last executing test programs: 4m9.726633599s ago: executing program 4 (id=7921): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 4m9.470257866s ago: executing program 4 (id=7922): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 4m9.132187143s ago: executing program 4 (id=7926): r0 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000240)={0x7, 0x6}, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002400)=""/4098, 0xd5e}], 0x3a}, 0x0) 4m8.984508968s ago: executing program 4 (id=7927): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m7.949544045s ago: executing program 4 (id=7938): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r0 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r0, 0x16) 4m7.107009044s ago: executing program 4 (id=7942): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x5) read$char_usb(r1, &(0x7f0000000300)=""/74, 0x4a) 4m6.476601049s ago: executing program 32 (id=7942): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x5) read$char_usb(r1, &(0x7f0000000300)=""/74, 0x4a) 42.532594475s ago: executing program 3 (id=9785): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r0}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) 42.05483071s ago: executing program 3 (id=9788): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) sendmmsg$inet6(r1, &(0x7f00000061c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)="73eb3c68d55a847f79742ab7bf1e5ea9c4c057272ee99ef16f87e17d03ae9ceb31aa8a61e1043b426b3b319bfbb82bc24ddf1576d2502bd582ec39ee7eacd0d2d6cad76bbd0d1c11b71e7b95775029998e826c8f680ee5636136d6ea9263aaa9a3b141ba0638df9cbc1b0720da170ee067941485ff3a4434840b8efa4dfc33f39194ea3ecf580549f339f065a089e79ea81857f22e500ecac0aeaeb4a8474438b385744f36239f32f610dbc0040fde83ddeea0eae63bbeae33b2075d001fc555c307a1fe5b2917cd25cb3838a6be3683d39afa17d9c151082184a8796888c1540b0d8525aa1d1f1a7c", 0xe9}, {&(0x7f0000000280)="f08235ef90ce13d30864b5c0e52c78a6832ff55bab777cdd27dc08f6b1ccd9e8221883162efbc030b05d43f77480bcb5f6443f178331bbaf028a3c51e1eba89c6b21c7d733a4300c579f8376fa85d97c3768d837d30b72edb53b24b4a3d265856d464840129d3df6d1b07b61677b9b57081f482018f26e1db191f87df2cb903a09", 0x81}, {&(0x7f0000000340)="8762ca6d74d59a8346ffd1a295d3d26c3371dde84f9e5c96f883baf9b9f455c7d76590982dcfee4db7a7e68886f5d9666d2d6fbb3e585181aa5ee2f4c9ca5ba339f09c93567d51242908fbfafd43c15106a527ffb0316dbc3e6a11f191bef3dd0eb3be92b376101aa8f509c990e28ab50643d22e05a2d680f41cbdadfb315e8eb2fb025ed83664f9f76bf806c27eef3bb24d766b1da6", 0x96}], 0x3}}], 0x1, 0x80) 41.117884178s ago: executing program 3 (id=9799): socket$packet(0x11, 0x3, 0x300) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000200), 0xc00) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 39.40734598s ago: executing program 3 (id=9808): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 38.393437917s ago: executing program 3 (id=9824): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080)=0x5, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/18, 0x12}, 0x104aa) sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) 37.822871514s ago: executing program 3 (id=9833): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 37.384692052s ago: executing program 33 (id=9833): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 37.066815352s ago: executing program 2 (id=9838): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000380)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x80000000, 0x100001, 0x0, 0x0, 0x0, 0x6}) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa0}}) io_uring_enter(r1, 0x2def, 0x0, 0xe, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 36.815055305s ago: executing program 2 (id=9841): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000080)) 36.49626689s ago: executing program 2 (id=9843): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000200)="24fc911e918c74ad7a0e599e17a90ecabe833ca12054887f4142a64471dbe048", 0x20) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000080)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f00000002c0)='./file0\x00'}, 0x18) 36.142679904s ago: executing program 2 (id=9844): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 35.81408871s ago: executing program 2 (id=9845): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 33.262318681s ago: executing program 2 (id=9853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001e00)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf, 0x9}, {}, {0xb, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x20, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x14}, @TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x47}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) 32.412632636s ago: executing program 34 (id=9853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001e00)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf, 0x9}, {}, {0xb, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x20, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x14}, @TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x47}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) 8.770683658s ago: executing program 6 (id=9834): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r0 = io_uring_setup(0x4ba, &(0x7f00000001c0)={0x0, 0xc988, 0x2, 0x3, 0x315}) openat$mice(0xffffffffffffff9c, &(0x7f0000000dc0), 0x103041) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) dup3(r1, r0, 0x80000) 5.502754696s ago: executing program 6 (id=10020): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[], 0x1000f) 5.031671741s ago: executing program 6 (id=10024): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x1947, 0xf}) 4.708539449s ago: executing program 5 (id=10028): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) pipe2$9p(&(0x7f0000000040), 0x4880) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, 0x0}}], 0x1, 0x2000c000) 3.755647188s ago: executing program 5 (id=10035): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) 2.798953807s ago: executing program 5 (id=10044): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 2.482294057s ago: executing program 5 (id=10049): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 2.378399868s ago: executing program 0 (id=10051): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) 2.343131127s ago: executing program 7 (id=10052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x2, 0x2, 0x800, 0x7, 0x8, 0xd2}, [@TCA_NETEM_CORR={0x10, 0x1, {0x5, 0x2, 0xff}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x6, 0x8}}]}}}]}, 0x68}}, 0x0) 2.104585221s ago: executing program 7 (id=10053): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000100)={0xffffffff, 0x7, 0xc, 0x1, 0x4, "e202bac12e1f1774a88ffd6a533c2f84ba78cd"}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB="0a00060008"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x33a, @time={0x8}}) 1.943331314s ago: executing program 1 (id=10054): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 1.917407144s ago: executing program 7 (id=10055): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) 1.784239577s ago: executing program 1 (id=10056): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = fanotify_init(0x200, 0x0) r2 = dup(r0) fanotify_mark(r1, 0x1, 0x48001059, r2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.719656044s ago: executing program 6 (id=10057): r0 = io_uring_setup(0x23ea, &(0x7f00000001c0)={0x0, 0x1292, 0x400, 0x2, 0x313}) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000080)={0x2a, 0x0, 0x1}, 0xc) read(r1, &(0x7f0000000180)=""/52, 0xfffffdef) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f00000000c0)={'veth0_to_hsr\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 1.635269085s ago: executing program 5 (id=10058): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 1.52285509s ago: executing program 7 (id=10059): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 1.431383678s ago: executing program 1 (id=10060): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="842b6d41", 0x4}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0xa6, 0x3b00, 0x0, 0xfffffffffffffdfd) 1.430590747s ago: executing program 0 (id=10061): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x24008844, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 1.193872369s ago: executing program 0 (id=10062): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) r2 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setregid(r1, r3) 1.167052294s ago: executing program 6 (id=10063): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x1, 'EP1!'}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, 'b'}, @global=@item_4={0x3, 0x1, 0x5, "7c97dbe2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x3, 0x200, 0xd21d, 0x263b, 0x5, 0x10001, 0xfffffffd, 0xffffffff, 0x83bc, 0x6, 0x200, 0x5, 0x3, 0xe}) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 1.126152578s ago: executing program 1 (id=10064): openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x631083, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x800, 0x0, 0x103, 0x1}, 0x20) 1.046599171s ago: executing program 0 (id=10065): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x52000775) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20000, 0x104) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = dup(r0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) 1.008782668s ago: executing program 7 (id=10066): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 923.729227ms ago: executing program 0 (id=10067): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "020037e0"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0xfe, 0x2, "37bb54f0"}}) ppoll(&(0x7f0000000340)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) 766.027262ms ago: executing program 1 (id=10068): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 494.651092ms ago: executing program 1 (id=10069): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) 444.21923ms ago: executing program 5 (id=10070): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x20000) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000000)={0x1, 0xffffffff, 0x2d9, 0x0, 0x4fd, 0x5}) 386.412942ms ago: executing program 7 (id=10071): socket$kcm(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) close(0x3) 0s ago: executing program 0 (id=10072): syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f0000000240)="b9") r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): 813.587790][ T5904] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 813.613396][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.628121][ T5911] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 813.650297][ T5904] usb 3-1: config 0 descriptor?? [ 813.657388][T28748] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 813.668382][ T5841] usb 2-1: USB disconnect, device number 113 [ 813.693241][ T5841] appletouch 2-1:0.85: input: appletouch disconnected [ 813.778070][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 813.846439][ T5911] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 813.858478][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 813.873582][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 813.892329][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 813.905287][ T5911] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 813.919033][ T5911] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 813.928620][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.961187][ T5911] usb 1-1: config 0 descriptor?? [ 813.968154][T28758] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 814.110914][ T5904] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 814.122441][ T5904] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 814.130626][ T5904] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 814.143397][ T5904] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 814.151079][ T5904] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 814.158830][ T5904] plantronics 0003:047F:FFFF.00CB: unknown main item tag 0x0 [ 814.197905][ T5904] plantronics 0003:047F:FFFF.00CB: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 814.416243][ T5911] plantronics 0003:047F:FFFF.00CC: reserved main item tag 0xd [ 814.425130][ T5904] usb 3-1: USB disconnect, device number 103 [ 814.444446][ T5911] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 814.452449][ T5911] plantronics 0003:047F:FFFF.00CC: unknown main item tag 0x0 [ 814.475338][ T5911] plantronics 0003:047F:FFFF.00CC: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 814.635694][ T5829] usb 1-1: USB disconnect, device number 9 [ 814.821858][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 814.893192][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 815.853754][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 815.933427][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 816.695020][T28771] macvlan1: entered promiscuous mode [ 816.753629][T28771] bond0: entered promiscuous mode [ 816.759939][T28771] bond_slave_0: entered promiscuous mode [ 816.765893][T28771] bond_slave_1: entered promiscuous mode [ 816.773862][T28771] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 816.782914][T28771] bond0: left promiscuous mode [ 816.787743][T28771] bond_slave_0: left promiscuous mode [ 816.794005][T28771] bond_slave_1: left promiscuous mode [ 816.823920][T28771] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 816.850913][T28771] macvlan1: left promiscuous mode [ 816.888170][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 816.978203][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 817.039030][T28242] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 817.089536][ T44] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 817.212834][T28242] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 817.222791][T28242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.239685][T28242] usb 1-1: config 0 descriptor?? [ 817.248870][T28242] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 817.255077][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 817.266307][ T44] usb 4-1: config 8 has an invalid interface number: 75 but max is 0 [ 817.279002][ T44] usb 4-1: config 8 has no interface number 0 [ 817.320278][ T44] usb 4-1: config 8 interface 75 altsetting 1 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 817.338421][ T44] usb 4-1: config 8 interface 75 altsetting 1 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 817.361403][ T44] usb 4-1: config 8 interface 75 altsetting 1 endpoint 0xC has invalid maxpacket 2046, setting to 64 [ 817.403442][ T44] usb 4-1: config 8 interface 75 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 817.438780][ T44] usb 4-1: config 8 interface 75 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 817.485370][ T44] usb 4-1: config 8 interface 75 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 817.507131][ T44] usb 4-1: config 8 interface 75 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 817.529387][ T44] usb 4-1: config 8 interface 75 has no altsetting 0 [ 817.554767][ T44] usb 4-1: New USB device found, idVendor=045e, idProduct=07c6, bcdDevice=64.2b [ 817.588357][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.597000][ T44] usb 4-1: Product: syz [ 817.629909][ T44] usb 4-1: Manufacturer: syz [ 817.634737][ T44] usb 4-1: SerialNumber: syz [ 817.668120][ T5904] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 817.679307][ T44] r8152-cfgselector 4-1: Unknown version 0x0000 [ 817.840942][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 817.849944][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 817.872693][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 817.906524][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 817.928183][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 817.935968][ T44] r8152-cfgselector 4-1: USB disconnect, device number 117 [ 817.947961][ T5904] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 817.963151][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.009754][ T5904] usb 3-1: config 0 descriptor?? [ 818.018154][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 818.042125][T28802] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 818.064188][T28242] gspca_cpia1: usb_control_msg 02, error -71 [ 818.081856][T28242] gspca_cpia1: usb_control_msg 05, error -71 [ 818.085853][ T5904] hub 3-1:0.0: USB hub found [ 818.090379][T28242] gspca_cpia1: usb_control_msg 04, error -71 [ 818.099373][T28242] cpia1 1-1:0.0: probe with driver cpia1 failed with error -71 [ 818.141692][T28242] usb 1-1: USB disconnect, device number 10 [ 818.265808][ T5904] hub 3-1:0.0: 2 ports detected [ 818.479542][ T5904] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 818.498331][ T5904] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 818.516522][ T5904] usbhid 3-1:0.0: can't add hid device: -71 [ 818.543193][ T5904] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 818.599094][ T5904] usb 3-1: USB disconnect, device number 104 [ 818.699582][T28817] syzkaller1: entered promiscuous mode [ 818.715644][T28817] syzkaller1: entered allmulticast mode [ 818.938096][ T5841] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 818.968074][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 