last executing test programs: 5m23.40469794s ago: executing program 2 (id=2695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000700)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x7, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x24, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e23, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xe, 0x0, @val=0x80}}}}}, 0x32) 5m22.861957252s ago: executing program 2 (id=2703): unshare(0x28000600) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x0, 0x7fff]}, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$setown(r0, 0x8, 0x0) 5m22.61842633s ago: executing program 2 (id=2708): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) recvmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000540)=""/4096, 0x1000}, {0x0}], 0x2}, 0xca8}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x18, 0x4) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) 5m22.325099486s ago: executing program 2 (id=2712): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5m21.383251177s ago: executing program 2 (id=2728): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000e6e000/0x2000)=nil, 0x2000}}) 5m21.15047122s ago: executing program 2 (id=2729): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], {0x95, 0x0, 0xff85}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) io_uring_setup(0x3e45, &(0x7f0000000000)={0x0, 0x1b7a, 0x8000, 0x1, 0x2eb}) 5m20.963017205s ago: executing program 32 (id=2729): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], {0x95, 0x0, 0xff85}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) io_uring_setup(0x3e45, &(0x7f0000000000)={0x0, 0x1b7a, 0x8000, 0x1, 0x2eb}) 3m14.068495185s ago: executing program 0 (id=4124): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x18b801, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="8f", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x288}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)='2', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xfb3, 0x9}, 0x90) 3m13.77166986s ago: executing program 0 (id=4130): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 3m13.51613965s ago: executing program 0 (id=4133): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000bc0)={0x24, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x3, 0x29, 0x2e4c, 0x2, 0x3, 0x3865, 0x8, 0x9, 0x1, 0xff00, 0x800, 0x81}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 3m10.45760026s ago: executing program 0 (id=4165): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 3m9.438097051s ago: executing program 0 (id=4171): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f000031a000/0x1000)=nil, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 3m8.839183971s ago: executing program 0 (id=4177): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00003ee000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f00008cf000/0x3000)=nil, 0x3000, 0x1) munlockall() 3m8.526556587s ago: executing program 33 (id=4177): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00003ee000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f00008cf000/0x3000)=nil, 0x3000, 0x1) munlockall() 3.525777603s ago: executing program 5 (id=5912): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001080000cd6c0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x34}}, 0x44000) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 3.087972649s ago: executing program 3 (id=5918): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x404c814, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) 2.98989751s ago: executing program 3 (id=5919): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0xc1) fcntl$notify(r0, 0x402, 0x1e) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x481, 0x0) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f00000004c0)='B', 0x1}], 0x1, 0x0) 2.933763724s ago: executing program 3 (id=5920): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x0, 0x14, 0x4, "277b7f07"}, 0x0, 0x0, 0x0, 0x0}) 2.87569906s ago: executing program 6 (id=5923): fsopen(&(0x7f0000000100)='proc\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffff7fffffff]}, 0x8) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x100000000000, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) 2.784305701s ago: executing program 6 (id=5924): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r1, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000000)={0x1, 0x2, 0x0, 'queue0\x00', 0x3}) 2.649731589s ago: executing program 5 (id=5926): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000000c0)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', '', [], 0x8, "2c36ce35fe800000000000009d94165f433d388e6577f86274e326d04670000000002c00"}, 0x5ac) 2.570549784s ago: executing program 1 (id=5927): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0x109}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3518, 0x0, 0x0, 0x0, 0x0) 2.570003028s ago: executing program 5 (id=5928): gettid() timer_create(0x1, 0x0, &(0x7f0000bbdffc)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.538125354s ago: executing program 6 (id=5929): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x10, 0x4, 0x2, 0x39, 0x4c, 0x65, 0x0, 0xd8, 0x11, 0x0, @empty, @loopback, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x27, 0x4b, [@empty, @multicast1, @multicast1, @empty, @multicast1, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast2]}]}}, {0x4e20, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x83, 0x0, @void}}}}}}}, 0x0) 2.414202181s ago: executing program 6 (id=5930): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x103b02, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=', 0x1}], 0x1}, 0x1) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x60000021) close_range(r0, 0xffffffffffffffff, 0x0) 2.107280677s ago: executing program 6 (id=5942): creat(&(0x7f0000000040)='./file0\x00', 0x10e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x6, 0x6, 0x100000000, 0x7, 0x6, 0x0, {0x1}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.891948072s ago: executing program 4 (id=5933): sync() sync() sync() sync() sync() sync() 1.742749351s ago: executing program 6 (id=5934): setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x6b, 0x8, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.61599549s ago: executing program 5 (id=5935): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x204) 1.449840616s ago: executing program 4 (id=5936): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000026c0)=""/100, 0x0, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.336869177s ago: executing program 4 (id=5937): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001080000cd6c0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x34}}, 0x44000) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 1.334536009s ago: executing program 5 (id=5948): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x8}, 0x20) writev(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)='s', 0x1}], 0x1) 992.022309ms ago: executing program 1 (id=5938): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 991.703806ms ago: executing program 5 (id=5939): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 752.353365ms ago: executing program 1 (id=5940): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@x86={0x1, 0x6, 0xc7, 0x0, 0x7f, 0x6, 0xc6, 0x0, 0x81, 0xf7, 0xff, 0x5, 0x0, 0x0, 0x8, 0x9, 0xc, 0xe, 0x6, '\x00', 0x9, 0x6}) 429.431727ms ago: executing program 4 (id=5941): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x204) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000080)="9b", 0x1}], 0x1, 0x6) 375.402871ms ago: executing program 1 (id=5943): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x7) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x35315258, 0x0, 0x0, 0x0, 0x7, 0x400}}) 300.932084ms ago: executing program 3 (id=5944): r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x1) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, r0, 0x100000000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x5}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) 237.893778ms ago: executing program 4 (id=5945): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4300, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdir(&(0x7f0000000040)='./file1/file3\x00', 0x38) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 203.546355ms ago: executing program 1 (id=5946): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000200)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0xa2c25) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)='x\a', 0x2}], 0x1) 143.829168ms ago: executing program 3 (id=5947): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ada24412254eae3bee1b2e35e02c4b0a8d021032874425cc", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1}, 0x40) 61.637454ms ago: executing program 4 (id=5949): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 36.484185ms ago: executing program 1 (id=5950): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x700, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x4e23, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "4958d42598fe122f3d004000", "6e91628b6cb6d9b303ee11b4b5d07da56453d6ab4e18a8ed7819405a31b3c869"}}}}}}, 0x0) 0s ago: executing program 3 (id=5951): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) close(0x3) kernel console output (not intermixed with test programs): k_skb: 4 callbacks suppressed [ 549.928549][ T30] audit: type=1326 audit(1748163626.443:8867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17657 comm="syz.3.4912" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x0 [ 550.526887][ T52] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 550.679311][ T52] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.737066][ T52] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.787406][ T52] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 550.812375][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.855316][ T52] usb 6-1: config 0 descriptor?? [ 551.287763][T17661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.307207][T17661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.341273][ T52] cm6533_jd 0003:0D8C:0022.004E: unknown main item tag 0x0 [ 551.368647][ T52] cm6533_jd 0003:0D8C:0022.004E: unknown main item tag 0x0 [ 551.415027][ T52] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.004E/input/input86 [ 551.447048][ T5888] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 551.534243][ T52] cm6533_jd 0003:0D8C:0022.004E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 551.652139][ T52] usb 6-1: USB disconnect, device number 28 [ 551.727306][ T5888] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 551.767156][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.784178][ T5888] usb 4-1: Product: syz [ 551.797181][ T5888] usb 4-1: Manufacturer: syz [ 551.810604][ T5888] usb 4-1: SerialNumber: syz [ 551.916190][T17677] fido_id[17677]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 552.916808][ T5888] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 552.923495][ T5888] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 552.953451][ T5888] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 553.165185][ T5888] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 553.226624][ T5888] usb 4-1: USB disconnect, device number 60 [ 553.271729][ T5888] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 553.628010][ T975] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 553.756976][ T5910] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 553.807019][ T975] usb 6-1: Using ep0 maxpacket: 32 [ 553.821865][ T975] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 553.837574][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.858147][ T975] usb 6-1: config 0 descriptor?? [ 553.886324][ T975] gspca_main: sq930x-2.14.0 probing 041e:403c [ 553.929026][ T5910] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 553.944325][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.967505][ T5910] usb 2-1: config 0 descriptor?? [ 554.656838][ T5892] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 554.820934][ T5892] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 554.830249][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.842101][ T5892] usb 4-1: config 0 descriptor?? [ 555.127042][ T975] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 555.133088][ T975] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 555.144069][ T975] usb 6-1: USB disconnect, device number 29 [ 555.195030][ T5910] usb 2-1: Cannot set autoneg [ 555.202400][ T5910] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 555.217347][ T5910] usb 2-1: USB disconnect, device number 60 [ 555.862997][T17762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4951'. [ 555.927645][T17762] netlink: 'syz.5.4951': attribute type 5 has an invalid length. [ 555.969459][T17762] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.978863][T17762] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.987693][T17762] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.996456][T17762] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.008368][T17762] vxlan0: entered promiscuous mode [ 556.068810][ T5892] pegasus 4-1:0.0: can't reset MAC [ 556.074272][ T5892] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 556.129104][ T5892] usb 4-1: USB disconnect, device number 61 [ 557.011792][T17784] netlink: 'syz.5.4962': attribute type 1 has an invalid length. [ 557.053398][T17784] bond1: entered promiscuous mode [ 557.059353][T17784] 8021q: adding VLAN 0 to HW filter on device bond1 [ 557.170086][T17789] kvm: Disabled LAPIC found during irq injection [ 557.220603][T17784] bond1: (slave bridge2): making interface the new active one [ 557.230555][T17784] bridge2: entered promiscuous mode [ 557.246626][T17784] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 558.167032][ T5892] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 558.329896][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.348078][ T5892] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 558.364192][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.367026][ T5828] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 558.385527][ T5892] usb 2-1: config 0 descriptor?? [ 558.537067][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 558.552543][ T5828] usb 4-1: New USB device found, idVendor=046d, idProduct=4002, bcdDevice= 0.00 [ 558.567030][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.593834][ T5828] usb 4-1: config 0 descriptor?? [ 558.830409][ T5892] keytouch 0003:0926:3333.004F: fixing up Keytouch IEC report descriptor [ 558.860901][ T5892] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.004F/input/input87 [ 559.061746][ T5828] hid-generic 0003:046D:4002.0050: hidraw0: USB HID v0.09 Device [HID 046d:4002] on usb-dummy_hcd.3-1/input0 [ 559.077893][ T5892] keytouch 0003:0926:3333.004F: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 559.293699][ T5888] usb 4-1: USB disconnect, device number 62 [ 559.665844][ T5828] usb 2-1: USB disconnect, device number 61 [ 559.926795][ T5877] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 560.097191][ T5877] usb 6-1: Using ep0 maxpacket: 8 [ 560.113469][ T5877] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 560.122341][ T5877] usb 6-1: config 179 has no interface number 0 [ 560.129343][ T5877] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 560.141124][ T5877] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 560.153003][ T5877] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 560.164752][ T5877] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 560.176759][ T5877] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 560.210892][ T5877] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 560.228731][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.236985][ T975] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 560.265808][T17866] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 560.325683][T17882] hsr0: entered