last executing test programs: 12.097562506s ago: executing program 2 (id=1127): socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r0, 0x0, 0x0, 0x7, 0x8) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x3ff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x832308415e7c5548}], 0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x81) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x81}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x10}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000300)={r4, 0x6d}, 0x8) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 11.578492127s ago: executing program 0 (id=1128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000893000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f20c06635000001000f22c00f01c36565d804f0115b00660fd9430d0f3a0fcc35f20f38f14029f20fc24686490e", 0x2e}], 0x1, 0x8, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.149466885s ago: executing program 0 (id=1130): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x5) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 10.535037437s ago: executing program 0 (id=1132): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a001fffffffff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 10.36825212s ago: executing program 0 (id=1135): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="20150700000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000000c0)={0x0, 0xe}, 0x0, 0x0}) 10.167005474s ago: executing program 4 (id=1137): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100), &(0x7f00000007c0)) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r2, 0x1) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) setitimer(0x2, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.913451679s ago: executing program 4 (id=1138): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000280)) shutdown(r5, 0x1) close_range(r4, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000300)=0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 8.393695618s ago: executing program 4 (id=1141): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2080, 0x0) io_setup(0x4, &(0x7f0000010440)=0x0) io_submit(r1, 0x1, &(0x7f00000019c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xfdfe, 0x100000000000000}]) 8.064052624s ago: executing program 1 (id=1143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x6, 0x80, 0x2000000, 0x3a2}, &(0x7f00000001c0), &(0x7f0000000180)) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) 7.206247251s ago: executing program 4 (id=1144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="240000000101010100000000000000000100000408001a4000000002080008"], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x4044810) 7.073595723s ago: executing program 3 (id=1145): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d09901020301090236000100"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) 6.155640201s ago: executing program 4 (id=1146): socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r0, 0x0, 0x0, 0x7, 0x8) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x3ff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x832308415e7c5548}], 0x1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x81) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x81}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x10}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000300)={r4, 0x6d}, 0x8) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x2c, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}, [{0x8, 0xb, 0x200}]}, 0x2c}}, 0x0) 6.092097562s ago: executing program 0 (id=1147): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="b1", 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000240), 0x1004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000100)=""/101) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_def_link_policy={{0x47}, {0xd, 0x81}}}}, 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc8, 0x1}}}, 0x8) 5.090499852s ago: executing program 2 (id=1148): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100), &(0x7f00000007c0)) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r2, 0x1) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) setitimer(0x2, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.753509518s ago: executing program 2 (id=1149): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 4.728215929s ago: executing program 1 (id=1150): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x80}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) listen(r0, 0x5) socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtclass={0x38, 0x28, 0x20, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0x3, 0xfff2}, {0xf, 0x4}}, [@tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c040) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r7, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x58}}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) 4.012930942s ago: executing program 3 (id=1151): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 3.665586929s ago: executing program 2 (id=1152): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000280)) 3.161054538s ago: executing program 1 (id=1153): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=0x0], 0x50) openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x40010) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x20000506) write$binfmt_elf64(r2, 0x0, 0xe6) r3 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r3, 0x80079a0) lseek(r3, 0x0, 0x4) close(r2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/diskstats\x00', 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000380)={0x8ed3, 0x1c, 0x1, 0x961, 0x19, "0300000001000000000000000000be00"}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)=0x9eb9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.475843162s ago: executing program 3 (id=1154): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x280900, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2080, 0x0) io_setup(0x4, &(0x7f0000010440)=0x0) io_submit(r2, 0x1, &(0x7f00000019c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xfdfe, 0x100000000000000}]) 2.475613962s ago: executing program 0 (id=1155): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0}) 2.429575193s ago: executing program 2 (id=1156): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r0, 0x0, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0xb}, &(0x7f00000000c0)=0x8) alarm(0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) tee(r4, r3, 0x8, 0xe) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r6], 0x30}}, 0x0) alarm(0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x9, 0x500) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r8], 0x4c}}, 0x0) 1.438343922s ago: executing program 3 (id=1157): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000), 0x2) 1.421947052s ago: executing program 4 (id=1158): socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r0, 0x0, 0x0, 0x7, 0x8) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x3ff) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f00000000c0)=[{r3, 0x832308415e7c5548}], 0x1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000005600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x81) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x81}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x10}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000300)={r5, 