819.050468][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 819.098929][ T5841] usb 1-1: Using ep0 maxpacket: 8 [ 819.107789][ T5841] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 819.138443][ T5841] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 819.165891][ T5841] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 819.189465][ T5841] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 819.228523][ T5841] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 819.249942][ T5841] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 819.277731][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.503370][ T5841] usb 1-1: usb_control_msg returned -32 [ 819.522935][ T5841] usbtmc 1-1:16.0: can't read capabilities [ 819.865749][T28846] usbtmc 1-1:16.0: usb_bulk_msg returned -71 [ 820.008080][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 820.068419][ T44] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 820.069910][ T5841] usb 1-1: USB disconnect, device number 11 [ 820.088114][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 820.221216][ T44] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 820.244201][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 820.255967][T28242] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 820.284399][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 820.307132][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 820.342741][ T44] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 820.366245][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.382705][ T44] usb 4-1: config 0 descriptor?? [ 820.434609][T28242] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 820.448304][T28242] usb 6-1: config 1 has no interface number 0 [ 820.455482][T28242] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.477507][T28242] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 820.498927][T28242] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 123 [ 820.549715][T28242] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 820.578975][T28242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.607634][T28242] usb 6-1: Product: syz [ 820.652653][T28242] usb 6-1: Manufacturer: syz [ 820.657375][T28242] usb 6-1: SerialNumber: syz [ 820.835727][ T44] plantronics 0003:047F:FFFF.00CD: ignoring exceeding usage max [ 820.885712][ T44] plantronics 0003:047F:FFFF.00CD: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 820.929567][T28848] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 821.048066][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 821.128107][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 821.632492][T28848] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 821.652343][T28242] cdc_ncm 6-1:1.1: bind() failure [ 821.883830][ T5841] usb 6-1: USB disconnect, device number 14 [ 822.088071][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 822.168118][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 822.178346][T28242] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 822.350313][T28242] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.366045][T28242] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 822.386126][T28242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 822.408764][T28242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 822.429915][T28242] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 822.460840][T28878] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9263'. [ 822.476370][T28878] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9263'. [ 822.494064][T28242] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 822.504576][T28242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 822.533258][T28242] usb 2-1: Product: syz [ 822.537535][T28242] usb 2-1: Manufacturer: syz [ 822.543340][T28242] usb 2-1: SerialNumber: syz [ 822.551594][T28242] usb 2-1: config 0 descriptor?? [ 822.785750][T28242] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 822.823647][T28242] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 822.973099][T28246] usb 4-1: USB disconnect, device number 118 [ 822.990584][T28242] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 823.043466][T28242] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 823.121621][T28242] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 823.138073][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 823.207679][T28242] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 823.218068][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 823.610909][T28242] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 823.633423][T28242] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 823.678184][T28242] usb 2-1: USB disconnect, device number 114 [ 823.798448][T28246] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 823.968698][T28246] usb 1-1: Using ep0 maxpacket: 8 [ 824.006828][T28246] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 824.019432][T28246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.051707][T28246] usb 1-1: config 0 descriptor?? [ 824.169835][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 824.248200][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 824.278195][T28246] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 825.076758][T28246] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 825.088679][T28246] asix 1-1:0.0: probe with driver asix failed with error -71 [ 825.103674][T28246] usb 1-1: USB disconnect, device number 12 [ 825.119627][ T5911] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 825.205662][T28950] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.9294'. [ 825.215129][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 825.288189][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 825.318320][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 825.320294][T28954] Dead loop on virtual device ip6_vti0, fix it urgently! [ 825.330023][ T5911] usb 4-1: config 0 interface 0 has no altsetting 0 [ 825.352155][ T5911] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 825.361679][ T5841] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 825.383068][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.413535][ T5911] usb 4-1: config 0 descriptor?? [ 825.530869][ T5841] usb 3-1: config 0 has an invalid interface number: 30 but max is 0 [ 825.544740][ T5841] usb 3-1: config 0 has no interface number 0 [ 825.561317][ T5841] usb 3-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 825.572402][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.592404][ T5841] usb 3-1: config 0 descriptor?? [ 825.611264][ T5841] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 825.622259][ T5841] usb 3-1: setting power ON [ 825.626916][ T5841] dvb-usb: bulk message failed: -22 (2/0) [ 825.768500][ T5841] dvb-usb: bulk message failed: -22 (1/0) [ 825.788313][T28246] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 825.789027][T27026] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 825.864324][ T5911] hid (null): bogus close delimiter [ 825.897364][ T5841] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 825.953744][ T5841] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 825.960348][T28246] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 825.964434][ T5841] dvb_usb_cxusb 3-1:0.30: probe with driver dvb_usb_cxusb failed with error -22 [ 825.993058][ T5841] usb 3-1: USB disconnect, device number 105 [ 826.000031][T27026] usb 6-1: Using ep0 maxpacket: 16 [ 826.017519][T28246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.035594][T27026] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 826.057613][T28242] usb 4-1: USB disconnect, device number 119 [ 826.087259][T27026] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.089792][T28246] usb 2-1: Product: syz [ 826.106878][T27026] usb 6-1: config 0 has no interface number 0 [ 826.119238][T28246] usb 2-1: Manufacturer: syz [ 826.153920][T27026] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 826.172210][T27026] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.182691][T27026] usb 6-1: Product: syz [ 826.187114][T27026] usb 6-1: Manufacturer: syz [ 826.195781][T27026] usb 6-1: SerialNumber: syz [ 826.205931][T27026] usb 6-1: config 0 descriptor?? [ 826.213511][T28246] usb 2-1: SerialNumber: syz [ 826.227283][T28246] usb 2-1: config 0 descriptor?? [ 826.244073][T27026] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 826.250586][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 826.266989][T27026] usb 6-1: No valid video chain found. [ 826.328125][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 826.470515][T28242] usb 6-1: USB disconnect, device number 15 [ 826.643758][T28246] airspy 2-1:0.0: Board ID: 00 [ 826.648884][T28246] airspy 2-1:0.0: Firmware version: [ 827.096782][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 827.096908][ T30] audit: type=1326 audit(1751460895.232:9692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28991 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ab592ab19 code=0x7ffc0000 [ 827.137457][ T30] audit: type=1326 audit(1751460895.232:9693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28991 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab598e929 code=0x7ffc0000 [ 827.167716][ T30] audit: type=1326 audit(1751460895.232:9694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28991 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab598e929 code=0x7ffc0000 [ 827.259063][T28246] airspy 2-1:0.0: usb_control_msg() failed -71 request 12 [ 827.283943][T28246] airspy 2-1:0.0: Registered as swradio24 [ 827.287749][ T30] audit: type=1326 audit(1751460895.232:9695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28991 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ab592ab19 code=0x7ffc0000 [ 827.308139][T28246] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 827.312154][ C0] vkms_vblank_simulate: vblank timer overrun [ 827.312313][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 827.368319][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 827.423814][T28246] usb 2-1: USB disconnect, device number 115 [ 827.525896][ T30] audit: type=1326 audit(1751460895.232:9696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28991 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab598e929 code=0x7ffc0000 [ 827.548385][ C0] vkms_vblank_simulate: vblank timer overrun [ 827.632547][ T30] audit: type=1326 audit(1751460895.232:9697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28991 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab598e929 code=0x7ffc0000 [ 827.715183][T29006] loop8: detected capacity change from 0 to 8 [ 827.723960][T29006] Dev loop8: unable to read RDB block 8 [ 827.729802][T29006] loop8: unable to read partition table [ 827.740522][T29006] loop8: partition table beyond EOD, truncated [ 827.758139][ T30] audit: type=1326 audit(1751460895.232:9698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28991 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ab592ab19 code=0x7ffc0000 [ 827.758183][T29006] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 827.780514][ C0] vkms_vblank_simulate: vblank timer overrun [ 827.904886][ T30] audit: type=1326 audit(1751460895.232:9699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28991 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab598e929 code=0x7ffc0000 [ 827.948284][T29009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9320'. [ 827.957344][T29009] openvswitch: netlink: nsh attr 8224 is out of range max 3 [ 828.048502][T29009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 828.077884][ T30] audit: type=1326 audit(1751460895.232:9700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28991 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ab592ab19 code=0x7ffc0000 [ 828.174577][ T30] audit: type=1326 audit(1751460895.232:9701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28991 comm="syz.5.9313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab598e929 code=0x7ffc0000 [ 828.208300][T28246] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 828.328069][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 828.420856][T28246] usb 1-1: Using ep0 maxpacket: 8 [ 828.449082][T28246] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 828.460283][T28246] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 828.488333][T28246] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 828.521166][T28246] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 828.558442][T28246] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 828.581095][T28246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.591662][T29027] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9326'. [ 828.609503][T28246] hub 1-1:1.0: bad descriptor, ignoring hub [ 828.628319][T28246] hub 1-1:1.0: probe with driver hub failed with error -5 [ 828.645708][T28246] cdc_wdm 1-1:1.0: skipping garbage [ 828.673787][T28246] cdc_wdm 1-1:1.0: skipping garbage [ 828.696493][T28246] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 828.704566][T28246] cdc_wdm 1-1:1.0: Unknown control protocol [ 829.185016][T29041] pim6reg1: entered promiscuous mode [ 829.197776][T29041] pim6reg1: entered allmulticast mode [ 829.219798][T29011] usb 1-1: reset high-speed USB device number 13 using dummy_hcd [ 829.448271][T27026] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 829.635960][T27026] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 829.667893][ T24] usb 1-1: USB disconnect, device number 13 [ 829.708244][T27026] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 829.743353][T27026] usb 4-1: config 1 has no interface number 0 [ 829.755002][T27026] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.780519][T27026] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 829.809761][T27026] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 829.840339][T27026] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.859420][T27026] usb 4-1: Product: syz [ 829.863828][T27026] usb 4-1: Manufacturer: syz [ 829.880625][T27026] usb 4-1: SerialNumber: syz [ 830.228168][ T5841] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 830.353762][T29071] usb usb8: usbfs: process 29071 (syz.1.9344) did not claim interface 0 before use [ 830.393727][ T5841] usb 3-1: Using ep0 maxpacket: 32 [ 830.418202][ C0] net_ratelimit: 3 callbacks suppressed [ 830.418235][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 830.431565][ T5911] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 830.441611][ T5841] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 830.458836][T28246] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 830.464455][ T5841] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 830.480721][ T5841] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 830.489952][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 830.497710][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 830.508290][ T5841] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 830.519589][ T5841] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 830.534348][ T5841] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 830.544023][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.559560][ T5841] usb 3-1: config 0 descriptor?? [ 830.598554][ T5911] usb 6-1: Using ep0 maxpacket: 16 [ 830.618627][ T5911] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.638099][ T5911] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.640500][T28246] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 830.659678][ T5911] usb 6-1: config 0 interface 0 has no altsetting 0 [ 830.659726][ T5911] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 830.659751][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.707416][T28246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 830.717867][ T5911] usb 6-1: config 0 descriptor?? [ 830.726933][T28246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 830.737165][T28246] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 830.748414][T27026] cdc_ncm 4-1:1.1: bind() failure [ 830.756796][T28246] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 830.776457][T28246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.819245][T28246] usb 1-1: config 0 descriptor?? [ 830.821947][ T5841] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 106 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 830.830034][ T24] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 830.950804][ T5841] usb 4-1: USB disconnect, device number 120 [ 831.002496][ T24] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 831.018497][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.033296][ T24] usb 2-1: config 0 descriptor?? [ 831.046593][ C0] usblp0: nonzero read bulk status received: -71 [ 831.047074][ T44] usb 3-1: USB disconnect, device number 106 [ 831.138118][ T5911] apple 0003:05AC:0247.00CF: fixing up Magic Keyboard JIS report descriptor [ 831.148338][ T5911] apple 0003:05AC:0247.00CF: unexpected long global item [ 831.156209][ T5911] apple 0003:05AC:0247.00CF: parse failed [ 831.164276][ T5911] apple 0003:05AC:0247.00CF: probe with driver apple failed with error -22 [ 831.264515][T28246] plantronics 0003:047F:FFFF.00D0: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 831.292230][T29063] usblp0: removed [ 831.361895][T28246] usb 6-1: USB disconnect, device number 16 [ 831.448098][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 831.523926][T28242] usb 1-1: USB disconnect, device number 14 [ 831.538060][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 832.066053][ T24] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 832.131740][ T24] usb 2-1: USB disconnect, device number 116 [ 832.491987][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 832.535405][T29104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9360'. [ 832.568226][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 832.723951][T29114] vivid-000: disconnect [ 832.736059][T29109] vivid-000: reconnect [ 833.528058][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 833.595530][T29144] syzkaller1: entered promiscuous mode [ 833.608159][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 833.618998][T29144] syzkaller1: entered allmulticast mode [ 834.137831][T29154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9382'. [ 834.489267][T29164] input: syz1 as /devices/virtual/input/input121 [ 834.568054][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 834.578161][T27026] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 834.658109][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 834.759735][T27026] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 834.772064][T27026] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.796967][T27026] usb 1-1: config 0 descriptor?? [ 834.819673][T27026] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 834.980616][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 834.980660][ T30] audit: type=1326 audit(1751460903.132:9763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29146 comm="syz.5.