promiscuous mode [ 560.346440][T17882] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5003'. [ 560.364431][T17882] hsr_slave_0: left promiscuous mode [ 560.386007][T17882] hsr_slave_1: left promiscuous mode [ 560.411261][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 560.461539][ T975] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 560.483403][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 560.519366][ T975] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 560.552099][T17882] hsr0 (unregistering): left promiscuous mode [ 560.577123][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.613752][ T975] usb 5-1: Product: syz [ 560.641384][ T975] usb 5-1: Manufacturer: syz [ 560.646043][ T975] usb 5-1: SerialNumber: syz [ 560.706584][ T975] usb 5-1: config 0 descriptor?? [ 560.709099][ T5877] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input88 [ 560.747906][T17874] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 560.755205][T17874] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 560.816364][ T975] usb 5-1: ucan: probing device on interface #0 [ 560.941070][T17866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.997877][T17866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.190282][T17893] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.5007'. [ 561.258568][ T975] usb 5-1: ucan: failed to retrieve device info [ 561.266958][ T975] usb 5-1: ucan: probe failed; try to update the device firmware [ 561.297072][ T5888] usb 6-1: USB disconnect, device number 30 [ 561.297093][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 561.311916][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 561.399649][ T975] usb 5-1: USB disconnect, device number 49 [ 561.898927][T17907] IPVS: length: 95 != 24 [ 562.002885][ T30] audit: type=1326 audit(1748163638.513:8868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17908 comm="syz.4.5014" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb5539 code=0x0 [ 562.024359][ C1] vkms_vblank_simulate: vblank timer overrun [ 562.276769][ T975] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 562.438777][ T975] usb 7-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 562.497017][ T975] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 562.514616][ T975] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 562.524328][ T975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.535651][ T975] usb 7-1: Product: syz [ 562.541037][ T975] usb 7-1: Manufacturer: syz [ 562.549402][ T975] usb 7-1: SerialNumber: syz [ 562.767208][ T5888] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 562.783171][T17911] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 562.822122][ T30] audit: type=1326 audit(1748163639.333:8869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17929 comm="syz.1.5023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 562.888600][ T30] audit: type=1326 audit(1748163639.333:8870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17929 comm="syz.1.5023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 562.943346][ T30] audit: type=1326 audit(1748163639.333:8871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17929 comm="syz.1.5023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 562.967456][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 562.973447][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.982693][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.992502][ T30] audit: type=1326 audit(1748163639.333:8872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17929 comm="syz.1.5023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 563.026456][ T5888] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 563.079013][ T5888] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 563.101866][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 563.120150][ T5888] usb 6-1: Product: syz [ 563.124473][ T5888] usb 6-1: Manufacturer: syz [ 563.141231][ T5888] usb 6-1: SerialNumber: syz [ 563.157787][ T5888] usb 6-1: config 0 descriptor?? [ 563.163851][T17927] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 563.185864][ T5888] hub 6-1:0.0: bad descriptor, ignoring hub [ 563.196866][ T5888] hub 6-1:0.0: probe with driver hub failed with error -5 [ 563.421120][T17911] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 563.519764][T17948] nvme_fabrics: missing parameter 'transport=%s' [ 563.552911][T17948] nvme_fabrics: missing parameter 'nqn=%s' [ 563.640547][ T975] cdc_ncm 7-1:1.0: bind() failure [ 563.690087][ T975] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 563.708681][ T975] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 563.728074][ T975] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 563.763442][ T975] usb 7-1: USB disconnect, device number 11 [ 563.930166][T17927] usb 6-1: reset high-speed USB device number 31 using dummy_hcd [ 564.131987][T17927] usb 6-1: device firmware changed [ 564.146932][ T5877] usb 6-1: USB disconnect, device number 31 [ 564.307031][ T5877] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 564.466881][ T5877] usb 6-1: Using ep0 maxpacket: 32 [ 564.494198][ T5877] usb 6-1: unable to get BOS descriptor or descriptor too short [ 564.507566][ T5877] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 564.515389][ T5877] usb 6-1: can't read configurations, error -71 [ 564.752424][T17970] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5044'. [ 564.915631][T17970] bond2: entered promiscuous mode [ 565.033857][T17970] 8021q: adding VLAN 0 to HW filter on device bond2 [ 565.290669][T17976] 8021q: adding VLAN 0 to HW filter on device bond2 [ 565.297980][T17976] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 565.315844][T17976] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 565.562748][T17988] netlink: 1343 bytes leftover after parsing attributes in process `syz.5.5039'. [ 566.167595][ T5877] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 566.295772][T18008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5049'. [ 566.346812][ T5877] usb 6-1: Using ep0 maxpacket: 32 [ 566.358430][ T5877] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 566.383655][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.402734][ T5877] usb 6-1: Product: syz [ 566.414731][ T5877] usb 6-1: Manufacturer: syz [ 566.420604][ T5877] usb 6-1: SerialNumber: syz [ 566.442013][ T5877] usb 6-1: config 0 descriptor?? [ 566.463572][ T5877] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 567.527053][ T5888] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 567.669629][ T5877] gspca_ov534_9: reg_w failed -71 [ 567.686758][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 567.702390][ T5888] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 567.728908][ T5888] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 567.755263][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 567.757440][T18029] loop6: detected capacity change from 0 to 524287999 [ 567.772032][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 567.772060][ T5888] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 567.772101][ T5888] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 567.772121][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.817359][T18042] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 102 prio class 0 [ 567.837720][T18042] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 102 prio class 0 [ 568.017935][ T5877] gspca_ov534_9: Unknown sensor 0000 [ 568.018028][ T5877] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 568.019591][ T5888] usb 5-1: GET_CAPABILITIES returned 0 [ 568.044566][ T5877] usb 6-1: USB disconnect, device number 34 [ 568.075395][ T5888] usbtmc 5-1:16.0: can't read capabilities [ 568.246841][ T52] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 568.431512][ T5888] usb 5-1: USB disconnect, device number 50 [ 568.437697][T18035] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 568.476346][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.506862][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.544865][ T52] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 568.561257][ T52] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 568.586774][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.613539][ T52] usb 4-1: config 0 descriptor?? [ 569.051538][ T52] plantronics 0003:047F:FFFF.0051: No inputs registered, leaving [ 569.089155][ T52] plantronics 0003:047F:FFFF.0051: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 570.183149][T18098] loop6: detected capacity change from 0 to 524287999 [ 570.197696][T18098] Buffer I/O error on dev loop6, logical block 0, async page read [ 570.207502][T18098] Buffer I/O error on dev loop6, logical block 0, async page read [ 570.215630][T18098] Buffer I/O error on dev loop6, logical block 0, async page read [ 570.224110][T18098] Buffer I/O error on dev loop6, logical block 0, async page read [ 570.232805][T18098] Buffer I/O error on dev loop6, logical block 0, async page read [ 570.264184][T18098] Buffer I/O error on dev loop6, logical block 0, async page read [ 570.334443][T18098] Buffer I/O error on dev loop6, logical block 0, async page read [ 570.349204][T18098] Buffer I/O error on dev loop6, logical block 0, async page read [ 570.367970][T18098] ldm_validate_partition_table(): Disk read failed. [ 570.374820][T18098] Buffer I/O error on dev loop6, logical block 0, async page read [ 570.385594][T18098] Buffer I/O error on dev loop6, logical block 0, async page read [ 570.403511][T18098] Dev loop6: unable to read RDB block 0 [ 570.410245][T18098] loop6: unable to read partition table [ 570.416263][T18098] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 570.433510][ T5925] ldm_validate_partition_table(): Disk read failed. [ 570.443486][ C1] plantronics 0003:047F:FFFF.0051: usb_submit_urb(ctrl) failed: -1 [ 570.461830][ T5925] Dev loop6: unable to read RDB block 0 [ 570.468391][ T5925] loop6: unable to read partition table [ 570.483591][T18100] ldm_validate_partition_table(): Disk read failed. [ 570.516029][T18100] Dev loop6: unable to read RDB block 0 [ 570.532265][T18100] loop6: unable to read partition table [ 570.541948][T18100] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 571.130674][T18124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5094'. [ 571.161104][T18124] vlan2: left promiscuous mode [ 571.173776][T18124] bond0: left promiscuous mode [ 571.186452][T18124] bond_slave_0: left promiscuous mode [ 571.204175][T18124] bond_slave_1: left promiscuous mode [ 571.222867][ T5877] usb 4-1: USB disconnect, device number 63 [ 571.226040][T18124] bridge0: port 3(vlan2) entered disabled state [ 571.251621][T18124] bridge_slave_1: left allmulticast mode [ 571.268912][T18124] bridge_slave_1: left promiscuous mode [ 571.292821][T18124] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.334008][T18124] bridge_slave_0: left allmulticast mode [ 571.340479][T18124] bridge_slave_0: left promiscuous mode [ 571.354130][T18124] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.596763][ T5828] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 571.794377][ T5828] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 571.840695][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 571.872228][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 571.907085][ T5828] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 571.946506][ T5828] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 571.971498][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.001660][ T5828] usb 6-1: config 0 descriptor?? [ 572.008947][T18149] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.5107'. [ 572.361092][T18163] netlink: 'syz.3.5113': attribute type 1 has an invalid length. [ 572.445038][T18163] bond1: entered allmulticast mode [ 572.470456][ T5828] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 572.479496][ T5828] plantronics 0003:047F:FFFF.0052: No inputs registered, leaving [ 572.495099][ T5828] plantronics 0003:047F:FFFF.0052: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 572.497503][T18163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 572.623067][T18166] bond1: (slave ip6gretap1): making interface the new active one [ 572.646015][T18166] ip6gretap1: entered allmulticast mode [ 572.673206][T18166] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 572.794026][ T5828] usb 6-1: USB disconnect, device number 35 [ 572.946176][ T5888] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0 [ 572.971900][ T5888] hid-generic 0000:0000:0000.0053: hidraw0: HID v0.00 Device [syz1] on syz0 [ 573.108514][T18182] fido_id[18182]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 573.206711][ T52] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 573.266770][ T5888] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 573.428599][ T52] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 573.443622][ T5888] usb 7-1: Using ep0 maxpacket: 16 [ 573.448873][ T52] usb 2-1: config 0 has no interface number 0 [ 573.448923][ T52] usb 2-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 573.448958][ T52] usb 2-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 573.448982][ T52] usb 2-1: config 0 interface 230 has no altsetting 0 [ 573.459725][ T52] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 573.514320][ T5888] usb 7-1: config 166 has an invalid interface number: 177 but max is 1 [ 573.531502][ T5888] usb 7-1: config 166 has an invalid interface number: 34 but max is 1 [ 573.543293][ T5888] usb 7-1: config 166 has no interface number 0 [ 573.554337][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.571748][ T5888] usb 7-1: config 166 has no interface number 1 [ 573.573436][ T52] usb 2-1: Product: syz [ 573.581620][ T5888] usb 7-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 573.593737][ T52] usb 2-1: Manufacturer: syz [ 573.593760][ T52] usb 2-1: SerialNumber: syz [ 573.606064][ T52] usb 2-1: config 0 descriptor?? [ 573.612992][ T5888] usb 7-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 573.625029][ T5888] usb 7-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 573.628018][T18178] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 573.636189][ T5888] usb 7-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 573.655812][ T5888] usb 7-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 573.659627][T18178] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 573.687894][ T5888] usb 7-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 573.698858][ T5888] usb 7-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 573.706562][ T52] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 573.722669][ T5888] usb 7-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 573.771610][ T52] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 573.804743][ T5888] usb 7-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 573.886348][ T5888] usb 7-1: config 166 interface 177 has no altsetting 0 [ 573.919809][ T5888] usb 7-1: config 166 interface 34 has no altsetting 0 [ 573.964735][ T5888] usb 7-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 573.986795][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.024209][ T5888] usb 7-1: Product: syz [ 574.041951][ T5888] usb 7-1: Manufacturer: syz [ 574.046622][ T5888] usb 7-1: SerialNumber: syz [ 574.273618][ T30] audit: type=1326 audit(1748163650.783:8873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18203 comm="syz.5.5127" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff8539 code=0x0 [ 574.318894][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 574.331215][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 574.339074][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 574.352662][ T5888] ums-realtek 7-1:166.177: USB Mass Storage device detected [ 574.441135][ T5888] ums-realtek 7-1:166.34: USB Mass Storage device detected [ 574.518720][ T5888] ums-realtek 7-1:166.34: probe with driver ums-realtek failed with error -5 [ 574.536104][ T5888] usb 7-1: Found UVC 0.00 device syz (0bda:0138) [ 574.544907][ T5888] usb 7-1: No valid video chain found. [ 574.563048][ T5888] usb 7-1: USB disconnect, device number 12 [ 576.210915][ T52] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 576.428412][T18248] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5142'. [ 577.124054][T18271] input input90: cannot allocate more than FF_MAX_EFFECTS effects [ 577.176872][ T52] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 577.209887][ T5828] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 577.336862][ T52] usb 6-1: Using ep0 maxpacket: 8 [ 577.343654][ T52] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 577.354011][ T52] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 577.364088][ T52] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 577.378130][ T5828] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 577.389600][ T52] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.402933][ T5828] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 577.414424][ T5828] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 577.425881][ T52] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 577.435322][T13827] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 577.443423][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.452800][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.482310][T18267] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 577.515152][ T5890] usb 2-1: USB disconnect, device number 62 [ 577.567002][ T5828] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 577.596967][T13827] usb 7-1: Using ep0 maxpacket: 32 [ 577.613815][T13827] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 577.625043][T13827] usb 7-1: config 0 has no interface number 0 [ 577.661281][T13827] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 577.681718][ T52] usb 6-1: GET_CAPABILITIES returned 0 [ 577.690999][T13827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.699553][ T52] usbtmc 6-1:16.0: can't read capabilities [ 577.707407][T13827] usb 7-1: Product: syz [ 577.711739][T13827] usb 7-1: Manufacturer: syz [ 577.716354][T13827] usb 7-1: SerialNumber: syz [ 577.733944][T13827] usb 7-1: config 0 descriptor?? [ 577.746501][T13827] smsc95xx v2.0.0 [ 577.779750][ T52] usb 4-1: USB disconnect, device number 64 [ 577.827212][ T5888] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 577.887334][ T975] usb 6-1: USB disconnect, device number 36 [ 577.989340][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.000099][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 578.011958][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 578.023140][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 578.033101][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 578.048420][ T5888] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 578.057606][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 578.065693][ T5888] usb 5-1: Product: syz [ 578.070236][ T5888] usb 5-1: Manufacturer: syz [ 578.074883][ T5888] usb 5-1: SerialNumber: syz [ 578.084070][ T5888] usb 5-1: config 0 descriptor?? [ 578.302364][ T5888] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 578.309817][ T5888] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 578.503373][ T5888] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 578.511450][ T5888] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 578.524242][ T5888] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 578.712381][ T5888] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 578.760531][T13827] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 578.794435][T13827] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 578.828073][T13827] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 578.876273][T13827] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 578.906536][T13827] usb 7-1: USB disconnect, device number 13 [ 579.156763][ T5910] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 579.315073][ T5888] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 579.327091][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 579.336121][ T5888] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 579.349406][ T5910] usb 4-1: config 0 interface 0 has no altsetting 0 [ 579.359362][ T5910] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 579.369040][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.378648][ T5910] usb 4-1: Product: syz [ 579.383485][ T5910] usb 4-1: Manufacturer: syz [ 579.388472][ T5910] usb 4-1: SerialNumber: syz [ 579.414363][ T5888] usb 5-1: USB disconnect, device number 51 [ 579.416772][T13827] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 579.484065][ T5910] usb 4-1: config 0 descriptor?? [ 579.587066][T13827] usb 2-1: Using ep0 maxpacket: 8 [ 579.606766][T13827] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 579.623128][T13827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.646734][T13827] usb 2-1: Product: syz [ 579.650944][T13827] usb 2-1: Manufacturer: syz [ 579.655635][T13827] usb 2-1: SerialNumber: syz [ 579.669858][T13827] usb 2-1: config 0 descriptor?? [ 579.893227][T13827] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 579.906480][ T5910] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 580.137151][ T52] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 580.164537][T18318] syz_tun: entered allmulticast mode [ 580.173379][T18317] syz_tun: left allmulticast mode [ 580.387196][ T5910] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 580.462331][ T52] usb 7-1: Using ep0 maxpacket: 8 [ 580.490191][ T52] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 580.507404][ T52] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 580.530389][ T52] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 580.563685][ T52] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 580.575813][T13827] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 580.597492][ T52] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 580.620863][T13827] usb 2-1: USB disconnect, device number 63 [ 580.649455][ T52] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 580.669329][ T5890] usb 4-1: USB disconnect, device number 65 [ 580.711826][ T52] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.970698][ T52] usb 7-1: usb_control_msg returned -32 [ 580.992032][ T52] usbtmc 7-1:16.0: can't read capabilities [ 581.038148][ T5910] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 581.211116][ T5910] usb 6-1: Using ep0 maxpacket: 32 [ 581.227679][ T5910] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 581.235910][ T5910] usb 6-1: config 0 has no interface number 0 [ 581.285141][ T5910] usb 6-1: config 0 interface 184 has no altsetting 0 [ 581.312454][ T5910] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 581.354181][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.387234][ T5910] usb 6-1: Product: syz [ 581.391464][ T5910] usb 6-1: Manufacturer: syz [ 581.396074][ T5910] usb 6-1: SerialNumber: syz [ 581.421562][T18358] netlink: 'syz.1.5184': attribute type 1 has an invalid length. [ 581.430850][ T5910] usb 6-1: config 0 descriptor?? [ 581.445255][ T5910] smsc75xx v1.0.0 [ 581.548827][T18358] bond1: entered allmulticast mode [ 581.554880][T18358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 581.604964][T18364] bond1: (slave ip6gretap1): making interface the new active one [ 581.616453][T18364] ip6gretap1: entered allmulticast mode [ 581.624385][T18364] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 581.750353][T18366] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 581.898815][ T5890] usb 7-1: USB disconnect, device number 14 [ 582.126857][ T5910] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 582.147174][ T5910] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 582.574163][ T5910] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 582.626477][ T5910] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 582.666364][ T5910] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 582.690168][ T5910] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 582.768904][ T5910] usb 6-1: USB disconnect, device number 37 [ 582.966900][ T5888] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 583.153964][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 583.186793][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 583.208049][ T5888] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 583.227968][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.273277][ T5888] usb 5-1: config 0 descriptor?? [ 583.391124][T18411] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5198'. [ 583.417293][T18411] program syz.6.5198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 583.509408][ T5888] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 584.058112][ T5828] usb 5-1: USB disconnect, device number 52 [ 584.369559][ T5890] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 584.581650][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.724677][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.735216][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 584.748802][ T5890] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 584.758233][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.775053][ T5890] usb 2-1: config 0 descriptor?? [ 585.241381][ T5890] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 585.261536][ T5890] plantronics 0003:047F:FFFF.0054: No inputs registered, leaving [ 585.279549][ T5890] plantronics 0003:047F:FFFF.0054: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 585.339564][T18473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5223'. [ 585.378878][ T52] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 585.529489][T18477] input: syz0 as /devices/virtual/input/input91 [ 585.541576][ T52] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.561069][ T52] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 585.572635][ T5925] udevd[5925]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 585.583905][ T52] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 585.606959][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 585.615005][ T52] usb 4-1: SerialNumber: syz [ 585.687058][ T5888] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 585.773815][T18482] loop2: detected capacity change from 0 to 7 [ 585.782456][ T5889] Dev loop2: unable to read RDB block 7 [ 585.789943][ T5889] loop2: unable to read partition table [ 585.795973][ T5889] loop2: partition table beyond EOD, truncated [ 585.805621][T18482] Dev loop2: unable to read RDB block 7 [ 585.812649][T18482] loop2: unable to read partition table [ 585.818772][T18482] loop2: partition table beyond EOD, truncated [ 585.826861][T18482] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 585.851546][ T5888] usb 6-1: Using ep0 maxpacket: 8 [ 585.865927][ T5888] usb 6-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 585.866153][ T52] usb 4-1: 0:2 : does not exist [ 585.882645][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.899912][ T5888] usb 6-1: Product: syz [ 585.904689][ T5888] usb 6-1: Manufacturer: syz [ 585.934851][ T52] usb 4-1: USB disconnect, device number 66 [ 585.949380][ T5888] usb 6-1: SerialNumber: syz [ 585.994787][ T5888] usb 6-1: config 0 descriptor?? [ 586.025337][ T5888] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 586.034862][ T5925] udevd[5925]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.630724][ T5910] usb 2-1: USB disconnect, device number 64 [ 586.717038][ T52] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 586.878592][ T52] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.889543][ T52] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 586.900876][ T52] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 586.910705][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 586.919144][ T52] usb 5-1: SerialNumber: syz [ 587.140179][ T52] usb 5-1: 0:2 : does not exist [ 587.162324][ T52] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 587.175358][ T52] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 587.207235][ T52] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 587.219435][T18512] KVM: debugfs: duplicate directory 18512-5 [ 587.260915][ T5888] gspca_sonixj: reg_w1 err -71 [ 587.265797][ T5888] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 587.266310][ T52] usb 5-1: USB disconnect, device number 53 [ 587.293684][ T5888] usb 6-1: USB disconnect, device number 38 [ 587.786931][ T5890] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 587.951632][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 587.959671][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.973910][T18535] input: syz0 as /devices/virtual/input/input92 [ 587.986498][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.014628][ T5890] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 588.025191][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.063514][ T5890] usb 2-1: config 0 descriptor?? [ 588.137532][ T52] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 588.180859][T18544] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.5252'. [ 588.291364][ T52] usb 5-1: Using ep0 maxpacket: 16 [ 588.308779][ T52] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 588.324841][ T52] usb 5-1: config 0 has no interface number 0 [ 588.336435][ T52] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 588.349581][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.362287][ T52] usb 5-1: Product: syz [ 588.366547][ T52] usb 5-1: Manufacturer: syz [ 588.374516][ T52] usb 5-1: SerialNumber: syz [ 588.414948][ T52] usb 5-1: config 0 descriptor?? [ 588.454522][ T52] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 588.485296][T18554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 588.809010][T13827] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 588.862020][T13827] hid-generic 0000:0000:0000.0056: hidraw0: HID v0.00 Device [syz0] on syz0 [ 588.888173][ T5890] letsketch 0003:6161:4D15.0055: Device info: 豧 [ 589.089531][ T5890] letsketch 0003:6161:4D15.0055: Device info: 꿨 [ 589.329928][ T5890] usb 2-1: Max retries (5) exceeded reading string descriptor 202 [ 589.352070][ T5890] letsketch 0003:6161:4D15.0055: probe with driver letsketch failed with error -71 [ 589.386536][ T5890] usb 2-1: USB disconnect, device number 65 [ 589.680449][ T52] gspca_spca1528: reg_w err -71 [ 589.685635][ T52] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 589.705242][ T52] usb 5-1: USB disconnect, device number 54 [ 590.466837][ T5890] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 590.646517][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.669906][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.684268][ T5890] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 590.702720][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.714555][ T5890] usb 6-1: config 0 descriptor?? [ 591.167301][ T52] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 591.190030][ T5890] hid-thrustmaster 0003:044F:B65D.0057: unknown main item tag 0x0 [ 591.235341][ T5890] hid-thrustmaster 0003:044F:B65D.0057: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 591.263028][ T5890] hid-thrustmaster 0003:044F:B65D.0057: Wrong number of endpoints? [ 591.359199][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.410798][ T52] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 591.450685][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.498361][ T52] usb 2-1: config 0 descriptor?? [ 591.608768][ C1] hid-thrustmaster 0003:044F:B65D.0057: URB to get model id failed with error -71 [ 591.619824][ T5890] usb 6-1: USB disconnect, device number 39 [ 591.945379][ T52] keytouch 0003:0926:3333.0058: fixing up Keytouch IEC report descriptor [ 591.990504][ T52] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0058/input/input93 [ 592.188774][ T52] keytouch 0003:0926:3333.0058: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 592.303626][ T52] usb 2-1: USB disconnect, device number 66 [ 592.498996][T18638] fido_id[18638]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 