last executing test programs: 5m35.177106762s ago: executing program 3 (id=776): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0d000000000002fdbf43eb000300000041010000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x8000000000000000]}}) 5m34.947166957s ago: executing program 3 (id=778): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0x1, 0x8001}, 'syz1\x00', 0x5}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x0, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x0, 0x0, 0xfffa, 0xfffffff7, 0x0, 0x1, 0x10000400, 0x0, 0x1, 0x0, 0x0, 0x402, 0x0, 0x0, 0x4e0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x3, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x2, 0x5, 0x70000000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0xfffffffe, 0x105], [0x10, 0xffffffff, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40, 0xffffffff, 0x0, 0x2, 0x0, 0x1, 0x200, 0x0, 0x5, 0x1, 0xfffffffc, 0x9, 0x801, 0xffffffd6, 0xfffffffc, 0xfffffffd, 0x1, 0x0, 0x1, 0x2ec6a, 0x5, 0x7, 0xffffffff, 0x8, 0x7fffffff, 0x8001, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x8c, 0x0, 0x0, 0x4, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, 0x4000000, 0x80, 0x0, 0x3, 0x0, 0x9, 0x800000, 0x7], [0x0, 0x3, 0x0, 0x1000000, 0xffffffff, 0x1, 0xa000000, 0x0, 0x0, 0xb78, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x4e, 0x0, 0x0, 0x10000, 0x0, 0x80, 0x520, 0xd, 0x0, 0xfffffffd, 0x800000, 0x1ff, 0x0, 0x0, 0x2, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6, 0x8010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100, 0xff, 0x80000005, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x6, 0xf, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x23, 0x5, 0x0, 0x80, 0x0, 0x3, 0x0, 0xfffffffe, 0x1, 0x7fff, 0x0, 0xd, 0x800000, 0x3, 0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0xffffeffd, 0x3, 0x0, 0x0, 0x3, 0x4, 0xfffffffe, 0x1004, 0x3, 0x0, 0xfffffffd, 0x9e5, 0x80000001, 0x100, 0x0, 0x3, 0x7, 0xfffffffd, 0x53591b24, 0x7fffffd, 0x2, 0x5, 0x5, 0x400, 0x7, 0x7fffffff, 0x511, 0x100, 0x80000004, 0x8, 0x0, 0x3, 0x3]}, 0x45c) 5m34.644926332s ago: executing program 3 (id=782): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x3c, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x4, 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 5m33.771722661s ago: executing program 3 (id=794): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) 5m32.824356696s ago: executing program 3 (id=808): r0 = socket$inet(0x2, 0x4000000000000001, 0x100) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 5m32.531613133s ago: executing program 3 (id=811): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, 0x0) r1 = openat$autofs(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, 0x0) 5m31.8923058s ago: executing program 32 (id=811): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, 0x0) r1 = openat$autofs(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, 0x0) 5m11.596782937s ago: executing program 0 (id=979): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) 5m11.067284367s ago: executing program 0 (id=981): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000700)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="10", 0x1}], 0x1}}], 0x2, 0x24004c41) 5m10.791563412s ago: executing program 0 (id=982): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 5m10.55909249s ago: executing program 0 (id=984): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) 5m9.500094727s ago: executing program 0 (id=986): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r1, &(0x7f0000001800)=[{&(0x7f0000000400)=""/59, 0x3b}], 0x1, 0x2, 0x7ff) 5m9.085278645s ago: executing program 0 (id=988): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000bc0)={&(0x7f0000000340)={0xa, 0x4a21, 0x1, @mcast2, 0x5}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000740)="d3", 0x1}], 0x1}, 0x890) 5m8.664818807s ago: executing program 33 (id=988): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000bc0)={&(0x7f0000000340)={0xa, 0x4a21, 0x1, @mcast2, 0x5}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000740)="d3", 0x1}], 0x1}, 0x890) 11.187041933s ago: executing program 4 (id=3813): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x1d, r1, 0x2, {0x0, 0xf0}, 0xff}, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4041}, 0x40810) 11.153887357s ago: executing program 4 (id=3815): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r0, 0x407, 0x0) read$FUSE(r0, &(0x7f0000002440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x29, 0x6, 0xffffffffc8001048, 0xffff, 0x7, 0x2, 0x0, 0x0, 0x0, 0x100, 0x3}}, 0x50) 10.831630904s ago: executing program 4 (id=3819): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="1268a3db5ba40fe82ecf3465af3b9884890941251ee0", 0x16}, {&(0x7f00000004c0)="6059337673465062eacefc40e1b438cebc348d134fc35955cd0faaf679", 0x1d}, {&(0x7f0000000480)="421451baa0a0db86bb45108b5682e3b12e9794b15c70cc3e977a8947cae6d3aaa0a213355827b2ed96d2097dcbef0d6848e99cb81065", 0x36}], 0x3}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000580)="56a8c6ad830a8f74a318", 0xa}, {&(0x7f0000000840)="18c01ab5a41c262306d7d5661e70c1f60d254a68318c81aad7e16dd36ba3358d2385a2616333ebb179d83c74ce920187e2d2a1a5c6507cfefcd91f2900bdfb8a75f58a01a375754dd9756703ca8e7387d78db3c315da549d3a18dece16b7951c6983eeb2c377114769295d6498e328acb507395066e37e087d26f4f4389f", 0x7e}, {&(0x7f0000000600)="9c46f2b6aec7ddf8fe83fd452bb6ed0d3949234d4bf8f7f5ae31889f08042779c2a20d1ebee3a5b435b9632debfc43d90571315da865ef", 0x37}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a80)="5a7bfb23ecd78eb611f04e232fc7a3b9cf746eb059e3ef86a60c", 0x1a}, {&(0x7f0000001400)="4e9c6ea4d55899dde1e3a575597ce06ac118933a2ba40800da2d5febc66f3ddfb40fbf41596fa303000000000000003cc2972f3c9bbdea7d528c1ce3810000000000000022e15b10e2c1cd3a53d4ea0e70211a94720ed080df9b0394b17f6678d892449caf6ff349889d25d8f07c0509b7e0b37f99714e1a1aa37331af99f8cabd90", 0x82}, {&(0x7f0000000c80)='*', 0x1}, {&(0x7f0000000d00)="f05a43f1c3a0f11db08405c5f817983bb055efacfe3ff4498ca1f6184c093c91b8a4c352d18400198972ee9fbc0b3670008506cbfe", 0x35}], 0x4}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000700)="ab5aea0bd151f2b012853e83b3d630b72f62d53374645d5bce5728ad78befd38ae96478d1052086b322bed4faa4b9979cabf55baafb3f9eb887824928a45f8464d2ae5ff57388c5ab6268b7c81af64072d1c9feeb4e62b739abf1f3ad31bb10aa5e4213b9a4a4b10ad63ba7533bfa1ae28b6879e7be6abfa1b9f4a46148f1dfdf41115c1c4ce874eaf9a2cd3e73c7ffce9d274390032184328801b80cbcbdcc8558fed95acd4d9c72cf7234beff0b265fcc7db4264c4dcb34f1dcaa623f01265c65e836f77162befc68747609cd5f3233b65f1fff29b67113437977b6126db2a3e6b68f99e5f3cbaba37e0da99b4509cc6e394d4f3", 0xf5}, {&(0x7f0000001180)="267446ed34dfd673a0f25ebac245d1d7f0b74ec3d58c3241eb660a1d329b49a98b21517825746ca8a459d10f63", 0x2d}], 0x2}}], 0x4, 0x44008090) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4011}, 0x40004) 10.765188259s ago: executing program 4 (id=3820): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) 10.586830786s ago: executing program 4 (id=3822): syz_usb_connect$sierra_net(0x352aadd564ada08, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xe, 0x2, 0x20, 0x5, 0x82, 0x5}, {0x9, 0x5, 0x9, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0xf, 0x3, 0x40, 0xa, 0x3f, 0x8}}}}}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b30"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 10.31485626s ago: executing program 4 (id=3825): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x18000, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 10.032155319s ago: executing program 34 (id=3825): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x18000, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 6.344510225s ago: executing program 1 (id=3863): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) poll(&(0x7f0000000080)=[{r1, 0x100}], 0x1, 0xc29e) 5.918911795s ago: executing program 1 (id=3870): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4.653378411s ago: executing program 6 (id=3883): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x6e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000080)={r2, 0x8000}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 4.584116256s ago: executing program 6 (id=3884): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x10000, @local, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f0000000180), &(0x7f0000000440)=0x8) 4.466312608s ago: executing program 6 (id=3885): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) 4.455545818s ago: executing program 1 (id=3886): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x1033, r0, 0x0) pipe2(&(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r0, 0xe, 0x4) write$binfmt_script(r3, &(0x7f0000001380)={'#! ', './file0'}, 0xb) 4.319220932s ago: executing program 6 (id=3888): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000000c0)={0x3, 0xffffffff, 0xffffff44, 0x80, 0x5, 0x1ff}) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f00000000c0)={0x3, 0x4, 0x5, 0x5}, 0x10) 4.158229124s ago: executing program 2 (id=3890): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483", @ANYRES16], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x1, 0x1, "0f"}, 0x0}) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0) 4.067733804s ago: executing program 1 (id=3891): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfea7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendfile(r2, r0, &(0x7f0000000440)=0x8, 0x1002) 4.047693491s ago: executing program 1 (id=3892): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000380)={0x20, 0x15, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)={0x40, 0x0, 0x4, "04f8da6b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f00000008c0)={0x40, 0x11, 0x4, "583c85f3"}, 0x0, 0x0}) 2.623288276s ago: executing program 6 (id=3893): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 2.425989107s ago: executing program 6 (id=3895): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r0, &(0x7f0000000800)="5b8529ae2468f4df9c", 0x9, 0x7) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/27, 0x1b}], 0x1, 0x9, 0x3dfc) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2.414848872s ago: executing program 7 (id=3896): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f000114600000110600ac141414e0000003808a8972bd"], 0xdd12}], 0x1}, 0x0) 2.314192943s ago: executing program 7 (id=3898): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40140, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000001100)) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000000c0)) 2.054868748s ago: executing program 7 (id=3900): r0 = syz_io_uring_setup(0xbef, &(0x7f0000000080)={0x0, 0xe7a8, 0x1, 0x0, 0x1d2}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x3d0e, 0x4be, 0x43, 0x0, 0x0) 1.697588188s ago: executing program 7 (id=3901): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, &(0x7f0000000000)={0x0, 0x9, 0x61, {0x61, 0x30, "85262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc8193892d6e21742dcd7cc5f1948846c8cd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020019000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 1.586481303s ago: executing program 5 (id=3902): ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'dvmrp0\x00', @ifru_data=&(0x7f0000000040)="88eee828e77931aca30f8af78057358d79c7b87b0fea64088ab87c18ce7db0fc"}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffc, 0x1, @empty, 0x200}, 0x1c) setsockopt(r0, 0x1, 0x9, &(0x7f0000000040), 0x29) 1.477587408s ago: executing program 5 (id=3903): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000180)={0x20000005}) 1.291720107s ago: executing program 5 (id=3904): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000006c0)="95", 0x1}], 0x1) 1.199881068s ago: executing program 5 (id=3905): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000013000500020000000200000007000000", @ANYRES32=r1, @ANYBLOB="004002000000000014001a"], 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 1.092953757s ago: executing program 1 (id=3906): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) migrate_pages(r0, 0x1ff, 0x0, 0x0) 1.041738036s ago: executing program 2 (id=3907): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_ONE_REG(r2, 0x4048aecb, &(0x7f00000002c0)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000300)=0xd8}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) 904.594659ms ago: executing program 5 (id=3908): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 773.45032ms ago: executing program 2 (id=3909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x11223}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 439.232572ms ago: executing program 5 (id=3910): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="e4bd9dd29bc6a30e7b0039b6622f6b2467f17fc7d52a61e1ddda34e1d18c63f037bd3ac0cbad5fc38ebc8ea06f4dfead8a5c0ceae4ae162d16276c08a8515366a07b9c8a4e398610ce1d9562e1cd7a7270e2558e12d18711fb1d28f8107a59a9d2c2c9f5b5f4f265251893c61c499dd19c42a5efa06499", 0x77}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0900320003003000000060000000000c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 300.198733ms ago: executing program 2 (id=3911): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143982) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) 239.85905ms ago: executing program 7 (id=3912): openat$tun(0xffffffffffffff9c, 0x0, 0x141141, 0x0) chdir(0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 174.522731ms ago: executing program 2 (id=3913): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @sched_cls=0x36}, 0x94) r0 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0xf05e, 0x400, 0xfffffff8, 0xfe}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 76.44707ms ago: executing program 7 (id=3914): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 0s ago: executing program 2 (id=3915): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 383.807707][T12834] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 383.818758][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 383.832672][T12834] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 383.921426][ T29] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 384.067698][ T5823] HID 045e:07da: Invalid code 65791 type 1 [ 384.102344][ T5823] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0043/input/input69 [ 384.106376][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 384.140877][ T5823] microsoft 0003:045E:07DA.0043: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 384.143746][ T29] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 384.189159][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 384.213007][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 384.213707][ T5932] usb 5-1: USB disconnect, device number 57 [ 384.279006][ T5932] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 384.328146][ T5932] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 384.359163][ T5932] quatech2 5-1:0.51: device disconnected [ 384.375558][ T796] usb 7-1: USB disconnect, device number 37 [ 384.419832][ T29] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 384.435687][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.446290][ T29] usb 2-1: Product: syz [ 384.450840][ T29] usb 2-1: Manufacturer: syz [ 384.458892][ T29] usb 2-1: SerialNumber: syz [ 384.490285][ T29] usb 2-1: config 0 descriptor?? [ 384.540623][ T29] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 384.560731][ T29] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 384.801520][T12855] netlink: 'syz.2.2815': attribute type 10 has an invalid length. [ 384.825283][T12855] veth0_vlan: left allmulticast mode [ 384.853565][T12855] team0: Device veth0_vlan failed to register rx_handler [ 385.218578][ T29] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 385.242355][ T29] em28xx 2-1:0.0: Config register raw data: 0x41 [ 385.401271][ T29] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 385.470193][ T796] usb 2-1: USB disconnect, device number 46 [ 385.478500][ T796] em28xx 2-1:0.0: Disconnecting em28xx [ 385.498486][ T796] em28xx 2-1:0.0: Freeing device [ 385.573730][ T29] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 385.585595][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 385.598890][ T29] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 385.609220][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.617934][ T29] usb 6-1: Product: syz [ 385.622472][ T29] usb 6-1: Manufacturer: syz [ 385.627187][ T29] usb 6-1: SerialNumber: syz [ 385.958019][T12880] loop5: detected capacity change from 0 to 4095 [ 386.134946][T12883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2827'. [ 387.013481][ T29] cdc_ncm 6-1:1.0: bind() failure [ 387.031296][ T29] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 387.042385][ T29] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 387.055752][ T29] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 387.071097][T12907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2839'. [ 387.103778][ T29] usb 6-1: USB disconnect, device number 22 [ 387.211938][T12910] loop5: detected capacity change from 0 to 4095 [ 388.069728][T12931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2850'. [ 388.138808][T12931] hsr_slave_0: left promiscuous mode [ 388.270361][T12931] hsr_slave_1: left promiscuous mode [ 389.621600][T12974] tmpfs: Unknown parameter 