, device number 19 [ 426.629539][T14400] fido_id[14400]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 426.997136][T14417] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 427.636482][ T5921] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 427.823023][ T5921] usb 9-1: config index 0 descriptor too short (expected 32786, got 18) [ 427.887832][ T5921] usb 9-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 427.932689][ T5921] usb 9-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 427.979847][ T5921] usb 9-1: Manufacturer: syz [ 428.022221][ T5921] usb 9-1: config 0 descriptor?? [ 428.069284][ T5921] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 428.113479][ T5921] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 428.349951][ T5921] usb 9-1: USB disconnect, device number 20 [ 428.357077][ T5921] ftdi_sio 9-1:0.0: device disconnected [ 429.355640][ T5922] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 429.386853][T14464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2971'. [ 429.450388][T14468] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2972'. [ 429.475069][T14468] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2972'. [ 429.574015][ T5922] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.610975][ T5922] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.630375][ T5922] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 429.665203][ T5922] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 429.693921][ T5922] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.737384][ T5922] usb 9-1: config 0 descriptor?? [ 430.141492][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 430.210253][ T5922] plantronics 0003:047F:FFFF.0047: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 430.331555][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 430.360871][ T9] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 430.381703][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.439942][ T9] usb 5-1: config 0 has no interface number 0 [ 430.455997][ T24] usb 9-1: USB disconnect, device number 21 [ 430.471577][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 430.507223][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.550843][ T9] usb 5-1: Product: syz [ 430.570020][ T9] usb 5-1: Manufacturer: syz [ 430.588858][ T9] usb 5-1: SerialNumber: syz [ 430.621275][ T9] usb 5-1: config 0 descriptor?? [ 430.639785][ T9] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 430.648700][ T9] usb 5-1: No valid video chain found. [ 430.863846][ T24] usb 5-1: USB disconnect, device number 43 [ 431.341098][ T9] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 431.521488][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 431.558772][ T9] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 431.578994][ T9] usb 9-1: config 1 has no interface number 0 [ 431.595845][ T9] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 431.629538][ T9] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 431.658505][ T9] usb 9-1: config 1 interface 105 has no altsetting 0 [ 431.699289][ T9] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 431.739457][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.759697][ T9] usb 9-1: Product: syz [ 431.768189][ T9] usb 9-1: Manufacturer: syz [ 431.787885][ T9] usb 9-1: SerialNumber: syz [ 431.846050][T14506] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 431.871418][T14506] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 432.434630][T14506] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 432.451208][T14506] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 432.471215][ T24] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 432.665311][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.696936][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.711788][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 432.725400][ T24] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 432.761739][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.787320][ T24] usb 8-1: config 0 descriptor?? [ 432.878367][ T9] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 433.118193][ T9] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 433.188395][ T9] aqc111 9-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 433.227333][ T9] usb 9-1: USB disconnect, device number 22 [ 433.254742][ T9] aqc111 9-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 433.262579][ T24] plantronics 0003:047F:FFFF.0048: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 433.381774][ T9] aqc111 9-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 433.414528][ T9] aqc111 9-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 433.456815][ T9] aqc111 9-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 434.722943][ T5921] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 434.822085][ T43] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 434.895610][ T5921] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 434.925738][ T5921] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 434.956739][ T5921] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 434.981064][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.992784][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 435.006641][ T43] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 435.016795][ T43] usb 6-1: config 0 has no interface number 0 [ 435.026824][T14622] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 435.045071][ T43] usb 6-1: config 0 interface 184 has no altsetting 0 [ 435.071602][ T5921] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 435.081408][ T43] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 435.094776][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.108488][ T43] usb 6-1: Product: syz [ 435.114596][ T43] usb 6-1: Manufacturer: syz [ 435.129418][ T43] usb 6-1: SerialNumber: syz [ 435.173968][ T43] usb 6-1: config 0 descriptor?? [ 435.192060][ T43] smsc75xx v1.0.0 [ 435.265943][ T5832] usb 8-1: USB disconnect, device number 20 [ 435.319681][ T9] usb 5-1: USB disconnect, device number 44 [ 435.796797][T14651] loop2: detected capacity change from 0 to 7 [ 435.823310][T14651] Dev loop2: unable to read RDB block 7 [ 435.829227][T14651] loop2: unable to read partition table [ 435.861251][T14651] loop2: partition table beyond EOD, truncated [ 435.888822][T14651] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 436.160276][T14656] loop2: detected capacity change from 0 to 7 [ 436.178232][ T5848] Dev loop2: unable to read RDB block 7 [ 436.193484][ T5848] loop2: AHDI p1 p2 [ 436.208395][ T5848] loop2: partition table partially beyond EOD, truncated [ 436.226906][ T5848] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 436.265549][T14656] Dev loop2: unable to read RDB block 7 [ 436.281710][T14656] loop2: AHDI p1 p2 [ 436.304526][T14656] loop2: partition table partially beyond EOD, truncated [ 436.339810][T14656] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 436.419643][ T43] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 436.458890][ T43] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 436.480492][ T43] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 436.512051][ T43] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 436.560067][ T43] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 436.585746][T14669] input: syz1 as /devices/virtual/input/input67 [ 436.597643][ T43] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 436.617454][ T5848] udevd[5848]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 436.629487][ T43] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 436.674652][ T43] usb 6-1: USB disconnect, device number 19 [ 436.837681][ T5848] udevd[5848]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 437.545193][ T30] audit: type=1326 audit(1751493623.225:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14699 comm="syz.5.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 437.629972][ T30] audit: type=1326 audit(1751493623.255:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14699 comm="syz.5.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 437.656310][ T30] audit: type=1326 audit(1751493623.255:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14699 comm="syz.5.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 437.679149][ T30] audit: type=1326 audit(1751493623.255:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14699 comm="syz.5.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 437.691112][ T43] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 437.705499][ T30] audit: type=1326 audit(1751493623.265:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14699 comm="syz.5.