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ab592ab19 code=0x7ffc0000 [ 835.064970][ T30] audit: type=1326 audit(1751460903.132:9764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29146 comm="syz.5.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab598e929 code=0x7ffc0000 [ 835.112529][ T30] audit: type=1326 audit(1751460903.132:9765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29146 comm="syz.5.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ab592ab19 code=0x7ffc0000 [ 835.169161][ T30] audit: type=1326 audit(1751460903.132:9766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29146 comm="syz.5.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab598e929 code=0x7ffc0000 [ 835.243471][T27026] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 835.262935][ T30] audit: type=1326 audit(1751460903.182:9767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29146 comm="syz.5.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ab592ab19 code=0x7ffc0000 [ 835.377400][ T30] audit: type=1326 audit(1751460903.182:9768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29146 comm="syz.5.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ab592ab19 code=0x7ffc0000 [ 835.444651][ T30] audit: type=1326 audit(1751460903.182:9769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29146 comm="syz.5.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ab592ab19 code=0x7ffc0000 [ 835.469732][ T30] audit: type=1326 audit(1751460903.182:9770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29146 comm="syz.5.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ab592ab19 code=0x7ffc0000 [ 835.509978][T29181] loop2: detected capacity change from 0 to 7 [ 835.537756][ T30] audit: type=1326 audit(1751460903.182:9771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29146 comm="syz.5.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab598e929 code=0x7ffc0000 [ 835.560768][T29181] Dev loop2: unable to read RDB block 7 [ 835.571993][T29181] loop2: AHDI p2 p3 [ 835.582737][T29181] loop2: partition table partially beyond EOD, truncated [ 835.618230][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 835.619788][T29181] loop2: p2 size 150995456 extends beyond EOD, [ 835.625685][ T30] audit: type=1326 audit(1751460903.182:9772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29146 comm="syz.5.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab598e929 code=0x7ffc0000 [ 835.645785][T29181] truncated [ 835.671367][T27026] gspca_cpia1: usb_control_msg 02, error -32 [ 835.688435][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 835.697847][T27026] gspca_cpia1: usb_control_msg 02, error -71 [ 835.714158][T27026] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 835.743578][T27026] usb 1-1: USB disconnect, device number 15 [ 835.881095][T18684] udevd[18684]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 835.944055][T29189] loop6: detected capacity change from 0 to 1 [ 835.986718][T29189] Dev loop6: unable to read RDB block 1 [ 836.011882][T29189] loop6: unable to read partition table [ 836.017908][T29189] loop6: partition table beyond EOD, truncated [ 836.052268][T29189] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 836.478535][ T24] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 836.633489][ T24] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 836.648232][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.648270][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 836.656270][ T24] usb 1-1: Product: syz [ 836.656292][ T24] usb 1-1: Manufacturer: syz [ 836.656307][ T24] usb 1-1: SerialNumber: syz [ 836.728110][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 836.739118][ T24] usb 1-1: config 0 descriptor?? [ 836.770675][ T24] gspca_main: sq930x-2.14.0 probing 2770:930c [ 837.688083][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 837.768061][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 837.788771][ T24] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 837.795488][ T24] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 837.856296][ T24] usb 1-1: USB disconnect, device number 16 [ 838.457375][T29264] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9429'. [ 838.728070][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 838.808314][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 839.307471][T29284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9436'. [ 839.761461][T29303] input: syz1 as /devices/virtual/input/input122 [ 839.768061][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 839.848086][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 840.808157][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 840.888106][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 841.268207][T27026] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 841.438554][T27026] usb 6-1: Using ep0 maxpacket: 8 [ 841.484741][T27026] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 841.508155][T27026] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 841.562493][T27026] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 841.632534][T27026] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 841.670800][T27026] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 841.708926][T27026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.848076][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 841.928065][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 842.098228][T27026] usb 6-1: GET_CAPABILITIES returned 0 [ 842.145715][T27026] usbtmc 6-1:16.0: can't read capabilities [ 842.357236][T29361] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 842.430431][T27026] usb 6-1: USB disconnect, device number 17 [ 842.888208][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 842.968132][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 843.328174][ T5829] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 843.498535][ T5829] usb 1-1: Using ep0 maxpacket: 32 [ 843.514306][ T5829] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 843.527847][ T5829] usb 1-1: config 0 has no interface number 0 [ 843.557560][ T5829] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 843.577536][ T5829] usb 1-1: config 0 interface 85 has no altsetting 0 [ 843.598125][T27026] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 843.599175][ T5829] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 843.630717][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.644794][ T5829] usb 1-1: Product: syz [ 843.655514][ T5829] usb 1-1: Manufacturer: syz [ 843.673457][ T5829] usb 1-1: SerialNumber: syz [ 843.704580][ T5829] usb 1-1: config 0 descriptor?? [ 843.748201][T27026] usb 3-1: Using ep0 maxpacket: 16 [ 843.809162][T27026] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.838094][T27026] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.868141][T27026] usb 3-1: config 0 interface 0 has no altsetting 0 [ 843.875583][T27026] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 843.925491][T27026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.933649][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 843.989303][T27026] usb 3-1: config 0 descriptor?? [ 844.008078][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 844.337819][ T5829] appletouch 1-1:0.85: Geyser mode initialized. [ 844.378623][ T5829] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input123 [ 844.436507][T27026] apple 0003:05AC:0247.00D1: unexpected long global item [ 844.481007][T27026] apple 0003:05AC:0247.00D1: parse failed [ 844.516010][T27026] apple 0003:05AC:0247.00D1: probe with driver apple failed with error -22 [ 844.571022][ T5829] usb 1-1: USB disconnect, device number 17 [ 844.636453][T27026] usb 3-1: USB disconnect, device number 107 [ 844.760180][ T5829] appletouch 1-1:0.85: input: appletouch disconnected [ 844.786942][T29401] ip6gre1: entered allmulticast mode [ 844.968053][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 845.048121][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 845.163956][T29409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9486'. [ 845.229773][T29409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9486'. [ 845.598721][ T5829] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 845.768589][ T5829] usb 1-1: Using ep0 maxpacket: 16 [ 845.783026][ T5829] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 845.833433][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.842303][ T5829] usb 1-1: Product: syz [ 845.859109][ T5829] usb 1-1: Manufacturer: syz [ 845.863816][ T5829] usb 1-1: SerialNumber: syz [ 845.895095][ T5829] usb 1-1: config 0 descriptor?? [ 845.963734][ T5829] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 846.015104][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 846.088070][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 846.115297][ T5829] gp8psk: usb in 128 operation failed. [ 846.142357][ T5829] gp8psk: usb in 137 operation failed. [ 846.157581][ T5829] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 846.220222][ T5829] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 846.251006][ T5829] usb 1-1: media controller created [ 846.348176][T27026] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 846.392807][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 846.471595][ T5829] gp8psk_fe: Frontend revision 1 attached [ 846.502487][ T5829] usb 1-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 846.528589][ T5829] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 846.537761][T27026] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.556679][T27026] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.596665][T27026] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 846.638121][T27026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.718388][T27026] usb 3-1: config 0 descriptor?? [ 847.002357][ T5829] gp8psk: usb in 137 operation failed. [ 847.018563][ T5829] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 847.048067][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 847.055547][ T5829] gp8psk: found Genpix USB device pID = 201 (hex) [ 847.114088][ T5829] usb 1-1: USB disconnect, device number 18 [ 847.128151][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 847.260967][T27026] aquacomputer_d5next 0003:0C70:F00D.00D2: unknown main item tag 0x0 [ 847.279765][T27026] aquacomputer_d5next 0003:0C70:F00D.00D2: unknown main item tag 0x0 [ 847.325538][T27026] aquacomputer_d5next 0003:0C70:F00D.00D2: unknown main item tag 0x0 [ 847.348124][T27026] aquacomputer_d5next 0003:0C70:F00D.00D2: unknown main item tag 0x0 [ 847.386067][T27026] aquacomputer_d5next 0003:0C70:F00D.00D2: unknown main item tag 0x0 [ 847.410986][ T5829] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 847.426030][T27026] aquacomputer_d5next 0003:0C70:F00D.00D2: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.2-1/input0 [ 847.674423][T29456] loop8: detected capacity change from 0 to 79 [ 847.870547][T29456] loop8: detected capacity change from 79 to 78 [ 848.088068][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 848.168055][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 848.348444][ T24] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 848.500012][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 848.515284][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 848.548188][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 848.567818][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.819168][ T24] usb 1-1: usb_control_msg returned -32 [ 848.824858][ T24] usbtmc 1-1:16.0: can't read capabilities [ 849.128055][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 849.179557][T29482] usb 1-1: usbtmc_ioctl_clear_in_halt returned -32 [ 849.208177][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 849.362645][ T5829] usb 3-1: USB disconnect, device number 108 [ 849.567834][T29496] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9521'. [ 849.761451][T29496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.792502][T29496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.861796][T29496] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 849.895629][T29496] bond0 (unregistering): Released all slaves [ 850.168157][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 850.248204][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 850.289521][T29514] netlink: 548 bytes leftover after parsing attributes in process `syz.5.9526'. [ 850.366222][T29509] netlink: 'syz.5.9526': attribute type 29 has an invalid length. [ 850.395231][T29512] netlink: 'syz.5.9526': attribute type 29 has an invalid length. [ 850.556045][T29519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 850.575585][T29519] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 851.051324][ T5829] usb 1-1: USB disconnect, device number 19 [ 851.118170][T27026] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 851.208046][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 851.287058][T27026] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 851.296346][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 851.381956][T27026] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.419303][T27026] usb 2-1: config 0 descriptor?? [ 851.480979][T27026] gspca_main: spca508-2.14.0 probing 8086:0110 [ 851.715667][T27026] gspca_spca508: reg_read err -32 [ 851.735440][T27026] gspca_spca508: reg_read err -32 [ 851.744261][T27026] gspca_spca508: reg_read err -32 [ 851.758217][ T5911] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 851.766269][T27026] gspca_spca508: reg_read err -32 [ 851.920278][ T5911] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 851.945214][ T5911] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 851.964520][ T5911] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 851.974597][ T5911] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 851.986551][T27026] gspca_spca508: reg write: error -71 [ 851.999508][T27026] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 852.010497][ T5911] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 852.031705][T27026] usb 2-1: USB disconnect, device number 117 [ 852.055838][ T5911] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 852.085736][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 852.097202][ T5911] usb 3-1: Product: syz [ 852.102087][ T5911] usb 3-1: Manufacturer: syz [ 852.123123][ T5911] cdc_wdm 3-1:1.0: skipping garbage [ 852.130294][ T5911] cdc_wdm 3-1:1.0: skipping garbage [ 852.153623][ T5911] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 852.174548][ T5911] cdc_wdm 3-1:1.0: Unknown control protocol [ 852.254304][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 852.328064][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 852.363350][ T24] usb 3-1: USB disconnect, device number 109 [ 852.551485][T29578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9552'. [ 852.604514][T29581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 853.058673][T28246] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 853.139702][T29605] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9561'. [ 853.155285][T29605] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9561'. [ 853.219512][T28246] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 853.240284][T28246] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 853.273260][T28246] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 853.288076][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 