592.651773][T18648] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5293'. [ 593.458255][T18678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5308'. [ 593.532269][ T975] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 593.613379][ T5888] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 593.701236][ T975] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 593.724514][ T975] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 593.736349][ T975] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 593.753902][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.787089][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 593.805775][T18670] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 593.817729][ T5888] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 593.835856][ T975] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 593.843219][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.859657][ T5888] usb 2-1: Product: syz [ 593.863900][ T5888] usb 2-1: Manufacturer: syz [ 593.875334][ T5888] usb 2-1: SerialNumber: syz [ 593.929069][ T5888] usb 2-1: config 0 descriptor?? [ 594.084829][ T975] usb 4-1: USB disconnect, device number 67 [ 594.192600][ T5888] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 594.252167][T18703] syzkaller1: entered promiscuous mode [ 594.261767][T18703] syzkaller1: entered allmulticast mode [ 595.200173][ T5888] gspca_sunplus: reg_w_riv err -71 [ 595.209550][ T5888] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 595.235065][ T5888] usb 2-1: USB disconnect, device number 67 [ 596.062635][T18743] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 597.296630][ T30] audit: type=1326 audit(1748163673.803:8874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.1.5355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 597.340907][ T30] audit: type=1326 audit(1748163673.813:8875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.1.5355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 597.379551][ T30] audit: type=1326 audit(1748163673.813:8876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.1.5355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 597.408911][ T30] audit: type=1326 audit(1748163673.813:8877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.1.5355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 597.435033][ T30] audit: type=1326 audit(1748163673.813:8878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.1.5355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf711e558 code=0x7ffc0000 [ 597.461699][ T30] audit: type=1326 audit(1748163673.813:8879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.1.5355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 597.484712][ T30] audit: type=1326 audit(1748163673.813:8880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.1.5355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf711e558 code=0x7ffc0000 [ 597.508596][ T30] audit: type=1326 audit(1748163673.813:8881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.1.5355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 597.540620][ T30] audit: type=1326 audit(1748163673.813:8882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.1.5355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf711e558 code=0x7ffc0000 [ 597.566076][ T30] audit: type=1326 audit(1748163673.813:8883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18788 comm="syz.1.5355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf711e558 code=0x7ffc0000 [ 598.015049][T18803] netlink: 'syz.3.5362': attribute type 4 has an invalid length. [ 598.127302][ T5888] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 598.358550][ T5888] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 598.376744][ T5888] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 598.392265][ T5888] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 598.442028][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.482218][T18795] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 598.525611][ T5888] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 598.881174][ T5888] usb 6-1: USB disconnect, device number 40 [ 599.688085][T18831] loop2: detected capacity change from 0 to 7 [ 599.699878][ T5925] Dev loop2: unable to read RDB block 7 [ 599.711127][ T5925] loop2: unable to read partition table [ 599.731347][ T5925] loop2: partition table beyond EOD, truncated [ 599.752327][T18831] Dev loop2: unable to read RDB block 7 [ 599.772857][T18831] loop2: unable to read partition table [ 599.790677][T18831] loop2: partition table beyond EOD, truncated [ 599.807001][ T5888] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 599.825982][T18831] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 599.996731][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 600.008141][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.021826][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.055838][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 600.098016][ T5888] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 600.132631][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.163265][ T5888] usb 2-1: config 0 descriptor?? [ 600.298795][T18848] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 600.305795][T18848] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 600.351461][T18848] vhci_hcd vhci_hcd.0: Device attached [ 600.362603][T18850] vhci_hcd: connection closed [ 600.368883][ T3064] vhci_hcd: stop threads [ 600.379488][ T3064] vhci_hcd: release socket [ 600.383977][T18856] bond0: entered promiscuous mode [ 600.390109][ T3064] vhci_hcd: disconnect device [ 600.395070][T18856] bond_slave_1: entered promiscuous mode [ 600.596477][ T5888] HID 045e:07da: Invalid code 65791 type 1 [ 600.646444][ T5888] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0059/input/input94 [ 600.689954][ T5888] microsoft 0003:045E:07DA.0059: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 600.820965][ T5890] usb 2-1: USB disconnect, device number 68 [ 600.915880][T18864] fido_id[18864]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 602.427101][ T5890] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 602.587393][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 602.613701][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.651271][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.688286][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 602.743326][ T5890] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 602.790192][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.829222][ T5890] usb 2-1: config 0 descriptor?? [ 603.259049][ T5890] shield 0003:0955:7214.005A: unknown main item tag 0x0 [ 603.266068][ T5890] shield 0003:0955:7214.005A: unknown main item tag 0x0 [ 603.301429][ T5890] shield 0003:0955:7214.005A: unknown main item tag 0x0 [ 603.317948][ T5890] shield 0003:0955:7214.005A: unknown main item tag 0x0 [ 603.324967][ T5890] shield 0003:0955:7214.005A: unknown main item tag 0x0 [ 603.370791][ T5890] input: HID 0955:7214 Haptics as /devices/virtual/input/input95 [ 603.448414][T18909] random: crng reseeded on system resumption [ 603.528843][ T5890] shield 0003:0955:7214.005A: Registered Thunderstrike controller [ 603.564285][ T5890] shield 0003:0955:7214.005A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 603.900892][T18954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.921695][T18954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.933648][T18967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5431'. [ 603.957187][T18967] hsr_slave_0: left promiscuous mode [ 603.966736][T18967] hsr_slave_1: left promiscuous mode [ 604.015617][T13827] shield 0003:0955:7214.005A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 604.015934][ T5888] usb 2-1: USB disconnect, device number 69 [ 604.057217][T13827] shield 0003:0955:7214.005A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 604.106938][T13827] shield 0003:0955:7214.005A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 604.122222][T13827] shield 0003:0955:7214.005A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 604.139978][ T975] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 604.307901][ T975] usb 5-1: Using ep0 maxpacket: 32 [ 604.335212][ T975] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 604.367032][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.416615][ T975] usb 5-1: config 0 descriptor?? [ 604.431928][ T975] gspca_main: sunplus-2.14.0 probing 041e:400b [ 605.471255][ T975] gspca_sunplus: reg_w_riv err -71 [ 605.478547][ T975] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 605.517086][ T975] usb 5-1: USB disconnect, device number 55 [ 605.979431][T19007] binder: 19006:19007 ioctl c0306201 80000480 returned -14 [ 605.987840][T19005] loop4: detected capacity change from 0 to 524255232 [ 606.264387][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 606.264405][ T30] audit: type=1800 audit(1748163682.773:8969): pid=19017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5452" name="file1" dev="tmpfs" ino=1422 res=0 errno=0 [ 606.681488][T19028] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 607.322886][T19050] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.330180][T19050] bridge0: port 2(bridge_slave_1) entered listening state [ 607.337669][T19050] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.344865][T19050] bridge0: port 1(bridge_slave_0) entered listening state [ 607.389426][T19050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 607.706761][T13827] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 607.751553][T19050] syz.4.5463 (19050) used greatest stack depth: 20200 bytes left [ 607.918217][T13827] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 607.953174][T13827] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 607.996573][T13827] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 608.026300][T19073] input: syz0 as /devices/virtual/input/input96 [ 608.032745][T13827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.056055][T13827] usb 7-1: Product: syz [ 608.065973][T13827] usb 7-1: Manufacturer: syz [ 608.075875][T13827] usb 7-1: SerialNumber: syz [ 608.120387][T19060] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 608.887089][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 609.048443][ T975] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 609.061044][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 609.079197][ T5890] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 609.084566][ T10] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 609.101535][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 609.112264][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 609.122464][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.136245][ T10] usb 4-1: Product: syz [ 609.146011][ T10] usb 4-1: Manufacturer: syz [ 609.151277][ T10] usb 4-1: SerialNumber: syz [ 609.180890][T13827] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 609.188713][T13827] cdc_ncm 7-1:1.0: dwNtbInMaxSize=6 is too small. Using 2048 [ 609.197031][T13827] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 609.229117][ T975] usb 6-1: config index 0 descriptor too short (expected 31, got 27) [ 609.255179][ T975] usb 6-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 609.268077][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 609.276353][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.282339][ T975] usb 6-1: config 1 interface 0 has no altsetting 0 [ 609.289151][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.304264][ T5890] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 609.309476][ T975] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 609.313539][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.330112][ T975] usb 6-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 609.335349][ T5890] usb 2-1: config 0 descriptor?? [ 609.349726][ T975] usb 6-1: Product: syz [ 609.353954][ T975] usb 6-1: Manufacturer: syz [ 609.355468][ T5890] hub 2-1:0.0: USB hub found [ 609.367641][ T975] usb 6-1: SerialNumber: syz [ 609.392230][T13827] cdc_ncm 7-1:1.0: setting tx_max = 36 [ 609.392637][ T10] usb 4-1: Found UVC 0.00 device syz (8086:0b07) [ 609.429111][ T10] usb 4-1: No valid video chain found. [ 609.449440][ T10] usb 4-1: USB disconnect, device number 68 [ 609.465780][T13827] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 609.499104][T13827] usb 7-1: USB disconnect, device number 15 [ 609.536330][T13827] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 609.557340][ T5890] hub 2-1:0.0: 1 port detected [ 609.648968][ T30] audit: type=1326 audit(1748163686.163:8970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19109 comm="syz.4.5490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 609.702357][ T30] audit: type=1326 audit(1748163686.163:8971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19109 comm="syz.4.5490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 609.755949][ T30] audit: type=1326 audit(1748163686.163:8972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19109 comm="syz.4.5490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 609.778103][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.790508][ T30] audit: type=1326 audit(1748163686.163:8973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19109 comm="syz.4.5490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 609.812592][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.847147][ T30] audit: type=1326 audit(1748163686.163:8974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19109 comm="syz.4.5490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7fb5539 code=0x7ffc0000 [ 610.202621][ T975] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 610.393834][ T975] usb 6-1: USB disconnect, device number 41 [ 610.413778][ T975] usblp0: removed [ 610.542976][T19124] netlink: 'syz.6.5494': attribute type 1 has an invalid length. [ 610.590786][T19124] bond3: entered promiscuous mode [ 610.596469][T19124] 8021q: adding VLAN 0 to HW filter on device bond3 [ 610.632304][T19126] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 610.669458][T19126] bond3: (slave batadv1): making interface the new active one [ 610.768954][T19126] batadv1: entered promiscuous mode [ 610.781459][T19126] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 610.806876][ T5890] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 610.813750][ T5890] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 610.869862][ T5890] usbhid 2-1:0.0: can't add hid device: -32 [ 610.875943][ T5890] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 610.962037][ T5890] usb 2-1: USB disconnect, device number 70 [ 611.327846][ T5828] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 611.379918][T19138] syz_tun: entered promiscuous mode [ 611.385864][T19138] macsec1: entered promiscuous mode [ 611.412067][T19138] macsec1: entered allmulticast mode [ 611.424439][T19138] syz_tun: entered allmulticast mode [ 611.472010][T19138] syz_tun: left allmulticast mode [ 611.497324][T19138] syz_tun: left promiscuous mode [ 611.514386][ T5828] usb 7-1: Using ep0 maxpacket: 16 [ 611.535665][ T5828] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 611.568101][ T5828] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 611.613748][ T5828] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 611.637946][ T5828] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 611.652356][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.661853][ T5828] usb 7-1: Product: syz [ 611.666041][ T5828] usb 7-1: Manufacturer: syz [ 611.676526][ T5828] usb 7-1: SerialNumber: syz [ 611.846942][T13827] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 612.009505][T13827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.021861][T13827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.033579][T13827] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 612.067285][T13827] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 612.078117][T13827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.101756][ T5828] usb 7-1: 0:2 : does not exist [ 612.113453][T13827] usb 6-1: config 0 descriptor?? [ 612.547202][T13827] plantronics 0003:047F:FFFF.005B: No inputs registered, leaving [ 612.565760][T13827] plantronics 0003:047F:FFFF.005B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 612.719763][ T52] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 612.886508][ T52] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 612.921822][ T10] usb 7-1: USB disconnect, device number 16 [ 612.922595][ T52] usb 2-1: config 0 has no interface number 0 [ 612.958179][ T52] usb 2-1: config 0 interface 255 has no altsetting 0 [ 612.991964][ T52] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 613.027086][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.051662][ T52] usb 2-1: config 0 descriptor?? [ 613.069290][ T52] cp210x 2-1:0.255: cp210x converter detected [ 613.208166][ C1] plantronics 0003:047F:FFFF.005B: hid_field_extract() called with n (132) > 32! (syz.4.5513) [ 613.422109][ T10] usb 6-1: USB disconnect, device number 42 [ 613.493442][ T52] cp210x 2-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 613.703406][ T52] cp210x 2-1:0.255: GPIO initialisation failed: -19 [ 613.713389][ T52] usb 2-1: cp210x converter now attached to ttyUSB0 [ 613.919578][ T10] usb 2-1: USB disconnect, device number 71 [ 613.926940][ T975] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 613.961429][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 614.042334][ T10] cp210x 2-1:0.255: device disconnected [ 614.136307][ T975] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 614.171816][ T975] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 614.197877][ T975] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 614.263193][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.542208][ T975] usb 5-1: usb_control_msg returned -32 [ 614.562479][ T975] usbtmc 5-1:16.0: can't read capabilities [ 614.756979][ T5910] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 614.917303][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 614.928115][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.941465][ T5910] usb 2-1: config 0 has no interfaces? [ 614.951415][ T5910] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 614.976890][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.002541][ T5910] usb 2-1: config 0 descriptor?? [ 615.310381][ T5910] usb 2-1: USB disconnect, device number 72 [ 615.768613][ T5910] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 615.827333][ T52] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 615.926885][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 615.951424][ T5910] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 615.960107][ T5910] usb 4-1: config 0 has no interface number 0 [ 615.985986][ T5910] usb 4-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 615.998735][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.014127][ T5910] usb 4-1: Product: syz [ 616.019199][ T52] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.026733][ T5910] usb 4-1: Manufacturer: syz [ 616.045260][ T52] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.052784][ T5910] usb 4-1: SerialNumber: syz [ 616.070414][ T52] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 616.101949][ T5910] usb 4-1: config 0 descriptor?? [ 616.105652][ T52] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 616.136530][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.159665][ T52] usb 6-1: config 0 descriptor?? [ 616.297859][ T30] audit: type=1326 audit(1748163692.803:8975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19236 comm="syz.6.5541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 616.394072][ T30] audit: type=1326 audit(1748163692.803:8976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19236 comm="syz.6.5541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 616.461069][ T30] audit: type=1326 audit(1748163692.803:8977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19236 comm="syz.6.5541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 616.495057][ T30] audit: type=1326 audit(1748163692.803:8978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19236 comm="syz.6.5541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 616.523880][ T30] audit: type=1326 audit(1748163692.803:8979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19236 comm="syz.6.5541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 616.652039][ T52] plantronics 0003:047F:FFFF.005C: No inputs registered, leaving [ 616.663859][ T30] audit: type=1326 audit(1748163692.803:8980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19236 comm="syz.6.5541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 616.690941][ T52] plantronics 0003:047F:FFFF.005C: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 616.705286][ T30] audit: type=1326 audit(1748163692.803:8981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19236 comm="syz.6.5541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 616.724655][ T975] usb 5-1: USB disconnect, device number 56 [ 616.730260][ T5890] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 616.778202][ T30] audit: type=1326 audit(1748163692.803:8982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19236 comm="syz.6.5541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 616.874278][ T5888] usb 6-1: USB disconnect, device number 43 [ 616.912201][ T5890] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 616.937360][ T30] audit: type=1326 audit(1748163692.803:8983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19236 comm="syz.6.5541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 616.967524][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.987183][ T5890] usb 2-1: Product: syz [ 616.992251][ T5890] usb 2-1: Manufacturer: syz [ 617.004669][ T5890] usb 2-1: SerialNumber: syz [ 617.012454][ T30] audit: type=1326 audit(1748163692.803:8984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19236 comm="syz.6.5541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 617.058718][T19244] fido_id[19244]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 617.337069][ T52] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 618.099860][ T5890] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 618.106437][ T5890] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 618.114509][ T5890] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 618.308433][ T5890] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 618.363780][ T5890] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 618.420048][ T5890] usb 2-1: USB disconnect, device number 73 [ 618.456551][ T5890] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 618.564728][ T5910] kaweth 4-1:0.235: Firmware present in device. [ 618.606912][ T5910] kaweth 4-1:0.235: Error reading configuration (-71), no net device created [ 618.633221][ T5910] kaweth 4-1:0.235: probe with driver kaweth failed with error -5 [ 618.677154][ T5910] usb 4-1: USB disconnect, device number 69 [ 618.713345][ T52] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 618.911673][ T52] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.954866][ T52] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 618.984467][ T52] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.018771][ T52] usb 7-1: config 0 descriptor?? [ 619.059277][ T52] pwc: Askey VC010 type 2 USB webcam detected. [ 619.296475][T19305] input: syz1 as /devices/virtual/input/input97 [ 619.337895][ T5890] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 619.454668][ T52] pwc: recv_control_msg error -32 req 02 val 2b00 [ 619.470839][ T52] pwc: recv_control_msg error -32 req 02 val 2700 [ 619.494265][ T5910] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 619.495470][ T52] pwc: recv_control_msg error -32 req 02 val 2c00 [ 619.509116][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 619.527691][ T5890] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 619.543516][ T5890] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 619.564112][ T5890] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 619.608198][ T5890] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 619.618807][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.666939][ T5890] usb 4-1: Product: syz [ 619.681421][ T5890] usb 4-1: Manufacturer: syz [ 619.687767][ T5910] usb 6-1: Using ep0 maxpacket: 32 [ 619.696438][ T5890] usb 4-1: SerialNumber: syz [ 619.698675][ T5910] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 619.742927][ T5910] usb 6-1: config 0 has no interface number 0 [ 619.745660][ T52] pwc: recv_control_msg error -71 req 04 val 1300 [ 619.760375][ T52] pwc: recv_control_msg error -71 req 04 val 1400 [ 619.774783][ T5910] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 619.779807][ T52] pwc: recv_control_msg error -71 req 02 val 2000 [ 619.810848][ T5910] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 619.819206][ T52] pwc: recv_control_msg error -71 req 02 val 2100 [ 619.829617][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.851576][ T52] pwc: recv_control_msg error -71 req 04 val 1500 [ 619.856710][ T5910] usb 6-1: Product: syz [ 619.862474][ T5910] usb 6-1: Manufacturer: syz [ 619.872365][ T52] pwc: recv_control_msg error -71 req 02 val 2500 [ 619.876735][ T5910] usb 6-1: SerialNumber: syz [ 619.889901][ T5910] usb 6-1: config 0 descriptor?? [ 619.894747][ T52] pwc: recv_control_msg error -71 req 02 val 2400 [ 619.909566][ T5910] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 619.923138][ T52] pwc: recv_control_msg error -71 req 02 val 2600 [ 619.947125][ T5910] em28xx 6-1:0.132: Video interface 132 found: [ 619.956489][ T52] pwc: recv_control_msg error -71 req 02 val 2900 [ 619.981242][ T52] pwc: recv_control_msg error -71 req 02 val 2800 [ 620.002887][ T52] pwc: recv_control_msg error -71 req 04 val 1100 [ 620.026224][ T52] pwc: recv_control_msg error -71 req 04 val 1200 [ 620.074053][ T52] pwc: Registered as video103. [ 620.119670][ T52] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input98 [ 620.141556][ T5890] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 620.182611][ T52] usb 7-1: USB disconnect, device number 18 [ 620.353196][ T5910] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 620.888067][T19340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5575'. [ 621.019081][ T5890] usb 4-1: USB disconnect, device number 70 [ 621.141814][ T5910] em28xx 6-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 621.166923][ T5910] em28xx 6-1:0.132: failed to read eeprom (err=-5) [ 621.188018][ T5983] udevd[5983]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 621.214170][ T5910] em28xx 6-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 621.297187][ T5910] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 621.305074][ T5910] em28xx 6-1:0.132: analog set to bulk mode. [ 621.350827][ T975] em28xx 6-1:0.132: Registering V4L2 extension [ 621.394119][ T5910] usb 6-1: USB disconnect, device number 44 [ 621.434340][ T5910] em28xx 6-1:0.132: Disconnecting em28xx [ 621.961358][ T975] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 621.980357][ T975] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 622.033909][ T975] em28xx 6-1:0.132: No AC97 audio processor [ 622.088883][ T975] usb 6-1: Decoder not found [ 622.098197][ T975] em28xx 6-1:0.132: failed to create media graph [ 622.121622][ T975] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 622.186524][ T975] em28xx 6-1:0.132: Remote control support is not available for this card. [ 622.311985][ T5910] em28xx 6-1:0.132: Closing input extension [ 622.420671][ T5910] em28xx 6-1:0.132: Freeing device [ 622.693652][ T975] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 622.827436][ T5890] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 622.872316][ T975] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 622.932949][ T975] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 622.954487][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 622.990837][ T975] usb 4-1: Product: syz [ 623.011234][ T975] usb 4-1: Manufacturer: syz [ 623.031471][ T975] usb 4-1: SerialNumber: syz [ 623.061867][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 623.142857][ T5890] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 623.170182][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.202783][ T5890] usb 2-1: Product: syz [ 623.222695][ T5890] usb 2-1: Manufacturer: syz [ 623.240323][ T5890] usb 2-1: SerialNumber: syz [ 623.256105][ T5890] usb 2-1: config 0 descriptor?? [ 623.267100][ T5890] gspca_main: sq930x-2.14.0 probing 2770:930c [ 623.286582][ T975] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 71 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 623.311430][T19392] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 623.360788][T19392] syz.6.5592 (19392) used greatest stack depth: 19976 bytes left [ 623.566347][ C0] usblp0: nonzero write bulk status received: -71 [ 623.583628][ T975] usb 4-1: USB disconnect, device number 71 [ 623.602399][ T975] usblp0: removed [ 624.071063][T19407] input: syz0 as /devices/virtual/input/input99 [ 624.302897][ T30] kauditd_printk_skb: 658 callbacks suppressed [ 624.302915][ T30] audit: type=1326 audit(1748163700.813:9643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19408 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7fc00000 [ 624.400311][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.407196][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.557039][ T5890] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 624.777054][ T5890] gspca_sq930x: Sensor ov9630 not yet treated [ 624.783468][ T5890] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 624.799028][ T5890] usb 2-1: USB disconnect, device number 74 [ 625.019135][ T30] audit: type=1326 audit(1748163701.523:9644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19408 comm="syz.3.5600" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf708e539 code=0x7fc00000 [ 625.286573][T19437] netlink: 'syz.6.5609': attribute type 4 has an invalid length. [ 625.335543][T19437] netlink: 'syz.6.5609': attribute type 4 has an invalid length. [ 625.427593][ T10] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 625.593884][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.615439][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 625.625833][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.647594][ T10] usb 4-1: config 0 descriptor?? [ 625.667912][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 626.017153][ T5910] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 626.062120][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 626.072691][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 626.083040][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 626.199205][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.210541][ T5910] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 626.219780][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.236726][ T5910] usb 5-1: config 0 descriptor?? [ 626.295794][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 626.307097][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 626.314327][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 626.321804][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 626.332416][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 626.339767][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 626.349948][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 626.363774][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 626.371152][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 626.378286][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 626.385680][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 626.400033][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 626.415074][ T10] pwc: Registered as video103. [ 626.426233][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input100 [ 626.469005][ T10] usb 4-1: USB