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 437.778148][ T30] audit: type=1326 audit(1751493623.265:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14699 comm="syz.5.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 437.808726][ T30] audit: type=1326 audit(1751493623.265:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14699 comm="syz.5.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 437.936360][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.958403][ T43] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 437.980840][ T30] audit: type=1326 audit(1751493623.275:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14699 comm="syz.5.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=401 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 438.034143][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 438.070388][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 438.085274][ T30] audit: type=1326 audit(1751493623.275:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14699 comm="syz.5.3055" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 438.111445][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 438.129340][ T30] audit: type=1326 audit(1751493623.765:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14710 comm="syz.5.3059" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 438.186194][ T43] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 438.201127][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 438.209937][ T43] usb 7-1: Product: syz [ 438.228789][ T43] usb 7-1: Manufacturer: syz [ 438.248990][ T43] usb 7-1: SerialNumber: syz [ 438.269894][ T43] usb 7-1: config 0 descriptor?? [ 438.495317][ T43] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 438.521686][ T43] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 438.691074][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 438.699392][ T43] radio-si470x 7-1:0.0: software version 0, hardware version 0 [ 438.739969][ T43] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 438.782403][ T43] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 438.851003][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 438.858301][ T9] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 438.869114][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.890391][ T9] usb 6-1: config 0 descriptor?? [ 438.900002][ T43] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 439.505477][ T43] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 439.528006][ T43] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -22 [ 439.567897][ T43] usb 7-1: USB disconnect, device number 24 [ 440.117013][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.129456][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.168622][ T9] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 440.191054][ T9] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 440.233353][ T9] asix 6-1:0.0: probe with driver asix failed with error -71 [ 440.299846][ T9] usb 6-1: USB disconnect, device number 20 [ 440.841218][ T5922] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 441.012933][ T5922] usb 8-1: Using ep0 maxpacket: 8 [ 441.033510][ T5922] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 441.089075][ T5922] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 441.119456][ T5832] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 441.127833][ T5922] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 441.177331][ T5922] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 441.206540][ T5922] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 441.216778][ T5922] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 441.229317][ T5922] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.254856][ T5922] usb 8-1: config 0 descriptor?? [ 441.304817][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.352440][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.381431][ T5830] Bluetooth: hci5: urb ffff888078eaaf00 submission failed (90) [ 441.391680][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 441.415827][ T5832] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 441.429368][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.514360][ T5832] usb 5-1: config 0 descriptor?? [ 441.524526][ T5922] usb 8-1: USB disconnect, device number 21 [ 441.573150][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 441.586703][ T9] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 441.628081][ T9] usb 6-1: config 0 has no interface number 0 [ 441.674673][ T9] usb 6-1: config 0 interface 184 has no altsetting 0 [ 441.705958][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 441.725784][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.744543][ T9] usb 6-1: Product: syz [ 441.750200][ T9] usb 6-1: Manufacturer: syz [ 441.788087][ T9] usb 6-1: SerialNumber: syz [ 441.819652][ T9] usb 6-1: config 0 descriptor?? [ 441.841838][ T9] smsc75xx v1.0.0 [ 442.190788][ T5832] usb 5-1: string descriptor 0 read error: -22 [ 442.399940][ T5832] uclogic 0003:256C:006D.0049: interface is invalid, ignoring [ 442.657973][ T5832] usb 5-1: USB disconnect, device number 45 [ 442.664824][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 442.702125][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 442.934669][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 442.981095][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 442.990753][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 443.036445][ T9] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 443.066968][ T9] usb 6-1: USB disconnect, device number 21 [ 443.261141][ T5832] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 443.362974][T14811] loop6: detected capacity change from 0 to 7 [ 443.387598][T14811] Dev loop6: unable to read RDB block 7 [ 443.425056][T14811] loop6: AHDI p1 p2 [ 443.433862][ T5832] usb 7-1: Using ep0 maxpacket: 16 [ 443.441703][T14811] loop6: partition table partially beyond EOD, truncated [ 443.463359][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 443.476466][T14811] loop6: p1 start 926365495 is beyond EOD, truncated [ 443.509854][ T5832] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 443.527240][ T5832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.548019][ T5832] usb 7-1: Product: syz [ 443.558100][ T5832] usb 7-1: Manufacturer: syz [ 443.564085][ T5832] usb 7-1: SerialNumber: syz [ 443.600788][ T5832] usb 7-1: config 0 descriptor?? [ 443.620246][ T5832] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 443.638095][ T5832] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 443.711756][ T5921] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 443.719767][ T43] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 443.873496][ T5832] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 443.891327][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 443.918150][ T5921] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 443.940035][ T5921] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 443.946707][ T5832] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 443.958652][ T5921] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 443.958681][ T5921] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.965214][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.975611][ T5832] em28xx 7-1:0.0: board has no eeprom [ 443.978695][ T24] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 444.012274][T14815] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 444.013814][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.034400][ T5921] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 444.047848][ T43] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 444.064950][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.071579][ T5832] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 444.086788][ T5832] em28xx 7-1:0.0: dvb set to bulk mode. [ 444.093395][ T5922] em28xx 7-1:0.0: Binding DVB extension [ 444.098712][ T43] usb 5-1: config 0 descriptor?? [ 444.125399][ T5832] usb 7-1: USB disconnect, device number 25 [ 444.164111][ T5832] em28xx 7-1:0.0: Disconnecting em28xx [ 444.201419][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 444.224042][ T24] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 444.231332][ T5922] em28xx 7-1:0.0: Registering input extension [ 444.241779][ T24] usb 9-1: config 0 has no interface number 0 [ 444.265030][ T24] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 444.288804][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.291366][ T5832] em28xx 7-1:0.0: Closing input extension [ 444.303136][ T5892] usb 8-1: USB disconnect, device