853.320117][T28246] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 853.337705][T28246] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 853.353686][T29611] binder: 29609:29611 ioctl c0306201 2000000003c0 returned -14 [ 853.368095][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 853.421371][T28246] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 853.443356][T28246] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 853.463995][T28246] usb 3-1: Product: syz [ 853.468735][T28246] usb 3-1: Manufacturer: syz [ 853.506110][T28246] cdc_wdm 3-1:1.0: skipping garbage [ 853.525133][T28246] cdc_wdm 3-1:1.0: skipping garbage [ 853.547325][T28246] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 853.564057][T28246] cdc_wdm 3-1:1.0: Unknown control protocol [ 853.668255][ T24] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 853.722489][ T5911] usb 3-1: USB disconnect, device number 110 [ 853.825563][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.836282][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 853.854019][T28246] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 853.862488][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 853.877117][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 853.889875][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 853.920779][ T24] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 853.930194][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 853.939405][T28242] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 853.968563][ T24] usb 1-1: Product: syz [ 853.972814][ T24] usb 1-1: Manufacturer: syz [ 853.977483][ T24] usb 1-1: SerialNumber: syz [ 854.002108][ T24] usb 1-1: config 0 descriptor?? [ 854.021973][T28246] usb 2-1: Using ep0 maxpacket: 16 [ 854.030842][T28246] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 854.048205][T28246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 854.066165][T28246] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 854.076432][T28246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.085122][T28246] usb 2-1: Product: syz [ 854.091891][T28246] usb 2-1: Manufacturer: syz [ 854.096984][T28246] usb 2-1: SerialNumber: syz [ 854.110279][T28242] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 854.127570][T28246] usb 2-1: config 0 descriptor?? [ 854.140179][T28242] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 854.166270][T28246] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 854.183947][T28242] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 854.194090][T28246] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 854.202191][T28242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.216822][ T24] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 854.240809][T29624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9569'. [ 854.250302][ T24] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 854.328088][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 854.380959][T29624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 854.394625][T29628] veth0: entered promiscuous mode [ 854.408106][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 854.427198][ T24] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 854.438277][ T24] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 854.439555][T29626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 854.464308][T28242] usb 4-1: usb_control_msg returned -32 [ 854.470920][T29626] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 854.479257][T29629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9570'. [ 854.482182][ T24] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 854.507030][T29626] bond1: (slave vcan1): Error -95 calling set_mac_address [ 854.508891][T28242] usbtmc 4-1:16.0: can't read capabilities [ 854.628606][ T24] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 854.799649][T28246] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 854.817442][T28246] em28xx 2-1:0.0: Config register raw data: 0x6c [ 854.845763][T28246] em28xx 2-1:0.0: I2S Audio (1 sample rate(s)) [ 854.855219][T28246] em28xx 2-1:0.0: No AC97 audio processor [ 855.232363][T28246] usb 2-1: USB disconnect, device number 118 [ 855.242151][ T24] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 855.255474][ T24] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 855.283289][ T24] usb 1-1: USB disconnect, device number 20 [ 855.378178][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 855.398165][T28242] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 855.448113][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 855.550351][T28242] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 855.560064][T28242] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.576122][T28242] usb 6-1: config 0 descriptor?? [ 855.848247][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 855.848268][ T30] audit: type=1326 audit(1751460923.992:9840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29641 comm="syz.2.9576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43b58e929 code=0x7fc00000 [ 855.877101][ C1] vkms_vblank_simulate: vblank timer overrun [ 856.408066][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 856.488080][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 856.732677][ T24] usb 4-1: USB disconnect, device number 121 [ 856.815081][T28242] pegasus 6-1:0.0: can't reset MAC [ 856.831427][T28242] pegasus 6-1:0.0: probe with driver pegasus failed with error -5 [ 856.884622][T28242] usb 6-1: USB disconnect, device number 18 [ 857.112231][T29674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9589'. [ 857.208637][T27026] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 857.393022][T27026] usb 1-1: Using ep0 maxpacket: 16 [ 857.405396][T27026] usb 1-1: config 0 has no interfaces? [ 857.422842][T27026] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 857.434047][T27026] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 857.446568][T27026] usb 1-1: Manufacturer: syz [ 857.451334][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 857.463991][T27026] usb 1-1: config 0 descriptor?? [ 857.528132][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 857.626888][T28242] hid-generic 0002:0004:0009.00D3: unknown main item tag 0x0 [ 857.641373][T28242] hid-generic 0002:0004:0009.00D3: unknown main item tag 0x0 [ 857.651320][T28242] hid-generic 0002:0004:0009.00D3: unknown main item tag 0x0 [ 857.659274][T28242] hid-generic 0002:0004:0009.00D3: unknown main item tag 0x0 [ 857.666980][T28242] hid-generic 0002:0004:0009.00D3: unknown main item tag 0x0 [ 857.675349][T28242] hid-generic 0002:0004:0009.00D3: unknown main item tag 0x0 [ 857.684732][T28242] hid-generic 0002:0004:0009.00D3: unknown main item tag 0x0 [ 857.700621][T28242] hid-generic 0002:0004:0009.00D3: unknown main item tag 0x0 [ 857.709540][T28242] hid-generic 0002:0004:0009.00D3: unknown main item tag 0x0 [ 857.717090][T28242] hid-generic 0002:0004:0009.00D3: unknown main item tag 0x0 [ 857.725804][T28242] hid-generic 0002:0004:0009.00D3: unknown main item tag 0x0 [ 857.747210][T29666] lo: entered promiscuous mode [ 857.754229][T29666] tunl0: entered promiscuous mode [ 857.763529][T29666] gre0: entered promiscuous mode [ 857.771847][T29666] gretap0: entered promiscuous mode [ 857.778159][T29666] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 857.800518][T28242] hid-generic 0002:0004:0009.00D3: unknown main item tag 0x0 [ 857.812645][T28242] hid-generic 0002:0004:0009.00D3: unknown main item tag 0x0 [ 857.822547][T27026] usb 1-1: USB disconnect, device number 21 [ 857.830743][T28242] hid-generic 0002:0004:0009.00D3: unknown main item tag 0x0 [ 857.839991][T28242] hid-generic 0002:0004:0009.00D3: unknown main item tag 0x0 [ 857.847533][T28242] hid-generic 0002:0004:0009.00D3: unknown main item tag 0x0 [ 857.877393][T28242] hid-generic 0002:0004:0009.00D3: unknown main item tag 0x0 [ 857.899264][T29700] input: syz0 as /devices/virtual/input/input124 [ 857.915507][T28242] hid-generic 0002:0004:0009.00D3: hidraw0: HID v0.04 Device [syz0] on syz0 [ 858.240669][T29703] fido_id[29703]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 858.303955][T29709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9604'. [ 858.402754][T29707] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9602'. [ 858.488060][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 858.568067][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 858.843555][T29707] (unnamed net_device) (uninitialized): option ad_select: invalid value (48) [ 859.118202][T27026] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 859.142293][T29731] netlink: 'syz.2.9612': attribute type 4 has an invalid length. [ 859.224595][T29733] netlink: 'syz.2.9612': attribute type 4 has an invalid length. [ 859.312250][T27026] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 859.381971][T27026] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024 [ 859.388673][T28246] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 859.407289][T27026] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 859.426613][T27026] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 859.438968][T27026] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 859.447211][T27026] usb 4-1: Product: syz [ 859.468864][T27026] usb 4-1: Manufacturer: syz [ 859.484016][T27026] usb 4-1: SerialNumber: syz [ 859.514762][T27026] cdc_mbim 4-1:1.0: skipping garbage [ 859.528188][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 859.555242][ T30] audit: type=1326 audit(1751460927.702:9841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29738 comm="syz.2.9615" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe43b58e929 code=0x0 [ 859.590463][T28246] usb 6-1: Using ep0 maxpacket: 8 [ 859.600528][T28246] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 859.610827][T28246] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 859.618271][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 859.621284][T28246] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 859.637945][T28246] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 859.652194][T28246] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 859.666091][T28246] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 859.718599][ T5911] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 859.727320][T28246] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.739168][T29725] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 859.888305][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 859.896708][ T5911] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 859.905350][ T5911] usb 2-1: config 0 has no interface number 0 [ 859.914955][ T5911] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 859.924742][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.933830][ T5911] usb 2-1: Product: syz [ 859.938415][ T5911] usb 2-1: Manufacturer: syz [ 859.943154][ T5911] usb 2-1: SerialNumber: syz [ 859.962557][ T5911] usb 2-1: config 0 descriptor?? [ 859.970823][T28246] usb 6-1: GET_CAPABILITIES returned 0 [ 859.976708][T28246] usbtmc 6-1:16.0: can't read capabilities [ 859.980384][ T5911] smsc95xx v2.0.0 [ 860.290429][T29732] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 860.290835][T28246] usb 6-1: USB disconnect, device number 19 [ 860.303388][T29744] usbtmc 6-1:16.0: usb_control_msg returned -19 [ 860.359852][T29725] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 860.391245][ T5911] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 860.402560][ T5911] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 860.568282][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 860.579523][T27026] cdc_mbim 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 860.586298][T27026] cdc_mbim 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 860.598569][T27026] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 860.793062][T27026] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 860.873566][T27026] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 860.910179][T27026] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 860.967521][T27026] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 861.028618][T27026] usb 4-1: USB disconnect, device number 122 [ 861.048773][ T5911] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 861.090459][ T5911] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 861.113427][T28242] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 861.113618][ T5911] usb 2-1: USB disconnect, device number 119 [ 861.188941][ T5829] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 861.292524][T28242] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 861.300840][T28242] usb 1-1: config 0 has no interface number 0 [ 861.307155][T28242] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 861.309912][T29762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9623'. [ 861.320188][T28242] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 861.341022][T28242] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 861.351224][T28242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.362139][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 861.376231][T29762] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.386346][T29762] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.388707][T28242] usb 1-1: config 0 descriptor?? [ 861.395728][T29762] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.400995][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.409181][T29762] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.430125][ T5829] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 861.440213][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.446407][T29755] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 861.455232][ T5829] usb 3-1: config 0 descriptor?? [ 861.465510][T28242] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 861.490198][T29762] vxlan0: entered promiscuous mode [ 861.608059][ C0] net_ratelimit: 1 callbacks suppressed [ 861.608081][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 861.688085][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 862.055981][T29772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 862.166905][ T5829] usb 3-1: string descriptor 0 read error: -22 [ 862.195363][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 862.205469][T28246] usb 1-1: USB disconnect, device number 22 [ 862.358728][ T5829] uclogic 0003:256C:006D.00D4: interface is invalid, ignoring [ 862.390385][ T5829] usb 3-1: USB disconnect, device number 111 [ 862.648073][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 862.728045][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 863.303494][T29803] input: syz1 as /devices/virtual/input/input125 [ 863.688049][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 863.768326][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 863.775820][ T5904] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 863.838484][T27026] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 863.945447][ T5904] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 863.985592][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.993886][T27026] usb 3-1: Using ep0 maxpacket: 8 [ 864.038187][T27026] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 864.048131][ T5904] usb 1-1: Product: syz [ 864.052359][ T5904] usb 1-1: Manufacturer: syz [ 864.067320][T27026] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 864.102706][ T5904] usb 1-1: SerialNumber: syz [ 864.138651][ T5904] usb 1-1: config 0 descriptor?? [ 864.149807][T27026] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 864.198089][T27026] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 864.226817][T27026] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 864.292366][T27026] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 864.330942][T27026] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.592656][T27026] usb 3-1: GET_CAPABILITIES returned 0 [ 864.608153][ T5904] usb 1-1: Firmware: major: 220, minor: 80, hardware type: UNKNOWN (174) [ 864.622947][T27026] usbtmc 3-1:16.0: can't read capabilities [ 864.732728][T29830] syzkaller1: entered promiscuous mode [ 864.738101][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 864.762666][T29830] syzkaller1: entered allmulticast mode [ 864.808145][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 864.815405][ T5904] usb 1-1: no permanent extended address found, random address set [ 864.833022][ T5904] usb 1-1: atusb_probe: initialization failed, error = -524 [ 864.843461][ T5904] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 864.922711][T29809] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 864.930464][ T5829] usb 3-1: USB disconnect, device number 112 [ 864.944012][T29831] usbtmc 3-1:16.0: usbtmc488_ioctl_trigger returned -19 [ 865.013369][T28246] usb 1-1: USB disconnect, device number 23 [ 865.731573][T29848] netlink: 'syz.3.9654': attribute type 1 has an invalid length. [ 865.747142][T29848] netlink: 'syz.3.9654': attribute type 2 has an invalid length. [ 865.768265][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 865.779522][T29848] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.9654'. [ 