'óÐåÝõZåÐmHœSuLVÏŒGÿéUË9ËQ1' [ 389.664651][ T5932] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 389.783089][ T5934] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 389.821276][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 389.839323][ T5932] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 389.848559][ T5932] usb 3-1: config 1 has no interface number 0 [ 389.855233][ T5932] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 389.867663][ T5932] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 389.880316][ T5932] usb 3-1: config 1 interface 105 has no altsetting 0 [ 389.895687][ T5932] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 389.927002][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.961515][ T5932] usb 3-1: Product: syz [ 389.970285][ T5932] usb 3-1: Manufacturer: syz [ 389.991344][ T5932] usb 3-1: SerialNumber: syz [ 390.018880][T12968] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 390.038972][T12968] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 390.047213][ T5934] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 390.059719][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.084823][ T5934] usb 2-1: config 0 descriptor?? [ 390.161537][ T5823] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 390.327119][ T5823] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 390.340872][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.379330][ T5823] usb 5-1: config 0 descriptor?? [ 390.476898][T12968] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 390.493179][T12968] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 390.599930][ T5934] [drm:udl_init] *ERROR* Selecting channel failed [ 390.621295][ T9] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 390.663988][ T5934] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 390.671297][ T5934] [drm] Initialized udl on minor 2 [ 390.685883][ T5934] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 390.702810][ T5934] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 390.718635][ T5930] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 390.744585][ T5934] usb 2-1: USB disconnect, device number 47 [ 390.757020][ T5930] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 390.782130][ T5930] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 390.803605][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 390.818918][ T9] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 390.829122][ T9] usb 7-1: config 0 has no interface number 0 [ 390.860736][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 390.870038][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.878510][ T9] usb 7-1: Product: syz [ 390.885099][ T796] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 390.893811][ T9] usb 7-1: Manufacturer: syz [ 390.899163][ T9] usb 7-1: SerialNumber: syz [ 390.908199][ T9] usb 7-1: config 0 descriptor?? [ 391.051388][ T796] usb 6-1: Using ep0 maxpacket: 16 [ 391.060639][ T796] usb 6-1: config 0 has no interfaces? [ 391.069726][ T796] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 391.079177][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.087471][ T796] usb 6-1: Product: syz [ 391.091959][ T796] usb 6-1: Manufacturer: syz [ 391.096692][ T796] usb 6-1: SerialNumber: syz [ 391.106823][ T796] usb 6-1: config 0 descriptor?? [ 391.120279][ T5932] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 391.145247][ T5932] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 391.175912][ T5932] aqc111 3-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 5a:0d:bb:4e:5d:9a [ 391.195224][ T5932] usb 3-1: USB disconnect, device number 57 [ 391.205308][ T5932] aqc111 3-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 391.275167][ T5932] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 391.287060][ T5932] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 391.297458][ T5932] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 391.350158][ T796] usb 6-1: USB disconnect, device number 23 [ 391.428097][ T5823] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 391.442576][ T5823] usb 5-1: USB disconnect, device number 58 [ 391.601418][ T5934] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 391.748857][ T9] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 391.771457][ T5934] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 391.786483][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.795075][ T5934] usb 2-1: Product: syz [ 391.799452][ T5934] usb 2-1: Manufacturer: syz [ 391.804569][ T5934] usb 2-1: SerialNumber: syz [ 391.817731][ T5934] usb 2-1: config 0 descriptor?? [ 391.961442][ T9] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 391.991417][ T9] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 392.038837][ T9] usb 7-1: USB disconnect, device number 38 [ 392.299801][T13017] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2887'. [ 392.624573][T13027] netlink: 'syz.2.2891': attribute type 3 has an invalid length. [ 392.651491][T13027] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2891'. [ 392.674368][T13027] netlink: 'syz.2.2891': attribute type 3 has an invalid length. [ 392.688394][T13027] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2891'. [ 393.056279][ T5934] usb 2-1: Firmware version (0.0) predates our first public release. [ 393.080408][ T5934] usb 2-1: Please update to version 0.2 or newer [ 393.194254][ T5934] usb 2-1: USB disconnect, device number 48 [ 393.949514][T13063] input: syz1 as /devices/virtual/input/input70 [ 394.770033][T13085] syz_tun: entered allmulticast mode [ 394.788851][T13084] syz_tun: left allmulticast mode [ 394.851234][ T5934] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 395.003864][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.015676][T13083] loop7: detected capacity change from 16384 to 16383 [ 395.020045][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.033501][ T5934] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 395.044287][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.057840][ T5934] usb 7-1: config 0 descriptor?? [ 395.506317][ T5934] hid-steam 0003:28DE:1142.0044: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 395.635753][ T5934] hid-steam 0003:28DE:1142.0044: Steam wireless receiver connected [ 395.662601][ T5934] hid-steam 0003:28DE:1142.0045: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 395.727467][ T5934] usb 7-1: USB disconnect, device number 39 [ 395.756424][ T5934] hid-steam 0003:28DE:1142.0044: Steam wireless receiver disconnected [ 395.861809][T13100] fido_id[13100]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 396.468894][T13111] erspan0: entered promiscuous mode [ 397.341292][ T5934] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 397.502888][ T5934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.529522][ T5934] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 397.549705][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.579808][ T5934] usb 5-1: config 0 descriptor?? [ 397.598415][ T5934] pwc: Askey VC010 type 2 USB webcam detected. [ 398.014948][ T5934] pwc: recv_control_msg error -32 req 02 val 2b00 [ 398.045490][ T5934] pwc: recv_control_msg error -32 req 02 val 2700 [ 398.067846][ T5934] pwc: recv_control_msg error -32 req 02 val 2c00 [ 398.280144][ T5934] pwc: recv_control_msg error -71 req 04 val 1300 [ 398.297027][ T5934] pwc: recv_control_msg error -71 req 04 val 1400 [ 398.326617][ T5934] pwc: recv_control_msg error -71 req 02 val 2000 [ 398.351420][ T5934] pwc: recv_control_msg error -71 req 02 val 2100 [ 398.368842][ T5934] pwc: recv_control_msg error -71 req 04 val 1500 [ 398.394078][ T5934] pwc: recv_control_msg error -71 req 02 val 2500 [ 398.414950][ T5934] pwc: recv_control_msg error -71 req 02 val 2400 [ 398.441324][ T5934] pwc: recv_control_msg error -71 req 02 val 2600 [ 398.459850][ T5934] pwc: recv_control_msg error -71 req 02 val 2900 [ 398.482551][ T5934] pwc: recv_control_msg error -71 req 02 val 2800 [ 398.489833][ T5934] pwc: recv_control_msg error -71 req 04 val 1100 [ 398.507381][ T5934] pwc: recv_control_msg error -71 req 04 val 1200 [ 398.547801][ T5934] pwc: Registered as video103. [ 398.664471][ T5934] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input71 [ 398.741886][ T5934] usb 5-1: USB disconnect, device number 59 [ 399.715212][ T5934] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 399.881331][ T5934] usb 5-1: Using ep0 maxpacket: 32 [ 399.898926][ T5934] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 399.911795][ T5934] usb 5-1: config 0 has no interface number 0 [ 399.929796][ T5934] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 399.950603][ T5934] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 399.977188][ T5934] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 399.995838][ T5934] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 400.012141][ T5934] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 400.034511][ T5934] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 400.048761][ T5934] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 400.059622][ T5934] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 400.075584][ T5934] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 400.087308][ T5934] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 400.116732][ T5934] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 400.126447][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.137686][ T5934] usb 5-1: Product: syz [ 400.142446][ T5934] usb 5-1: Manufacturer: syz [ 400.147430][ T5934] usb 5-1: SerialNumber: syz [ 400.156556][ T5934] usb 5-1: config 0 descriptor?? [ 400.163361][T13146] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 400.174549][T13146] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 400.185146][ T5934] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 400.194071][ T5934] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 400.207074][ T5934] scsi host1: microtekX6 [ 400.453139][ T5887] usb 5-1: USB disconnect, device number 60 [ 400.716059][T13168] ip6gre1: entered promiscuous mode [ 400.723069][T13168] ip6gre1: entered allmulticast mode [ 400.825279][T13170] input: syz0 as /devices/virtual/input/input72 [ 400.859724][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2952'. [ 400.898161][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2952'. [ 400.912959][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2952'. [ 401.521675][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2955'. [ 401.578028][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2955'. [ 401.648899][T13203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2957'. [ 403.105244][ T5887] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 403.281314][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 403.286596][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 403.294554][ T5934] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 403.301950][ T5934] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 403.434311][ T5887] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 403.444806][ T5887] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 403.458896][ T5887] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 403.470352][ T5887] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 403.482804][ T5887] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 403.495636][ T5887] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.509295][ T5887] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 403.529909][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.131455][ T5887] usb 2-1: usb_control_msg returned -32 [ 404.137146][ T5887] usbtmc 2-1:16.0: can't read capabilities [ 404.529051][ T30] audit: type=1326 audit(1771936111.964:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13260 comm="syz.4.2972" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcef6c code=0x0 [ 405.446004][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 405.461212][ T5934] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 405.467386][ T5934] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 405.875280][T13281] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -71 [ 406.061520][T13281] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 406.071210][ T796] usb 2-1: USB disconnect, device number 49 [ 406.516446][ T796] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 406.640931][T13316] netlink: 'syz.5.2983': attribute type 27 has an invalid length. [ 406.683808][ T796] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 406.695126][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.710558][ T796] usb 3-1: config 0 descriptor?? [ 406.719290][ T796] cp210x 3-1:0.0: cp210x converter detected [ 407.147004][ T796] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 407.193957][ T796] usb 3-1: cp210x converter now attached to ttyUSB0 [ 407.382170][ T796] usb 3-1: USB disconnect, device number 58 [ 407.400068][ T796] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 407.424816][ T796] cp210x 3-1:0.0: device disconnected [ 407.603401][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 407.609926][ T5934] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 407.618578][ T5934] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 408.072429][T13316] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.080310][T13316] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.241852][T13316] team_slave_0: left promiscuous mode [ 408.267535][T13316] team_slave_1: left promiscuous mode [ 408.282244][ T9] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 408.443721][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 408.454862][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 408.466235][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 408.476137][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.500447][T13357] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 408.516595][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 408.766077][ T9] usb 5-1: USB disconnect, device number 61 [ 408.952707][T13316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.013476][T13316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.050362][T13316] xfrm0: left promiscuous mode [ 409.055852][T13316] xfrm0: left allmulticast mode [ 409.680688][T13316] macvlan6: left promiscuous mode [ 409.783502][T13342] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2989'. [ 409.793890][T13347] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2989'. [ 409.823986][ T83] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.833319][ T83] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.033456][ T83] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.045510][ T83] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.718153][T13411] syzkaller1: entered promiscuous mode [ 410.734546][T13411] syzkaller1: entered allmulticast mode [ 411.511244][ T5909] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 411.685624][ T5909] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 411.695147][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.704419][ T5909] usb 5-1: Product: syz [ 411.708734][ T5909] usb 5-1: Manufacturer: syz [ 411.714423][ T5909] usb 5-1: SerialNumber: syz [ 411.732586][ T5909] usb 5-1: config 0 descriptor?? [ 411.747954][ T5909] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 411.771393][ T9] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 411.959816][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.973393][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.985731][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 411.999257][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 412.009916][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.031656][ T9] usb 7-1: config 0 descriptor?? [ 412.095661][T13440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3026'. [ 412.162188][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 412.168677][ T5934] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 412.176117][ T5934] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 412.495170][ T9] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 412.527788][ T9] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 412.542226][ T9] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 412.549720][ T9] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 412.574928][ T9] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 412.582644][ T9] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 412.595793][ T9] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 412.608380][ T9] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 412.625159][T13370] usb 5-1: USB disconnect, device number 62 [ 412.631258][ T9] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 412.631298][ T9] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 412.672147][ T9] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 413.012425][T13479] netlink: 'syz.2.3031': attribute type 8 has an invalid length. [ 413.031193][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3031'. [ 413.140800][T13479] bond0: entered promiscuous mode [ 413.179434][T13479] bond_slave_0: entered promiscuous mode [ 413.193195][T13480] usb 7-1: language id specifier not provided by device, defaulting to English [ 413.203274][T13479] bond_slave_1: entered promiscuous mode [ 413.211782][T13479] gretap0: entered promiscuous mode [ 413.234781][T13479] bond0: left promiscuous mode [ 413.239842][T13479] bond_slave_0: left promiscuous mode [ 413.272282][T13479] bond_slave_1: left promiscuous mode [ 413.329261][T13479] gretap0: left promiscuous mode [ 413.639028][T13495] syzkaller1: entered promiscuous mode [ 413.646102][T13495] syzkaller1: entered allmulticast mode [ 414.241237][ T5934] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 414.242494][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 414.253379][ T5934] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 414.794492][T13521] netlink: 'syz.4.3049': attribute type 8 has an invalid length. [ 414.813504][T13521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3049'. [ 414.922773][T13523] loop9: detected capacity change from 0 to 7 [ 414.931957][T13523] Dev loop9: unable to read RDB block 7 [ 414.938924][T13523] loop9: unable to read partition table [ 414.946414][ T9] usb 7-1: USB disconnect, device number 40 [ 414.958856][T13523] loop9: partition table beyond EOD, truncated [ 414.977207][T13523] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 415.896870][T13542] input: syz1 as /devices/virtual/input/input73 [ 415.986552][T13517] syz.2.3047 (13517): drop_caches: 2 [ 416.109002][T13546] loop8: detected capacity change from 0 to 8 [ 416.161870][T13546] loop8: detected capacity change from 8 to 7 [ 416.279905][ T30] audit: type=1326 audit(1771936123.714:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.4.3059" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcef6c code=0x0 [ 416.398293][ T6131] Dev loop8: unable to read RDB block 7 [ 416.406237][ T6131] loop8: unable to read partition table [ 416.412596][ T6131] loop8: partition table beyond EOD, truncated [ 416.608665][T13546] Dev loop8: unable to read RDB block 7 [ 416.614518][T13546] loop8: unable to read partition table [ 416.620615][T13546] loop8: partition table beyond EOD, truncated [ 416.627115][T13546] loop_reread_partitions: partition scan of loop8 (”Q˜y,øÿÿÿüFê¦)) failed (rc=-5) [ 417.518767][T13589] loop3: detected capacity change from 0 to 7 [ 417.544921][T13589] Dev loop3: unable to read RDB block 7 [ 417.557552][T13589] loop3: unable to read partition table [ 417.571017][T13589] loop3: partition table beyond EOD, truncated [ 417.599359][T13589] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 417.683780][ T30] audit: type=1326 audit(1771936125.124:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13564 comm="syz.2.3065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17f6c code=0x7fc00000 [ 418.005056][ T30] audit: type=1326 audit(1771936125.444:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13599 comm="syz.2.3079" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f17f6c code=0x0 [ 418.290732][T13612] netlink: 'syz.4.3084': attribute type 13 has an invalid length. [ 418.311313][ T5930] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 418.461238][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 418.559506][ T5930] usb 2-1: config 0 interface 0 has no altsetting 0 [ 418.569874][ T5930] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 418.580156][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.618291][ T5930] usb 2-1: config 0 descriptor?? [ 418.772359][T13623] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 418.778542][T13623] syzkaller0: owner set to 0 [ 419.211489][T13370] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 419.317803][ T5930] hid (null): report_id 0 is invalid [ 419.373060][T13370] usb 5-1: Using ep0 maxpacket: 8 [ 419.380756][T13370] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 419.395817][T13370] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 419.406396][T13370] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 419.417949][T13370] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.431967][T13370] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 419.442382][T13370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.520179][ T5930] usb 2-1: USB disconnect, device number 50 [ 419.674575][T13370] usb 5-1: GET_CAPABILITIES returned 0 [ 419.680457][T13370] usbtmc 5-1:16.0: can't read capabilities [ 419.855304][ T5930] hid_parser_main: 5 callbacks suppressed [ 419.855329][ T5930] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 419.892181][ T5930] hid-generic 0000:0000:0000.0048: hidraw0: HID v0.00 Device [syz1] on syz0 [ 419.922287][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 419.931838][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 419.940999][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 419.950149][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 419.959292][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 419.968899][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 419.978067][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 419.987228][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 419.996372][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 420.015160][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 420.024381][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 420.033652][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 420.042811][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 420.052428][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 420.061702][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 420.070927][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 420.094406][ T9] usb 5-1: USB disconnect, device number 63 [ 420.228192][T13647] fido_id[13647]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 421.541702][T13675] netlink: 'syz.6.3109': attribute type 1 has an invalid length. [ 421.581741][T13675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.645562][T13675] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 421.658867][T13675] bond1: (slave batadv1): making interface the new active one [ 421.668691][T13675] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 421.841500][ T5930] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 422.011268][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 422.032762][ T5930] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 422.044782][ T5930] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 422.066017][ T5930] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 422.080207][T13691] binder: 13690:13691 ioctl c0306201 800003c0 returned -14 [ 422.091892][ T5930] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.106400][ T5930] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 422.115833][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.372532][ T5930] usb 3-1: GET_CAPABILITIES returned 0 [ 422.387898][ T5930] usbtmc 3-1:16.0: can't read capabilities [ 422.432781][T13703] netlink: 'syz.6.3121': attribute type 1 has an invalid length. [ 422.525604][T13706] 8021q: adding VLAN 0 to HW filter on device bond3 [ 422.535457][T13706] bond2: (slave bond3): making interface the new active one [ 422.545748][T13706] bond2: (slave bond3): Enslaving as an active interface with an up link [ 422.631095][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.642221][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.651423][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.660571][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.676223][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.685431][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.694575][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.703727][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.713703][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.722872][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.732052][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.741212][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.759590][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.768766][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.777868][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.793226][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.808008][ T5823] usb 3-1: USB disconnect, device number 59 [ 422.945202][T13717] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3123'. [ 423.132199][T13721] netlink: 212328 bytes leftover after parsing attributes in process `syz.6.3125'. [ 423.146629][T13721] netlink: Conntrack attr has 4 unknown bytes [ 423.258306][T13727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3128'. [ 423.833984][T13742] netlink: 'syz.2.3134': attribute type 4 has an invalid length. [ 424.162074][ T30] audit: type=1326 audit(1771936131.604:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13745 comm="syz.2.3136" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f17f6c code=0x0 [ 424.198490][ T30] audit: type=1326 audit(1771936131.634:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13747 comm="syz.6.3137" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703ef6c code=0x0 [ 425.297077][T13785] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3150'. [ 425.681551][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 425.853952][ T9] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 425.864203][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.876332][ T9] usb 5-1: Product: syz [ 425.880584][ T9] usb 5-1: Manufacturer: syz [ 425.885725][ T9] usb 5-1: SerialNumber: syz [ 425.898072][ T9] usb 5-1: config 0 descriptor?? [ 425.909269][ T9] ch341 5-1:0.0: ch341-uart converter detected [ 426.240681][T13818] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3163'. [ 426.521319][ T5930] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 426.531462][ T9] usb 5-1: failed to send control message: -71 [ 426.537812][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 426.570193][ T9] usb 5-1: USB disconnect, device number 64 [ 426.581919][ T9] ch341 5-1:0.0: device disconnected [ 426.721405][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 426.735030][ T5930] usb 2-1: config 0 interface 0 has no altsetting 0 [ 426.839166][ T5930] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 426.849493][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.863089][ T5930] usb 2-1: Product: syz [ 426.867606][ T5930] usb 2-1: Manufacturer: syz [ 426.877363][ T5930] usb 2-1: SerialNumber: syz [ 426.890132][ T5930] usb 2-1: config 0 descriptor?? [ 427.500828][T13844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3176'. [ 427.522584][T13844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3176'. [ 427.742271][ T5930] gs_usb 2-1:0.0: Configuring for 82 interfaces [ 428.419634][ T5930] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 2 (-EPROTO) [ 428.462126][T13862] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 428.470430][T13862] macvtap1: entered allmulticast mode [ 428.488207][T13862] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 428.515365][T13862] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 428.541654][T13862] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 428.732759][ T5930] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 428.755986][ T5930] usb 2-1: USB disconnect, device number 51 [ 428.901723][ T9] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 428.909783][ T5909] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 428.952258][T13876] input: syz0 as /devices/virtual/input/input74 [ 429.072364][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 429.080701][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 429.092842][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.104866][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.119329][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.130036][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 429.145925][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 429.155481][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.164149][ T5909] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 429.176808][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.202041][ T5909] usb 5-1: config 0 descriptor?? [ 429.402374][ T9] usb 3-1: usb_control_msg returned -32 [ 429.408120][ T9] usbtmc 3-1:16.0: can't read capabilities [ 429.647714][T13870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.666828][T13870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.684464][ T5909] microsoft 0003:045E:07DA.0049: unknown main item tag 0x0 [ 429.695307][ T5909] microsoft 0003:045E:07DA.0049: ignoring exceeding usage max [ 429.724043][ T5909] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0049/input/input75 [ 429.807701][ T5909] microsoft 0003:045E:07DA.0049: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 429.908303][ T5909] usb 5-1: USB disconnect, device number 65 [ 429.914860][ T5934] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 430.073509][ T5934] usb 7-1: Using ep0 maxpacket: 32 [ 430.082373][ T5934] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 430.096182][ T5934] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 430.105988][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 430.114949][ T5934] usb 7-1: Product: syz [ 430.119410][ T5934] usb 7-1: Manufacturer: syz [ 430.125188][ T5934] usb 7-1: SerialNumber: syz [ 430.140923][ T5934] usb 7-1: config 0 descriptor?? [ 430.147591][T13894] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 430.158893][ T5934] hub 7-1:0.0: bad descriptor, ignoring hub [ 430.170575][ T5934] hub 7-1:0.0: probe with driver hub failed with error -5 [ 430.255572][T13909] netlink: 'syz.5.3204': attribute type 4 has an invalid length. [ 430.278517][T13909] netlink: 'syz.5.3204': attribute type 4 has an invalid length. [ 430.389540][T13894] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 430.652161][ T9] usb 7-1: reset high-speed USB device number 41 using dummy_hcd [ 430.660922][ T9] usb 7-1: device reset changed ep0 maxpacket size! [ 430.673087][ T9] usb 7-1: USB disconnect, device number 41 [ 431.001286][ T9] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 431.217808][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 431.226630][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.237038][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 431.248892][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 431.258136][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.267949][ T9] usb 7-1: Product: syz [ 431.272306][ T9] usb 7-1: Manufacturer: syz [ 431.277037][ T9] usb 7-1: SerialNumber: syz [ 431.287717][ T9] usb 7-1: config 0 descriptor?? [ 431.555959][ T5909] usb 7-1: USB disconnect, device number 42 [ 431.647981][ T5934] usb 3-1: USB disconnect, device number 60 [ 432.283900][ T5934] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 432.476258][ T5934] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 432.486005][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.501244][ T5934] usb 5-1: config 0 descriptor?? [ 432.509134][ T5934] cp210x 5-1:0.0: cp210x converter detected [ 432.581625][T13370] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 432.639868][ T5930] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 432.720121][T13948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.732005][T13948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.931479][T13370] usb 7-1: Using ep0 maxpacket: 32 [ 432.941000][T13370] usb 7-1: config 0 has an invalid interface number: 56 but max is 0 [ 432.949372][ T5930] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 432.958228][T13370] usb 7-1: config 0 has no interface number 0 [ 432.964643][ T5930] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 432.975288][ T5934] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 432.984226][ T5930] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 432.997891][ T5930] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 433.012229][T13370] usb 7-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=b8.4d [ 433.021923][ T5934] usb 5-1: cp210x converter now attached to ttyUSB0 [ 433.030382][ T5930] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 433.041959][T13370] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.050008][T13370] usb 7-1: Product: syz [ 433.054928][ T5930] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 433.066307][T13370] usb 7-1: Manufacturer: syz [ 433.070957][T13370] usb 7-1: SerialNumber: syz [ 433.082767][ T5930] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 433.093630][T13370] usb 7-1: config 0 descriptor?? [ 433.098815][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 433.113717][ T5930] usb 3-1: Product: syz [ 433.117971][ T5930] usb 3-1: Manufacturer: syz [ 433.128747][T13370] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 433.144423][T13954] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 433.156032][ T5930] cdc_wdm 3-1:1.0: skipping garbage [ 433.162684][ T5930] cdc_wdm 3-1:1.0: skipping garbage [ 433.179680][ T5930] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 433.185903][ T5930] cdc_wdm 3-1:1.0: Unknown control protocol [ 433.218378][ T9] usb 5-1: USB disconnect, device number 66 [ 433.250028][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 433.292879][ T9] cp210x 5-1:0.0: device disconnected [ 433.402428][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 433.409134][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 