number 22 [ 444.326045][ T24] usb 9-1: Product: syz [ 444.333678][ T24] usb 9-1: Manufacturer: syz [ 444.346348][ T24] usb 9-1: SerialNumber: syz [ 444.387197][ T24] usb 9-1: config 0 descriptor?? [ 444.405199][ T5832] em28xx 7-1:0.0: Freeing device [ 444.413522][ T24] smsc95xx v2.0.0 [ 444.557125][ T43] corsair 0003:1B1C:1B02.004A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 444.827706][ T24] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 444.851312][ T24] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 444.894307][ T43] corsair 0003:1B1C:1B02.004A: Failed to get K90 initial state (error -71). [ 444.926651][ T43] usb 5-1: USB disconnect, device number 46 [ 445.492154][ T24] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 445.521193][ T24] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 445.554950][ T24] usb 9-1: USB disconnect, device number 23 [ 445.816519][T14849] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 446.780798][T14877] netlink: 'syz.8.3125': attribute type 6 has an invalid length. [ 447.306533][T14852] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3118'. [ 448.218601][T14914] veth0: entered promiscuous mode [ 448.225357][T14914] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3140'. [ 449.471253][ T5832] usb 9-1: new low-speed USB device number 24 using dummy_hcd [ 449.651032][ T5832] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 449.668717][ T5832] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 449.697843][ T5832] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 449.736727][ T5832] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 449.750005][ T5832] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 449.768420][ T5832] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 449.789517][ T5832] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 449.816044][ T5832] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 449.828180][ T9] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 449.851227][ T5832] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 449.881375][ T5832] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 449.925283][ T5832] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 449.944919][ T5832] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 449.966781][ T5832] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 449.983497][ T5832] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 449.995435][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 450.014991][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 450.030513][ T5832] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 450.045855][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 450.067281][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 450.078085][ T5832] usb 9-1: string descriptor 0 read error: -22 [ 450.088315][ T5832] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 450.103251][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 450.116061][ T5832] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.136122][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.161049][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 450.181582][ T5832] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 450.199708][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.462218][ T9] usb 8-1: usb_control_msg returned -32 [ 450.491995][ T9] usbtmc 8-1:16.0: can't read capabilities [ 451.600989][ T5892] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 451.793594][ T5892] usb 6-1: Using ep0 maxpacket: 32 [ 451.807580][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.849434][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.889958][ T5892] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 451.954074][ T5892] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 451.981116][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.018380][ T5892] usb 6-1: config 0 descriptor?? [ 452.504992][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.004B/input/input69 [ 452.609897][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.004B/input/input70 [ 452.639834][ T43] usb 8-1: USB disconnect, device number 23 [ 452.752327][ T5892] kye 0003:0458:5011.004B: input,hiddev2,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 452.934693][T15006] veth0_to_bond: entered allmulticast mode [ 452.963268][T15006] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3176'. [ 453.030420][ T43] usb 6-1: USB disconnect, device number 22 [ 453.200383][T15006] veth0_to_bond (unregistering): left allmulticast mode [ 453.379383][T15006] bond0: (slave bond_slave_0): Releasing backup interface [ 453.921167][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 453.961376][ T43] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 453.981680][ T9] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 454.084515][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.113932][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.141194][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 454.145613][ T24] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 454.152603][ T9] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 454.163809][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.181554][ T43] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 454.201493][ T9] usb 8-1: config 0 has no interface number 0 [ 454.201912][ T24] usb 6-1: config 0 descriptor?? [ 454.213044][ T43] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 454.217275][ T9] usb 8-1: config 0 interface 12 has no altsetting 0 [ 454.236313][ T43] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 454.242904][ T9] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 454.247868][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.263954][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.290947][ T9] usb 8-1: Product: syz [ 454.295800][ T9] usb 8-1: Manufacturer: syz [ 454.307375][T15014] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 454.314617][ T9] usb 8-1: SerialNumber: syz [ 454.325049][ T9] usb 8-1: config 0 descriptor?? [ 454.368624][ T43] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 454.597207][ T43] usb 9-1: USB disconnect, device number 24 [ 454.822702][ T5832] usb 7-1: USB disconnect, device number 26 [ 454.904783][ T24] usb 6-1: string descriptor 0 read error: -22 [ 454.979611][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 454.979627][ T30] audit: type=1326 audit(1751493640.655:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.8.3186" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 455.052134][ T30] audit: type=1326 audit(1751493640.655:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.8.3186" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 455.087007][ T30] audit: type=1326 audit(1751493640.655:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.8.3186" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 455.116032][ T24] uclogic 0003:256C:006D.004C: interface is invalid, ignoring [ 455.131761][ T30] audit: type=1326 audit(1751493640.655:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.8.3186" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 455.154642][ T43] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 455.176268][ T30] audit: type=1326 audit(1751493640.655:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.8.3186" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 455.264177][ T30] audit: type=1326 audit(1751493640.655:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.8.3186" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 455.336989][ T43] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 455.371106][ T30] audit: type=1326 audit(1751493640.655:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.8.3186" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 455.395949][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 455.441016][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 455.457532][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 455.477870][ T30] audit: type=1326 audit(1751493640.655:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.8.3186" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 455.510124][ T5892] usb 6-1: USB disconnect, device number 23 [ 455.521343][ T43] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 455.536152][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.547220][ T30] audit: type=1326 audit(1751493640.655:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.8.3186" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 455.560546][ T9] f81534 8-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 455.571529][ T30] audit: type=1326 audit(1751493640.655:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.8.3186" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 455.607554][ T43] usb 5-1: config 0 descriptor?? [ 455.681258][ T9] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 455.702400][T15029] capability: warning: `syz.8.3186' uses 32-bit capabilities (legacy support in use) [ 455.721043][ T9] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 455.746106][ T9] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 455.791759][ T9] usb 8-1: USB disconnect, device number 24 [ 456.039930][ T43] plantronics 0003:047F:FFFF.004D: ignoring exceeding usage max [ 456.095377][ T43] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 456.251559][ T43] usb 5-1: USB disconnect, device number 47 [ 456.301533][T15032] fido_id[15032]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 456.711695][ T5892] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 456.881259][ T5892] usb 7-1: Using ep0 maxpacket: 16 [ 456.902255][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.951110][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.981329][ T5892] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 457.018341][ T5892] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 457.065477][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.124233][ T5892] usb 7-1: config 0 descriptor?? [ 457.243773][T15060] ALSA: mixer_oss: invalid OSS volume '0' [ 457.249595][T15060] ALSA: mixer_oss: invalid OSS volume 'Ip6InAddrErrors' [ 457.262850][T15060] ALSA: mixer_oss: invalid OSS volume 'Ip6InUnknownProtos' [ 457.300964][ T9] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 457.331372][T15060] ALSA: mixer_oss: invalid OSS volume 'Ip6InTruncatedPkts' [ 457.353567][T15060] ALSA: mixer_oss: invalid OSS volume 'Ip6InDiscards' [ 457.388854][T15060] ALSA: mixer_oss: invalid OSS volume 'Ip6InDelivers' [ 457.471328][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 457.535302][ T9] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 457.564700][ T9] usb 9-1: config 0 has no interface number 0 [ 457.585243][ T9] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 457.657004][ T9] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 457.675482][ T9] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 457.717312][ T9] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 457.775048][ T9] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 457.829233][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.906195][ T9] usb 9-1: config 0 descriptor?? [ 457.934062][ T9] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 457.950790][ T5892] HID 045e:07da: Invalid code 65791 type 1 [ 457.993727][ T5892] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.004E/input/input71 [ 458.005377][ T5921] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 458.070746][ T5892] microsoft 0003:045E:07DA.004E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 458.186663][ T5892] usb 7-1: USB disconnect, device number 27 [ 458.201006][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 458.221035][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 458.282326][ T5921] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 458.300990][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.330965][ T5921] usb 5-1: Product: syz [ 458.348748][ T5921] usb 5-1: Manufacturer: syz [ 458.364055][ T5921] usb 5-1: SerialNumber: syz [ 458.373757][T15069] fido_id[15069]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 458.399043][ T5921] usb 5-1: config 0 descriptor?? [ 458.424966][ T5921] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 458.463198][ T5921] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 458.721482][ T5921] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 458.831190][ T5921] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 458.865876][ T5921] em28xx 5-1:0.0: board has no eeprom [ 458.914485][T15077] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3203'. [ 458.981012][ T5921] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 458.998085][ T5921] em28xx 5-1:0.0: dvb set to bulk mode. [ 459.048718][ T5892] em28xx 5-1:0.0: Binding DVB extension [ 459.108882][ T5921] usb 5-1: USB disconnect, device number 48 [ 459.204902][ T5921] em28xx 5-1:0.0: Disconnecting em28xx [ 459.323044][ T5892] em28xx 5-1:0.0: Registering input extension [ 459.375914][ T5921] em28xx 5-1:0.0: Closing input extension [ 459.445973][ T5921] em28xx 5-1:0.0: Freeing device [ 459.554067][T15090] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3208'. [ 459.624728][T15090] vxlan1: entered promiscuous mode [ 459.811049][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 459.961452][ T5921] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 459.985646][ T10] usb 9-1: USB disconnect, device number 25 [ 460.000369][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 460.015742][ T10] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 460.025560][ T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 460.069394][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 460.087757][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 460.100040][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 460.117448][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 460.131255][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 460.139392][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 460.140968][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 460.166834][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 460.178362][ T9] usb 6-1: Product: syz [ 460.178380][ T9] usb 6-1: Manufacturer: syz [ 460.201574][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3213'. [ 460.207193][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 460.214338][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 460.253537][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 460.267845][ T5921] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 460.270658][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 460.311424][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 460.337527][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.379921][ T5921] usb 5-1: config 0 descriptor?? [ 460.415634][T15093] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 460.425261][ T5921] hub 5-1:0.0: USB hub found [ 460.661557][ T5921] hub 5-1:0.0: 2 ports detected [ 460.689939][ T10] usb 6-1: USB disconnect, device number 24 [ 460.817875][T15118] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 460.866169][ T5921] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 460.879989][ T5921] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 460.908059][ T5921] usbhid 5-1:0.0: can't add hid device: -71 [ 460.920347][ T5921] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 460.952688][ T5921] usb 5-1: USB disconnect, device number 49 [ 461.276414][T15132] input: syz1 as /devices/virtual/input/input73 [ 461.351917][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 461.460303][T15137] ======================================================= [ 461.460303][T15137] WARNING: The mand mount option has been deprecated and [ 461.460303][T15137] and is ignored by this kernel. Remove the mand [ 461.460303][T15137] option from the mount to silence this warning. [ 461.460303][T15137] ======================================================= [ 461.495487][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.533084][ T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 461.556474][ T10] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 461.597633][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 461.631145][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 461.662014][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 461.692985][ T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 461.697573][T15144] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3228'. [ 461.710976][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 461.729702][ T10] usb 6-1: Product: syz [ 461.737969][T15145] veth0_to_bond: entered allmulticast mode [ 461.750809][ T10] usb 6-1: Manufacturer: syz [ 461.770318][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 461.800022][T15145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3229'. [ 461.815915][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 461.840475][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 461.849670][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 461.899918][T15145] veth0_to_bond (unregistering): left allmulticast mode [ 461.939062][T15145] bond0: (slave bond_slave_0): Releasing backup interface [ 