disconnect, device number 72 [ 626.500674][ T5910] usbhid 5-1:0.0: can't add hid device: -71 [ 626.523045][ T5910] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 626.549898][ T5910] usb 5-1: USB disconnect, device number 57 [ 626.773404][T19459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5616'. [ 627.023243][ T5910] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 627.186954][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 627.200517][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.222991][ T5910] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 627.238491][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.255152][ T5910] usb 5-1: config 0 descriptor?? [ 627.271777][ T5910] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 627.295852][ T5910] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 627.492693][ T5910] usb 5-1: USB disconnect, device number 58 [ 627.498728][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 627.516436][ T5910] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 627.708436][T19451] ldusb: No device or device unplugged -19 [ 628.956900][ T5890] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 629.118747][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.132958][ T5890] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 629.144714][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.164046][ T5890] usb 5-1: config 0 descriptor?? [ 629.179589][ T5890] pwc: Askey VC010 type 2 USB webcam detected. [ 629.581350][ T5890] pwc: recv_control_msg error -32 req 02 val 2b00 [ 629.588633][ T5890] pwc: recv_control_msg error -32 req 02 val 2700 [ 629.595834][ T5890] pwc: recv_control_msg error -32 req 02 val 2c00 [ 629.804622][ T5890] pwc: recv_control_msg error -71 req 04 val 1300 [ 629.817323][ T5890] pwc: recv_control_msg error -71 req 04 val 1400 [ 629.846844][ T5890] pwc: recv_control_msg error -71 req 02 val 2000 [ 629.855236][ T5890] pwc: recv_control_msg error -71 req 02 val 2100 [ 629.872779][ T5890] pwc: recv_control_msg error -71 req 04 val 1500 [ 629.887466][ T5890] pwc: recv_control_msg error -71 req 02 val 2500 [ 629.894922][ T5890] pwc: recv_control_msg error -71 req 02 val 2400 [ 629.917617][ T5890] pwc: recv_control_msg error -71 req 02 val 2600 [ 629.926847][ T5890] pwc: recv_control_msg error -71 req 02 val 2900 [ 629.943908][ T5890] pwc: recv_control_msg error -71 req 02 val 2800 [ 629.966802][ T5890] pwc: recv_control_msg error -71 req 04 val 1100 [ 629.973752][ T5890] pwc: recv_control_msg error -71 req 04 val 1200 [ 630.004513][ T5890] pwc: Registered as video103. [ 630.036305][ T5890] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input101 [ 630.117877][ T5890] usb 5-1: USB disconnect, device number 59 [ 630.384207][T19540] team0: entered promiscuous mode [ 630.398479][T19540] team_slave_0: entered promiscuous mode [ 630.407603][T19540] team_slave_1: entered promiscuous mode [ 630.415849][T19540] geneve0: entered promiscuous mode [ 630.434723][T19540] batadv_slave_0: entered promiscuous mode [ 630.442005][T19539] batadv_slave_0: left promiscuous mode [ 630.451401][T19539] team0: left promiscuous mode [ 630.459052][T19539] team_slave_0: left promiscuous mode [ 630.465211][T19539] team_slave_1: left promiscuous mode [ 630.474410][T19539] geneve0: left promiscuous mode [ 630.657894][ T5890] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 630.681107][T19554] netlink: 'syz.6.5655': attribute type 1 has an invalid length. [ 630.702501][T19554] netlink: 'syz.6.5655': attribute type 2 has an invalid length. [ 630.720390][T19554] netlink: 'syz.6.5655': attribute type 1 has an invalid length. [ 630.738425][T19554] netlink: 'syz.6.5655': attribute type 8 has an invalid length. [ 630.746418][T19554] netlink: 816 bytes leftover after parsing attributes in process `syz.6.5655'. [ 630.858078][ T5910] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 630.866806][ T5890] usb 6-1: Using ep0 maxpacket: 16 [ 630.885248][ T5890] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 630.904474][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 630.939248][ T5890] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 630.974276][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.000854][ T5890] usb 6-1: Product: syz [ 631.011961][ T5890] usb 6-1: Manufacturer: syz [ 631.023161][ T5890] usb 6-1: SerialNumber: syz [ 631.042490][ T5890] usb 6-1: config 0 descriptor?? [ 631.050908][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.054620][ T5890] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 631.082383][ T5890] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 631.082888][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.106842][ T52] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 631.150567][ T5910] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 631.190485][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.224787][ T5910] usb 2-1: config 0 descriptor?? [ 631.258838][ T52] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 631.301158][ T52] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.343722][ T52] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.379851][ T52] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 631.418648][ T52] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 631.432108][ T52] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 631.443838][ T52] usb 7-1: Manufacturer: syz [ 631.457135][ T52] usb 7-1: config 0 descriptor?? [ 631.674911][ T5910] cm6533_jd 0003:0D8C:0022.005D: unknown main item tag 0x0 [ 631.683283][ T5910] cm6533_jd 0003:0D8C:0022.005D: unknown main item tag 0x0 [ 631.695428][ T5910] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.005D/input/input102 [ 631.710886][ T5890] em28xx 6-1:0.0: unknown em28xx chip ID (108) [ 631.726793][ T5910] cm6533_jd 0003:0D8C:0022.005D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 631.896546][ T52] appleir 0003:05AC:8243.005E: unknown main item tag 0x0 [ 631.905451][ T52] appleir 0003:05AC:8243.005E: No inputs registered, leaving [ 631.914099][ T5890] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 631.920199][ T5910] usb 2-1: USB disconnect, device number 75 [ 631.944468][ T52] appleir 0003:05AC:8243.005E: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 632.124557][ T5890] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 632.132107][ T5890] em28xx 6-1:0.0: No AC97 audio processor [ 632.143503][ T5890] usb 6-1: USB disconnect, device number 45 [ 632.151902][ T5890] em28xx 6-1:0.0: Disconnecting em28xx [ 632.165665][ T5890] em28xx 6-1:0.0: Freeing device [ 632.897775][ T5910] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 633.063345][T10406] bridge_slave_1: left allmulticast mode [ 633.079559][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.101156][T10406] bridge_slave_1: left promiscuous mode [ 633.114377][ T5910] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 633.128579][T10406] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.143277][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.154921][T19588] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 633.166111][T10406] bridge_slave_0: left allmulticast mode [ 633.174626][ T5910] usb 2-1: config 0 descriptor?? [ 633.180364][T19588] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 633.190738][T19588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 633.191584][T10406] bridge_slave_0: left promiscuous mode [ 633.201673][ T5910] pwc: Askey VC010 type 2 USB webcam detected. [ 633.220189][T19588] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 633.237269][T10406] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.237357][T19588] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 633.342572][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 633.359966][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 633.377167][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 633.388540][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 633.398835][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 633.503345][T10406] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 633.517238][T10406] ip6gretap1 (unregistering): left allmulticast mode [ 633.693178][ T5910] pwc: recv_control_msg error -32 req 02 val 2b00 [ 633.720452][ T5910] pwc: recv_control_msg error -32 req 02 val 2700 [ 633.750148][ T5910] pwc: recv_control_msg error -32 req 02 val 2c00 [ 633.931769][ T52] usb 7-1: USB disconnect, device number 19 [ 633.967595][ T5910] pwc: recv_control_msg error -71 req 04 val 1300 [ 633.997106][ T5910] pwc: recv_control_msg error -71 req 04 val 1400 [ 634.016492][ T5910] pwc: recv_control_msg error -71 req 02 val 2000 [ 634.053258][ T5910] pwc: recv_control_msg error -71 req 02 val 2100 [ 634.075179][ T5910] pwc: recv_control_msg error -71 req 04 val 1500 [ 634.106043][ T5910] pwc: recv_control_msg error -71 req 02 val 2500 [ 634.122367][ T5910] pwc: recv_control_msg error -71 req 02 val 2400 [ 634.145123][ T5910] pwc: recv_control_msg error -71 req 02 val 2600 [ 634.153807][ T5910] pwc: recv_control_msg error -71 req 02 val 2900 [ 634.198271][ T5910] pwc: recv_control_msg error -71 req 02 val 2800 [ 634.235043][ T5910] pwc: recv_control_msg error -71 req 04 val 1100 [ 634.255864][ T5910] pwc: recv_control_msg error -71 req 04 val 1200 [ 634.296027][ T5910] pwc: Registered as video103. [ 634.327319][ T5910] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input103 [ 634.355772][ T5910] usb 2-1: USB disconnect, device number 76 [ 634.870152][T19592] syz.5.5670 (19592): drop_caches: 2 [ 634.956231][T10406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.997900][T10406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.022095][T10406] bond0 (unregistering): Released all slaves [ 635.379246][T10406] bond1 (unregistering): Released all slaves [ 635.438099][ T5846] Bluetooth: hci1: command tx timeout [ 635.514816][T10406] tipc: Left network mode [ 635.586095][T19615] netlink: 27 bytes leftover after parsing attributes in process `syz.6.5678'. [ 636.346995][ T5910] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 636.466087][T10406] hsr_slave_0: left promiscuous mode [ 636.528971][T10406] hsr_slave_1: left promiscuous mode [ 636.561907][T10406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.569212][ T5910] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 636.606006][ T5910] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 636.646490][ T5910] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 636.677498][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.696005][ T5910] usb 7-1: Product: syz [ 636.700729][ T5910] usb 7-1: Manufacturer: syz [ 636.705370][ T5910] usb 7-1: SerialNumber: syz [ 636.981415][ T5910] usb 7-1: 0:2 : does not exist [ 637.016215][ T5910] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 637.072437][ T5910] usb 7-1: USB disconnect, device number 20 [ 637.162894][ T5925] udevd[5925]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 637.516840][ T5846] Bluetooth: hci1: command tx timeout [ 637.838865][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 637.847246][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 638.391380][T19698] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5706'. [ 638.670676][T10406] team_slave_1 (unregistering): left promiscuous mode [ 638.700412][T10406] team0 (unregistering): Port device team_slave_1 removed [ 638.856529][T10406] team_slave_0 (unregistering): left promiscuous mode [ 638.899466][T10406] team0 (unregistering): Port device team_slave_0 removed [ 639.563058][T19698] batadv_slave_1: entered promiscuous mode [ 639.592282][T19593] chnl_net:caif_netlink_parms(): no params data found [ 639.597014][ T5846] Bluetooth: hci1: command tx timeout [ 639.757445][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 639.782172][T19723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5714'. [ 639.846262][T19725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5715'. [ 639.941208][T19729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5715'. [ 640.128384][T19739] syz.5.5720: attempt to access beyond end of device [ 640.128384][T19739] loop5: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 640.382766][T19593] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.446063][T19748] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 640.486027][T19593] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.515554][T19748] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=992760047 (15884160752 ns) > initial count (3644312608 ns). Using initial count to start timer. [ 640.533721][T19593] bridge_slave_0: entered allmulticast mode [ 640.554101][T19593] bridge_slave_0: entered promiscuous mode [ 640.782190][T19593] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.818999][T19593] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.841477][T19593] bridge_slave_1: entered allmulticast mode [ 640.922027][T19593] bridge_slave_1: entered promiscuous mode [ 640.972807][ T30] audit: type=1326 audit(1748163717.483:9645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19740 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb5558 code=0x7ffc0000 [ 641.096500][ T30] audit: type=1326 audit(1748163717.483:9646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19740 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb5558 code=0x7ffc0000 [ 641.219247][ T30] audit: type=1326 audit(1748163717.483:9647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19740 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb5558 code=0x7ffc0000 [ 641.300881][T19593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.350879][ T30] audit: type=1326 audit(1748163717.483:9648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19740 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb5558 code=0x7ffc0000 [ 641.387752][T19593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.476784][ T30] audit: type=1326 audit(1748163717.493:9649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19740 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb5558 code=0x7ffc0000 [ 641.587112][ T30] audit: type=1326 audit(1748163717.493:9650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19740 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb5558 code=0x7ffc0000 [ 641.685402][ T5846] Bluetooth: hci1: command tx timeout [ 641.758656][ T30] audit: type=1326 audit(1748163717.493:9651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19740 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb5558 code=0x7ffc0000 [ 641.877100][ T30] audit: type=1326 audit(1748163717.493:9652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19740 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb5558 code=0x7ffc0000 [ 641.920361][T19593] team0: Port device team_slave_0 added [ 641.927094][T19783] netlink: 'syz.1.5732': attribute type 2 has an invalid length. [ 641.964720][T19593] team0: Port device team_slave_1 added [ 641.984761][ T30] audit: type=1326 audit(1748163717.493:9653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19740 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb5558 code=0x7ffc0000 [ 642.074883][ T30] audit: type=1326 audit(1748163717.493:9654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19740 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb5558 code=0x7ffc0000 [ 642.215299][T19593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.236089][T19593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.262057][ C1] vkms_vblank_simulate: vblank timer overrun [ 642.328129][ T5888] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 642.469852][T19593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.487274][ T5888] usb 7-1: Using ep0 maxpacket: 8 [ 642.496511][ T5888] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 642.525116][T19593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.544672][ T5888] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 642.569406][T19593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.595348][ C1] vkms_vblank_simulate: vblank timer overrun [ 