433.416861][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 433.423545][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 433.430465][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 433.437116][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 433.443993][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 433.450641][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 433.457768][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 433.464437][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 433.471158][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 433.477816][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 433.484584][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 433.491244][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 433.498065][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 433.504734][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 433.511470][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 433.518125][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 433.524808][ T5930] usb 3-1: USB disconnect, device number 61 [ 433.684676][T13958] netlink: 'syz.5.3224': attribute type 1 has an invalid length. [ 433.695460][T13958] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3224'. [ 433.847380][T13964] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3226'. [ 433.939989][T13370] input: gspca_pac7302 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input76 [ 433.975241][T13968] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3228'. [ 434.171697][ C1] gspca_pac7302 7-1:0.56: URB error -71, resubmitting [ 434.173035][ T9] usb 7-1: USB disconnect, device number 43 [ 434.178549][ C1] gspca_main: Resubmit URB failed with error -19 [ 434.691218][ T5930] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 434.848608][T13991] Set syz1 is full, maxelem 768 reached [ 434.871242][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 434.884452][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.916170][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.939829][ T5930] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 434.965506][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.980054][ T5930] usb 3-1: config 0 descriptor?? [ 434.989046][ T5930] hub 3-1:0.0: USB hub found [ 435.206869][ T5930] hub 3-1:0.0: 1 port detected [ 435.835540][T13370] hub 3-1:0.0: activate --> -90 [ 436.249456][ T5930] usb 3-1: USB disconnect, device number 62 [ 436.435810][T14022] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3250'. [ 436.791206][ T9] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 436.930718][T14035] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.3255'. [ 436.971307][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 437.019139][ T9] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 437.029842][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.038296][ T9] usb 5-1: Product: syz [ 437.043021][ T9] usb 5-1: Manufacturer: syz [ 437.047847][ T9] usb 5-1: SerialNumber: syz [ 437.056603][ T9] usb 5-1: config 0 descriptor?? [ 437.069328][ T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 437.902010][ T796] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 438.075195][ T796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 438.088403][ T796] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 438.097856][ T796] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.110169][ T796] usb 7-1: config 0 descriptor?? [ 438.127155][T14054] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 438.318774][ T9] gspca_topro: reg_w err -71 [ 438.353036][ T9] gspca_topro: Sensor soi763a [ 438.391481][ T9] usb 5-1: USB disconnect, device number 67 [ 438.517741][T14078] syz.2.3272 (14078): drop_caches: 4 [ 438.598385][ T796] elan 0003:04F3:0755.004A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 438.814514][ T5930] usb 7-1: USB disconnect, device number 44 [ 439.483796][T14090] input: syz0 as /devices/virtual/input/input77 [ 439.901328][ T796] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 439.982936][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3285'. [ 440.021297][ T5823] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 440.061200][ T796] usb 7-1: Using ep0 maxpacket: 16 [ 440.069464][ T796] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 440.079141][ T796] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.090288][ T796] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.114671][ T796] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 440.131247][ T796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.150240][ T796] usb 7-1: Product: syz [ 440.155531][ T796] usb 7-1: Manufacturer: syz [ 440.160203][ T796] usb 7-1: SerialNumber: syz [ 440.203551][ T5823] usb 6-1: Using ep0 maxpacket: 16 [ 440.235796][ T5823] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.256835][ T5823] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.276924][ T5823] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 440.291428][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.299780][ T5823] usb 6-1: Product: syz [ 440.304669][ T5823] usb 6-1: Manufacturer: syz [ 440.309360][ T5823] usb 6-1: SerialNumber: syz [ 440.588181][ T796] usb 7-1: 0:2 : does not exist [ 440.651782][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.658390][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.071293][ T5934] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 441.232103][ T5934] usb 3-1: Using ep0 maxpacket: 32 [ 441.239852][ T5934] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 441.250946][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.270399][ T5934] usb 3-1: config 0 descriptor?? [ 441.285215][ T5934] gspca_main: sunplus-2.14.0 probing 041e:400b [ 441.291662][ T5930] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 441.437862][ T796] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 441.443294][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 441.458242][ T5930] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.470233][ T5930] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.491665][ T5930] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 441.504579][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.537992][ T5823] usb 6-1: 0:2 : does not exist [ 441.547949][ T796] usb 7-1: USB disconnect, device number 45 [ 441.568923][ T5823] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 441.673718][ T5823] usb 6-1: USB disconnect, device number 24 [ 441.711195][ T5909] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 441.739642][ T6131] udevd[6131]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 441.883543][ T5909] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 441.896444][ T5909] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 441.907825][ T5909] usb 5-1: config 0 interface 0 has no altsetting 0 [ 441.918822][ T5909] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 441.928334][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 441.937963][ T5909] usb 5-1: Product: syz [ 441.943456][ T5909] usb 5-1: Manufacturer: syz [ 441.948229][ T5909] usb 5-1: SerialNumber: syz [ 441.956236][ T5909] usb 5-1: config 0 descriptor?? [ 441.962845][T14144] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 441.986140][ T5909] usb 5-1: selecting invalid altsetting 0 [ 442.021869][ T5930] mcp2221 0003:04D8:00DD.004B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 442.271253][ T5930] usb 5-1: USB disconnect, device number 68 [ 442.348333][T13370] usb 2-1: USB disconnect, device number 52 [ 442.514915][ T5934] gspca_sunplus: reg_w_riv err -71 [ 442.520732][ T5934] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 442.540616][ T5934] usb 3-1: USB disconnect, device number 63 [ 442.999754][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3310'. [ 443.009429][T14173] netlink: 'syz.4.3310': attribute type 12 has an invalid length. [ 443.022089][T14173] netlink: 'syz.4.3310': attribute type 6 has an invalid length. [ 443.047541][T14173] vxlan0: entered promiscuous mode [ 443.058825][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.069951][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.079246][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.088484][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.167046][T14178] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3312'. [ 443.181328][T13370] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 443.189076][T14178] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3312'. [ 443.210995][T14178] netlink: 'syz.1.3312': attribute type 5 has an invalid length. [ 443.233754][T14178] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3312'. [ 443.366420][T13370] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.376979][T13370] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 443.391852][T13370] usb 7-1: config 0 interface 0 has no altsetting 0 [ 443.442278][T13370] usb 7-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 443.471209][T13370] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.490263][T13370] usb 7-1: config 0 descriptor?? [ 443.962758][T14207] loop6: detected capacity change from 0 to 3664 [ 443.962888][T13370] magicmouse 0003:05AC:0265.004C: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.6-1/input0 [ 443.983153][T13370] magicmouse 0003:05AC:0265.004C: magicmouse input not registered [ 443.996995][T14207] buffer_io_error: 28 callbacks suppressed [ 443.997013][T14207] Buffer I/O error on dev loop6, logical block 0, async page read [ 443.999812][T13370] magicmouse 0003:05AC:0265.004C: probe with driver magicmouse failed with error -12 [ 444.013747][T14207] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.022091][ T5930] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 444.052106][T14212] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 444.062769][T14207] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.070699][T14207] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.079515][T14212] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 444.090527][T14207] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.102421][T14212] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 444.114066][T14207] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.123316][T14212] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 444.133923][T14207] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.151331][T14207] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.159251][T14207] ldm_validate_partition_table(): Disk read failed. [ 444.168298][T14212] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 444.190901][T14212] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 444.202796][T14207] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.210707][T14207] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.219830][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 444.219842][T14212] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 444.219884][T14212] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 444.245036][ T5930] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 444.251881][T14207] Dev loop6: unable to read RDB block 0 [ 444.265813][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.268354][T14207] loop6: unable to read partition table [ 444.279685][T14212] I/O error, dev loop6, sector 3040 op 0x1:(WRITE) flags 0x8800 phys_seg 79 prio class 2 [ 444.290061][T14207] loop_reread_partitions: partition scan of loop6 (3„ ¾‚”˜) failed (rc=-5) [ 444.300178][T14212] I/O error, dev loop6, sector 3040 op 0x1:(WRITE) flags 0x8800 phys_seg 79 prio class 2 [ 444.329284][T14209] netlink: 'syz.5.3328': attribute type 1 has an invalid length. [ 444.348791][ T5930] usb 2-1: config 0 descriptor?? [ 444.395708][T14202] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 444.563812][T14209] bond1: entered promiscuous mode [ 444.569735][T14209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.709292][T14220] bond1: (slave bridge1): making interface the new active one [ 444.718643][T14220] bridge1: entered promiscuous mode [ 444.733460][T14220] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 444.955211][ T5930] elan 0003:04F3:0755.004D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 445.073913][T14234] syzkaller1: entered promiscuous mode [ 445.079712][T14234] syzkaller1: entered allmulticast mode [ 445.204047][ T5823] usb 2-1: USB disconnect, device number 53 [ 445.847160][T14260] binder: 14259:14260 ioctl 40046205 0 returned -22 [ 445.956168][ T5823] usb 7-1: USB disconnect, device number 46 [ 446.431353][ T5823] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 446.471441][ T5909] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 446.547827][T14283] vivid-004: disconnect [ 446.555230][T14283] vivid-004: reconnect [ 446.583597][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.597106][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.612492][ T5823] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 446.623711][ T5909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.635133][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.645647][ T5909] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 446.659589][ T5823] usb 3-1: config 0 descriptor?? [ 446.664858][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.691706][ T5909] usb 7-1: config 0 descriptor?? [ 446.911612][ T5909] usbhid 7-1:0.0: can't add hid device: -71 [ 446.917812][ T5909] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 446.954422][ T5909] usb 7-1: USB disconnect, device number 47 [ 447.101757][ T5823] keytouch 0003:0926:3333.004E: fixing up Keytouch IEC report descriptor [ 447.147293][ T5823] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.004E/input/input78 [ 447.306151][T14272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.334412][T14272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.381022][ T5823] keytouch 0003:0926:3333.004E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 447.430460][ T5823] usb 3-1: USB disconnect, device number 64 [ 447.471300][ T5930] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 447.542263][T14292] fido_id[14292]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 447.621395][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 447.637693][ T5930] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.655497][ T5930] usb 7-1: config 0 interface 0 has no altsetting 0 [ 447.667219][ T5930] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 447.679102][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.698990][ T5930] usb 7-1: config 0 descriptor?? [ 448.132295][ T5930] nzxt-smart2 0003:1E71:2009.004F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 448.244660][ T5934] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 448.431215][ T5934] usb 5-1: Using ep0 maxpacket: 16 [ 448.439455][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.455385][ T5934] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 448.466406][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.479401][ T5934] usb 5-1: config 0 descriptor?? [ 448.552912][ T5930] usb 7-1: USB disconnect, device number 48 [ 448.761330][ T5932] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 448.858624][T14315] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 448.909368][ T5934] mcp2221 0003:04D8:00DD.0050: unknown main item tag 0x0 [ 448.916958][ T5934] mcp2221 0003:04D8:00DD.0050: unknown main item tag 0x0 [ 448.927599][ T5934] mcp2221 0003:04D8:00DD.0050: unknown main item tag 0x0 [ 448.935014][ T5932] usb 6-1: Using ep0 maxpacket: 16 [ 448.940490][ T5934] mcp2221 0003:04D8:00DD.0050: unknown main item tag 0x0 [ 448.948180][ T5934] mcp2221 0003:04D8:00DD.0050: unknown main item tag 0x0 [ 448.956832][ T5934] mcp2221 0003:04D8:00DD.0050: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 449.019991][ T5932] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.030971][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 449.045260][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 449.061555][ T5932] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 449.071992][ T5932] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 449.138999][ T5932] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 449.158776][ T5932] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 449.187548][ T5934] usb 5-1: USB disconnect, device number 69 [ 449.205358][ T5932] usb 6-1: Manufacturer: syz [ 449.244803][ T5932] usb 6-1: config 0 descriptor?? [ 449.791537][ T5934] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 449.902646][ T5932] rc_core: IR keymap rc-hauppauge not found [ 449.914403][ T5932] Registered IR keymap rc-empty [ 449.919465][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 449.951649][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 449.963037][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.975305][ T5932] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 449.995022][ T5932] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input79 [ 450.008255][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.018317][ T5934] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 450.037820][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 450.046239][ T5934] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 