462.013200][ T10] usb 6-1: USB disconnect, device number 25 [ 462.201570][T15155] netlink: 'syz.8.3231': attribute type 1 has an invalid length. [ 462.327826][T15166] bond1: entered allmulticast mode [ 462.436914][T15166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 463.211128][ T10] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 463.371938][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 463.381909][ T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 463.404868][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 463.427242][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 463.446553][ T10] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 463.461095][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.495592][ T10] usb 9-1: config 0 descriptor?? [ 463.511933][T15191] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 463.523436][ T10] hub 9-1:0.0: USB hub found [ 463.729731][ T10] hub 9-1:0.0: 2 ports detected [ 463.846998][T15188] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3240'. [ 463.948807][ T10] hub 9-1:0.0: hub_hub_status failed (err = -71) [ 463.976471][ T10] hub 9-1:0.0: config failed, can't get hub status (err -71) [ 464.013635][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 464.040741][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 464.127133][ T10] usb 9-1: USB disconnect, device number 26 [ 465.997660][T14607] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.037971][T14607] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.135207][T15264] syzkaller1: entered promiscuous mode [ 466.140739][T15264] syzkaller1: entered allmulticast mode [ 466.301325][ T10] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 466.432955][T14607] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.467680][T14607] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.488432][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 466.521964][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 466.549230][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 466.619563][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 466.651307][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 466.676295][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.779418][ T10] usb 7-1: config 0 descriptor?? [ 466.789579][T15269] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 466.808824][ T10] hub 7-1:0.0: USB hub found [ 466.905148][T14607] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.951015][ T5892] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 466.964231][T14607] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.032886][ T10] hub 7-1:0.0: 2 ports detected [ 467.182668][ T5892] usb 8-1: config 0 interface 0 has no altsetting 0 [ 467.189669][ T5892] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 467.199521][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.207198][T14607] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.220711][ T5892] usb 8-1: config 0 descriptor?? [ 467.263949][ T10] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 467.264702][T14607] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.270411][ T10] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 467.278140][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 467.336886][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 467.425180][ T10] usb 7-1: USB disconnect, device number 28 [ 467.971957][T14607] bridge_slave_1: left allmulticast mode [ 467.977723][T14607] bridge_slave_1: left promiscuous mode [ 468.002621][T14607] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.103144][T14607] bridge_slave_0: left allmulticast mode [ 468.151114][T14607] bridge_slave_0: left promiscuous mode [ 468.177684][T14607] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.247130][ T5892] radio-keene 8-1:0.0: V4L2 device registered as radio48 [ 468.524792][ T10] usb 8-1: USB disconnect, device number 25 [ 468.888958][T15318] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3284'. [ 470.130247][T15342] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3292'. [ 470.494545][T14607] batman_adv: batadv0: Interface deactivated: macsec1 [ 470.547567][T14607] batman_adv: batadv0: Removing interface: macsec1 [ 470.570870][T15354] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3297'. [ 470.995322][T14607] bond0 (unregistering): left promiscuous mode [ 471.009122][T14607] bond_slave_0: left promiscuous mode [ 471.016613][T14607] bond_slave_1: left promiscuous mode [ 471.025644][T14607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.035179][T14607] bond_slave_0: left allmulticast mode [ 471.046749][T14607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.064424][T14607] bond_slave_1: left allmulticast mode [ 471.082074][T14607] bond0 (unregistering): Released all slaves [ 471.559478][T15379] input: syz1 as /devices/virtual/input/input74 [ 471.923676][T15342] bond0 (unregistering): Released all slaves [ 472.098600][T15396] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3315'. [ 472.110120][T15396] netlink: 'syz.5.3315': attribute type 7 has an invalid length. [ 472.143209][T15396] netlink: 'syz.5.3315': attribute type 8 has an invalid length. [ 472.179654][T15396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3315'. [ 472.206959][T14607] batman_adv: batadv0: Interface deactivated: macvtap1 [ 472.232530][T14607] mac80211_hwsim hwsim7 wlan0 (unregistering): left allmulticast mode [ 472.297958][T14607] batman_adv: batadv0: Removing interface: macvtap1 [ 472.385177][T15396] erspan0: entered promiscuous mode [ 472.421874][T15396] batadv_slave_1: entered promiscuous mode [ 472.433265][T15396] gretap0: entered promiscuous mode [ 472.439991][T15396] gretap0: left promiscuous mode [ 472.470591][T15396] erspan0: left promiscuous mode [ 472.505247][T15396] batadv_slave_1: left promiscuous mode [ 472.641503][T14607] batadv_slave_0: left promiscuous mode [ 472.731356][T15413] netlink: 'syz.4.3322': attribute type 1 has an invalid length. [ 472.759804][T14607] dummy0: left promiscuous mode [ 472.778366][T15413] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3322'. [ 472.875141][T14607] hsr_slave_0: left promiscuous mode [ 472.888990][T14607] hsr_slave_1: left promiscuous mode [ 472.902130][T14607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.920244][T14607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.921103][T15424] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3326'. [ 472.944101][T14607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.955166][T14607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.018569][T14607] veth1_macvtap: left promiscuous mode [ 473.033438][T14607] veth0_macvtap: left promiscuous mode [ 473.047817][T14607] veth1_vlan: left promiscuous mode [ 473.101097][ T5921] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 473.263282][ T5921] usb 8-1: config 0 has an invalid interface number: 230 but max is 0 [ 473.290516][ T5921] usb 8-1: config 0 has no interface number 0 [ 473.297410][ T5921] usb 8-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 473.339843][ T5921] usb 8-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 473.395020][ T5921] usb 8-1: config 0 interface 230 has no altsetting 0 [ 473.440166][ T5921] usb 8-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 473.460092][ T5921] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.484229][ T5921] usb 8-1: Product: syz [ 473.488520][ T5921] usb 8-1: Manufacturer: syz [ 473.493584][ T5921] usb 8-1: SerialNumber: syz [ 473.509147][ T5921] usb 8-1: config 0 descriptor?? [ 473.530865][T15421] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 473.541196][T15421] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 473.565825][ T5921] ums-usbat 8-1:0.230: USB Mass Storage device detected [ 473.596809][ T5921] ums-usbat 8-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 474.026554][T14607] team0 (unregistering): Port device team_slave_1 removed [ 474.083899][T14607] team0 (unregistering): Port device team_slave_0 removed [ 475.357940][T14607] IPVS: stop unused estimator thread 0... [ 475.838805][ T5921] ums-usbat 8-1:0.230: probe with driver ums-usbat failed with error -5 [ 476.041437][ T10] usb 8-1: USB disconnect, device number 26 [ 476.117996][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 476.271956][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 476.284191][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 476.295081][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.311164][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 476.321459][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 