865.848197][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 866.139248][T29863] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9661'. [ 866.169086][T29863] netlink: 'syz.2.9661': attribute type 7 has an invalid length. [ 866.176914][T29863] netlink: 'syz.2.9661': attribute type 8 has an invalid length. [ 866.216756][T29863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9661'. [ 866.808116][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 866.888089][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 867.213678][T29889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9672'. [ 867.350432][ T5829] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 867.730952][ T5829] usb 6-1: Using ep0 maxpacket: 8 [ 867.739300][ T5829] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 867.770287][ T5829] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 867.796890][ T5829] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 867.823502][ T5829] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 867.840616][T29911] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9682'. [ 867.858052][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 867.865523][T29911] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9682'. [ 867.875822][ T5829] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 867.895806][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.928140][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 868.030267][T29915] binder: 29914:29915 ioctl c0306201 0 returned -14 [ 868.104904][T29918] binder: 29914:29918 ioctl c0306201 0 returned -14 [ 868.126855][ T5829] usb 6-1: GET_CAPABILITIES returned 0 [ 868.156939][ T5829] usbtmc 6-1:16.0: can't read capabilities [ 868.341898][T28242] usb 6-1: USB disconnect, device number 20 [ 868.438470][ T5829] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 868.600156][ T5829] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 868.612253][ T5829] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 868.638064][ T5829] usb 1-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 868.669513][ T5829] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 868.679277][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 868.687788][ T5829] usb 1-1: SerialNumber: syz [ 868.724422][T29930] sctp: [Deprecated]: syz.1.9691 (pid 29930) Use of int in max_burst socket option. [ 868.724422][T29930] Use struct sctp_assoc_value instead [ 868.888048][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 868.931654][ T5829] rndis_host 1-1:253.0: RNDIS init failed, -71 [ 868.946312][ T5829] rndis_host 1-1:253.0: probe with driver rndis_host failed with error -71 [ 868.968045][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 868.998725][ T5829] usb 1-1: USB disconnect, device number 24 [ 869.017280][ T30] audit: type=1800 audit(1751460937.162:9842): pid=29934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.9693" name="nullb0" dev="devtmpfs" ino=4943 res=0 errno=0 [ 869.398170][T27026] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 869.438107][ T5829] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 869.561813][T27026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.579209][T29944] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 869.587274][T29944] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 869.598896][ T5829] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 869.601682][T27026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.625064][ T5829] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 869.626272][T27026] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 869.654451][T27026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.654669][T29944] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 869.671429][ T5829] usb 1-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 869.685280][T29944] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 869.692344][T27026] usb 6-1: config 0 descriptor?? [ 869.702348][T29944] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 869.716805][ T5829] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 869.726647][T29944] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 869.738171][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 869.738583][T29944] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 869.747919][ T5829] usb 1-1: SerialNumber: syz [ 869.765932][T29944] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 869.774178][T29944] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 869.794800][T29944] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 869.808243][T29944] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 869.928083][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 870.008133][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 870.252493][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.261001][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.778885][T27026] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.00D5/input/input126 [ 870.900690][T27026] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.00D5/input/input127 [ 870.968041][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 870.989014][T27026] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.00D5/input/input128 [ 871.048239][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 871.049646][ T5829] rndis_host 1-1:253.0: RNDIS init failed, -110 [ 871.079178][T27026] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.00D5/input/input129 [ 871.080352][ T5829] rndis_host 1-1:253.0: probe with driver rndis_host failed with error -110 [ 871.205323][T29965] input: syz0 as /devices/virtual/input/input130 [ 871.263598][ T5829] usb 1-1: USB disconnect, device number 25 [ 871.282794][T27026] uclogic 0003:256C:006D.00D5: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 871.378425][T27026] usb 6-1: USB disconnect, device number 21 [ 871.528119][T23305] Bluetooth: hci1: command 0x0406 tx timeout [ 871.565505][T29966] fido_id[29966]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 871.688231][T23305] Bluetooth: hci2: command 0x0406 tx timeout [ 871.768082][T23305] Bluetooth: hci0: command 0x0406 tx timeout [ 871.774097][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 871.830450][T29979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9709'. [ 871.850712][T23305] Bluetooth: hci4: command 0x0406 tx timeout [ 872.008072][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 872.088114][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 872.109315][T29987] sctp: [Deprecated]: syz.2.9715 (pid 29987) Use of struct sctp_assoc_value in delayed_ack socket option. [ 872.109315][T29987] Use struct sctp_sack_info instead [ 872.318109][ T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 872.343145][T29991] netlink: 'syz.2.9717': attribute type 1 has an invalid length. [ 872.382285][T29991] bond0: entered promiscuous mode [ 872.387596][T29991] bond0: entered allmulticast mode [ 872.407431][T29991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9717'. [ 872.429732][T29991] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 872.443082][T29991] bond0: (slave bridge2): making interface the new active one [ 872.454357][T29991] bridge2: entered promiscuous mode [ 872.460884][T29991] bridge2: entered allmulticast mode [ 872.467712][T29991] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 872.480684][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 872.501615][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 872.511180][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.528650][ T24] usb 1-1: Product: syz [ 872.538645][ T24] usb 1-1: Manufacturer: syz [ 872.548477][ T24] usb 1-1: SerialNumber: syz [ 872.610390][ T24] usb 1-1: config 0 descriptor?? [ 872.838158][ T5829] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 872.847702][ T24] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 873.034055][ T5829] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 873.045598][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.058211][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 873.073656][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.084582][ T24] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 873.094671][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 873.111674][ T24] usb 1-1: USB disconnect, device number 26 [ 873.128063][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 873.143123][ T5829] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 873.158201][ T5829] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 873.186327][ T5829] usb 3-1: Manufacturer: syz [ 873.203116][ T5829] usb 3-1: config 0 descriptor?? [ 873.618379][T23305] Bluetooth: hci1: command 0x0406 tx timeout [ 873.669467][ T5829] appleir 0003:05AC:8243.00D6: unknown main item tag 0x0 [ 873.723722][ T5829] appleir 0003:05AC:8243.00D6: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 873.749447][T30030] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 873.768326][T23305] Bluetooth: hci2: command 0x0406 tx timeout [ 873.848225][T23305] Bluetooth: hci0: command 0x0406 tx timeout [ 873.848490][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 873.931903][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 874.088207][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 874.109027][T27026] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 874.168105][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 874.295176][T27026] usb 1-1: config 0 has an invalid interface number: 93 but max is 0 [ 874.310317][T27026] usb 1-1: config 0 has no interface number 0 [ 874.328970][T27026] usb 1-1: config 0 interface 93 has no altsetting 0 [ 874.349410][T27026] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 874.369107][T27026] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.422805][T27026] usb 1-1: config 0 descriptor?? [ 874.444114][T27026] cp210x 1-1:0.93: cp210x converter detected [ 874.457663][ T5904] usb 3-1: USB disconnect, device number 113 [ 874.638691][T28242] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 874.791273][T28242] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 874.804943][T28242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.828181][ T10] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 874.836597][T28242] usb 2-1: config 0 descriptor?? [ 874.853179][T27026] cp210x 1-1:0.93: failed to get vendor val 0x000e size 3: -32 [ 874.859281][T28242] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 875.018226][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 875.043299][ T10] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 875.053968][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.074275][ T10] usb 4-1: Product: syz [ 875.078833][ T10] usb 4-1: Manufacturer: syz [ 875.084396][T27026] cp210x 1-1:0.93: GPIO initialisation failed: -19 [ 875.094422][ T10] usb 4-1: SerialNumber: syz [ 875.109635][T27026] usb 1-1: cp210x converter now attached to ttyUSB0 [ 875.122485][ T10] usb 4-1: config 0 descriptor?? [ 875.128178][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 875.151028][ T10] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 875.166465][ T10] usb 4-1: Detected FT-X [ 875.208192][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 875.274153][T28242] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 875.302563][T27026] usb 1-1: USB disconnect, device number 27 [ 875.320428][T27026] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 875.339648][T27026] cp210x 1-1:0.93: device disconnected [ 875.359132][ T5904] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 875.387587][ T10] ftdi_sio ttyUSB1: Unable to read latency timer: -32 [ 875.537307][ T5904] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 875.545991][ T5904] usb 3-1: config 0 has no interface number 0 [ 875.561824][ T5904] usb 3-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 875.575684][ T5904] usb 3-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 875.590709][ T5904] usb 3-1: config 0 interface 230 has no altsetting 0 [ 875.605393][ T5904] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 875.624797][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.635167][ T5904] usb 3-1: Product: syz [ 875.646535][ T5904] usb 3-1: Manufacturer: syz [ 875.653463][ T5904] usb 3-1: SerialNumber: syz [ 875.683203][ T5904] usb 3-1: config 0 descriptor?? [ 875.691571][T30059] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 875.705268][T30059] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 875.726869][ T5904] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 875.765435][ T5904] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 875.843184][ T10] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 875.851457][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 876.072326][ T10] usb 4-1: USB disconnect, device number 123 [ 876.081214][T28242] gspca_cpia1: usb_control_msg 03, error -71 [ 876.100298][T28242] cpia1 2-1:0.0: unexpected systemstate: 00 [ 876.109892][T28242] usb 2-1: USB disconnect, device number 120 [ 876.126785][ T10] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 876.154926][ T10] ftdi_sio 4-1:0.0: device disconnected [ 876.168050][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 876.248089][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 877.208221][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 877.288107][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 878.055674][ T5904] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 878.133944][T30142] loop2: detected capacity change from 0 to 7 [ 878.143109][T18684] Dev loop2: unable to read RDB block 7 [ 878.152613][T18684] loop2: unable to read partition table [ 878.159090][T18684] loop2: partition table beyond EOD, truncated [ 878.170186][T30142] Dev loop2: unable to read RDB block 7 [ 878.179483][T30142] loop2: unable to read partition table [ 878.185473][T30142] loop2: partition table beyond EOD, truncated [ 878.193226][T30142] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 878.228728][ T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 878.248050][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 878.272791][ T5829] usb 3-1: USB disconnect, device number 114 [ 878.328124][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 878.408327][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 878.424904][ T24] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 878.436449][ T24] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 878.447628][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 878.463054][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 878.472888][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.484540][ T24] usb 6-1: Product: syz [ 878.489110][ T24] usb 6-1: Manufacturer: syz [ 878.493823][ T24] usb 6-1: SerialNumber: syz [ 878.509183][T28242] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 878.658401][T28242] usb 2-1: Using ep0 maxpacket: 16 [ 878.665995][T28242] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 878.675683][T28242] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 878.686502][T28242] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 878.698199][T28242] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 878.713976][T28242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.722813][T28242] usb 2-1: Product: syz [ 878.727151][T28242] usb 2-1: Manufacturer: syz [ 878.735873][T28242] usb 2-1: SerialNumber: syz [ 878.865389][T30154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 878.959247][ T24] usb 6-1: 0:2 : does not exist [ 879.000836][ T24] usb 6-1: USB disconnect, device number 22 [ 879.219935][T28242] usb 2-1: 0:2 : does not exist [ 879.280200][T28242] usb 2-1: USB disconnect, device number 121 [ 879.288036][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 879.368058][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 879.919850][ T30] audit: type=1326 audit(1751460948.072:9843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30183 comm="syz.1.9795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a1d8e929 code=0x7ffc0000 [ 879.938426][ T24] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 879.997060][ T30] audit: type=1326 audit(1751460948.072:9844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30183 comm="syz.1.9795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f13a1d2ab19 code=0x7ffc0000 [ 880.096925][ T30] audit: type=1326 audit(1751460948.072:9845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30183 comm="syz.1.9795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f13a1d2ab19 code=0x7ffc0000 [ 880.111888][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.230224][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 880.238057][ T30] audit: type=1326 audit(1751460948.072:9846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30183 comm="syz.1.9795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f13a1d2ab19 code=0x7ffc0000 [ 880.252654][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.311869][ T24] usb 3-1: config 0 descriptor?? [ 880.328123][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 880.408102][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 880.458686][ T30] audit: type=1326 