450.058430][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.071875][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 450.082793][ T5934] usb 7-1: config 0 descriptor?? [ 450.091422][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 450.111367][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 450.131366][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 450.131398][ T5909] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 450.151488][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 450.171380][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 450.191377][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 450.211463][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 450.231341][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 450.254642][ T5932] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 450.266655][ T5932] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 450.306377][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 450.331309][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.353755][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.374315][ T5909] usb 5-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 450.386876][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.402332][ T5909] usb 5-1: config 0 descriptor?? [ 450.535515][ T5934] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 450.551569][ T5934] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 450.576956][ T5934] plantronics 0003:047F:FFFF.0051: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 450.836818][ T5909] topre 0003:0853:0148.0052: unknown main item tag 0x0 [ 450.849342][ T5909] topre 0003:0853:0148.0052: unknown main item tag 0x0 [ 450.857464][ T5909] topre 0003:0853:0148.0052: unknown main item tag 0x0 [ 450.870343][ T5909] topre 0003:0853:0148.0052: hidraw1: USB HID v0.49 Device [HID 0853:0148] on usb-dummy_hcd.4-1/input0 [ 450.887602][T13378] usb 7-1: USB disconnect, device number 49 [ 450.988038][T14346] loop8: detected capacity change from 0 to 8 [ 451.010525][T14346] Dev loop8: unable to read RDB block 8 [ 451.031376][T14346] loop8: unable to read partition table [ 451.055755][ T5932] usb 5-1: USB disconnect, device number 70 [ 451.068138][T14346] loop8: partition table beyond EOD, truncated [ 451.083091][T14346] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 451.170136][T13378] usb 6-1: USB disconnect, device number 25 [ 451.681805][T14361] kvm: user requested TSC rate below hardware speed [ 452.058704][T14373] loop5: detected capacity change from 0 to 7 [ 452.066102][T14373] Dev loop5: unable to read RDB block 7 [ 452.078583][T14373] loop5: AHDI p1 p2 p3 [ 452.097182][T14373] loop5: partition table partially beyond EOD, truncated [ 452.119655][T14373] loop5: p1 size 100663304 extends beyond EOD, truncated [ 452.153296][T14373] loop5: p2 start 1702059890 is beyond EOD, truncated [ 452.236843][ T6131] udevd[6131]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 452.431340][T13378] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 452.602932][T13378] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 452.621269][T13378] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.640542][T13378] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 452.650022][T13378] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.808515][T14396] loop2: detected capacity change from 0 to 7 [ 452.830923][T14396] Dev loop2: unable to read RDB block 7 [ 452.837324][T14396] loop2: unable to read partition table [ 452.844034][T14396] loop2: partition table beyond EOD, truncated [ 452.850369][T14396] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 452.909989][T13378] usb 7-1: usb_control_msg returned -32 [ 452.927291][T13378] usbtmc 7-1:16.0: can't read capabilities [ 452.951210][ T5823] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 453.070152][T14400] Invalid argument reading file caps for ./file0 [ 453.113022][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.125940][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.136280][ T5823] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 453.164057][ T5823] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 453.174851][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.187483][ T5823] usb 3-1: config 0 descriptor?? [ 453.477732][T14410] netlink: 'syz.4.3410': attribute type 1 has an invalid length. [ 453.511793][T14410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.607191][T14410] bond0: (slave gretap2): making interface the new active one [ 453.622896][T14410] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 453.725596][ T5823] plantronics 0003:047F:FFFF.0053: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 453.923501][ T5932] usb 3-1: USB disconnect, device number 65 [ 454.073784][ T796] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 454.232851][ T796] usb 6-1: Using ep0 maxpacket: 32 [ 454.247258][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3409'. [ 454.258599][T14417] netlink: 277 bytes leftover after parsing attributes in process `syz.5.3409'. [ 454.268364][T14417] netlink: 277 bytes leftover after parsing attributes in process `syz.5.3409'. [ 454.317618][ T796] usb 6-1: unable to get BOS descriptor or descriptor too short [ 454.327824][ T796] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 454.336713][ T796] usb 6-1: can't read configurations, error -71 [ 455.188711][ T5932] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 455.237631][ T5934] usb 7-1: USB disconnect, device number 50 [ 455.391262][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 455.445920][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.471355][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.501297][ T5932] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 455.519444][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.563970][ T5932] usb 2-1: config 0 descriptor?? [ 456.128791][ T5932] hid_parser_main: 161 callbacks suppressed [ 456.128821][ T5932] ft260 0003:0403:6030.0054: unknown main item tag 0x0 [ 456.332447][ T5932] ft260 0003:0403:6030.0054: chip code: 6424 8183 [ 456.438041][T10588] failed to send hello msg [ 456.455088][T10588] failed while handling packet from 1:60042 [ 456.571410][ T5932] ft260 0003:0403:6030.0054: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 457.053700][ T5932] ft260 0003:0403:6030.0054: failed to retrieve status: -71 [ 457.062803][ T5932] ft260 0003:0403:6030.0054: failed to reset I2C controller: -71 [ 457.093564][ T5932] usb 2-1: USB disconnect, device number 54 [ 457.261286][ T5930] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 457.467373][ T5930] usb 5-1: config 0 has no interfaces? [ 457.491280][ T5930] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 457.634489][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 457.670359][ T5930] usb 5-1: Product: syz [ 457.709322][ T5930] usb 5-1: Manufacturer: syz [ 457.721615][ T5930] usb 5-1: SerialNumber: syz [ 457.765851][ T5930] usb 5-1: config 0 descriptor?? [ 458.050226][ T5930] usb 5-1: USB disconnect, device number 71 [ 458.474240][T14498] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 459.099276][ T29] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 459.263200][ T29] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 459.275500][ T29] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 459.299343][ T29] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 459.309884][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.325490][T14516] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 459.356371][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 459.567949][T13378] usb 5-1: USB disconnect, device number 72 [ 460.211250][T13378] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 460.281338][ T5930] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 460.384034][T13378] usb 6-1: Using ep0 maxpacket: 16 [ 460.442423][T13378] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.468661][T13378] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.501662][T13378] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 460.510795][T13378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.545138][T13378] usb 6-1: config 0 descriptor?? [ 460.646305][T14563] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 460.654754][ T5930] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 460.682582][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.713909][ T5930] usb 2-1: Product: syz [ 460.718166][ T5930] usb 2-1: Manufacturer: syz [ 460.757942][ T5930] usb 2-1: SerialNumber: syz [ 462.737497][T13378] letsketch 0003:6161:4D15.0055: Device info:   [ 463.011787][T13378] usb 6-1: Max retries (5) exceeded reading string descriptor 201 [ 463.031280][T13378] letsketch 0003:6161:4D15.0055: probe with driver letsketch failed with error -71 [ 463.072226][T13378] usb 6-1: USB disconnect, device number 28 [ 463.171410][ T5909] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 463.341233][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 463.350143][ T5909] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 463.359228][ T5909] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 463.371781][ T5909] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 463.382958][ T5909] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 463.394106][ T5909] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.394159][ T5930] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 463.408527][ T5909] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 463.424207][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.434556][T14611] dummy0: Device is already in use. [ 463.444063][ T5930] cdc_ncm 2-1:1.0: setting rx_max = 16384 [ 463.463895][T14611] dummy0: Device is already in use. [ 463.573907][T14613] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967280. macoff=96 [ 463.674102][ T5930] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 463.688656][ T5909] usb 5-1: usb_control_msg returned -32 [ 463.694988][ T5909] usbtmc 5-1:16.0: can't read capabilities [ 463.740796][ T5930] usb 2-1: USB disconnect, device number 55 [ 463.758568][ T5930] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 463.911324][ T5909] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 464.061883][ T5909] usb 7-1: Using ep0 maxpacket: 32 [ 464.079319][ T5909] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 464.088108][ T5909] usb 7-1: config 0 has no interface number 0 [ 464.096024][ T5909] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 464.111489][ T5909] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 464.114206][T14621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3504'. [ 464.121637][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.138558][ T5909] usb 7-1: Product: syz [ 464.143280][ T5909] usb 7-1: Manufacturer: syz [ 464.148116][ T5909] usb 7-1: SerialNumber: syz [ 464.157321][ T5909] usb 7-1: config 0 descriptor?? [ 464.173262][ T5909] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 464.183833][ T5909] em28xx 7-1:0.132: Video interface 132 found: [ 464.183846][T14621] bridge_slave_1: left allmulticast mode [ 464.183868][T14621] bridge_slave_1: left promiscuous mode [ 464.202748][T14621] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.239699][T14621] bridge_slave_0: left allmulticast mode [ 464.245688][T14621] bridge_slave_0: left promiscuous mode [ 464.253095][T14621] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.273977][ T796] usb 5-1: USB disconnect, device number 73 [ 464.526363][T14625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3495'. [ 464.568611][T14625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3495'. [ 464.579661][ T5909] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 464.588622][T14625] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3495'. [ 464.598872][T14625] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3495'. [ 464.790031][T14615] m920x_read = error: -19 [ 464.800499][ T5909] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 464.823576][ T5909] em28xx 7-1:0.132: board has no eeprom [ 464.901226][ T5909] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 464.909539][ T5909] em28xx 7-1:0.132: analog set to bulk mode. [ 464.919677][T13378] em28xx 7-1:0.132: Registering V4L2 extension [ 464.946121][ T5909] usb 7-1: USB disconnect, device number 51 [ 464.959246][ T5909] em28xx 7-1:0.132: Disconnecting em28xx [ 465.011223][ T5930] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 465.187771][ T5930] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 465.190711][T13378] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 465.197310][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.197339][ T5930] usb 3-1: Product: syz [ 465.197374][ T5930] usb 3-1: Manufacturer: syz [ 465.197390][ T5930] usb 3-1: SerialNumber: syz [ 465.218968][ T5930] usb 3-1: config 0 descriptor?? [ 465.235906][T13378] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 465.249605][ T5930] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 465.272015][T13378] em28xx 7-1:0.132: No AC97 audio processor [ 465.301899][T13378] usb 7-1: Decoder not found [ 465.306672][T13378] em28xx 7-1:0.132: failed to create media graph [ 465.332384][T13378] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 465.360599][T13378] em28xx 7-1:0.132: Remote control support is not available for this card. [ 465.378312][ T5909] em28xx 7-1:0.132: Closing input extension [ 465.436817][ T5909] em28xx 7-1:0.132: Freeing device [ 466.487679][ T5930] gspca_sunplus: reg_w_riv err -71 [ 466.500542][ T5930] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 466.519464][ T5930] usb 3-1: USB disconnect, device number 66 [ 466.593471][T14676] syzkaller1: entered promiscuous mode [ 466.599092][T14676] syzkaller1: entered allmulticast mode [ 466.720928][T14681] binder: 14680:14681 ioctl 4018620d 0 returned -22 [ 466.798534][T14683] binder: 14680:14683 ioctl c0306201 0 returned -14 [ 467.836410][T14721] netlink: 35 bytes leftover after parsing attributes in process `syz.6.3534'. [ 467.853908][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3534'. [ 468.881313][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3540'. [ 468.907697][T14748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3540'. [ 469.653528][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3553'. [ 469.669638][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3553'. [ 469.800129][T14772] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 470.421303][ T5930] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 470.581283][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 470.593724][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.614834][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.650192][ T5930] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 470.661191][ T5930] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 470.669368][ T5930] usb 3-1: Manufacturer: syz [ 470.685133][ T5930] usb 3-1: config 0 descriptor?? [ 470.981288][ T29] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 471.130056][ T5930] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:041E:3100.0056/input/input80 [ 471.151512][T13378] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 471.161251][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 471.171430][ T29] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 471.180583][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.191629][ T29] usb 7-1: Product: syz [ 471.195974][ T29] usb 7-1: Manufacturer: syz [ 471.200625][ T29] usb 7-1: SerialNumber: syz [ 471.210220][ T29] usb 7-1: config 0 descriptor?? [ 471.227897][ T5930] creative-sb0540 0003:041E:3100.0056: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 471.331543][ T5909] usb 3-1: USB disconnect, device number 67 [ 471.341205][T13378] usb 5-1: Using ep0 maxpacket: 16 [ 471.370884][T13378] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.402156][T13378] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.415291][T13378] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 471.444305][T13378] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 471.459156][T14811] fido_id[14811]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 471.463630][T13378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.486548][ T29] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 471.496115][T13378] usb 5-1: config 0 descriptor?? [ 471.651281][ T5930] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 471.815657][ T5930] usb 6-1: unable to get BOS descriptor or descriptor too short [ 471.825239][ T5930] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 471.836692][ T5930] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1048, setting to 1024 [ 471.855130][ T5930] usb 6-1: config 1 interface 0 has no altsetting 0 [ 471.867932][ T5930] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 471.877554][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.885785][ T5930] usb 6-1: Product: syz [ 471.890037][ T5930] usb 6-1: Manufacturer: syz [ 471.894809][ T5930] usb 6-1: SerialNumber: syz [ 471.906519][T14813] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 471.947863][T13378] input: HID 0955:7214 Haptics as /devices/virtual/input/input81 [ 472.018245][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802c2dbc00: rx