476.331861][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 476.392813][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 476.424281][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 476.442424][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.460721][ T9] usb 5-1: Product: syz [ 476.473587][ T9] usb 5-1: Manufacturer: syz [ 476.478363][ T9] usb 5-1: SerialNumber: syz [ 477.538207][T15487] chnl_net:caif_netlink_parms(): no params data found [ 477.548888][ T9] cdc_ncm 5-1:1.0: bind() failure [ 477.581649][ T9] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 477.648541][ T9] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 477.682158][ T9] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 477.729027][ T9] usb 5-1: USB disconnect, device number 50 [ 477.895246][T15527] netlink: 'syz.8.3352': attribute type 1 has an invalid length. [ 477.938069][T15527] bond2: entered promiscuous mode [ 477.946688][T15527] 8021q: adding VLAN 0 to HW filter on device bond2 [ 478.023553][T15531] 8021q: adding VLAN 0 to HW filter on device bond2 [ 478.038941][T15531] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 478.053095][T15531] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 478.068859][T15531] bond2: (slave vxcan3): making interface the new active one [ 478.076716][T15531] vxcan3: entered promiscuous mode [ 478.083733][T15531] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 478.206322][T15487] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.219789][T15487] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.250325][T15487] bridge_slave_0: entered allmulticast mode [ 478.261100][ T5921] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 478.273077][T15487] bridge_slave_0: entered promiscuous mode [ 478.304227][T15487] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.322492][T15487] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.356433][T15487] bridge_slave_1: entered allmulticast mode [ 478.374067][T15487] bridge_slave_1: entered promiscuous mode [ 478.434489][ T5843] Bluetooth: hci0: command tx timeout [ 478.466148][ T5921] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 478.475625][ T5921] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 478.501677][ T5921] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 478.540760][ T5921] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 478.567927][ T5921] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 478.583838][T15487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.586701][ T5921] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 478.613914][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 478.616115][T15487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.664354][ T5921] usb 6-1: Product: syz [ 478.668928][ T5921] usb 6-1: Manufacturer: syz [ 478.716677][ T5921] cdc_wdm 6-1:1.0: skipping garbage [ 478.735803][ T5921] cdc_wdm 6-1:1.0: skipping garbage [ 478.752762][ T5921] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 478.758728][ T5921] cdc_wdm 6-1:1.0: Unknown control protocol [ 478.786751][T15487] team0: Port device team_slave_0 added [ 478.814738][T15487] team0: Port device team_slave_1 added [ 478.961684][T15487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.983172][T15487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.044308][T15487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.073070][T15487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.095048][T15487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.178085][T15487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.357065][T15487] hsr_slave_0: entered promiscuous mode [ 479.395477][T15487] hsr_slave_1: entered promiscuous mode [ 479.417741][T15487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.438433][T15487] Cannot create hsr debugfs directory [ 479.438452][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -EPIPE [ 479.709800][ T5921] usb 6-1: USB disconnect, device number 26 [ 480.284908][T15487] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 480.349620][T15487] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 480.440108][T15487] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 480.511265][ T5843] Bluetooth: hci0: command tx timeout [ 480.519050][T15487] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 481.175723][T15487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.303406][T15487] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.369516][ T9260] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.376785][ T9260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.513597][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.520845][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.814039][T15487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.995254][T15487] veth0_vlan: entered promiscuous mode [ 482.058923][T15487] veth1_vlan: entered promiscuous mode [ 482.195730][T15487] veth0_macvtap: entered promiscuous mode [ 482.266215][T15487] veth1_macvtap: entered promiscuous mode [ 482.385014][T15487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.465319][T15487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.505739][T15487] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.551051][T15487] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.601196][ T5843] Bluetooth: hci0: command tx timeout [ 482.615461][T15487] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.673166][T15487] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.951169][T15667] binder: 15666:15667 ioctl 40046205 0 returned -22 [ 482.969915][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.970984][ T10] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 483.018803][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.168160][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.225532][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 483.237834][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.282679][ T10] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 483.331053][ T10] usb 8-1: config 0 has no interface number 0 [ 483.351087][ T10] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 483.415641][ T10] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 483.477102][ T10] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 483.539579][ T10] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 483.589424][ T10] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 483.637952][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.676348][ T10] usb 8-1: config 0 descriptor?? [ 483.699597][ T10] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 483.874330][T15692] netlink: 'syz.9.3395': attribute type 1 has an invalid length. [ 483.901244][ T5906] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 484.054207][ T5921] usb 8-1: USB disconnect, device number 27 [ 484.055566][ C0] ldusb 8-1:0.55: usb_submit_urb failed (-19) [ 484.067055][T15661] ldusb 8-1:0.55: Couldn't submit interrupt_out_urb -19 [ 484.074621][ T5921] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 484.093088][ T5906] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.126199][ T5906] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.155158][ T5906] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 484.192398][ T5906] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.234220][ T5906] usb 9-1: config 0 descriptor?? [ 484.472419][T15704] [ 484.474821][T15704] ===================================================== [ 484.481768][T15704] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 484.489261][T15704] 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 Not tainted [ 484.496367][T15704] ----------------------------------------------------- [ 484.503467][T15704] syz.5.3398/15704 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 484.511182][T15704] ffff88802f44c600 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 484.520078][T15704] [ 484.520078][T15704] and this task is already holding: [ 484.527530][T15704] ffff888057107028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 484.537277][T15704] which would create a new lock dependency: [ 484.543170][T15704] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 484.551616][T15704] [ 484.551616][T15704] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 484.561053][T15704] (&client->buffer_lock){..-.