642.622038][ T5888] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 642.671004][ T5888] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 642.707044][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.741907][ T5888] usb 7-1: Product: syz [ 642.760490][ T5888] usb 7-1: Manufacturer: syz [ 642.765145][ T5888] usb 7-1: SerialNumber: syz [ 642.794585][T19593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.812686][T19785] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 643.124866][ T5888] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 643.154467][T19593] hsr_slave_0: entered promiscuous mode [ 643.188896][T19593] hsr_slave_1: entered promiscuous mode [ 643.229828][T19593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 643.280355][T19593] Cannot create hsr debugfs directory [ 643.317121][ C1] usblp0: nonzero read bulk status received: -71 [ 643.327533][T19785] usblp0: error -71 reading from printer [ 643.362840][ C1] usblp0: nonzero read bulk status received: -71 [ 643.378980][ T5890] usb 7-1: USB disconnect, device number 21 [ 643.395844][ T5890] usblp0: removed [ 645.212819][T19593] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 645.243225][T19593] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 645.274819][T19593] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 645.329290][T19593] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 645.527229][ T5877] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 645.698956][ T5877] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.719676][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 645.722880][T19593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.747100][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 645.777136][ T5877] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 645.812031][ T5877] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 645.815657][T19593] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.841784][ T5877] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 645.866696][ T5877] usb 2-1: Manufacturer: syz [ 645.877674][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.884865][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.899017][ T5877] usb 2-1: config 0 descriptor?? [ 645.957016][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.964229][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.288847][T19593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.355658][ T5877] rc_core: IR keymap rc-hauppauge not found [ 646.375491][T19593] veth0_vlan: entered promiscuous mode [ 646.385108][ T5877] Registered IR keymap rc-empty [ 646.405487][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 646.433960][T19593] veth1_vlan: entered promiscuous mode [ 646.438889][T19890] kernel read not supported for file /bus (pid: 19890 comm: syz.6.5762) [ 646.454544][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 646.465055][ T30] kauditd_printk_skb: 1058 callbacks suppressed [ 646.465072][ T30] audit: type=1800 audit(1748163722.973:10713): pid=19890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5762" name="bus" dev="mqueue" ino=93063 res=0 errno=0 [ 646.495219][ T5877] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 646.521443][ T5877] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input104 [ 646.540265][ T30] audit: type=1804 audit(1748163723.033:10714): pid=19892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.5762" name="bus" dev="mqueue" ino=93063 res=1 errno=0 [ 646.574950][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 646.575215][T19593] veth0_macvtap: entered promiscuous mode [ 646.608825][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 646.629010][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 646.667971][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 646.673351][T19593] veth1_macvtap: entered promiscuous mode [ 646.730727][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 646.744882][T19896] netlink: 2 bytes leftover after parsing attributes in process `syz.6.5763'. [ 646.758092][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 646.772880][T19593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.782305][T19896] batadv_slave_1: entered promiscuous mode [ 646.797754][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 646.804943][T19593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.818836][T19593] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.860233][T19593] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.877341][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 646.897813][T19593] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.917110][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 646.932246][T19593] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.967120][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 647.009566][ T5877] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 647.033975][ T5877] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 647.077048][ T5877] usb 2-1: USB disconnect, device number 77 [ 647.272365][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.314760][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.407172][T10410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.415038][T10410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.477069][ T52] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 648.699259][ T52] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 648.744544][ T52] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 648.791971][ T52] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 648.813850][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.835655][T19950] netlink: 'syz.3.5776': attribute type 4 has an invalid length. [ 648.860699][T19933] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 648.873726][ T52] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 649.154789][ T52] usb 6-1: USB disconnect, device number 46 [ 649.501898][T19974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5784'. [ 650.277504][T20005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5794'. [ 650.303928][T20005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.437732][T20005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.570554][T20017] input: syz0 as /devices/virtual/input/input105 [ 651.013678][T20033] all: renamed from bridge_slave_0 (while UP) [ 651.331194][T20041] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5804'. [ 651.598692][ T5888] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 651.729875][T20056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5808'. [ 651.797534][T20056] bridge_slave_0: left allmulticast mode [ 651.801156][ T5888] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 651.814831][T20056] bridge_slave_0: left promiscuous mode [ 651.815107][T20056] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.923982][T20056] bridge_slave_1: left allmulticast mode [ 651.933421][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 651.983835][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 651.993795][T20056] bridge_slave_1: left promiscuous mode [ 651.994071][T20056] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.056006][T20056] bond0: (slave bond_slave_0): Releasing backup interface [ 652.122545][ T5888] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 652.137067][T20056] bond0: (slave bond_slave_1): Releasing backup interface [ 652.150141][ T5888] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 652.184682][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.215120][ T5888] usb 7-1: config 0 descriptor?? [ 652.320691][T20056] team0: Port device team_slave_0 removed [ 652.481725][T20056] team0: Port device team_slave_1 removed [ 652.604349][T20056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.612148][T20056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.696192][T20056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.723734][T20056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.836881][ T5888] plantronics 0003:047F:FFFF.005F: ignoring exceeding usage max [ 652.948477][ T5888] plantronics 0003:047F:FFFF.005F: No inputs registered, leaving [ 652.983466][ T5888] plantronics 0003:047F:FFFF.005F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 653.209334][T20077] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 653.571396][T20089] IPv4: Oversized IP packet from 127.202.26.0 [ 653.632036][T20091] netlink: 'syz.5.5815': attribute type 11 has an invalid length. [ 653.672047][T20093] binder: 20092:20093 ioctl c0306201 800001c0 returned -22 [ 654.148071][T13827] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 654.154821][T20112] syzkaller1: entered promiscuous mode [ 654.171645][T20112] syzkaller1: entered allmulticast mode [ 654.337836][T13827] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 654.353375][T13827] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.383398][T13827] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.415345][T13827] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.453295][T13827] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.477260][T13827] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.510141][T13827] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.527216][T13827] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.536362][T13827] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.572362][T13827] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.596373][T13827] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.633654][T13827] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.666115][T13827] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.693622][T13827] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.717613][T13827] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.752100][T13827] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.771807][T13827] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.790181][T13827] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.814753][T13827] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.828960][T13827] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.843836][T13827] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.858326][T13827] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.878426][T13827] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.894060][T13827] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.906573][T13827] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.921933][T13827] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 654.937419][T13827] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 654.946404][T13827] usb 6-1: Product: syz [ 654.948080][ T10] usb 7-1: USB disconnect, device number 22 [ 654.976584][T13827] usb 6-1: Manufacturer: syz [ 655.004358][T13827] usb 6-1: SerialNumber: syz [ 655.066461][T13827] usb 6-1: config 0 descriptor?? [ 655.146013][T13827] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 655.309982][T20150] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5832'. [ 655.474635][ C1] usb 6-1: yurex_control_callback - control failed: -71 [ 655.487706][T13827] usb 6-1: USB disconnect, device number 47 [ 655.525297][T13827] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 655.907171][T20169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5839'. [ 656.413241][T20177] input: syz0 as /devices/virtual/input/input106 [ 657.914372][T20229] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5865'. [ 657.966401][T20229] bridge_slave_0: left allmulticast mode [ 658.032976][T20229] bridge_slave_0: left promiscuous mode [ 658.051274][T20229] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.067352][ T52] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 658.133123][T20229] bridge_slave_1: left allmulticast mode [ 658.162065][T20229] bridge_slave_1: left promiscuous mode [ 658.178365][T20229] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.231123][T20229] bond0: (slave bond_slave_0): Releasing backup interface [ 658.274101][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.287219][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.288011][T20229] bond0: (slave bond_slave_1): Releasing backup interface [ 658.297982][ T52] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 658.344906][ T52] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 658.367711][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.384962][ T52] usb 2-1: config 0 descriptor?? [ 658.393618][T20229] team0: Port device team_slave_0 removed [ 658.454131][T20229] team0: Port device team_slave_1 removed [ 658.484593][T20229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.510052][T20229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.534702][T20229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.563281][T20229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.622481][T20229] bond1: (slave vxcan3): Releasing backup interface [ 658.636595][T20229] vxcan3: left promiscuous mode [ 658.662378][T20229] bond3: (slave batadv1): Releasing backup interface [ 658.672725][T20229] batadv1: left promiscuous mode [ 658.844362][ T52] plantronics 0003:047F:FFFF.0060: No inputs registered, leaving [ 658.908863][ T52] plantronics 0003:047F:FFFF.0060: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 658.965473][ T30] audit: type=1804 audit(1748163735.463:10715): pid=20252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5874" name="/" dev="pidfs" ino=20252 res=1 errno=0 [ 659.476474][T20268] loop2: detected capacity change from 0 to 7 [ 659.497759][ T5925] Dev loop2: unable to read RDB block 7 [ 659.509652][ T5925] loop2: unable to read partition table [ 659.525891][ T5925] loop2: partition table beyond EOD, truncated [ 659.546077][T20268] Dev loop2: unable to read RDB block 7 [ 659.553497][T20268] loop2: unable to read partition table [ 659.565854][T20268] loop2: partition table beyond EOD, truncated [ 659.585785][T20268] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 660.561162][T20294] loop8: detected capacity change from 0 to 7 [ 660.581315][T20294] Dev loop8: unable to read RDB block 7 [ 660.594879][T20294] loop8: unable to read partition table [ 660.603815][T20294] loop8: partition table beyond EOD, truncated [ 660.623428][T20294] loop_reread_partitions: partition scan of loop8 (þ被xÚ¬§½dƤ´à÷‚áB [ 660.623428][T20294] ) failed (rc=-5) [ 660.727129][T13827] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 660.899805][T13827] usb 5-1: Using ep0 maxpacket: 16 [ 660.930479][T13827] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 660.947841][T13827] usb 5-1: config 0 has no interface number 0 [ 660.967332][T13827] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 660.983681][T13827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.012526][T13827] usb 5-1: Product: syz [ 661.032778][T13827] usb 5-1: Manufacturer: syz [ 661.046124][T13827] usb 5-1: SerialNumber: syz [ 661.103961][T13827] usb 5-1: config 0 descriptor?? [ 661.128944][T13827] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 661.140116][ T5890] usb 2-1: USB disconnect, device number 78 [ 661.365677][T20330] input: syz0 as /devices/virtual/input/input107 [ 661.368392][T20331] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5907'. [ 661.651486][T20342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5912'. [ 661.688106][T20342] bridge_slave_0: left allmulticast mode [ 661.693946][T20342] bridge_slave_0: left promiscuous mode [ 661.710418][T20342] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.733560][T20342] bridge_slave_1: left allmulticast mode [ 661.760288][T20342] bridge_slave_1: left promiscuous mode [ 661.766202][T20342] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.818047][T20342] bond0: (slave bond_slave_1): Releasing backup interface [ 661.835680][T20342] bond_slave_1: left promiscuous mode [ 661.893248][T20342] team0: Port device team_slave_0 removed [ 661.928082][T20342] team0: Port device team_slave_1 removed [ 661.934178][T20356] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5917'. [ 