timeout, send abort [ 472.030488][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802c2dbc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 472.070921][T13378] shield 0003:0955:7214.0057: Registered Thunderstrike controller [ 472.086342][T13378] shield 0003:0955:7214.0057: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 472.118542][T14810] random: crng reseeded on system resumption [ 472.245047][T13378] shield 0003:0955:7214.0057: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 472.246377][ T5932] usb 5-1: USB disconnect, device number 74 [ 472.262950][T13378] shield 0003:0955:7214.0057: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 472.263228][T13378] shield 0003:0955:7214.0057: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 472.296079][T13378] shield 0003:0955:7214.0057: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 472.322630][ T30] audit: type=1326 audit(1771936179.754:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14819 comm="syz.1.3576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 472.378514][ T5930] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input82 [ 472.400933][ T30] audit: type=1326 audit(1771936179.764:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14819 comm="syz.1.3576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 472.436245][ T30] audit: type=1326 audit(1771936179.764:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14819 comm="syz.1.3576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 472.468482][ T30] audit: type=1326 audit(1771936179.764:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14819 comm="syz.1.3576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 472.503012][ T30] audit: type=1326 audit(1771936179.764:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14819 comm="syz.1.3576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 472.527002][ T30] audit: type=1326 audit(1771936179.764:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14819 comm="syz.1.3576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 472.565116][ T29] gspca_sunplus: reg_w_riv err -71 [ 472.570733][ T29] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 472.583462][ T30] audit: type=1326 audit(1771936179.764:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14819 comm="syz.1.3576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 472.608339][ T30] audit: type=1326 audit(1771936179.764:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14819 comm="syz.1.3576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 472.634444][ T30] audit: type=1326 audit(1771936179.764:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14819 comm="syz.1.3576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 472.669182][ T29] usb 7-1: USB disconnect, device number 52 [ 472.749999][ T30] audit: type=1326 audit(1771936179.764:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14819 comm="syz.1.3576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 472.823021][ T5909] usb 6-1: USB disconnect, device number 29 [ 472.823032][ C1] pxrc 6-1:1.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 472.844602][ T5178] pxrc 6-1:1.0: pxrc_open - usb_submit_urb failed, error: -19 [ 473.302125][ T5909] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 473.465000][ T5909] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.481194][ T5909] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.498704][ T5909] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 473.519057][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 473.551159][ T5909] usb 3-1: SerialNumber: syz [ 473.784558][ T5909] usb 3-1: 0:2 : does not exist [ 473.901485][ T5909] usb 3-1: USB disconnect, device number 68 [ 474.079949][ T6131] udevd[6131]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.222400][T14841] lo: Caught tx_queue_len zero misconfig [ 474.300364][T14845] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3585'. [ 474.317871][T14845] vlan2: left allmulticast mode [ 474.354097][T14845] vlan2: left promiscuous mode [ 474.360869][T14845] bridge0: port 3(vlan2) entered disabled state [ 474.409614][T14845] bridge_slave_1: left allmulticast mode [ 474.441170][T14845] bridge_slave_1: left promiscuous mode [ 474.448169][T14845] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.516954][T14850] input: syz0 as /devices/virtual/input/input83 [ 474.553667][T14845] bridge_slave_0: left allmulticast mode [ 474.571700][T14845] bridge_slave_0: left promiscuous mode [ 474.702971][T14845] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.801496][T14859] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3594'. [ 475.151757][ T5932] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 475.301278][ T5932] usb 7-1: Using ep0 maxpacket: 16 [ 475.330894][ T5932] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.361337][ T5932] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.391160][ T5932] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 475.451176][ T5932] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 475.460320][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.494048][ T5932] usb 7-1: config 0 descriptor?? [ 475.937304][ T5932] microsoft 0003:045E:07DA.0058: ignoring exceeding usage max [ 475.982480][ T5932] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0058/input/input84 [ 476.730058][ T5932] microsoft 0003:045E:07DA.0058: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 476.808912][ T5932] usb 7-1: USB disconnect, device number 53 [ 476.961853][T14911] fido_id[14911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 477.531347][T13378] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 477.702487][T13378] usb 7-1: Using ep0 maxpacket: 32 [ 477.709624][T13378] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 477.720836][T13378] usb 7-1: config 0 has no interface number 0 [ 477.732453][T13378] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 477.745418][T13378] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.766881][T14936] Invalid argument reading file caps for ./file0 [ 477.773670][T13378] usb 7-1: Product: syz [ 477.778091][T13378] usb 7-1: Manufacturer: syz [ 477.786307][T13378] usb 7-1: SerialNumber: syz [ 477.806992][T13378] usb 7-1: config 0 descriptor?? [ 478.899768][T14946] loop3: detected capacity change from 0 to 1 [ 478.908628][T14946] Dev loop3: unable to read RDB block 1 [ 478.915208][T14946] loop3: unable to read partition table [ 478.921970][T14946] loop3: partition table beyond EOD, truncated [ 478.928265][T14946] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 479.063393][T13378] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 479.084045][T13378] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 479.094028][T13378] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 479.106777][T13378] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 479.119614][T13378] usb 7-1: USB disconnect, device number 54 [ 479.961720][ T5932] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 480.127107][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 480.137249][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 480.149856][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 480.170725][ T5932] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 480.182009][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.190142][ T5932] usb 3-1: Product: syz [ 480.197751][ T5932] usb 3-1: Manufacturer: syz [ 480.202569][ T5932] usb 3-1: SerialNumber: syz [ 480.210693][ T5932] usb 3-1: config 0 descriptor?? [ 480.227640][ T5932] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 480.238082][ T5932] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 480.351245][ T5930] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 480.511720][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 480.523724][ T5930] usb 7-1: config 0 has no interfaces? [ 480.534259][ T5930] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 480.543898][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.552121][ T5930] usb 7-1: Product: syz [ 480.556565][ T5930] usb 7-1: Manufacturer: syz [ 480.562312][ T5930] usb 7-1: SerialNumber: syz [ 480.578071][ T5930] usb 7-1: config 0 descriptor?? [ 480.836359][ T5932] em28xx 3-1:0.0: unknown em28xx chip ID (190) [ 480.927298][T14973] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3639'. [ 480.939520][ T5930] usb 7-1: USB disconnect, device number 55 [ 481.047622][ T5932] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 481.260723][ T5932] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 481.274134][ T5932] em28xx 3-1:0.0: No AC97 audio processor [ 481.303435][ T5932] usb 3-1: USB disconnect, device number 69 [ 481.310952][ T5932] em28xx 3-1:0.0: Disconnecting em28xx [ 481.326296][ T5932] em28xx 3-1:0.0: Freeing device [ 481.798224][T14987] netlink: 'syz.5.3644': attribute type 1 has an invalid length. [ 482.058177][T14987] netlink: 'syz.5.3644': attribute type 6 has an invalid length. [ 482.080458][T14987] netlink: 'syz.5.3644': attribute type 3 has an invalid length. [ 482.350929][T15009] netlink: 'syz.6.3654': attribute type 10 has an invalid length. [ 482.359503][T15009] netlink: 55 bytes leftover after parsing attributes in process `syz.6.3654'. [ 482.407035][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 482.407055][ T30] audit: type=1326 audit(1771936189.844:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.2.3655" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f17f6c code=0x0 [ 483.361746][T15036] input: syz0 as /devices/virtual/input/input85 [ 483.521558][ T5823] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 483.684015][ T5823] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.695607][T15048] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 483.697269][ T5823] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 483.713452][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.725182][ T5823] usb 5-1: config 0 descriptor?? [ 483.737485][ T5823] pwc: Askey VC010 type 2 USB webcam detected. [ 484.172664][ T5823] pwc: recv_control_msg error -32 req 02 val 2b00 [ 484.180801][ T5823] pwc: recv_control_msg error -32 req 02 val 2700 [ 484.190502][ T5823] pwc: recv_control_msg error -32 req 02 val 2c00 [ 484.400286][ T5823] pwc: recv_control_msg error -71 req 04 val 1300 [ 484.411273][ T5823] pwc: recv_control_msg error -71 req 04 val 1400 [ 484.431763][ T5823] pwc: recv_control_msg error -71 req 02 val 2000 [ 484.438750][ T5823] pwc: recv_control_msg error -71 req 02 val 2100 [ 484.458337][ T5823] pwc: recv_control_msg error -71 req 04 val 1500 [ 484.466501][T15068] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3677'. [ 484.481965][ T5823] pwc: recv_control_msg error -71 req 02 val 2500 [ 484.500351][ T5823] pwc: recv_control_msg error -71 req 02 val 2400 [ 484.507445][ T5823] pwc: recv_control_msg error -71 req 02 val 2600 [ 484.520192][T15068] bridge_slave_1: left allmulticast mode [ 484.541474][ T5823] pwc: recv_control_msg error -71 req 02 val 2900 [ 484.552634][T15068] bridge_slave_1: left promiscuous mode [ 484.558760][T15068] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.561531][ T5823] pwc: recv_control_msg error -71 req 02 val 2800 [ 484.602982][T15068] bridge_slave_0: left allmulticast mode [ 484.608927][T15068] bridge_slave_0: left promiscuous mode [ 484.614795][ T5823] pwc: recv_control_msg error -71 req 04 val 1100 [ 484.616534][ T5823] pwc: recv_control_msg error -71 req 04 val 1200 [ 484.625952][T15068] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.675393][ T5823] pwc: Registered as video103. [ 484.689371][ T5823] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input86 [ 484.719539][ T5823] usb 5-1: USB disconnect, device number 75 [ 485.371284][ T5823] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 485.521424][ T5823] usb 3-1: Using ep0 maxpacket: 32 [ 485.528513][ T5823] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 485.539282][ T5823] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 485.551738][ T5823] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 485.562900][ T5823] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 485.578550][ T5823] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 485.588286][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.596422][ T5823] usb 3-1: Product: syz [ 485.600663][ T5823] usb 3-1: Manufacturer: syz [ 485.605485][ T5823] usb 3-1: SerialNumber: syz [ 485.625902][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 485.650565][ T5823] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input87 [ 485.701302][ T29] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 485.851198][ T5823] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 485.863263][ T29] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 485.874405][ T5823] (id 0x00) [ 485.877892][ T29] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 485.898313][ T29] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 485.907822][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.920023][T15090] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 485.979194][ T29] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 485.991265][ T5823] rc_core: IR keymap rc-imon-pad not found [ 485.997171][ T5823] Registered IR keymap rc-empty [ 486.025022][ T5823] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 486.061348][ T5823] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 486.103842][T15093] netlink: 'syz.4.3687': attribute type 13 has an invalid length. [ 486.115303][ T5823] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 486.137890][ T5823] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input88 [ 486.202729][ T5823] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:70> initialized [ 486.415401][T15100] imon:vfd_write: invalid payload size [ 486.436417][ T29] usb 2-1: USB disconnect, device number 56 [ 486.993242][ T5932] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 487.033341][T15118] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 487.161242][ T5932] usb 7-1: Using ep0 maxpacket: 32 [ 487.169353][ T5932] usb 7-1: config 0 interface 0 has no altsetting 0 [ 487.176751][ T5932] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 487.186695][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.195757][ T5823] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 487.214744][ T5932] usb 7-1: config 0 descriptor?? [ 487.371335][ T5823] usb 5-1: Using ep0 maxpacket: 16 [ 487.379502][ T5823] usb 5-1: config 0 has no interfaces? [ 487.388280][ T5823] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 487.397789][ T5823] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 487.406193][ T5823] usb 5-1: Manufacturer: syz [ 487.422667][ T5823] usb 5-1: config 0 descriptor?? [ 487.645928][ T5932] corsair-psu 0003:1B1C:1C0D.0059: unknown main item tag 0x0 [ 487.663830][ T5932] corsair-psu 0003:1B1C:1C0D.0059: unknown main item tag 0x0 [ 487.687918][ T5932] corsair-psu 0003:1B1C:1C0D.0059: unknown main item tag 0x0 [ 487.716558][ T5932] corsair-psu 0003:1B1C:1C0D.0059: unknown main item tag 0x0 [ 487.741265][ T5932] corsair-psu 0003:1B1C:1C0D.0059: unknown main item tag 0x0 [ 487.767140][ T5932] corsair-psu 0003:1B1C:1C0D.0059: hidraw0: USB HID v0.05 Device [HID 1b1c:1c0d] on usb-dummy_hcd.6-1/input0 [ 487.903067][ T5932] corsair-psu 0003:1B1C:1C0D.0059: unable to initialize device (-71) [ 487.918313][ T5932] corsair-psu 0003:1B1C:1C0D.0059: probe with driver corsair-psu failed with error -71 [ 487.937234][ T5932] usb 7-1: USB disconnect, device number 56 [ 488.141924][ T796] usb 3-1: USB disconnect, device number 70 [ 488.873094][T15153] syzkaller1: entered promiscuous mode [ 488.878796][T15153] syzkaller1: entered allmulticast mode [ 489.961293][ T5823] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 489.987676][ T29] usb 5-1: USB disconnect, device number 76 [ 490.118861][ T5823] usb 2-1: Using ep0 maxpacket: 32 [ 490.133809][ T5823] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 490.151596][T15191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3719'. [ 490.171235][ T5823] usb 2-1: config 1 interface 0 has no altsetting 0 [ 490.191752][ T5823] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 490.200902][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.231161][ T5823] usb 2-1: Product: syz [ 490.235441][ T5823] usb 2-1: Manufacturer: syz [ 490.240090][ T5823] usb 2-1: SerialNumber: syz [ 490.308992][T15195] netlink: 'syz.2.3723': attribute type 13 has an invalid length. [ 491.214436][T15169] netlink: 'syz.1.3713': attribute type 2 has an invalid length. [ 491.223109][T15169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.327468][ T5823] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input90 [ 491.357981][ C1] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 491.357981][ T5823] usb 2-1: USB disconnect, device number 57 [ 491.543743][ T5823] appletouch 2-1:1.0: input: appletouch disconnected [ 492.101226][ T5823] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 492.148647][T15243] vlan0: entered promiscuous mode [ 492.266163][ T5823] usb 7-1: Using ep0 maxpacket: 8 [ 492.274409][ T5823] usb 7-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 8 [ 492.301347][ T5823] usb 7-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 16 [ 492.312045][ T5823] usb 