}-{3:3} [ 484.561080][T15704] [ 484.561080][T15704] ... which became SOFTIRQ-irq-safe at: [ 484.574131][T15704] lock_acquire+0x120/0x360 [ 484.578746][T15704] _raw_spin_lock+0x2e/0x40 [ 484.583324][T15704] evdev_pass_values+0xb9/0xbd0 [ 484.588252][T15704] evdev_events+0x1e6/0x340 [ 484.592831][T15704] input_pass_values+0x285/0x890 [ 484.597846][T15704] input_event_dispose+0x3e5/0x6b0 [ 484.603071][T15704] input_event+0x8c/0xc0 [ 484.607393][T15704] hidinput_hid_event+0x132c/0x1c90 [ 484.612674][T15704] hid_process_event+0x4be/0x620 [ 484.617707][T15704] hid_report_raw_event+0xe91/0x16d0 [ 484.623082][T15704] hid_input_report+0x43e/0x520 [ 484.628019][T15704] hid_irq_in+0x47e/0x6d0 [ 484.632426][T15704] __usb_hcd_giveback_urb+0x41a/0x690 [ 484.637876][T15704] dummy_timer+0x862/0x4550 [ 484.642464][T15704] __hrtimer_run_queues+0x52c/0xc60 [ 484.647834][T15704] hrtimer_run_softirq+0x187/0x2b0 [ 484.653200][T15704] handle_softirqs+0x286/0x870 [ 484.658047][T15704] __irq_exit_rcu+0xca/0x1f0 [ 484.662719][T15704] irq_exit_rcu+0x9/0x30 [ 484.667055][T15704] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 484.672895][T15704] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 484.679045][T15704] x64_sys_call+0x1f6/0x21c0 [ 484.683711][T15704] do_syscall_64+0xfa/0x3b0 [ 484.688397][T15704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.694367][T15704] [ 484.694367][T15704] to a SOFTIRQ-irq-unsafe lock: [ 484.701368][T15704] (tasklist_lock){.+.+}-{3:3} [ 484.701393][T15704] [ 484.701393][T15704] ... which became SOFTIRQ-irq-unsafe at: [ 484.714003][T15704] ... [ 484.714011][T15704] lock_acquire+0x120/0x360 [ 484.721207][T15704] _raw_read_lock+0x36/0x50 [ 484.725895][T15704] __do_wait+0xde/0x740 [ 484.730126][T15704] do_wait+0x1f8/0x520 [ 484.734439][T15704] kernel_wait+0xab/0x170 [ 484.738857][T15704] call_usermodehelper_exec_work+0xbe/0x230 [ 484.744828][T15704] process_scheduled_works+0xade/0x17b0 [ 484.750449][T15704] worker_thread+0x8a0/0xda0 [ 484.755133][T15704] kthread+0x70e/0x8a0 [ 484.759282][T15704] ret_from_fork+0x3fc/0x770 [ 484.764037][T15704] ret_from_fork_asm+0x1a/0x30 [ 484.768877][T15704] [ 484.768877][T15704] other info that might help us debug this: [ 484.768877][T15704] [ 484.779091][T15704] Chain exists of: [ 484.779091][T15704] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 484.779091][T15704] [ 484.792326][T15704] Possible interrupt unsafe locking scenario: [ 484.792326][T15704] [ 484.800642][T15704] CPU0 CPU1 [ 484.805993][T15704] ---- ---- [ 484.811360][T15704] lock(tasklist_lock); [ 484.815608][T15704] local_irq_disable(); [ 484.822352][T15704] lock(&client->buffer_lock); [ 484.829736][T15704] lock(&new->fa_lock); [ 484.836520][T15704] [ 484.839968][T15704] lock(&client->buffer_lock); [ 484.844990][T15704] [ 484.844990][T15704] *** DEADLOCK *** [ 484.844990][T15704] [ 484.853210][T15704] 7 locks held by syz.5.3398/15704: [ 484.858389][T15704] #0: ffff888145f7d118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 484.867528][T15704] #1: ffff88801ef3b230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 484.877621][T15704] #2: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 484.887271][T15704] #3: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 484.896831][T15704] #4: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 484.905959][T15704] #5: ffff888057107028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 484.916149][T15704] #6: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 484.925205][T15704] [ 484.925205][T15704] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 484.936236][T15704] -> (&client->buffer_lock){..-.}-{3:3} { [ 484.941975][T15704] IN-SOFTIRQ-W at: [ 484.945948][T15704] lock_acquire+0x120/0x360 [ 484.952102][T15704] _raw_spin_lock+0x2e/0x40 [ 484.958249][T15704] evdev_pass_values+0xb9/0xbd0 [ 484.964747][T15704] evdev_events+0x1e6/0x340 [ 484.970891][T15704] input_pass_values+0x285/0x890 [ 484.977579][T15704] input_event_dispose+0x3e5/0x6b0 [ 484.984351][T15704] input_event+0x8c/0xc0 [ 484.990326][T15704] hidinput_hid_event+0x132c/0x1c90 [ 484.997188][T15704] hid_process_event+0x4be/0x620 [ 485.003789][T15704] hid_report_raw_event+0xe91/0x16d0 [ 485.010745][T15704] hid_input_report+0x43e/0x520 [ 485.017251][T15704] hid_irq_in+0x47e/0x6d0 [ 485.023678][T15704] __usb_hcd_giveback_urb+0x41a/0x690 [ 485.030886][T15704] dummy_timer+0x862/0x4550 [ 485.037065][T15704] __hrtimer_run_queues+0x52c/0xc60 [ 485.043920][T15704] hrtimer_run_softirq+0x187/0x2b0 [ 485.050667][T15704] handle_softirqs+0x286/0x870 [ 485.057080][T15704] __irq_exit_rcu+0xca/0x1f0 [ 485.063313][T15704] irq_exit_rcu+0x9/0x30 [ 485.069204][T15704] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 485.076485][T15704] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 485.084138][T15704] x64_sys_call+0x1f6/0x21c0 [ 485.090372][T15704] do_syscall_64+0xfa/0x3b0 [ 485.096532][T15704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.104081][T15704] INITIAL USE at: [ 485.107966][T15704] lock_acquire+0x120/0x360 [ 485.114023][T15704] _raw_spin_lock+0x2e/0x40 [ 485.120088][T15704] evdev_pass_values+0xb9/0xbd0 [ 485.126519][T15704] evdev_events+0x1e6/0x340 [ 485.132610][T15704] input_pass_values+0x285/0x890 [ 485.139137][T15704] input_event_dispose+0x3e5/0x6b0 [ 485.145819][T15704] input_event+0x8c/0xc0 [ 485.151624][T15704] hidinput_hid_event+0x132c/0x1c90 [ 485.158383][T15704] hid_process_event+0x4be/0x620 [ 485.164873][T15704] hid_report_raw_event+0xe91/0x16d0 [ 485.171715][T15704] hid_input_report+0x43e/0x520 [ 485.178118][T15704] hid_irq_in+0x47e/0x6d0 [ 485.184085][T15704] __usb_hcd_giveback_urb+0x41a/0x690 [ 485.191011][T15704] dummy_timer+0x862/0x4550 [ 485.197078][T15704] __hrtimer_run_queues+0x52c/0xc60 [ 485.203837][T15704] hrtimer_run_softirq+0x187/0x2b0 [ 485.210495][T15704] handle_softirqs+0x286/0x870 [ 485.216901][T15704] __irq_exit_rcu+0xca/0x1f0 [ 485.223157][T15704] irq_exit_rcu+0x9/0x30 [ 485.228999][T15704] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 485.236221][T15704] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 485.243772][T15704] x64_sys_call+0x1f6/0x21c0 [ 485.249935][T15704] do_syscall_64+0xfa/0x3b0 [ 485.256083][T15704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.263535][T15704] } [ 485.266024][T15704] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 485.274257][T15704] [ 485.274257][T15704] the dependencies between the lock to be acquired [ 485.274267][T15704] and SOFTIRQ-irq-unsafe lock: [ 485.287770][T15704] -> (tasklist_lock){.+.+}-{3:3} { [ 485.293066][T15704] HARDIRQ-ON-R at: [ 485.297217][T15704] lock_acquire+0x120/0x360 [ 485.303755][T15704] _raw_read_lock+0x36/0x50 [ 485.310264][T15704] __do_wait+0xde/0x740 [ 485.316440][T15704] do_wait+0x1f8/0x520 [ 485.322510][T15704] kernel_wait+0xab/0x170 [ 485.328826][T15704] call_usermodehelper_exec_work+0xbe/0x230 [ 485.336734][T15704] process_scheduled_works+0xade/0x17b0 [ 485.344278][T15704] worker_thread+0x8a0/0xda0 [ 485.350867][T15704] kthread+0x70e/0x8a0 [ 485.357015][T15704] ret_from_fork+0x3fc/0x770 [ 485.363601][T15704] ret_from_fork_asm+0x1a/0x30 [ 485.370353][T15704] SOFTIRQ-ON-R at: [ 485.374933][T15704] lock_acquire+0x120/0x360 [ 485.381531][T15704] _raw_read_lock+0x36/0x50 [ 485.388025][T15704] __do_wait+0xde/0x740 [ 485.394272][T15704] do_wait+0x1f8/0x520 [ 485.400345][T15704] kernel_wait+0xab/0x170 [ 485.406661][T15704] call_usermodehelper_exec_work+0xbe/0x230 [ 485.414545][T15704] process_scheduled_works+0xade/0x17b0 [ 485.422092][T15704] worker_thread+0x8a0/0xda0 [ 485.428675][T15704] kthread+0x70e/0x8a0 [ 485.434819][T15704] ret_from_fork+0x3fc/0x770 [ 485.441491][T15704] ret_from_fork_asm+0x1a/0x30 [ 485.448243][T15704] INITIAL USE at: [ 485.452299][T15704] lock_acquire+0x120/0x360 [ 485.458705][T15704] _raw_write_lock_irq+0xa2/0xf0 [ 485.465633][T15704] copy_process+0x224f/0x3c00 [ 485.472210][T15704] kernel_clone+0x21e/0x870 [ 485.478615][T15704] user_mode_thread+0xdd/0x140 [ 485.485294][T15704] rest_init+0x23/0x300 [ 485.491350][T15704] start_kernel+0x47d/0x500 [ 485.497757][T15704] x86_64_start_reservations+0x24/0x30 [ 485.505119][T15704] x86_64_start_kernel+0x143/0x1c0 [ 485.512136][T15704] common_startup_64+0x13e/0x147 [ 485.519061][T15704] INITIAL READ USE at: [ 485.523646][T15704] lock_acquire+0x120/0x360 [ 485.530492][T15704] _raw_read_lock+0x36/0x50 [ 485.537429][T15704] __do_wait+0xde/0x740 [ 485.543925][T15704] do_wait+0x1f8/0x520 [ 485.550329][T15704] kernel_wait+0xab/0x170 [ 485.557090][T15704] call_usermodehelper_exec_work+0xbe/0x230 [ 485.565538][T15704] process_scheduled_works+0xade/0x17b0 [ 485.573425][T15704] worker_thread+0x8a0/0xda0 [ 485.580359][T15704] kthread+0x70e/0x8a0 [ 485.586762][T15704] ret_from_fork+0x3fc/0x770 [ 485.593700][T15704] ret_from_fork_asm+0x1a/0x30 [ 485.600802][T15704] } [ 485.603461][T15704] ... key at: [] tasklist_lock+0x18/0x40 [ 485.611348][T15704] ... acquired at: [ 485.615333][T15704] lock_acquire+0x120/0x360 [ 485.620054][T15704] _raw_read_lock+0x36/0x50 [ 485.624773][T15704] send_sigurg+0x12b/0x420 [ 485.629364][T15704] sk_send_sigurg+0x6c/0x2e0 [ 485.634128][T15704] queue_oob+0x490/0x5a0 [ 485.638536][T15704] unix_stream_sendmsg+0xaf9/0xc90 [ 485.643811][T15704] __sock_sendmsg+0x21c/0x270 [ 485.648659][T15704] ____sys_sendmsg+0x52d/0x830 [ 485.653600][T15704] ___sys_sendmsg+0x21f/0x2a0 [ 485.658440][T15704] __sys_sendmmsg+0x28e/0x430 [ 485.663284][T15704] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 485.668993][T15704] __do_fast_syscall_32+0xb6/0x2b0 [ 485.674269][T15704] do_fast_syscall_32+0x34/0x80 [ 485.679303][T15704] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 485.685816][T15704] [ 485.688131][T15704] -> (&f_owner->lock){....