audit(1751460948.072:9847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30183 comm="syz.1.9795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f13a1d2ab19 code=0x7ffc0000 [ 880.496056][ T30] audit: type=1326 audit(1751460948.072:9848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30183 comm="syz.1.9795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f13a1d2ab19 code=0x7ffc0000 [ 880.602577][ T30] audit: type=1326 audit(1751460948.072:9849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30183 comm="syz.1.9795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f13a1d2ab19 code=0x7ffc0000 [ 880.626994][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 880.648272][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 880.777419][ T30] audit: type=1326 audit(1751460948.072:9850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30183 comm="syz.1.9795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f13a1d2ab19 code=0x7ffc0000 [ 880.803707][ T24] usb 3-1: USB disconnect, device number 115 [ 881.365237][ T30] audit: type=1326 audit(1751460948.072:9851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30183 comm="syz.1.9795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f13a1d2ab19 code=0x7ffc0000 [ 881.387810][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 881.448119][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 881.572244][ T30] audit: type=1326 audit(1751460948.072:9852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30183 comm="syz.1.9795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f13a1d2ab19 code=0x7ffc0000 [ 881.668777][ T24] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 881.848338][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 881.855795][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.880688][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 881.917626][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.967582][ T24] usb 3-1: config 0 descriptor?? [ 882.004566][ T24] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 882.038380][ T24] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 882.206822][ T5904] usb 3-1: USB disconnect, device number 116 [ 882.213198][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 882.241349][ T5904] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 882.393129][T30227] Dead loop on virtual device ip6_vti0, fix it urgently! [ 882.408069][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 882.430424][T30178] ldusb: No device or device unplugged -19 [ 882.488138][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 882.871083][T30248] loop2: detected capacity change from 0 to 7 [ 882.885823][T30248] Dev loop2: unable to read RDB block 7 [ 882.892070][T30248] loop2: unable to read partition table [ 882.898839][T30248] loop2: partition table beyond EOD, truncated [ 882.905653][T30248] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 883.058216][ T5904] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 883.097524][T30254] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 883.213515][ T5904] usb 2-1: config 0 has no interfaces? [ 883.226680][ T5904] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 883.294716][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.364428][ T5904] usb 2-1: Product: syz [ 883.381759][ T5904] usb 2-1: Manufacturer: syz [ 883.386727][ T5904] usb 2-1: SerialNumber: syz [ 883.448133][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 883.463304][ T5904] usb 2-1: config 0 descriptor?? [ 883.528216][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 883.764344][ T1034] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.868751][T28242] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 883.896310][ T24] usb 2-1: USB disconnect, device number 122 [ 883.922438][ T1034] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.994818][ T1034] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.029476][T28242] usb 6-1: Using ep0 maxpacket: 16 [ 884.123716][ T1034] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.488246][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 884.568210][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 884.612644][ T1034] bridge_slave_1: left allmulticast mode [ 884.622893][ T1034] bridge_slave_1: left promiscuous mode [ 884.638756][ T1034] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.653727][ T1034] bridge_slave_0: left allmulticast mode [ 884.882914][ T1034] bridge_slave_0: left promiscuous mode [ 884.916463][ T1034] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.268773][ T24] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 885.282784][T23305] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 885.301083][T23305] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 885.311939][T23305] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 885.321948][T23305] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 885.332423][T23305] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 885.449570][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 885.516213][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.528272][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 885.548903][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 885.603306][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 885.618772][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 885.657623][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.725514][ T24] usb 2-1: config 0 descriptor?? [ 886.208163][ T24] HID 045e:07da: Invalid code 65791 type 1 [ 886.287699][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.00D7/input/input131 [ 886.365217][ T24] microsoft 0003:045E:07DA.00D7: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 886.568188][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 886.700840][T28242] usb 6-1: unable to get BOS descriptor or descriptor too short [ 886.799909][T28242] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 886.822937][T28242] usb 6-1: can't read configurations, error -71 [ 887.024814][ T5911] usb 2-1: USB disconnect, device number 123 [ 887.150795][ T1034] dvmrp0 (unregistering): left allmulticast mode [ 887.368137][ T51] Bluetooth: hci1: command tx timeout [ 887.608137][ C0] net_ratelimit: 1 callbacks suppressed [ 887.608158][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 887.688171][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 887.993761][ T1034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 888.012165][ T1034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 888.032589][ T1034] bond0 (unregistering): Released all slaves [ 888.169186][ T1034] tipc: Disabling bearer [ 888.181011][ T1034] tipc: Disabling bearer [ 888.199919][ T1034] tipc: Disabling bearer [ 888.224650][ T1034] tipc: Left network mode [ 888.883410][ T1034] hsr_slave_0: left promiscuous mode [ 888.891879][ T1034] hsr_slave_1: left promiscuous mode [ 888.913392][ T1034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 888.941877][ T1034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.965475][ T1034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 888.998263][ T1034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 889.081252][ T1034] veth1_macvtap: left promiscuous mode [ 889.107865][ T1034] veth0_macvtap: left promiscuous mode [ 889.117694][ T1034] veth1_vlan: left promiscuous mode [ 889.125543][ T1034] veth0_vlan: left promiscuous mode [ 889.450043][ T51] Bluetooth: hci1: command tx timeout [ 889.792754][T23305] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 889.807400][T23305] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 889.819277][T23305] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 889.831170][T23305] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 889.864984][T23305] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 889.923626][T28242] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 890.159724][T28242] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 890.184364][T28242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.196576][T28242] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 890.210967][T28242] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 890.220223][T28242] usb 6-1: Manufacturer: syz [ 890.235702][T28242] usb 6-1: config 0 descriptor?? [ 890.285816][T30359] binder: 30356:30359 ioctl c0306201 200000000480 returned -14 [ 890.348150][T28242] rc_core: IR keymap rc-hauppauge not found [ 890.354202][T28242] Registered IR keymap rc-empty [ 890.364614][T28242] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 890.384175][T28242] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input132 [ 890.497426][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 890.513363][T30345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.523968][T30345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.577507][T28242] usb 6-1: USB disconnect, device number 25 [ 890.884272][ T1034] team0 (unregistering): Port device team_slave_1 removed [ 890.952965][ T1034] team0 (unregistering): Port device C removed [ 891.068247][T28242] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 891.306719][T28242] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 891.308085][T30376] trusted_key: syz.5.9869 sent an empty control message without MSG_MORE. [ 891.340841][T28242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.408328][T28242] usb 2-1: Product: syz [ 891.438698][T28242] usb 2-1: Manufacturer: syz [ 891.443387][T28242] usb 2-1: SerialNumber: syz [ 891.516152][T28242] usb 2-1: config 0 descriptor?? [ 891.530635][ T51] Bluetooth: hci1: command tx timeout [ 891.938454][ T51] Bluetooth: hci2: command tx timeout [ 892.758702][T28242] usb 2-1: f81604_read: reg: 100e failed: -EPROTO [ 892.777006][T30298] chnl_net:caif_netlink_parms(): no params data found [ 892.899012][ T30] kauditd_printk_skb: 309 callbacks suppressed [ 892.899032][ T30] audit: type=1804 audit(1751460961.042:10162): pid=30399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.9877" name="/" dev="pidfs" ino=30399 res=1 errno=0 [ 892.938744][T28242] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 892.959637][T28242] usb 2-1: USB disconnect, device number 124 [ 893.002871][T28242] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 893.062948][ T5497] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 893.100611][ T5497] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 893.180282][T30405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9880'. [ 893.245935][T28242] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 893.608156][ T51] Bluetooth: hci1: command tx timeout [ 893.638060][ T5911] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 893.820454][ T5911] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 893.838065][ T5911] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 893.963499][T30298] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.971145][ T5911] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 893.984879][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.989559][T30298] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.008398][ T51] Bluetooth: hci2: command tx timeout [ 894.021138][T30298] bridge_slave_0: entered allmulticast mode [ 894.025857][T30409] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 894.053844][ T5911] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 894.073269][T30298] bridge_slave_0: entered promiscuous mode [ 894.115686][T30298] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.150834][T30298] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.184236][T30298] bridge_slave_1: entered allmulticast mode [ 894.214964][T30298] bridge_slave_1: entered promiscuous mode [ 894.293866][ T5911] usb 6-1: USB disconnect, device number 26 [ 894.405569][ T1034] IPVS: stop unused estimator thread 0... [ 894.447336][T30298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.505605][T30298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.907481][T30298] team0: Port device team_slave_0 added [ 895.121792][ T1034] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.141314][ T1034] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.191009][T30298] team0: Port device team_slave_1 added [ 895.236130][T30458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9895'. [ 895.328294][T30349] chnl_net:caif_netlink_parms(): no params data found [ 895.799414][ T1034] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.816411][ T1034] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.930722][T30298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.937745][T30298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.987483][T30298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 896.061821][T30298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.072512][T30298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 896.115274][ T51] Bluetooth: hci2: command tx timeout [ 896.127052][T30298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.220281][T30475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.263809][ T5911] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 896.353905][ T1034] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 896.378349][ T1034] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.432961][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.459655][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.507365][ T5911] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 896.546570][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.579583][ T5911] usb 2-1: config 0 descriptor?? [ 896.752024][ T1034] vlan3 (unregistering): left allmulticast mode [ 896.764642][ T1034] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 896.775874][ T1034] vlan3 (unregistering): left promiscuous mode [ 896.785650][ T1034] bridge0: port 3(vlan3) entered disabled state [ 896.812860][ T1034] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 896.823448][ T1034] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.915939][T30298] hsr_slave_0: entered promiscuous mode [ 896.924012][T30298] hsr_slave_1: entered promiscuous mode [ 896.931216][T30298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 896.939553][T30298] Cannot create hsr debugfs directory [ 897.021219][ T5911] hid-steam 0003:28DE:1142.00D8: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 897.098489][ T5911] hid-steam 0003:28DE:1142.00D8: Steam wireless receiver connected [ 897.132943][T30349] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.150546][T30349] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.163242][T30349] bridge_slave_0: entered allmulticast mode [ 897.170519][ T5911] hid-steam 0003:28DE:1142.00D9: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 897.185883][T30349] bridge_slave_0: entered promiscuous mode [ 897.258247][ T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 897.274679][T30349] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.301366][T30349] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.309407][T30349] bridge_slave_1: entered allmulticast mode [ 897.319268][T30349] bridge_slave_1: entered promiscuous mode [ 897.420638][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 897.440698][ T24] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 897.464565][ T24] usb 6-1: config 0 has no interface number 0 [ 897.484836][ T24] usb 6-1: config 0 interface 12 has no altsetting 0 [ 897.501128][T30349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.567053][T30349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.579702][ T24] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 897.607059][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.639985][ T24] usb 6-1: Product: syz [ 897.659206][ T24] usb 6-1: Manufacturer: syz [ 897.669867][ T24] usb 6-1: SerialNumber: syz [ 897.697869][ T24] usb 6-1: config 0 descriptor?? [ 897.816344][T30349] team0: Port device team_slave_0 added [ 897.866935][ T1034] bridge_slave_1: left allmulticast mode [ 897.877259][ T1034] bridge_slave_1: left promiscuous mode [ 897.884266][ T1034] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.894804][ T1034] bridge_slave_0: left allmulticast mode [ 897.909795][ T1034] bridge_slave_0: left promiscuous mode [ 897.915716][ T1034] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.169078][ T51] Bluetooth: hci2: command tx timeout [ 898.614366][ T1034] bond0 (unregistering): (slave bridge2): Releasing active interface [ 898.626745][ T1034] bridge2 (unregistering): left promiscuous mode [ 898.644233][ T1034] bridge2 (unregistering): left allmulticast mode [ 898.693617][ T1034] bond1 (unregistering): Released all slaves [ 898.711542][ T1034] bond0 (unregistering): Released all slaves [ 898.802819][T30349] team0: Port device team_slave_1 added [ 898.947507][ T24] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 898.965325][ T24] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 898.975039][ T24] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 898.987594][ T24] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 899.016133][ T24] usb 6-1: USB disconnect, device number 27 [ 899.112311][ T30] audit: type=1326 audit(1751460967.252:10163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30526 