7-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 492.332251][T15248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3748'. [ 492.341696][ T5823] usb 7-1: config 1 interface 0 has no altsetting 0 [ 492.349730][ T5823] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 492.392016][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 492.400110][ T5823] usb 7-1: SerialNumber: syz [ 492.480778][T15233] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 492.527716][T15233] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 492.771931][T15233] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 492.789901][T15233] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 493.235222][ T5823] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 493.264361][T15276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3756'. [ 493.318984][T15276] vxlan1: entered promiscuous mode [ 493.674971][ T29] usb 7-1: USB disconnect, device number 57 [ 493.688515][ T29] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 494.311171][T13378] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 494.444343][T15320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3772'. [ 494.455599][T15320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3772'. [ 494.481385][T13378] usb 5-1: Using ep0 maxpacket: 16 [ 494.493266][T13378] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.512525][T13378] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 494.517706][T15321] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3771'. [ 494.525841][T13378] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 494.591183][T13378] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 494.622986][T13378] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.662336][T13378] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 494.668871][T15324] kvm: user requested TSC rate below hardware speed [ 494.680572][T13378] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 494.700019][T13378] usb 5-1: Manufacturer: syz [ 494.724135][T13378] usb 5-1: config 0 descriptor?? [ 495.051167][T13378] rc_core: IR keymap rc-hauppauge not found [ 495.057923][T13378] Registered IR keymap rc-empty [ 495.084684][T13378] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 495.123761][T13378] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 495.187039][T13378] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 495.212617][T13378] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input91 [ 495.283245][T13378] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 495.301516][T13378] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 495.371550][T13378] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 495.409870][T13378] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 495.461361][T13378] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 495.491224][T13378] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 495.517702][T13378] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 495.551319][T13378] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 495.581263][T13378] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 495.611283][T13378] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 495.653685][T13378] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 495.681683][T13378] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 495.699041][T13378] usb 5-1: USB disconnect, device number 77 [ 496.242241][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3788'. [ 496.262003][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3788'. [ 496.273042][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3788'. [ 496.307170][T15376] ALSA: seq fatal error: cannot create timer (-16) [ 496.739889][T15392] input: syz0 as /devices/virtual/input/input92 [ 498.011298][ T5823] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 498.175986][ T5823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.217370][ T5823] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 498.244682][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.272313][ T5823] usb 6-1: config 0 descriptor?? [ 498.619814][ T5823] usbhid 6-1:0.0: can't add hid device: -71 [ 498.631290][ T5823] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 498.666204][ T5823] usb 6-1: USB disconnect, device number 30 [ 499.391346][ T5932] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 499.541224][ T5932] usb 6-1: Using ep0 maxpacket: 32 [ 499.550643][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.551476][ T5823] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 499.570108][ T5932] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 499.582923][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.598679][ T5932] usb 6-1: config 0 descriptor?? [ 499.610602][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 499.625710][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 499.635809][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 499.647332][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 499.657211][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 499.679861][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 499.690678][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 499.698469][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 499.729700][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 499.742046][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 499.781762][ T5932] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 499.793773][ T5932] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 499.855780][ T5823] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.866762][ T5823] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 499.879548][ T5823] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 499.899782][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 499.922632][ T5823] usb 2-1: SerialNumber: syz [ 500.127157][T15477] chnl_net:caif_netlink_parms(): no params data found [ 500.337770][T15477] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.365503][ T5823] usb 2-1: 0:2 : does not exist [ 500.374827][T15477] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.382499][T15477] bridge_slave_0: entered allmulticast mode [ 500.390795][T15477] bridge_slave_0: entered promiscuous mode [ 500.401013][T15477] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.408515][T15477] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.416577][T15477] bridge_slave_1: entered allmulticast mode [ 500.425211][T15477] bridge_slave_1: entered promiscuous mode [ 500.507028][T15477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.521477][T15477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.550721][ T5823] usb 2-1: USB disconnect, device number 58 [ 500.662250][ T5909] usb 6-1: USB disconnect, device number 31 [ 500.673838][ T5909] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 500.716626][ T6099] udevd[6099]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.748016][T15477] team0: Port device team_slave_0 added [ 500.775796][T15477] team0: Port device team_slave_1 added [ 500.898710][T15477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.910227][T15477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.940607][T15477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.956635][T15477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.970918][T15477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.025887][T15477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.063034][T15508] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3842'. [ 501.081285][T15508] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3842'. [ 501.228023][T15477] hsr_slave_0: entered promiscuous mode [ 501.246703][T15477] hsr_slave_1: entered promiscuous mode [ 501.253664][T15477] debugfs: 'hsr0' already exists in 'hsr' [ 501.259518][T15477] Cannot create hsr debugfs directory [ 501.554180][T15477] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 501.646146][T15477] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 501.680572][T15477] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 501.720653][T15477] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 501.843107][ T5828] Bluetooth: hci4: command tx timeout [ 501.898085][T15477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.933901][T15477] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.950358][T10588] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.957657][T10588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.980332][T10588] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.987641][T10588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.085336][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.092475][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.177723][T15477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.263502][T15477] veth0_vlan: entered promiscuous mode [ 502.278917][T15477] veth1_vlan: entered promiscuous mode [ 502.372201][T15477] veth0_macvtap: entered promiscuous mode [ 502.384490][T15477] veth1_macvtap: entered promiscuous mode [ 502.420697][T15477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.456431][T15477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.503438][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.573721][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.597196][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.611174][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.723346][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.743040][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.799563][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.814855][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.512251][ T5930] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 503.681506][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 503.696116][ T5930] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 503.721926][ T5930] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 503.744896][ T5930] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 503.756636][ T5930] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 503.785414][ T5930] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 503.811408][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.922222][ T5828] Bluetooth: hci4: command tx timeout [ 503.942094][T15593] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 504.055016][ T5930] usb 3-1: GET_CAPABILITIES returned 0 [ 504.060895][ T5930] usbtmc 3-1:16.0: can't read capabilities [ 504.259517][ T5932] usb 3-1: USB disconnect, device number 71 [ 504.791834][ T5932] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 504.967309][ T5932] usb 6-1: Using ep0 maxpacket: 8 [ 504.987025][ T5932] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 504.997061][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.005851][ T5932] usb 6-1: Product: syz [ 505.010072][ T5932] usb 6-1: Manufacturer: syz [ 505.016744][ T5932] usb 6-1: SerialNumber: syz [ 505.031061][ T5932] usb 6-1: config 0 descriptor?? [ 505.201544][ T5930] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 505.245426][ T5932] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 505.351341][ T29] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 505.373146][ T5930] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.384348][ T5930] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.394435][ T5930] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 505.408461][ T5930] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 505.417708][T13370] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 505.425419][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.438078][ T5930] usb 7-1: config 0 descriptor?? [ 505.532243][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 505.540834][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 505.552123][ T5934] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 505.560247][ T29] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 505.570808][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.582018][ T29] usb 8-1: config 0 descriptor?? [ 505.594664][T13370] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.606739][T13370] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.616739][T13370] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 505.630108][T13370] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 505.639894][T13370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.656263][T13370] usb 3-1: config 0 descriptor?? [ 505.711220][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 505.718265][ T5934] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 505.727173][ T5934] usb 2-1: config 0 has no interface number 0 [ 505.733777][ T5934] usb 2-1: config 0 interface 184 has no altsetting 0 [ 505.744173][ T5934] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 505.753996][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.762307][ T5934] usb 2-1: Product: syz [ 505.766647][ T5934] usb 2-1: Manufacturer: syz [ 505.771553][ T5934] usb 2-1: SerialNumber: syz [ 505.779275][ T5934] usb 2-1: config 0 descriptor?? [ 505.800593][ T29] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 505.884949][ T5930] plantronics 0003:047F:FFFF.005A: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 506.001277][ T5828] Bluetooth: hci4: command tx timeout [ 506.071868][ T5823] usb 7-1: USB disconnect, device number 58 [ 506.080117][ T5930] usb 8-1: USB disconnect, device number 2 [ 506.080363][ C0] iowarrior 8-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 506.180204][T13370] plantronics 0003:047F:FFFF.005B: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 506.355860][ T5932] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 506.373292][ T5932] usb 6-1: USB disconnect, device number 32 [ 506.855171][ T5934] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 507.081418][ T5823] usb 7-1: new low-speed USB device number 59 using dummy_hcd [ 507.089688][ T5934] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 507.108216][ T5934] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 507.118687][ T5934] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 507.141271][ T5934] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 507.151367][ T5934] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 507.169978][ T5934] usb 2-1: USB disconnect, device number 59 [ 507.266582][ T5823] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 507.277741][ T5823] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 507.290811][ T5823] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 507.308920][ T5823] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 507.320703][ T5823] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 507.335566][ T5823] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 507.343264][ T5823] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 507.354593][ T5823] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 507.366994][ T5823] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 507.378616][ T5823] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 507.391971][ T5823] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 507.399583][ T5823] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 507.410968][ T5823] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 507.427513][ T5823] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 507.447424][ T5823] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 507.464059][ T5823] usb 7-1: string descriptor 0 read error: -22 [ 507.470709][ T5823] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 507.489119][ T5823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.524233][ T5823] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 508.082048][ T5828] Bluetooth: hci4: command tx timeout [ 508.218927][ T5930] usb 3-1: USB disconnect, device number 72 [ 508.875352][T15682] veth3: entered allmulticast mode [ 509.362304][T15692] [ 509.364720][T15692] ===================================================== [ 509.371739][T15692] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 509.379265][T15692] syzkaller #0 Tainted: G L [ 509.385294][T15692] ----------------------------------------------------- [ 509.392271][T15692] syz.7.3914/15692 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 509.400041][T15692] ffff88807de71408 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 509.408832][T15692] [ 509.408832][T15692] and this task is already holding: [ 509.416267][T15692] ffff88805956e028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 509.426097][T15692] which would create a new lock dependency: [ 509.432017][T15692] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 509.440157][T15692] [ 509.440157][T15692] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 509.449668][T15692] (&dev->event_lock#2){..-.