}-{3:3} { [ 485.693492][T15704] INITIAL USE at: [ 485.697498][T15704] lock_acquire+0x120/0x360 [ 485.703748][T15704] _raw_write_lock_irq+0xa2/0xf0 [ 485.710506][T15704] __f_setown+0x67/0x370 [ 485.716479][T15704] do_fcntl+0x15ff/0x1910 [ 485.722542][T15704] do_compat_fcntl64+0x477/0x720 [ 485.729207][T15704] __do_fast_syscall_32+0xb6/0x2b0 [ 485.736061][T15704] do_fast_syscall_32+0x34/0x80 [ 485.742656][T15704] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 485.750731][T15704] INITIAL READ USE at: [ 485.755145][T15704] lock_acquire+0x120/0x360 [ 485.761821][T15704] _raw_read_lock_irqsave+0xaf/0x100 [ 485.769270][T15704] send_sigurg+0x55/0x420 [ 485.775768][T15704] sk_send_sigurg+0x6c/0x2e0 [ 485.782608][T15704] queue_oob+0x490/0x5a0 [ 485.789015][T15704] unix_stream_sendmsg+0xaf9/0xc90 [ 485.796290][T15704] __sock_sendmsg+0x21c/0x270 [ 485.803138][T15704] ____sys_sendmsg+0x52d/0x830 [ 485.810170][T15704] ___sys_sendmsg+0x21f/0x2a0 [ 485.817046][T15704] __sys_sendmmsg+0x28e/0x430 [ 485.823905][T15704] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 485.831622][T15704] __do_fast_syscall_32+0xb6/0x2b0 [ 485.838902][T15704] do_fast_syscall_32+0x34/0x80 [ 485.845919][T15704] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 485.854416][T15704] } [ 485.856990][T15704] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 485.865954][T15704] ... acquired at: [ 485.869827][T15704] lock_acquire+0x120/0x360 [ 485.874497][T15704] _raw_read_lock_irqsave+0xaf/0x100 [ 485.879985][T15704] send_sigio+0x38/0x370 [ 485.884391][T15704] kill_fasync+0x24d/0x4d0 [ 485.889057][T15704] sock_wake_async+0x137/0x160 [ 485.893993][T15704] sock_def_readable+0x3bb/0x550 [ 485.899099][T15704] queue_oob+0x4c1/0x5a0 [ 485.903524][T15704] unix_stream_sendmsg+0xaf9/0xc90 [ 485.908803][T15704] __sock_sendmsg+0x21c/0x270 [ 485.913640][T15704] ____sys_sendmsg+0x52d/0x830 [ 485.918567][T15704] ___sys_sendmsg+0x21f/0x2a0 [ 485.923491][T15704] __sys_sendmmsg+0x28e/0x430 [ 485.928327][T15704] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 485.934122][T15704] __do_fast_syscall_32+0xb6/0x2b0 [ 485.939401][T15704] do_fast_syscall_32+0x34/0x80 [ 485.944433][T15704] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 485.950929][T15704] [ 485.953330][T15704] -> (&new->fa_lock){....}-{3:3} { [ 485.958459][T15704] INITIAL USE at: [ 485.962336][T15704] lock_acquire+0x120/0x360 [ 485.968398][T15704] _raw_write_lock_irq+0xa2/0xf0 [ 485.974895][T15704] fasync_remove_entry+0xf1/0x1c0 [ 485.981478][T15704] __fput+0x8a2/0xa70 [ 485.987020][T15704] task_work_run+0x1d1/0x260 [ 485.993165][T15704] exit_to_user_mode_loop+0xec/0x110 [ 486.000004][T15704] __do_fast_syscall_32+0x1f4/0x2b0 [ 486.006762][T15704] do_fast_syscall_32+0x34/0x80 [ 486.013191][T15704] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 486.021105][T15704] INITIAL READ USE at: [ 486.025443][T15704] lock_acquire+0x120/0x360 [ 486.031943][T15704] _raw_read_lock_irqsave+0xaf/0x100 [ 486.039217][T15704] kill_fasync+0x199/0x4d0 [ 486.045625][T15704] snd_fasync_work_fn+0x162/0x210 [ 486.052648][T15704] process_scheduled_works+0xade/0x17b0 [ 486.060536][T15704] worker_thread+0x8a0/0xda0 [ 486.067122][T15704] kthread+0x70e/0x8a0 [ 486.073186][T15704] ret_from_fork+0x3fc/0x770 [ 486.080025][T15704] ret_from_fork_asm+0x1a/0x30 [ 486.086791][T15704] } [ 486.089278][T15704] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 486.097945][T15704] ... acquired at: [ 486.101735][T15704] lock_acquire+0x120/0x360 [ 486.106402][T15704] _raw_read_lock_irqsave+0xaf/0x100 [ 486.111865][T15704] kill_fasync+0x199/0x4d0 [ 486.116445][T15704] evdev_pass_values+0x627/0xbd0 [ 486.121578][T15704] evdev_events+0x1e6/0x340 [ 486.126241][T15704] input_pass_values+0x285/0x890 [ 486.131339][T15704] input_event_dispose+0x330/0x6b0 [ 486.136613][T15704] input_inject_event+0x1fe/0x320 [ 486.141800][T15704] evdev_write+0x2fc/0x480 [ 486.146390][T15704] vfs_write+0x27e/0xa90 [ 486.150888][T15704] ksys_write+0x145/0x250 [ 486.155383][T15704] __do_fast_syscall_32+0xb6/0x2b0 [ 486.160762][T15704] do_fast_syscall_32+0x34/0x80 [ 486.165786][T15704] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 486.172276][T15704] [ 486.174685][T15704] [ 486.174685][T15704] stack backtrace: [ 486.180575][T15704] CPU: 1 UID: 0 PID: 15704 Comm: syz.5.3398 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 486.180592][T15704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 486.180606][T15704] Call Trace: [ 486.180614][T15704] [ 486.180621][T15704] dump_stack_lvl+0x189/0x250 [ 486.180647][T15704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.180665][T15704] ? __pfx__printk+0x10/0x10 [ 486.180681][T15704] validate_chain+0x1f05/0x2140 [ 486.180700][T15704] __lock_acquire+0xab9/0xd20 [ 486.180719][T15704] ? kill_fasync+0x199/0x4d0 [ 486.180735][T15704] lock_acquire+0x120/0x360 [ 486.180750][T15704] ? kill_fasync+0x199/0x4d0 [ 486.180769][T15704] _raw_read_lock_irqsave+0xaf/0x100 [ 486.180790][T15704] ? kill_fasync+0x199/0x4d0 [ 486.180804][T15704] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 486.180820][T15704] ? do_raw_spin_lock+0x121/0x290 [ 486.180836][T15704] kill_fasync+0x199/0x4d0 [ 486.180850][T15704] ? kill_fasync+0x53/0x4d0 [ 486.180866][T15704] evdev_pass_values+0x627/0xbd0 [ 486.180883][T15704] ? evdev_pass_values+0x5f1/0xbd0 [ 486.180900][T15704] evdev_events+0x1e6/0x340 [ 486.180913][T15704] ? evdev_events+0x79/0x340 [ 486.180927][T15704] ? input_pass_values+0x8d/0x890 [ 486.180939][T15704] input_pass_values+0x285/0x890 [ 486.180953][T15704] ? input_handle_event+0x70c/0xf30 [ 486.180970][T15704] input_event_dispose+0x330/0x6b0 [ 486.180988][T15704] input_inject_event+0x1fe/0x320 [ 486.181003][T15704] ? input_inject_event+0xbc/0x320 [ 486.181026][T15704] evdev_write+0x2fc/0x480 [ 486.181041][T15704] ? __pfx_evdev_write+0x10/0x10 [ 486.181057][T15704] ? bpf_lsm_file_permission+0x9/0x20 [ 486.181074][T15704] ? security_file_permission+0x75/0x290 [ 486.181088][T15704] ? rw_verify_area+0x258/0x650 [ 486.181105][T15704] ? __pfx_evdev_write+0x10/0x10 [ 486.181117][T15704] vfs_write+0x27e/0xa90 [ 486.181137][T15704] ? __pfx_vfs_write+0x10/0x10 [ 486.181154][T15704] ? __fget_files+0x2a/0x420 [ 486.181168][T15704] ? __fget_files+0x2a/0x420 [ 486.181181][T15704] ? __fget_files+0x3a0/0x420 [ 486.181196][T15704] ? __fget_files+0x2a/0x420 [ 486.181210][T15704] ksys_write+0x145/0x250 [ 486.181222][T15704] ? __pfx_ksys_write+0x10/0x10 [ 486.181233][T15704] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 486.181252][T15704] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.181268][T15704] __do_fast_syscall_32+0xb6/0x2b0 [ 486.181286][T15704] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.181302][T15704] do_fast_syscall_32+0x34/0x80 [ 486.181322][T15704] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 486.181341][T15704] RIP: 0023:0xf709e539 [ 486.181357][T15704] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 486.181369][T15704] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 486.181383][T15704] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 486.181392][T15704] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 486.181400][T15704] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 486.181408][T15704] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 486.181415][T15704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 486.181427][T15704] [ 486.508444][ T5843] Bluetooth: hci0: command tx timeout [ 486.524219][T15708] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3400'. [ 486.524758][T15708] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3400'. [ 486.580667][ T5906] keytouch 0003:0926:3333.004F: fixing up Keytouch IEC report descriptor [ 486.585815][ T5906] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.004F/input/input75 [ 486.776559][ T5906] keytouch 0003:0926:3333.004F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 486.840523][ T5906] usb 9-1: USB disconnect, device number 27