661.938775][T20342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.954305][T20342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.968841][T20342] vlan2: left allmulticast mode [ 661.974001][T20342] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 661.981583][T20342] vlan2: left promiscuous mode [ 661.986589][T20342] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 662.001873][T20342] bridge0: port 3(vlan2) entered disabled state [ 662.029357][T20342] bond1: (slave bridge2): Releasing backup interface [ 662.036725][T20342] bridge2: left promiscuous mode [ 662.087345][T20346] ipvlan2: entered promiscuous mode [ 662.112402][T20346] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 662.160476][T13827] gspca_spca1528: reg_w err -71 [ 662.195878][T13827] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 662.221793][T13827] usb 5-1: USB disconnect, device number 60 [ 662.365241][T20366] input: syz0 as /devices/virtual/input/input108 [ 662.540585][ T10] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 662.717499][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 662.738473][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.786725][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.816796][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 662.848051][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.871295][ T10] usb 4-1: config 0 descriptor?? [ 662.897913][ T10] hub 4-1:0.0: USB hub found [ 663.115017][ T10] hub 4-1:0.0: 1 port detected [ 663.752790][ T10] hub 4-1:0.0: activate --> -90 [ 663.776743][ T5910] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 663.853234][T20406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5937'. [ 663.871926][T20406] bridge_slave_0: left allmulticast mode [ 663.878268][T20406] bridge_slave_0: left promiscuous mode [ 663.884341][T20406] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.909764][T20406] bridge_slave_1: left allmulticast mode [ 663.935295][T20406] bridge_slave_1: left promiscuous mode [ 663.937093][ T5910] usb 7-1: Using ep0 maxpacket: 8 [ 663.942900][T20406] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.963073][T20406] bond0: (slave bond_slave_0): Releasing backup interface [ 663.969449][ T5910] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 663.979703][ T5910] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 663.981504][T20406] bond_slave_0: left allmulticast mode [ 663.988631][ T5910] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 663.988678][ T5910] usb 7-1: config 250 has no interface number 0 [ 663.988723][ T5910] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 663.988749][ T5910] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 663.988773][ T5910] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 664.049059][T20406] bond0: (slave bond_slave_1): Releasing backup interface [ 664.065581][T20406] bond_slave_1: left allmulticast mode [ 664.117052][ T5910] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 664.117397][T20406] team0: Port device team_slave_0 removed [ 664.164196][ T5910] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 664.209629][ T975] usb 4-1: USB disconnect, device number 73 [ 664.228389][ T5910] usb 7-1: config 250 interface 228 has no altsetting 0 [ 664.247099][ T5910] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 664.247191][T20406] team0: Port device team_slave_1 removed [ 664.264218][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 664.272995][ T5910] usb 7-1: Product: syz [ 664.287680][ T5910] usb 7-1: SerialNumber: syz [ 664.296574][T20406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.329269][ T5910] hub 7-1:250.228: bad descriptor, ignoring hub [ 664.337322][ T5910] hub 7-1:250.228: probe with driver hub failed with error -5 [ 664.345031][T20406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.370264][T20406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.377964][T20406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.543412][ T5910] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 23 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 665.019949][ C1] usblp0: nonzero read bulk status received: -71 [ 665.057629][T13827] usb 7-1: USB disconnect, device number 23 [ 665.096994][T13827] usblp0: removed [ 665.197015][ T5890] ================================================================== [ 665.205124][ T5890] BUG: KASAN: slab-use-after-free in br_switchdev_fdb_notify+0x30b/0x3e0 [ 665.213629][ T5890] Read of size 8 at addr ffff888035082008 by task kworker/1:5/5890 [ 665.221509][ T5890] [ 665.223848][ T5890] CPU: 1 UID: 0 PID: 5890 Comm: kworker/1:5 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 665.223866][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 665.223876][ T5890] Workqueue: events_long br_fdb_cleanup [ 665.223903][ T5890] Call Trace: [ 665.223912][ T5890] [ 665.223919][ T5890] dump_stack_lvl+0x189/0x250 [ 665.223939][ T5890] ? __virt_addr_valid+0x18c/0x540 [ 665.223955][ T5890] ? rcu_is_watching+0x15/0xb0 [ 665.223967][ T5890] ? __kasan_check_byte+0x12/0x40 [ 665.223983][ T5890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.223999][ T5890] ? rcu_is_watching+0x15/0xb0 [ 665.224011][ T5890] ? lock_release+0x4b/0x3e0 [ 665.224030][ T5890] ? __virt_addr_valid+0x18c/0x540 [ 665.224046][ T5890] ? __virt_addr_valid+0x469/0x540 [ 665.224063][ T5890] print_report+0xb4/0x290 [ 665.224078][ T5890] ? br_switchdev_fdb_notify+0x30b/0x3e0 [ 665.224094][ T5890] kasan_report+0x118/0x150 [ 665.224109][ T5890] ? __lock_acquire+0xaac/0xd20 [ 665.224126][ T5890] ? br_switchdev_fdb_notify+0x30b/0x3e0 [ 665.224143][ T5890] br_switchdev_fdb_notify+0x30b/0x3e0 [ 665.224159][ T5890] ? __pfx_br_switchdev_fdb_notify+0x10/0x10 [ 665.224175][ T5890] ? rht_lock+0x114/0x220 [ 665.224191][ T5890] ? rht_lock+0xff/0x220 [ 665.224210][ T5890] fdb_notify+0x89/0x160 [ 665.224227][ T5890] fdb_delete+0xec4/0x1160 [ 665.224245][ T5890] ? fdb_delete+0x39a/0x1160 [ 665.224262][ T5890] ? __pfx_fdb_delete+0x10/0x10 [ 665.224280][ T5890] ? br_fdb_cleanup+0x270/0x4d0 [ 665.224297][ T5890] br_fdb_cleanup+0x2aa/0x4d0 [ 665.224314][ T5890] ? br_fdb_cleanup+0xb1/0x4d0 [ 665.224329][ T5890] ? process_scheduled_works+0x9ec/0x17a0 [ 665.224342][ T5890] process_scheduled_works+0xadb/0x17a0 [ 665.224364][ T5890] ? __pfx_process_scheduled_works+0x10/0x10 [ 665.224388][ T5890] worker_thread+0x8a0/0xda0 [ 665.224409][ T5890] kthread+0x70e/0x8a0 [ 665.224425][ T5890] ? __pfx_worker_thread+0x10/0x10 [ 665.224438][ T5890] ? __pfx_kthread+0x10/0x10 [ 665.224453][ T5890] ? __pfx_kthread+0x10/0x10 [ 665.224467][ T5890] ? _raw_spin_unlock_irq+0x23/0x50 [ 665.224481][ T5890] ? lockdep_hardirqs_on+0x9c/0x150 [ 665.224497][ T5890] ? __pfx_kthread+0x10/0x10 [ 665.224511][ T5890] ret_from_fork+0x4b/0x80 [ 665.224525][ T5890] ? __pfx_kthread+0x10/0x10 [ 665.224539][ T5890] ret_from_fork_asm+0x1a/0x30 [ 665.224556][ T5890] [ 665.224562][ T5890] [ 665.453667][ T5890] Allocated by task 5850: [ 665.457993][ T5890] kasan_save_track+0x3e/0x80 [ 665.462660][ T5890] __kasan_kmalloc+0x93/0xb0 [ 665.467234][ T5890] __kmalloc_cache_noprof+0x230/0x3d0 [ 665.472591][ T5890] new_nbp+0x188/0x440 [ 665.476649][ T5890] br_add_if+0x28e/0xec0 [ 665.480882][ T5890] do_set_master+0x533/0x6d0 [ 665.485459][ T5890] do_setlink+0xd47/0x40d0 [ 665.489868][ T5890] rtnl_newlink+0x160b/0x1c70 [ 665.494531][ T5890] rtnetlink_rcv_msg+0x7cc/0xb70 [ 665.499455][ T5890] netlink_rcv_skb+0x219/0x490 [ 665.504206][ T5890] netlink_unicast+0x75b/0x8d0 [ 665.508956][ T5890] netlink_sendmsg+0x805/0xb30 [ 665.513708][ T5890] __sock_sendmsg+0x21c/0x270 [ 665.518370][ T5890] __sys_sendto+0x3bd/0x520 [ 665.522869][ T5890] __ia32_compat_sys_socketcall+0x71c/0x9c0 [ 665.528749][ T5890] __do_fast_syscall_32+0xb4/0x110 [ 665.533851][ T5890] do_fast_syscall_32+0x34/0x80 [ 665.538699][ T5890] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 665.545012][ T5890] [ 665.547326][ T5890] Freed by task 23: [ 665.551114][ T5890] kasan_save_track+0x3e/0x80 [ 665.555775][ T5890] kasan_save_free_info+0x46/0x50 [ 665.560787][ T5890] __kasan_slab_free+0x62/0x70 [ 665.565536][ T5890] kfree+0x193/0x440 [ 665.569419][ T5890] kobject_put+0x22b/0x480 [ 665.573827][ T5890] rcu_core+0xca8/0x1710 [ 665.578063][ T5890] handle_softirqs+0x286/0x870 [ 665.582819][ T5890] run_ksoftirqd+0x9b/0x100 [ 665.587316][ T5890] smpboot_thread_fn+0x542/0xa60 [ 665.592243][ T5890] kthread+0x70e/0x8a0 [ 665.596297][ T5890] ret_from_fork+0x4b/0x80 [ 665.600703][ T5890] ret_from_fork_asm+0x1a/0x30 [ 665.605452][ T5890] [ 665.607812][ T5890] Last potentially related work creation: [ 665.613597][ T5890] kasan_save_stack+0x3e/0x60 [ 665.618302][ T5890] kasan_record_aux_stack+0xbc/0xd0 [ 665.623484][ T5890] call_rcu+0x142/0x990 [ 665.627626][ T5890] br_del_if+0x146/0x320 [ 665.631859][ T5890] do_set_master+0x30f/0x6d0 [ 665.636440][ T5890] do_setlink+0xd47/0x40d0 [ 665.640849][ T5890] rtnl_newlink+0x149f/0x1c70 [ 665.645513][ T5890] rtnetlink_rcv_msg+0x7cc/0xb70 [ 665.650441][ T5890] netlink_rcv_skb+0x219/0x490 [ 665.655190][ T5890] netlink_unicast+0x75b/0x8d0 [ 665.660026][ T5890] netlink_sendmsg+0x805/0xb30 [ 665.664891][ T5890] __sock_sendmsg+0x21c/0x270 [ 665.669557][ T5890] ____sys_sendmsg+0x505/0x830 [ 665.674312][ T5890] ___sys_sendmsg+0x21f/0x2a0 [ 665.679070][ T5890] __sys_sendmsg+0x164/0x220 [ 665.683654][ T5890] __do_fast_syscall_32+0xb4/0x110 [ 665.688758][ T5890] do_fast_syscall_32+0x34/0x80 [ 665.693601][ T5890] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 665.699918][ T5890] [ 665.702225][ T5890] The buggy address belongs to the object at ffff888035082000 [ 665.702225][ T5890] which belongs to the cache kmalloc-1k of size 1024 [ 665.716269][ T5890] The buggy address is located 8 bytes inside of [ 665.716269][ T5890] freed 1024-byte region [ffff888035082000, ffff888035082400) [ 665.729966][ T5890] [ 665.732278][ T5890] The buggy address belongs to the physical page: [ 665.738683][ T5890] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35080 [ 665.747425][ T5890] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 665.755907][ T5890] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 665.763441][ T5890] page_type: f5(slab) [ 665.767410][ T5890] raw: 00fff00000000040 ffff88801a041dc0 ffffea0001f6d800 dead000000000002 [ 665.775976][ T5890] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 665.784544][ T5890] head: 00fff00000000040 ffff88801a041dc0 ffffea0001f6d800 dead000000000002 [ 665.793200][ T5890] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 665.801865][ T5890] head: 00fff00000000003 ffffea0000d42001 00000000ffffffff 00000000ffffffff [ 665.810520][ T5890] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 665.819173][ T5890] page dumped because: kasan: bad access detected [ 665.825580][ T5890] page_owner tracks the page as allocated [ 665.831278][ T5890] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5851, tgid 5851 (syz-executor), ts 79590784104, free_ts 79575620413 [ 665.850537][ T5890] post_alloc_hook+0x1d8/0x230 [ 665.855293][ T5890] get_page_from_freelist+0x21ce/0x22b0 [ 665.860822][ T5890] __alloc_frozen_pages_noprof+0x181/0x370 [ 665.866616][ T5890] alloc_pages_mpol+0x232/0x4a0 [ 665.871455][ T5890] allocate_slab+0x8a/0x3b0 [ 665.875941][ T5890] ___slab_alloc+0xbfc/0x1480 [ 665.880605][ T5890] __kmalloc_cache_noprof+0x296/0x3d0 [ 665.885960][ T5890] batadv_hard_if_event+0x11b7/0x1a50 [ 665.891321][ T5890] notifier_call_chain+0x1b6/0x3e0 [ 665.896420][ T5890] register_netdevice+0x1608/0x1af0 [ 665.901616][ T5890] veth_newlink+0x42f/0xa50 [ 665.906105][ T5890] rtnl_newlink_create+0x308/0xaf0 [ 665.911206][ T5890] rtnl_newlink+0x16d6/0x1c70 [ 665.915871][ T5890] rtnetlink_rcv_msg+0x7cc/0xb70 [ 665.920797][ T5890] netlink_rcv_skb+0x219/0x490 [ 665.925553][ T5890] netlink_unicast+0x75b/0x8d0 [ 665.930306][ T5890] page last free pid 5850 tgid 5850 stack trace: [ 665.936614][ T5890] __free_frozen_pages+0xb0e/0xcd0 [ 665.941717][ T5890] __slab_free+0x326/0x400 [ 665.946120][ T5890] qlist_free_all+0x9a/0x140 [ 665.950694][ T5890] kasan_quarantine_reduce+0x148/0x160 [ 665.956138][ T5890] __kasan_slab_alloc+0x22/0x80 [ 665.960977][ T5890] __kmalloc_cache_noprof+0x1be/0x3d0 [ 665.966334][ T5890] kset_create_and_add+0x5a/0x170 [ 665.971344][ T5890] netdev_register_kobject+0x180/0x2f0 [ 665.976797][ T5890] register_netdevice+0x126c/0x1af0 [ 665.981997][ T5890] veth_newlink+0x42f/0xa50 [ 665.986487][ T5890] rtnl_newlink_create+0x308/0xaf0 [ 665.991586][ T5890] rtnl_newlink+0x16d6/0x1c70 [ 665.996255][ T5890] rtnetlink_rcv_msg+0x7cc/0xb70 [ 666.001181][ T5890] netlink_rcv_skb+0x219/0x490 [ 666.005937][ T5890] netlink_unicast+0x75b/0x8d0 [ 666.010685][ T5890] netlink_sendmsg+0x805/0xb30 [ 666.015439][ T5890] [ 666.017752][ T5890] Memory state around the buggy address: [ 666.023362][ T5890] ffff888035081f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 666.031409][ T5890] ffff888035081f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 666.039456][ T5890] >ffff888035082000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 666.047501][ T5890] ^ [ 666.051816][ T5890] ffff888035082080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 666.059875][ T5890] ffff888035082100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 666.067933][ T5890] ================================================================== [ 666.076098][ T5890] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 666.083304][ T5890] CPU: 1 UID: 0 PID: 5890 Comm: kworker/1:5 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 666.095361][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 666.105413][ T5890] Workqueue: events_long br_fdb_cleanup [ 666.110961][ T5890] Call Trace: [ 666.114228][ T5890] [ 666.117149][ T5890] dump_stack_lvl+0x99/0x250 [ 666.121752][ T5890] ? __asan_memcpy+0x40/0x70 [ 666.126346][ T5890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 666.131548][ T5890] ? __pfx__printk+0x10/0x10 [ 666.136141][ T5890] panic+0x2db/0x790 [ 666.140033][ T5890] ? __pfx_panic+0x10/0x10 [ 666.144443][ T5890] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 666.150327][ T5890] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 666.156208][ T5890] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 666.162533][ T5890] ? print_memory_metadata+0x314/0x400 [ 666.167986][ T5890] ? br_switchdev_fdb_notify+0x30b/0x3e0 [ 666.173608][ T5890] check_panic_on_warn+0x89/0xb0 [ 666.178543][ T5890] ? br_switchdev_fdb_notify+0x30b/0x3e0 [ 666.184161][ T5890] end_report+0x78/0x160 [ 666.188399][ T5890] kasan_report+0x129/0x150 [ 666.192890][ T5890] ? __lock_acquire+0xaac/0xd20 [ 666.197734][ T5890] ? br_switchdev_fdb_notify+0x30b/0x3e0 [ 666.203358][ T5890] br_switchdev_fdb_notify+0x30b/0x3e0 [ 666.208810][ T5890] ? __pfx_br_switchdev_fdb_notify+0x10/0x10 [ 666.214780][ T5890] ? rht_lock+0x114/0x220 [ 666.219103][ T5890] ? rht_lock+0xff/0x220 [ 666.223343][ T5890] fdb_notify+0x89/0x160 [ 666.227576][ T5890] fdb_delete+0xec4/0x1160 [ 666.231985][ T5890] ? fdb_delete+0x39a/0x1160 [ 666.236568][ T5890] ? __pfx_fdb_delete+0x10/0x10 [ 666.241416][ T5890] ? br_fdb_cleanup+0x270/0x4d0 [ 666.246260][ T5890] br_fdb_cleanup+0x2aa/0x4d0 [ 666.250946][ T5890] ? br_fdb_cleanup+0xb1/0x4d0 [ 666.255712][ T5890] ? process_scheduled_works+0x9ec/0x17a0 [ 666.261434][ T5890] process_scheduled_works+0xadb/0x17a0 [ 666.266988][ T5890] ? __pfx_process_scheduled_works+0x10/0x10 [ 666.272969][ T5890] worker_thread+0x8a0/0xda0 [ 666.277578][ T5890] kthread+0x70e/0x8a0 [ 666.281641][ T5890] ? __pfx_worker_thread+0x10/0x10 [ 666.286748][ T5890] ? __pfx_kthread+0x10/0x10 [ 666.291344][ T5890] ? __pfx_kthread+0x10/0x10 [ 666.295935][ T5890] ? _raw_spin_unlock_irq+0x23/0x50 [ 666.301135][ T5890] ? lockdep_hardirqs_on+0x9c/0x150 [ 666.306334][ T5890] ? __pfx_kthread+0x10/0x10 [ 666.310924][ T5890] ret_from_fork+0x4b/0x80 [ 666.315336][ T5890] ? __pfx_kthread+0x10/0x10 [ 666.319923][ T5890] ret_from_fork_asm+0x1a/0x30 [ 666.324683][ T5890] [ 666.327935][ T5890] Kernel Offset: disabled [ 666.332269][ T5890] Rebooting in 86400 seconds..