}-{3:3} [ 509.449709][T15692] [ 509.449709][T15692] ... which became SOFTIRQ-irq-safe at: [ 509.462652][T15692] lock_acquire+0xf0/0x2e0 [ 509.467199][T15692] _raw_spin_lock_irqsave+0x40/0x60 [ 509.472530][T15692] input_event+0x76/0xe0 [ 509.476909][T15692] xpad360_process_packet+0x1fe/0xdd0 [ 509.482394][T15692] xpad_irq_in+0x1583/0x25e0 [ 509.487104][T15692] __usb_hcd_giveback_urb+0x376/0x540 [ 509.492595][T15692] dummy_timer+0xbbd/0x45d0 [ 509.497217][T15692] __hrtimer_run_queues+0x53a/0xcc0 [ 509.502553][T15692] hrtimer_run_softirq+0x182/0x5a0 [ 509.507811][T15692] handle_softirqs+0x22a/0x870 [ 509.512709][T15692] __irq_exit_rcu+0x5f/0x150 [ 509.517419][T15692] irq_exit_rcu+0x9/0x30 [ 509.521790][T15692] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 509.527557][T15692] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 509.533649][T15692] do_raw_spin_lock+0xbd/0x2f0 [ 509.538524][T15692] pte_offset_map_lock+0x13d/0x210 [ 509.543755][T15692] finish_mkwrite_fault+0xe6/0x260 [ 509.548984][T15692] do_wp_page+0x1a8c/0x5a00 [ 509.553617][T15692] handle_mm_fault+0x1520/0x3310 [ 509.558681][T15692] do_user_addr_fault+0xa73/0x1340 [ 509.563920][T15692] exc_page_fault+0x6a/0xc0 [ 509.568555][T15692] asm_exc_page_fault+0x26/0x30 [ 509.573565][T15692] [ 509.573565][T15692] to a SOFTIRQ-irq-unsafe lock: [ 509.580610][T15692] (tasklist_lock){.+.+}-{3:3} [ 509.580643][T15692] [ 509.580643][T15692] ... which became SOFTIRQ-irq-unsafe at: [ 509.593315][T15692] ... [ 509.593325][T15692] lock_acquire+0xf0/0x2e0 [ 509.600454][T15692] _raw_read_lock+0x36/0x50 [ 509.605088][T15692] __do_wait+0xde/0x740 [ 509.609356][T15692] do_wait+0x1e7/0x540 [ 509.613554][T15692] kernel_wait+0xd6/0x1c0 [ 509.618003][T15692] call_usermodehelper_exec_work+0xbe/0x230 [ 509.624023][T15692] process_scheduled_works+0xb02/0x1830 [ 509.629697][T15692] worker_thread+0xa50/0xfc0 [ 509.634422][T15692] kthread+0x388/0x470 [ 509.638600][T15692] ret_from_fork+0x51e/0xb90 [ 509.643304][T15692] ret_from_fork_asm+0x1a/0x30 [ 509.648188][T15692] [ 509.648188][T15692] other info that might help us debug this: [ 509.648188][T15692] [ 509.658441][T15692] Chain exists of: [ 509.658441][T15692] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 509.658441][T15692] [ 509.672051][T15692] Possible interrupt unsafe locking scenario: [ 509.672051][T15692] [ 509.680397][T15692] CPU0 CPU1 [ 509.685786][T15692] ---- ---- [ 509.691182][T15692] lock(tasklist_lock); [ 509.695469][T15692] local_irq_disable(); [ 509.702247][T15692] lock(&dev->event_lock#2); [ 509.709481][T15692] lock(&client->buffer_lock); [ 509.716888][T15692] [ 509.720367][T15692] lock(&dev->event_lock#2); [ 509.725254][T15692] [ 509.725254][T15692] *** DEADLOCK *** [ 509.725254][T15692] [ 509.733426][T15692] 7 locks held by syz.7.3914/15692: [ 509.738650][T15692] #0: ffff88802be67118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 509.747843][T15692] #1: ffff88801e759230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 509.758027][T15692] #2: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 509.767761][T15692] #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 509.777384][T15692] #4: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 509.786756][T15692] #5: ffff88805956e028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 509.796992][T15692] #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 509.806097][T15692] [ 509.806097][T15692] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 509.816530][T15692] -> (&dev->event_lock#2){..-.}-{3:3} { [ 509.822224][T15692] IN-SOFTIRQ-W at: [ 509.826322][T15692] lock_acquire+0xf0/0x2e0 [ 509.832599][T15692] _raw_spin_lock_irqsave+0x40/0x60 [ 509.839664][T15692] input_event+0x76/0xe0 [ 509.845780][T15692] xpad360_process_packet+0x1fe/0xdd0 [ 509.853012][T15692] xpad_irq_in+0x1583/0x25e0 [ 509.859464][T15692] __usb_hcd_giveback_urb+0x376/0x540 [ 509.866742][T15692] dummy_timer+0xbbd/0x45d0 [ 509.873103][T15692] __hrtimer_run_queues+0x53a/0xcc0 [ 509.880169][T15692] hrtimer_run_softirq+0x182/0x5a0 [ 509.887144][T15692] handle_softirqs+0x22a/0x870 [ 509.893768][T15692] __irq_exit_rcu+0x5f/0x150 [ 509.900238][T15692] irq_exit_rcu+0x9/0x30 [ 509.906344][T15692] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 509.913858][T15692] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 509.921717][T15692] do_raw_spin_lock+0xbd/0x2f0 [ 509.928360][T15692] pte_offset_map_lock+0x13d/0x210 [ 509.935353][T15692] finish_mkwrite_fault+0xe6/0x260 [ 509.942328][T15692] do_wp_page+0x1a8c/0x5a00 [ 509.948696][T15692] handle_mm_fault+0x1520/0x3310 [ 509.955588][T15692] do_user_addr_fault+0xa73/0x1340 [ 509.962562][T15692] exc_page_fault+0x6a/0xc0 [ 509.968931][T15692] asm_exc_page_fault+0x26/0x30 [ 509.975640][T15692] INITIAL USE at: [ 509.979647][T15692] lock_acquire+0xf0/0x2e0 [ 509.985858][T15692] _raw_spin_lock_irqsave+0x40/0x60 [ 509.992826][T15692] input_inject_event+0xa5/0x340 [ 509.999544][T15692] kbd_led_trigger_activate+0xbc/0x100 [ 510.006768][T15692] led_trigger_set+0x535/0x960 [ 510.013406][T15692] led_trigger_set_default+0x260/0x2a0 [ 510.020660][T15692] led_classdev_register_ext+0x787/0x9c0 [ 510.028083][T15692] input_leds_connect+0x517/0x790 [ 510.034874][T15692] input_register_device+0xd00/0x1160 [ 510.042006][T15692] atkbd_connect+0x731/0xa50 [ 510.048365][T15692] serio_driver_probe+0x82/0xd0 [ 510.054983][T15692] really_probe+0x267/0xaf0 [ 510.061250][T15692] __driver_probe_device+0x18c/0x320 [ 510.068300][T15692] driver_probe_device+0x4f/0x240 [ 510.075095][T15692] __driver_attach+0x3e7/0x710 [ 510.081628][T15692] bus_for_each_dev+0x23b/0x2c0 [ 510.088256][T15692] serio_handle_event+0x20a/0xdd0 [ 510.095321][T15692] process_scheduled_works+0xb02/0x1830 [ 510.102639][T15692] worker_thread+0xa50/0xfc0 [ 510.109003][T15692] kthread+0x388/0x470 [ 510.114841][T15692] ret_from_fork+0x51e/0xb90 [ 510.121209][T15692] ret_from_fork_asm+0x1a/0x30 [ 510.127750][T15692] } [ 510.130367][T15692] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 510.139524][T15692] -> (&client->buffer_lock){....}-{3:3} { [ 510.145321][T15692] INITIAL USE at: [ 510.149243][T15692] lock_acquire+0xf0/0x2e0 [ 510.155260][T15692] _raw_spin_lock+0x2e/0x40 [ 510.161368][T15692] evdev_pass_values+0xb9/0xbd0 [ 510.167830][T15692] evdev_events+0x1e6/0x340 [ 510.173934][T15692] input_pass_values+0x288/0x890 [ 510.180466][T15692] input_event_dispose+0x330/0x6b0 [ 510.187173][T15692] input_inject_event+0x1dd/0x340 [ 510.193816][T15692] evdev_write+0x325/0x4c0 [ 510.199836][T15692] vfs_write+0x29a/0xb90 [ 510.205667][T15692] ksys_write+0x150/0x270 [ 510.211587][T15692] __do_fast_syscall_32+0x20d/0x640 [ 510.218381][T15692] do_fast_syscall_32+0x33/0x70 [ 510.224835][T15692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 510.232763][T15692] } [ 510.235284][T15692] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 510.243463][T15692] ... acquired at: [ 510.247290][T15692] _raw_spin_lock+0x2e/0x40 [ 510.252003][T15692] evdev_pass_values+0xb9/0xbd0 [ 510.257099][T15692] evdev_events+0x1e6/0x340 [ 510.261868][T15692] input_pass_values+0x288/0x890 [ 510.267015][T15692] input_event_dispose+0x330/0x6b0 [ 510.272345][T15692] input_inject_event+0x1dd/0x340 [ 510.277577][T15692] evdev_write+0x325/0x4c0 [ 510.282194][T15692] vfs_write+0x29a/0xb90 [ 510.286643][T15692] ksys_write+0x150/0x270 [ 510.291167][T15692] __do_fast_syscall_32+0x20d/0x640 [ 510.296559][T15692] do_fast_syscall_32+0x33/0x70 [ 510.301604][T15692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 510.308131][T15692] [ 510.310482][T15692] [ 510.310482][T15692] the dependencies between the lock to be acquired [ 510.310494][T15692] and SOFTIRQ-irq-unsafe lock: [ 510.324057][T15692] -> (tasklist_lock){.+.+}-{3:3} { [ 510.329386][T15692] HARDIRQ-ON-R at: [ 510.333562][T15692] lock_acquire+0xf0/0x2e0 [ 510.340012][T15692] _raw_read_lock+0x36/0x50 [ 510.346554][T15692] __do_wait+0xde/0x740 [ 510.352738][T15692] do_wait+0x1e7/0x540 [ 510.358831][T15692] kernel_wait+0xd6/0x1c0 [ 510.365183][T15692] call_usermodehelper_exec_work+0xbe/0x230 [ 510.373116][T15692] process_scheduled_works+0xb02/0x1830 [ 510.380693][T15692] worker_thread+0xa50/0xfc0 [ 510.387319][T15692] kthread+0x388/0x470 [ 510.393417][T15692] ret_from_fork+0x51e/0xb90 [ 510.400041][T15692] ret_from_fork_asm+0x1a/0x30 [ 510.406853][T15692] SOFTIRQ-ON-R at: [ 510.411042][T15692] lock_acquire+0xf0/0x2e0 [ 510.417494][T15692] _raw_read_lock+0x36/0x50 [ 510.424033][T15692] __do_wait+0xde/0x740 [ 510.430216][T15692] do_wait+0x1e7/0x540 [ 510.436311][T15692] kernel_wait+0xd6/0x1c0 [ 510.442678][T15692] call_usermodehelper_exec_work+0xbe/0x230 [ 510.450626][T15692] process_scheduled_works+0xb02/0x1830 [ 510.458206][T15692] worker_thread+0xa50/0xfc0 [ 510.464833][T15692] kthread+0x388/0x470 [ 510.470931][T15692] ret_from_fork+0x51e/0xb90 [ 510.477555][T15692] ret_from_fork_asm+0x1a/0x30 [ 510.484361][T15692] INITIAL USE at: [ 510.488458][T15692] lock_acquire+0xf0/0x2e0 [ 510.494817][T15692] _raw_write_lock_irq+0x3d/0x50 [ 510.501747][T15692] copy_process+0x247a/0x3cf0 [ 510.508373][T15692] kernel_clone+0x248/0x8e0 [ 510.514833][T15692] user_mode_thread+0x110/0x180 [ 510.521634][T15692] rest_init+0x23/0x300 [ 510.527733][T15692] start_kernel+0x385/0x3d0 [ 510.534183][T15692] x86_64_start_reservations+0x24/0x30 [ 510.541593][T15692] x86_64_start_kernel+0x143/0x1c0 [ 510.548662][T15692] common_startup_64+0x13e/0x147 [ 510.555544][T15692] INITIAL READ USE at: [ 510.560076][T15692] lock_acquire+0xf0/0x2e0 [ 510.566889][T15692] _raw_read_lock+0x36/0x50 [ 510.573777][T15692] __do_wait+0xde/0x740 [ 510.580310][T15692] do_wait+0x1e7/0x540 [ 510.586750][T15692] kernel_wait+0xd6/0x1c0 [ 510.593459][T15692] call_usermodehelper_exec_work+0xbe/0x230 [ 510.601727][T15692] process_scheduled_works+0xb02/0x1830 [ 510.609654][T15692] worker_thread+0xa50/0xfc0 [ 510.616643][T15692] kthread+0x388/0x470 [ 510.623101][T15692] ret_from_fork+0x51e/0xb90 [ 510.630082][T15692] ret_from_fork_asm+0x1a/0x30 [ 510.637239][T15692] } [ 510.639937][T15692] ... key at: [] tasklist_lock+0x18/0x40 [ 510.647876][T15692] ... acquired at: [ 510.651887][T15692] _raw_read_lock+0x36/0x50 [ 510.656599][T15692] send_sigurg+0x12b/0x420 [ 510.661219][T15692] sk_send_sigurg+0x6c/0x2e0 [ 510.666019][T15692] queue_oob+0x42c/0x4f0 [ 510.670466][T15692] unix_stream_sendmsg+0xcb1/0xe80 [ 510.675783][T15692] ____sys_sendmsg+0xa68/0xad0 [ 510.680792][T15692] ___sys_sendmsg+0x2a5/0x360 [ 510.685687][T15692] __sys_sendmmsg+0x2e7/0x4e0 [ 510.690570][T15692] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 510.696328][T15692] __do_fast_syscall_32+0x20d/0x640 [ 510.701817][T15692] do_fast_syscall_32+0x33/0x70 [ 510.706865][T15692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 510.715792][T15692] [ 510.718168][T15692] -> (&f_owner->lock){....}-{3:3} { [ 510.723516][T15692] INITIAL USE at: [ 510.727521][T15692] lock_acquire+0xf0/0x2e0 [ 510.733705][T15692] _raw_write_lock_irq+0x3d/0x50 [ 510.740438][T15692] __f_setown+0x67/0x370 [ 510.746440][T15692] tty_fasync+0x2db/0x350 [ 510.752569][T15692] do_fcntl+0x1201/0x1a20 [ 510.758658][T15692] do_compat_fcntl64+0x51e/0x7e0 [ 510.765403][T15692] __do_fast_syscall_32+0x20d/0x640 [ 510.772475][T15692] do_fast_syscall_32+0x33/0x70 [ 510.779105][T15692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 510.787233][T15692] INITIAL READ USE at: [ 510.791684][T15692] lock_acquire+0xf0/0x2e0 [ 510.798345][T15692] _raw_read_lock_irqsave+0x48/0x60 [ 510.805752][T15692] send_sigurg+0x55/0x420 [ 510.812282][T15692] sk_send_sigurg+0x6c/0x2e0 [ 510.819077][T15692] queue_oob+0x42c/0x4f0 [ 510.825533][T15692] unix_stream_sendmsg+0xcb1/0xe80 [ 510.832853][T15692] ____sys_sendmsg+0xa68/0xad0 [ 510.839827][T15692] ___sys_sendmsg+0x2a5/0x360 [ 510.846721][T15692] __sys_sendmmsg+0x2e7/0x4e0 [ 510.853610][T15692] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 510.861370][T15692] __do_fast_syscall_32+0x20d/0x640 [ 510.868775][T15692] do_fast_syscall_32+0x33/0x70 [ 510.875865][T15692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 510.884405][T15692] } [ 510.887014][T15692] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 510.896005][T15692] ... acquired at: [ 510.899916][T15692] _raw_read_lock_irqsave+0x48/0x60 [ 510.905337][T15692] send_sigio+0x38/0x370 [ 510.909796][T15692] kill_fasync+0x24d/0x4d0 [ 510.914416][T15692] sock_wake_async+0x137/0x160 [ 510.919409][T15692] sock_def_readable+0x3c1/0x580 [ 510.924547][T15692] queue_oob+0x45e/0x4f0 [ 510.928989][T15692] unix_stream_sendmsg+0xcb1/0xe80 [ 510.934301][T15692] ____sys_sendmsg+0xa68/0xad0 [ 510.939269][T15692] ___sys_sendmsg+0x2a5/0x360 [ 510.944149][T15692] __sys_sendmmsg+0x2e7/0x4e0 [ 510.949033][T15692] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 510.954783][T15692] __do_fast_syscall_32+0x20d/0x640 [ 510.960184][T15692] do_fast_syscall_32+0x33/0x70 [ 510.965239][T15692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 510.971770][T15692] [ 510.974116][T15692] -> (&new->fa_lock){....}-{3:3} { [ 510.979275][T15692] INITIAL USE at: [ 510.983194][T15692] lock_acquire+0xf0/0x2e0 [ 510.989204][T15692] _raw_write_lock_irq+0x3d/0x50 [ 510.995740][T15692] fasync_remove_entry+0xf1/0x1c0 [ 511.002393][T15692] tty_fasync+0x13c/0x350 [ 511.008411][T15692] __fput+0x8a5/0xa70 [ 511.013994][T15692] task_work_run+0x1d9/0x270 [ 511.020172][T15692] exit_to_user_mode_loop+0xed/0x480 [ 511.027056][T15692] __do_fast_syscall_32+0x415/0x640 [ 511.033868][T15692] do_fast_syscall_32+0x33/0x70 [ 511.040330][T15692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 511.048268][T15692] INITIAL READ USE at: [ 511.052631][T15692] lock_acquire+0xf0/0x2e0 [ 511.059175][T15692] _raw_read_lock_irqsave+0x48/0x60 [ 511.066402][T15692] kill_fasync+0x199/0x4d0 [ 511.072853][T15692] do_splice+0x1028/0x1910 [ 511.079335][T15692] __se_sys_splice+0x353/0x490 [ 511.086146][T15692] __do_fast_syscall_32+0x20d/0x640 [ 511.093369][T15692] do_fast_syscall_32+0x33/0x70 [ 511.100240][T15692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 511.108598][T15692] } [ 511.111200][T15692] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 511.119910][T15692] ... acquired at: [ 511.123746][T15692] _raw_read_lock_irqsave+0x48/0x60 [ 511.129154][T15692] kill_fasync+0x199/0x4d0 [ 511.133784][T15692] evdev_pass_values+0x627/0xbd0 [ 511.138925][T15692] evdev_events+0x1e6/0x340 [ 511.143633][T15692] input_pass_values+0x288/0x890 [ 511.148773][T15692] input_event_dispose+0x330/0x6b0 [ 511.154090][T15692] input_inject_event+0x1dd/0x340 [ 511.159348][T15692] evdev_write+0x325/0x4c0 [ 511.163969][T15692] vfs_write+0x29a/0xb90 [ 511.168408][T15692] ksys_write+0x150/0x270 [ 511.172936][T15692] __do_fast_syscall_32+0x20d/0x640 [ 511.178366][T15692] do_fast_syscall_32+0x33/0x70 [ 511.183441][T15692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 511.189970][T15692] [ 511.192310][T15692] [ 511.192310][T15692] stack backtrace: [ 511.198259][T15692] CPU: 1 UID: 0 PID: 15692 Comm: syz.7.3914 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.198293][T15692] Tainted: [L]=SOFTLOCKUP [ 511.198300][T15692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 511.198320][T15692] Call Trace: [ 511.198331][T15692] [ 511.198340][T15692] dump_stack_lvl+0xe8/0x150 [ 511.198370][T15692] __lock_acquire+0x2a94/0x2cf0 [ 511.198405][T15692] lock_acquire+0xf0/0x2e0 [ 511.198426][T15692] ? kill_fasync+0x199/0x4d0 [ 511.198448][T15692] _raw_read_lock_irqsave+0x48/0x60 [ 511.198475][T15692] ? kill_fasync+0x199/0x4d0 [ 511.198491][T15692] kill_fasync+0x199/0x4d0 [ 511.198508][T15692] ? kill_fasync+0x53/0x4d0 [ 511.198526][T15692] evdev_pass_values+0x627/0xbd0 [ 511.198551][T15692] ? evdev_pass_values+0x5d1/0xbd0 [ 511.198575][T15692] evdev_events+0x1e6/0x340 [ 511.198594][T15692] ? evdev_events+0x79/0x340 [ 511.198615][T15692] ? input_pass_values+0x8d/0x890 [ 511.198633][T15692] input_pass_values+0x288/0x890 [ 511.198655][T15692] ? input_handle_event+0x70c/0xf30 [ 511.198683][T15692] input_event_dispose+0x330/0x6b0 [ 511.198713][T15692] input_inject_event+0x1dd/0x340 [ 511.198740][T15692] ? input_inject_event+0xb6/0x340 [ 511.198768][T15692] evdev_write+0x325/0x4c0 [ 511.198791][T15692] ? __pfx_evdev_write+0x10/0x10 [ 511.198814][T15692] ? bpf_lsm_file_permission+0x9/0x20 [ 511.198836][T15692] ? security_file_permission+0x75/0x260 [ 511.198866][T15692] ? rw_verify_area+0x255/0x4d0 [ 511.198882][T15692] ? __pfx_evdev_write+0x10/0x10 [ 511.198904][T15692] vfs_write+0x29a/0xb90 [ 511.198923][T15692] ? __pfx_vfs_write+0x10/0x10 [ 511.198941][T15692] ? __fget_files+0x2a/0x420 [ 511.198967][T15692] ? __fget_files+0x2a/0x420 [ 511.198990][T15692] ? __fget_files+0x3a0/0x420 [ 511.199014][T15692] ? __fget_files+0x2a/0x420 [ 511.199042][T15692] ksys_write+0x150/0x270 [ 511.199067][T15692] ? __pfx_ksys_write+0x10/0x10 [ 511.199087][T15692] __do_fast_syscall_32+0x20d/0x640 [ 511.199106][T15692] ? do_fast_syscall_32+0x33/0x70 [ 511.199122][T15692] ? asm_int80_emulation+0x1a/0x20 [ 511.199139][T15692] ? do_int80_emulation+0x274/0x4d0 [ 511.199155][T15692] ? trace_irq_disable+0x3b/0x150 [ 511.199184][T15692] do_fast_syscall_32+0x33/0x70 [ 511.199201][T15692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 511.199227][T15692] RIP: 0023:0xf703ef6c [ 511.199251][T15692] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 511.199267][T15692] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 511.199287][T15692] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 511.199300][T15692] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 511.199311][T15692] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 511.199322][T15692] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 511.199333][T15692] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 511.199350][T15692] [ 511.510630][T13378] usb 7-1: USB disconnect, device number 59