comm="syz.0.9912" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ab618e929 code=0x0 [ 899.134330][ C1] vkms_vblank_simulate: vblank timer overrun [ 899.154178][ T1034] tipc: Disabling bearer [ 899.163838][ T1034] tipc: Disabling bearer [ 899.173508][T30349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 899.174415][ T1034] tipc: Left network mode [ 899.185931][T30349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 899.213980][T30349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 899.227067][T30349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 899.238048][ T5904] usb 2-1: reset high-speed USB device number 125 using dummy_hcd [ 899.253556][ T5904] usb 2-1: device reset changed ep0 maxpacket size! [ 899.264164][T30349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 899.305594][T28242] usb 2-1: USB disconnect, device number 125 [ 899.305688][T30349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 899.330672][T28242] hid-steam 0003:28DE:1142.00D8: Steam wireless receiver disconnected [ 899.419152][ T1034] IPVS: stopping backup sync thread 9275 ... [ 899.484267][T30349] hsr_slave_0: entered promiscuous mode [ 899.515970][T30349] hsr_slave_1: entered promiscuous mode [ 899.524672][T30349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 899.546256][T30349] Cannot create hsr debugfs directory [ 899.559839][T28242] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 899.718732][T28242] usb 2-1: Using ep0 maxpacket: 8 [ 899.732504][T28242] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 899.748115][T28242] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 899.766886][T28242] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 899.786484][T28242] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 899.797241][T28242] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 899.842101][T28242] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 899.865458][T28242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.117550][T28242] usb 2-1: GET_CAPABILITIES returned 0 [ 900.134270][T28242] usbtmc 2-1:16.0: can't read capabilities [ 900.271940][ T1034] mac80211_hwsim hwsim7 wlan0 (unregistering): left allmulticast mode [ 900.354184][T28242] usb 2-1: USB disconnect, device number 126 [ 900.532571][T30298] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 900.624106][T30298] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 900.660762][T30298] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 900.732279][ T1034] hsr_slave_0: left promiscuous mode [ 900.757081][ T1034] hsr_slave_1: left promiscuous mode [ 900.772416][ T1034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 900.783903][ T1034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.803588][ T1034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.829382][ T1034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 900.865750][ T1034] veth1_macvtap: left promiscuous mode [ 900.871794][ T1034] veth0_macvtap: left promiscuous mode [ 900.882111][ T1034] veth1_vlan: left promiscuous mode [ 900.889495][ T1034] veth0_vlan: left promiscuous mode [ 902.139817][ T1034] team0 (unregistering): Port device team_slave_1 removed [ 902.148336][ T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 902.284194][ T1034] team0 (unregistering): Port device team_slave_0 removed [ 902.325713][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.345076][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.379310][ T10] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 902.392259][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.417689][ T10] usb 6-1: config 0 descriptor?? [ 902.698345][T27026] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 902.864232][ T10] hid-steam 0003:28DE:1142.00DA: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 902.875576][T27026] usb 1-1: Using ep0 maxpacket: 8 [ 902.882577][T27026] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 902.894569][T27026] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 902.904652][T27026] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 902.912992][T27026] usb 1-1: Product: syz [ 902.917278][T27026] usb 1-1: Manufacturer: syz [ 902.922152][T27026] usb 1-1: SerialNumber: syz [ 902.948179][ T10] hid-steam 0003:28DE:1142.00DA: Steam wireless receiver connected [ 902.977533][ T10] hid-steam 0003:28DE:1142.00DB: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 903.001038][T30298] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 903.158256][T27026] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 903.179536][T27026] usb 1-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 903.192997][T27026] usb 1-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 903.205984][T27026] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 903.352605][T27026] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 903.405453][T27026] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 903.446827][T27026] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 903.566272][T27026] usb 1-1: USB disconnect, device number 28 [ 903.606235][T27026] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 903.634480][T27026] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 903.655141][T27026] visor 1-1:1.0: device disconnected [ 903.671693][ T24] usb 6-1: USB disconnect, device number 28 [ 903.727666][ T24] hid-steam 0003:28DE:1142.00DA: Steam wireless receiver disconnected [ 903.783187][T30349] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 903.834275][ T1034] IPVS: stop unused estimator thread 0... [ 903.842666][T30349] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 903.907885][T30298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.925231][T30349] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 903.944280][T30349] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 904.045748][T30298] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.142422][T30630] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 904.160659][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.167889][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.247010][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.254269][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.912653][T30349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 905.285435][T30349] 8021q: adding VLAN 0 to HW filter on device team0 [ 905.517549][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.524760][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 905.617849][T30655] loop6: detected capacity change from 0 to 1 [ 905.669712][T30655] Dev loop6: unable to read RDB block 1 [ 905.699720][T30655] loop6: unable to read partition table [ 905.705685][T30655] loop6: partition table beyond EOD, truncated [ 905.735272][ T3539] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.742541][ T3539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 905.776742][T30655] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 906.155450][T30298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 906.337633][T30349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 906.526158][T30298] veth0_vlan: entered promiscuous mode [ 906.597469][T30298] veth1_vlan: entered promiscuous mode [ 906.696844][T30349] veth0_vlan: entered promiscuous mode [ 906.743132][T30349] veth1_vlan: entered promiscuous mode [ 906.864082][T30298] veth0_macvtap: entered promiscuous mode [ 906.909354][T30298] veth1_macvtap: entered promiscuous mode [ 906.932181][T30349] veth0_macvtap: entered promiscuous mode [ 906.976866][T30349] veth1_macvtap: entered promiscuous mode [ 907.005840][T30298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 907.057693][T30298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 907.152361][T30349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 907.186869][T30349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 907.226802][T30298] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.297186][T30298] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.318030][T30298] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.349475][T30698] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 907.400410][T30298] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.456390][T30349] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.493200][T30349] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.543425][T30349] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.562537][T30349] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.096163][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.142670][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.556615][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.573050][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.615287][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.631338][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.858314][T28246] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 909.023856][T30730] pim6reg1: entered promiscuous mode [ 909.034204][T30730] pim6reg1: entered allmulticast mode [ 909.061491][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.087531][T28246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.103688][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.117620][T28246] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 909.142757][T28246] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.173807][T28246] usb 2-1: config 0 descriptor?? [ 909.664323][T28246] input: HID 28bd:0933 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0933.00DC/input/input133 [ 909.859646][T28246] uclogic 0003:28BD:0933.00DC: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.1-1/input0 [ 909.983096][T28246] usb 2-1: USB disconnect, device number 127 [ 910.143984][T30742] fido_id[30742]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 910.395738][T30750] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9977'. [ 912.515358][T30750] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9977'. [ 912.516246][T30766] team0: entered promiscuous mode [ 912.530704][T30770] batadv_slave_0: entered promiscuous mode [ 912.544167][T30770] batadv_slave_0: left promiscuous mode [ 912.603330][T30770] team0: left promiscuous mode [ 913.405755][T30816] block device autoloading is deprecated and will be removed. [ 913.417666][T30816] syz.0.10000: attempt to access beyond end of device [ 913.417666][T30816] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 913.671744][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 913.838220][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 913.845835][ T10] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 913.864645][ T10] usb 1-1: config 0 has no interface number 0 [ 913.871483][ T10] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 913.904632][ T10] usb 1-1: config 0 interface 2 has no altsetting 0 [ 913.944694][ T10] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 913.967252][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.979057][T28242] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 913.983220][ T10] usb 1-1: Product: syz [ 914.008186][ T10] usb 1-1: Manufacturer: syz [ 914.012876][ T10] usb 1-1: SerialNumber: syz [ 914.033791][ T10] usb 1-1: config 0 descriptor?? [ 914.148884][T28242] usb 2-1: Using ep0 maxpacket: 32 [ 914.164925][T28242] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 914.179163][T28242] usb 2-1: config 0 has no interface number 0 [ 914.201059][T28242] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 914.247902][T28242] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 914.268671][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 914.286569][T28242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.308319][T28242] usb 2-1: Product: syz [ 914.318444][T28242] usb 2-1: Manufacturer: syz [ 914.346504][T28242] usb 2-1: SerialNumber: syz [ 914.348421][ T10] usb 1-1: USB disconnect, device number 29 [ 914.445112][T28242] usb 2-1: config 0 descriptor?? [ 914.472647][T28242] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 914.508584][T28242] em28xx 2-1:0.132: Video interface 132 found: [ 914.882986][T28242] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 914.913062][T30857] input: syz0 as /devices/virtual/input/input134 [ 915.078251][T30859] loop2: detected capacity change from 0 to 7 [ 915.098343][T30859] Dev loop2: unable to read RDB block 7 [ 915.104017][T30859] loop2: unable to read partition table [ 915.107665][T28242] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 915.118358][T30859] loop2: partition table beyond EOD, truncated [ 915.137746][T30859] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 915.151060][T28242] em28xx 2-1:0.132: board has no eeprom [ 915.239166][T28242] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 915.268823][T28242] em28xx 2-1:0.132: analog set to bulk mode. [ 915.274956][ T5936] em28xx 2-1:0.132: Registering V4L2 extension [ 915.302857][T28242] usb 2-1: USB disconnect, device number 2 [ 915.379206][T28242] em28xx 2-1:0.132: Disconnecting em28xx [ 915.702466][T30877] syzkaller1: entered promiscuous mode [ 915.716817][T30877] syzkaller1: entered allmulticast mode [ 915.732133][ T5936] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 915.753698][ T5936] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 915.772756][ T5936] em28xx 2-1:0.132: No AC97 audio processor [ 915.822422][ T5936] usb 2-1: Decoder not found [ 915.827138][ T5936] em28xx 2-1:0.132: failed to create media graph [ 915.847842][ T5936] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 915.882761][ T5936] em28xx 2-1:0.132: Remote control support is not available for this card. [ 915.948511][T28242] em28xx 2-1:0.132: Closing input extension [ 916.099603][T28242] em28xx 2-1:0.132: Freeing device [ 916.387150][T30890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10019'. [ 916.490140][T30890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10019'. [ 916.642506][T30890] veth3: entered promiscuous mode [ 916.647713][T30890] veth3: entered allmulticast mode [ 917.399836][ T30] audit: type=1326 audit(1751460985.552:10164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30932 comm="syz.1.10034" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13a1d8e929 code=0x0 [ 917.817242][ T30] audit: type=1326 audit(1751460985.962:10165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30945 comm="syz.5.10035" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ab598e929 code=0x0 [ 918.003173][T30953] netlink: 140 bytes leftover after parsing attributes in process `syz.0.10036'. [ 918.455843][T30966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10042'. [ 918.707783][T30974] all: renamed from bridge_slave_0 (while UP) [ 918.856835][T30981] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.10044' sets config #0 [ 918.971496][T30986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10048'. [ 918.982483][T30986] netlink: 'syz.0.10048': attribute type 30 has an invalid length. [ 919.004992][T30986] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.014827][T30986] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.026382][T30986] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.036407][T30986] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.055401][T30986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10048'. [ 919.068668][T30986] netlink: 'syz.0.10048': attribute type 30 has an invalid length. [ 919.524641][T30993] binder: 30992:30993 ioctl c0306201 200000001a80 returned -14 [ 919.907295][T31016] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 921.428211][ T5904] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 921.579889][T31070] [ 921.582312][T31070] ===================================================== [ 921.589287][T31070] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 921.596800][T31070] 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 Not tainted [ 921.603950][T31070] ----------------------------------------------------- [ 921.610927][T31070] syz.0.10072/31070 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 921.618804][T31070] ffff888032a9dde0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 921.627530][T31070] [ 921.627530][T31070] and this task is already holding: [ 921.634922][T31070] ffff888068a32028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 921.644830][T31070] which would create a new lock dependency: [ 921.648090][ T5904] usb 6-1: Using ep0 maxpacket: 32 [ 921.650732][T31070] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 921.660629][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.663972][T31070] [ 921.663972][T31070] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 921.663989][T31070] (&dev->event_lock#2){..-.}-{3:3} [ 921.684359][T31070] [ 921.684359][T31070] ... which became SOFTIRQ-irq-safe at: [ 921.697273][T31070] lock_acquire+0x120/0x360 [ 921.701900][T31070] _raw_spin_lock_irqsave+0xa7/0xf0 [ 921.707208][T31070] input_inject_event+0xab/0x320 [ 921.712251][T31070] led_trigger_event+0x138/0x210 [ 921.717284][T31070] kbd_bh+0x1c6/0x2e0 [ 921.721369][T31070] tasklet_action_common+0x369/0x580 [ 921.726748][T31070] handle_softirqs+0x286/0x870 [ 921.731615][T31070] __irq_exit_rcu+0xca/0x1f0 [ 921.736316][T31070] irq_exit_rcu+0x9/0x30 [ 921.740682][T31070] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 921.746420][T31070] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 921.752502][T31070] console_flush_all+0x7f7/0xc40 [ 921.757539][T31070] console_unlock+0xc4/0x270 [ 921.762225][T31070] do_con_write+0x5117/0x5200 [ 921.767000][T31070] con_write+0x24/0x40 [ 921.771161][T31070] n_tty_write+0xd32/0x11d0 [ 921.775764][T31070] file_tty_write+0x503/0x990 [ 921.780548][T31070] vfs_write+0x54b/0xa90 [ 921.784986][T31070] ksys_write+0x145/0x250 [ 921.789407][T31070] do_syscall_64+0xfa/0x3b0 [ 921.794012][T31070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.800007][T31070] [ 921.800007][T31070] to a SOFTIRQ-irq-unsafe lock: [ 921.807036][T31070] (tasklist_lock){.+.+}-{3:3} [ 921.807066][T31070] [ 921.807066][T31070] ... which became SOFTIRQ-irq-unsafe at: [ 921.819713][T31070] ... [ 921.819724][T31070] lock_acquire+0x120/0x360 [ 921.826929][T31070] _raw_read_lock+0x36/0x50 [ 921.831538][T31070] __do_wait+0xde/0x740 [ 921.835793][T31070] do_wait+0x1f8/0x520 [ 921.839958][T31070] kernel_wait+0xab/0x170 [ 921.844388][T31070] call_usermodehelper_exec_work+0xbe/0x230 [ 921.850388][T31070] process_scheduled_works+0xade/0x17b0 [ 921.856039][T31070] worker_thread+0x8a0/0xda0 [ 921.860734][T31070] kthread+0x70e/0x8a0 [ 921.864899][T31070] ret_from_fork+0x3fc/0x770 [ 921.869592][T31070] ret_from_fork_asm+0x1a/0x30 [ 921.874456][T31070] [ 921.874456][T31070] other info that might help us debug this: [ 921.874456][T31070] [ 921.884694][T31070] Chain exists of: [ 921.884694][T31070] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 921.884694][T31070] [ 921.898286][T31070] Possible interrupt unsafe locking scenario: [ 921.898286][T31070] [ 921.906614][T31070] CPU0 CPU1 [ 921.911987][T31070] ---- ---- [ 921.917359][T31070] lock(tasklist_lock); [ 921.921615][T31070] local_irq_disable(); [ 921.928391][T31070] lock(&dev->event_lock#2); [ 921.935630][T31070] lock(&client->buffer_lock); [ 921.943042][T31070] [ 921.946508][T31070] lock(&dev->event_lock#2); [ 921.951405][T31070] [ 921.951405][T31070] *** DEADLOCK *** [ 921.951405][T31070] [ 921.959578][T31070] 7 locks held by syz.0.10072/31070: [ 921.964891][T31070] #0: ffff8880297d7118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 921.974078][T31070] #1: ffff88801e38f230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 921.984231][T31070] #2: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 921.993950][T31070] #3: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 922.003550][T31070] #4: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 922.012715][T31070] #5: ffff888068a32028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 922.022927][T31070] #6: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 922.032005][T31070] [ 922.032005][T31070] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 922.042417][T31070] -> (&dev->event_lock#2){..-.}-{3:3} { [ 922.048095][T31070] IN-SOFTIRQ-W at: [ 922.052176][T31070] lock_acquire+0x120/0x360 [ 922.058533][T31070] _raw_spin_lock_irqsave+0xa7/0xf0 [ 922.065574][T31070] input_inject_event+0xab/0x320 [ 922.072351][T31070] led_trigger_event+0x138/0x210 [ 922.079128][T31070] kbd_bh+0x1c6/0x2e0 [ 922.084948][T31070] tasklet_action_common+0x369/0x580 [ 922.092069][T31070] handle_softirqs+0x286/0x870 [ 922.098680][T31070] __irq_exit_rcu+0xca/0x1f0 [ 922.105115][T31070] irq_exit_rcu+0x9/0x30 [ 922.111212][T31070] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 922.118695][T31070] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 922.126517][T31070] console_flush_all+0x7f7/0xc40 [ 922.133304][T31070] console_unlock+0xc4/0x270 [ 922.139736][T31070] do_con_write+0x5117/0x5200 [ 922.146263][T31070] con_write+0x24/0x40 [ 922.152165][T31070] n_tty_write+0xd32/0x11d0 [ 922.158505][T31070] file_tty_write+0x503/0x990 [ 922.165026][T31070] vfs_write+0x54b/0xa90 [ 922.171113][T31070] ksys_write+0x145/0x250 [ 922.177362][T31070] do_syscall_64+0xfa/0x3b0 [ 922.183707][T31070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.191444][T31070] INITIAL USE at: [ 922.195441][T31070] lock_acquire+0x120/0x360 [ 922.201704][T31070] _raw_spin_lock_irqsave+0xa7/0xf0 [ 922.208670][T31070] input_inject_event+0xab/0x320 [ 922.215364][T31070] kbd_led_trigger_activate+0xbc/0x100 [ 922.222580][T31070] led_trigger_set+0x52a/0x950 [ 922.229096][T31070] led_trigger_set_default+0x260/0x2a0 [ 922.236312][T31070] led_classdev_register_ext+0x73d/0x930 [ 922.243718][T31070] input_leds_connect+0x517/0x790 [ 922.250504][T31070] input_register_device+0xcee/0x10b0 [ 922.257624][T31070] atkbd_connect+0x70e/0x9c0 [ 922.263963][T31070] serio_driver_probe+0x7f/0xa0 [ 922.270576][T31070] really_probe+0x26a/0x9a0 [ 922.276836][T31070] __driver_probe_device+0x18c/0x2f0 [ 922.283873][T31070] driver_probe_device+0x4f/0x430 [ 922.290648][T31070] __driver_attach+0x452/0x700 [ 922.297165][T31070] bus_for_each_dev+0x230/0x2b0 [ 922.303777][T31070] serio_handle_event+0x1a2/0x860 [ 922.310559][T31070] process_scheduled_works+0xade/0x17b0 [ 922.317863][T31070] worker_thread+0x8a0/0xda0 [ 922.324209][T31070] kthread+0x70e/0x8a0 [ 922.330040][T31070] ret_from_fork+0x3fc/0x770 [ 922.336384][T31070] ret_from_fork_asm+0x1a/0x30 [ 922.342897][T31070] } [ 922.345493][T31070] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 922.354623][T31070] -> (&client->buffer_lock){....}-{3:3} { [ 922.360381][T31070] INITIAL USE at: [ 922.364284][T31070] lock_acquire+0x120/0x360 [ 922.370374][T31070] _raw_spin_lock+0x2e/0x40 [ 922.376458][T31070] evdev_pass_values+0xb9/0xbd0 [ 922.382892][T31070] evdev_events+0x1e6/0x340 [ 922.388984][T31070] input_pass_values+0x288/0x890 [ 922.395501][T31070] input_event_dispose+0x330/0x6b0 [ 922.402199][T31070] input_inject_event+0x1fe/0x320 [ 922.408810][T31070] evdev_write+0x2fc/0x480 [ 922.414805][T31070] vfs_write+0x27e/0xa90 [ 922.420641][T31070] ksys_write+0x145/0x250 [ 922.426547][T31070] do_syscall_64+0xfa/0x3b0 [ 922.432636][T31070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.440110][T31070] } [ 922.442617][T31070] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 922.450786][T31070] ... acquired at: [ 922.454598][T31070] lock_acquire+0x120/0x360 [ 922.459297][T31070] _raw_spin_lock+0x2e/0x40 [ 922.463990][T31070] evdev_pass_values+0xb9/0xbd0 [ 922.469048][T31070] evdev_events+0x1e6/0x340 [ 922.473736][T31070] input_pass_values+0x288/0x890 [ 922.478857][T31070] input_event_dispose+0x330/0x6b0 [ 922.484159][T31070] input_inject_event+0x1fe/0x320 [ 922.489381][T31070] evdev_write+0x2fc/0x480 [ 922.493986][T31070] vfs_write+0x27e/0xa90 [ 922.498426][T31070] ksys_write+0x145/0x250 [ 922.502956][T31070] do_syscall_64+0xfa/0x3b0 [ 922.507650][T31070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.513732][T31070] [ 922.516064][T31070] [ 922.516064][T31070] the dependencies between the lock to be acquired [ 922.516074][T31070] and SOFTIRQ-irq-unsafe lock: [ 922.529614][T31070] -> (tasklist_lock){.+.+}-{3:3} { [ 922.534937][T31070] HARDIRQ-ON-R at: [ 922.539100][T31070] lock_acquire+0x120/0x360 [ 922.545624][T31070] _raw_read_lock+0x36/0x50 [ 922.552146][T31070] __do_wait+0xde/0x740 [ 922.558320][T31070] do_wait+0x1f8/0x520 [ 922.564405][T31070] kernel_wait+0xab/0x170 [ 922.570769][T31070] call_usermodehelper_exec_work+0xbe/0x230 [ 922.578705][T31070] process_scheduled_works+0xade/0x17b0 [ 922.586283][T31070] worker_thread+0x8a0/0xda0 [ 922.592892][T31070] kthread+0x70e/0x8a0 [ 922.598972][T31070] ret_from_fork+0x3fc/0x770 [ 922.605577][T31070] ret_from_fork_asm+0x1a/0x30 [ 922.612360][T31070] SOFTIRQ-ON-R at: [ 922.616533][T31070] lock_acquire+0x120/0x360 [ 922.623063][T31070] _raw_read_lock+0x36/0x50 [ 922.629588][T31070] __do_wait+0xde/0x740 [ 922.635758][T31070] do_wait+0x1f8/0x520 [ 922.641842][T31070] kernel_wait+0xab/0x170 [ 922.648188][T31070] call_usermodehelper_exec_work+0xbe/0x230 [ 922.656103][T31070] process_scheduled_works+0xade/0x17b0 [ 922.663663][T31070] worker_thread+0x8a0/0xda0 [ 922.670269][T31070] kthread+0x70e/0x8a0 [ 922.676348][T31070] ret_from_fork+0x3fc/0x770 [ 922.682959][T31070] ret_from_fork_asm+0x1a/0x30 [ 922.689742][T31070] INITIAL USE at: [ 922.693827][T31070] lock_acquire+0x120/0x360 [ 922.700267][T31070] _raw_write_lock_irq+0xa2/0xf0 [ 922.707141][T31070] copy_process+0x224f/0x3c00 [ 922.713749][T31070] kernel_clone+0x21e/0x870 [ 922.720181][T31070] user_mode_thread+0xdd/0x140 [ 922.726874][T31070] rest_init+0x23/0x300 [ 922.732957][T31070] start_kernel+0x47d/0x500 [ 922.739384][T31070] x86_64_start_reservations+0x24/0x30 [ 922.746769][T31070] x86_64_start_kernel+0x143/0x1c0 [ 922.753816][T31070] common_startup_64+0x13e/0x147 [ 922.760702][T31070] INITIAL READ USE at: [ 922.765225][T31070] lock_acquire+0x120/0x360 [ 922.772099][T31070] _raw_read_lock+0x36/0x50 [ 922.778975][T31070] __do_wait+0xde/0x740 [ 922.785584][T31070] do_wait+0x1f8/0x520 [ 922.792028][T31070] kernel_wait+0xab/0x170 [ 922.798717][T31070] call_usermodehelper_exec_work+0xbe/0x230 [ 922.806977][T31070] process_scheduled_works+0xade/0x17b0 [ 922.814890][T31070] worker_thread+0x8a0/0xda0 [ 922.821849][T31070] kthread+0x70e/0x8a0 [ 922.828296][T31070] ret_from_fork+0x3fc/0x770 [ 922.835270][T31070] ret_from_fork_asm+0x1a/0x30 [ 922.842397][T31070] } [ 922.845084][T31070] ... key at: [] tasklist_lock+0x18/0x40 [ 922.852997][T31070] ... acquired at: [ 922.856996][T31070] lock_acquire+0x120/0x360 [ 922.861699][T31070] _raw_read_lock+0x36/0x50 [ 922.866396][T31070] send_sigio+0x101/0x370 [ 922.870923][T31070] dnotify_handle_event+0x169/0x440 [ 922.876315][T31070] fsnotify+0x1814/0x1a80 [ 922.880836][T31070] vfs_mkdir+0x477/0x510 [ 922.885286][T31070] do_mkdirat+0x247/0x590 [ 922.889808][T31070] __x64_sys_mkdirat+0x87/0xa0 [ 922.894768][T31070] do_syscall_64+0xfa/0x3b0 [ 922.899474][T31070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.905561][T31070] [ 922.907898][T31070] -> (&f_owner->lock){....}-{3:3} { [ 922.913225][T31070] INITIAL USE at: [ 922.917222][T31070] lock_acquire+0x120/0x360 [ 922.923576][T31070] _raw_write_lock_irq+0xa2/0xf0 [ 922.930275][T31070] __f_setown+0x67/0x370 [ 922.936273][T31070] fcntl_dirnotify+0x3d6/0x690 [ 922.942789][T31070] do_fcntl+0x6d0/0x1910 [ 922.948787][T31070] __se_sys_fcntl+0xc8/0x150 [ 922.955146][T31070] do_syscall_64+0xfa/0x3b0 [ 922.961411][T31070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.969063][T31070] INITIAL READ USE at: [ 922.973495][T31070] lock_acquire+0x120/0x360 [ 922.980190][T31070] _raw_read_lock_irq+0xaa/0xf0 [ 922.987235][T31070] do_fcntl+0x535/0x1910 [ 922.993688][T31070] __se_sys_fcntl+0xc8/0x150 [ 923.000491][T31070] do_syscall_64+0xfa/0x3b0 [ 923.007200][T31070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.015310][T31070] } [ 923.017916][T31070] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 923.026884][T31070] ... acquired at: [ 923.030793][T31070] lock_acquire+0x120/0x360 [ 923.035494][T31070] _raw_read_lock_irqsave+0xaf/0x100 [ 923.040970][T31070] send_sigio+0x38/0x370 [ 923.045410][T31070] kill_fasync+0x24d/0x4d0 [ 923.050021][T31070] lease_break_callback+0x26/0x30 [ 923.055237][T31070] __break_lease+0x6a5/0x1620 [ 923.060192][T31070] vfs_truncate+0x428/0x520 [ 923.064890][T31070] do_sys_truncate+0xdb/0x190 [ 923.069765][T31070] __x64_sys_truncate+0x5b/0x70 [ 923.074834][T31070] do_syscall_64+0xfa/0x3b0 [ 923.079542][T31070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.085632][T31070] [ 923.087973][T31070] -> (&new->fa_lock){....}-{3:3} { [ 923.093130][T31070] INITIAL USE at: [ 923.097040][T31070] lock_acquire+0x120/0x360 [ 923.103127][T31070] _raw_write_lock_irq+0xa2/0xf0 [ 923.109651][T31070] fasync_remove_entry+0xf1/0x1c0 [ 923.116260][T31070] __fput+0x8a2/0xa70 [ 923.121824][T31070] task_work_run+0x1d1/0x260 [ 923.127998][T31070] exit_to_user_mode_loop+0xec/0x110 [ 923.134908][T31070] do_syscall_64+0x2bd/0x3b0 [ 923.141092][T31070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.148564][T31070] INITIAL READ USE at: [ 923.152916][T31070] lock_acquire+0x120/0x360 [ 923.159440][T31070] _raw_read_lock_irqsave+0xaf/0x100 [ 923.166740][T31070] kill_fasync+0x199/0x4d0 [ 923.173176][T31070] mousedev_write+0x8f9/0x950 [ 923.179965][T31070] vfs_write+0x27e/0xa90 [ 923.186228][T31070] ksys_write+0x145/0x250 [ 923.192568][T31070] do_syscall_64+0xfa/0x3b0 [ 923.199089][T31070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.207083][T31070] } [ 923.209604][T31070] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 923.218291][T31070] ... acquired at: [ 923.222100][T31070] lock_acquire+0x120/0x360 [ 923.226793][T31070] _raw_read_lock_irqsave+0xaf/0x100 [ 923.232272][T31070] kill_fasync+0x199/0x4d0 [ 923.236888][T31070] evdev_pass_values+0x627/0xbd0 [ 923.242014][T31070] evdev_events+0x1e6/0x340 [ 923.246720][T31070] input_pass_values+0x288/0x890 [ 923.251844][T31070] input_event_dispose+0x330/0x6b0 [ 923.257148][T31070] input_inject_event+0x1fe/0x320 [ 923.262364][T31070] evdev_write+0x2fc/0x480 [ 923.266967][T31070] vfs_write+0x27e/0xa90 [ 923.271402][T31070] ksys_write+0x145/0x250 [ 923.275918][T31070] do_syscall_64+0xfa/0x3b0 [ 923.280615][T31070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.286719][T31070] [ 923.289050][T31070] [ 923.289050][T31070] stack backtrace: [ 923.294955][T31070] CPU: 1 UID: 0 PID: 31070 Comm: syz.0.10072 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 923.294978][T31070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 923.294990][T31070] Call Trace: [ 923.294998][T31070] [ 923.295007][T31070] dump_stack_lvl+0x189/0x250 [ 923.295037][T31070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 923.295063][T31070] ? __pfx__printk+0x10/0x10 [ 923.295084][T31070] validate_chain+0x1f05/0x2140 [ 923.295109][T31070] __lock_acquire+0xab9/0xd20 [ 923.295135][T31070] ? kill_fasync+0x199/0x4d0 [ 923.295156][T31070] lock_acquire+0x120/0x360 [ 923.295179][T31070] ? kill_fasync+0x199/0x4d0 [ 923.295206][T31070] _raw_read_lock_irqsave+0xaf/0x100 [ 923.295229][T31070] ? kill_fasync+0x199/0x4d0 [ 923.295250][T31070] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 923.295271][T31070] ? do_raw_spin_lock+0x121/0x290 [ 923.295293][T31070] kill_fasync+0x199/0x4d0 [ 923.295314][T31070] ? kill_fasync+0x53/0x4d0 [ 923.295336][T31070] evdev_pass_values+0x627/0xbd0 [ 923.295357][T31070] ? evdev_pass_values+0x641/0xbd0 [ 923.295376][T31070] evdev_events+0x1e6/0x340 [ 923.295391][T31070] ? evdev_events+0x79/0x340 [ 923.295407][T31070] ? input_pass_values+0x8d/0x890 [ 923.295428][T31070] input_pass_values+0x288/0x890 [ 923.295447][T31070] ? input_handle_event+0x70c/0xf30 [ 923.295471][T31070] input_event_dispose+0x330/0x6b0 [ 923.295496][T31070] input_inject_event+0x1fe/0x320 [ 923.295519][T31070] ? input_inject_event+0xbc/0x320 [ 923.295543][T31070] evdev_write+0x2fc/0x480 [ 923.295563][T31070] ? __pfx_evdev_write+0x10/0x10 [ 923.295580][T31070] ? bpf_lsm_file_permission+0x9/0x20 [ 923.295603][T31070] ? security_file_permission+0x75/0x290 [ 923.295620][T31070] ? rw_verify_area+0x258/0x650 [ 923.295644][T31070] ? __pfx_evdev_write+0x10/0x10 [ 923.295661][T31070] vfs_write+0x27e/0xa90 [ 923.295690][T31070] ? __pfx_vfs_write+0x10/0x10 [ 923.295715][T31070] ? __fget_files+0x2a/0x420 [ 923.295734][T31070] ? __fget_files+0x2a/0x420 [ 923.295751][T31070] ? __fget_files+0x3a0/0x420 [ 923.295768][T31070] ? __fget_files+0x2a/0x420 [ 923.295788][T31070] ksys_write+0x145/0x250 [ 923.295804][T31070] ? __pfx_ksys_write+0x10/0x10 [ 923.295816][T31070] ? rcu_is_watching+0x15/0xb0 [ 923.295844][T31070] ? do_syscall_64+0xbe/0x3b0 [ 923.295870][T31070] do_syscall_64+0xfa/0x3b0 [ 923.295894][T31070] ? lockdep_hardirqs_on+0x9c/0x150 [ 923.295917][T31070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.295933][T31070] ? clear_bhb_loop+0x60/0xb0 [ 923.295950][T31070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.295967][T31070] RIP: 0033:0x7f4ab618e929 [ 923.295983][T31070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.295998][T31070] RSP: 002b:00007f4ab70d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 923.296017][T31070] RAX: ffffffffffffffda RBX: 00007f4ab63b5fa0 RCX: 00007f4ab618e929 [ 923.296030][T31070] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 923.296041][T31070] RBP: 00007f4ab6210b39 R08: 0000000000000000 R09: 0000000000000000 [ 923.296052][T31070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 923.296062][T31070] R13: 0000000000000000 R14: 00007f4ab63b5fa0 R15: 00007f4ab64dfa28 [ 923.296080][T31070] [ 923.334756][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.652668][ T5904] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 923.670741][ T5904] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 923.679996][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.700045][ T5904] usb 6-1: config 0 descriptor?? [ 924.142381][ T5904] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.00DD/input/input135 [ 924.220981][ T5904] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.00DD/input/input136 [ 924.265220][ T5904] kye 0003:0458:5011.00DD: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 925.209159][ C1] kye 0003:0458:5011.00DD: usb_submit_urb(ctrl) failed: -1 [ 925.980479][ T5904] usb 6-1: USB disconnect, device number 29