0x6d}, 0x8) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 1.362033483s ago: executing program 1 (id=1159): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100), &(0x7f00000007c0)) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r2, 0x1) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) setitimer(0x2, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.318191564s ago: executing program 2 (id=1160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x6, 0x80, 0x2000000, 0x3a2}, &(0x7f00000001c0), &(0x7f0000000180)) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) 1.126195837s ago: executing program 1 (id=1161): syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) 1.061521339s ago: executing program 3 (id=1162): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 876.391833ms ago: executing program 1 (id=1163): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x80}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) listen(r0, 0x5) socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtclass={0x38, 0x28, 0x20, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0x3, 0xfff2}, {0xf, 0x4}}, [@tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c040) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r6, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x58}}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) 0s ago: executing program 3 (id=1164): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): use: Unknown parameter 'group_i00000000000000000000' [ 182.478028][ T5028] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.506899][ T5028] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 182.536499][ T5028] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.560317][ T41] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 182.583126][ T5028] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.598007][ T5028] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 182.611292][ T5028] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.620108][ T5028] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.642677][ T5028] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 182.671224][ T5028] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.691620][ T5028] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.727462][ T5028] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 182.789387][ T41] usb 4-1: config 0 has no interfaces? [ 182.793246][ T5028] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.821118][ T41] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 182.841596][ T5028] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.884704][ T5028] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 182.912166][ T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.920540][ T5028] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.954382][ T5028] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.980926][ T41] usb 4-1: Product: syz [ 182.989078][ T5028] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 183.020160][ T5028] usb 3-1: config 0 interface 0 has no altsetting 0 [ 183.046379][ T5028] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.062583][ T41] usb 4-1: Manufacturer: syz [ 183.072626][ T5028] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 183.083871][ T41] usb 4-1: SerialNumber: syz [ 183.103749][ T41] usb 4-1: config 0 descriptor?? [ 183.116463][ T5028] usb 3-1: config 0 interface 0 has no altsetting 0 [ 183.171525][ T5028] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.186396][ T5028] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 183.204874][ T5028] usb 3-1: config 0 interface 0 has no altsetting 0 [ 183.233456][ T5028] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 183.263268][ T5028] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 183.274937][ T5028] usb 3-1: Product: syz [ 183.279617][ T5814] netlink: 204 bytes leftover after parsing attributes in process `syz.0.367'. [ 183.283470][ T5028] usb 3-1: Manufacturer: syz [ 183.294211][ T5028] usb 3-1: SerialNumber: syz [ 183.307126][ T5028] usb 3-1: config 0 descriptor?? [ 183.316950][ T5028] yurex 3-1:0.0: Could not find endpoints [ 183.326743][ T4327] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 183.528957][ T4327] usb 5-1: Using ep0 maxpacket: 16 [ 183.538283][ T4327] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.557637][ T4327] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 183.579521][ T4327] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 183.603010][ T4327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.642563][ T4327] usb 5-1: Product: syz [ 183.655017][ T4327] usb 5-1: Manufacturer: syz [ 183.688997][ T4327] usb 5-1: SerialNumber: syz [ 183.704959][ T4327] usb 5-1: config 0 descriptor?? [ 183.722004][ T4327] usb 3-1: USB disconnect, device number 27 [ 186.039828][ T4374] usb 5-1: USB disconnect, device number 25 [ 187.556147][ T5837] loop1: detected capacity change from 0 to 32768 [ 187.587415][ T5837] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.377 (5837) [ 187.627903][ T5837] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 187.668707][ T5837] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 187.755929][ T5837] BTRFS info (device loop1): disabling free space tree [ 187.772479][ T5837] BTRFS info (device loop1): max_inline at 0 [ 187.890440][ T5837] BTRFS info (device loop1): setting nodatasum [ 187.925749][ T5837] BTRFS info (device loop1): turning off barriers [ 187.949347][ T5837] BTRFS info (device loop1): turning on flush-on-commit [ 187.962169][ T5837] BTRFS info (device loop1): doing ref verification [ 188.002087][ T5837] BTRFS info (device loop1): force clearing of disk cache [ 188.036608][ T5837] BTRFS warning (device loop1): excessive commit interval 2147483647 [ 188.036632][ T5837] BTRFS info (device loop1): enabling ssd optimizations [ 188.036654][ T5837] BTRFS info (device loop1): max_inline at 0 [ 188.148966][ T5837] BTRFS error (device loop1): open_ctree failed: -12 [ 188.500139][ T4327] usb 4-1: USB disconnect, device number 22 [ 189.696297][ T5848] fuse: Unknown parameter 'group_i00000000000000000000' [ 189.998929][ T4327] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 190.209906][ T4327] usb 1-1: Using ep0 maxpacket: 16 [ 190.228588][ T4327] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.289199][ T4327] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 190.418631][ T4327] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 190.472456][ T4327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.556568][ T4327] usb 1-1: Product: syz [ 190.583186][ T4327] usb 1-1: Manufacturer: syz [ 190.610703][ T4327] usb 1-1: SerialNumber: syz [ 190.704803][ T4327] usb 1-1: config 0 descriptor?? [ 191.320909][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 191.329636][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 191.337499][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 191.345199][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 191.353789][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 191.541520][ T5913] loop2: detected capacity change from 0 to 32768 [ 191.558609][ T5913] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.398 (5913) [ 191.586963][ T5913] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.597981][ T5913] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 191.608349][ T5913] BTRFS info (device loop2): disabling free space tree [ 191.616568][ T5913] BTRFS info (device loop2): max_inline at 0 [ 191.623478][ T5913] BTRFS info (device loop2): setting nodatasum [ 191.630234][ T5913] BTRFS info (device loop2): turning off barriers [ 191.636823][ T5913] BTRFS info (device loop2): turning on flush-on-commit [ 191.644594][ T5913] BTRFS info (device loop2): doing ref verification [ 191.651658][ T5913] BTRFS info (device loop2): force clearing of disk cache [ 191.660641][ T5913] BTRFS warning (device loop2): excessive commit interval 2147483647 [ 191.669290][ T5913] BTRFS info (device loop2): enabling ssd optimizations [ 191.676420][ T5913] BTRFS info (device loop2): max_inline at 0 [ 191.762015][ T5913] BTRFS info (device loop2): rebuilding free space tree [ 191.787482][ T5913] BTRFS info (device loop2): disabling free space tree [ 191.803891][ T5913] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 191.817474][ T5913] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 191.837594][ T5913] BTRFS info (device loop2): checking UUID tree [ 191.897384][ T4270] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.081928][ T4408] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 12 /dev/loop2 scanned by udevd (4408) [ 193.293596][ T4756] usb 1-1: USB disconnect, device number 29 [ 194.550889][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.557420][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.927021][ T5969] loop0: detected capacity change from 0 to 32768 [ 194.974960][ T5969] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 195.497290][ T4408] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 197.404604][ T4327] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 197.495687][ T14] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 197.608875][ T4327] usb 1-1: Using ep0 maxpacket: 16 [ 197.619961][ T4327] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.668919][ T4327] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 197.689016][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 197.696068][ T4327] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 197.722126][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.758712][ T4327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.769883][ T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.908887][ T4327] usb 1-1: Product: syz [ 197.913162][ T4327] usb 1-1: Manufacturer: syz [ 197.918102][ T4327] usb 1-1: SerialNumber: syz [ 197.927232][ T6016] fuse: Unknown parameter 'group_i00000000000000000000' [ 197.935229][ T14] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.946609][ T4327] usb 1-1: config 0 descriptor?? [ 197.951678][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.960196][ T14] usb 3-1: Product: syz [ 198.148960][ T14] usb 3-1: Manufacturer: syz [ 198.155823][ T14] usb 3-1: SerialNumber: syz [ 198.217440][ T6012] loop1: detected capacity change from 0 to 32768 [ 198.264426][ T6012] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 198.717757][ T14] usb 3-1: 0:2 : does not exist [ 198.723812][ T14] usb 3-1: unit 48 not found! [ 199.280708][ T4617] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 199.469524][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.904914][ T4756] usb 1-1: USB disconnect, device number 30 [ 201.192107][ T4750] usb 3-1: USB disconnect, device number 28 [ 202.505895][ T6062] fuse: Unknown parameter 'group_i00000000000000000000' [ 203.759018][ T14] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 204.538950][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 204.546338][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.716035][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.472799][ T14] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.509026][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.517262][ T14] usb 4-1: Product: syz [ 206.528865][ T14] usb 4-1: Manufacturer: syz [ 206.554710][ T14] usb 4-1: can't set config #1, error -71 [ 206.581497][ T14] usb 4-1: USB disconnect, device number 23 [ 206.651626][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.466'. [ 206.651663][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.651696][ T6130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.652961][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.652984][ T6130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.630826][ T4756] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 208.782388][ T6156] smb3: Unknown parameter 'fd' [ 209.745040][ T4756] usb 3-1: config 0 has no interfaces? [ 209.839040][ T22] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 210.676794][ T6146] fuse: Unknown parameter 'group_i00000000000000000000' [ 210.839181][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 210.851634][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.888957][ T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.929456][ T22] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 210.961656][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.981847][ T22] usb 2-1: Product: syz [ 210.986373][ T22] usb 2-1: Manufacturer: syz [ 211.002771][ T22] usb 2-1: SerialNumber: syz [ 211.268813][ T4756] usb 3-1: string descriptor 0 read error: -71 [ 211.275889][ T4756] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 211.337563][ T4756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.362303][ T4756] usb 3-1: config 0 descriptor?? [ 211.375822][ T4756] usb 3-1: can't set config #0, error -71 [ 211.401782][ T4756] usb 3-1: USB disconnect, device number 29 [ 211.507350][ T22] usb 2-1: 0:2 : does not exist [ 211.517808][ T22] usb 2-1: unit 48 not found! [ 211.632743][ T6175] qnx6: unable to read the first superblock [ 213.436758][ T22] usb 2-1: USB disconnect, device number 28 [ 214.049197][ T5028] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 214.269036][ T5028] usb 4-1: Using ep0 maxpacket: 8 [ 214.276304][ T5028] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 214.824785][ T5028] usb 4-1: config 179 has no interface number 0 [ 214.957334][ T5028] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 215.041149][ T5028] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 215.131922][ T5028] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 215.403721][ T5028] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 215.888391][ T5028] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 215.960997][ T5028] usb 4-1: config 179 interface 65 has no altsetting 0 [ 215.968277][ T5028] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 215.978599][ T5028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.017269][ T5028] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input24 [ 216.308918][ T5022] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 216.417728][ T14] usb 4-1: USB disconnect, device number 24 [ 216.417827][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 216.417865][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 216.418450][ T14] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 217.102569][ T5022] usb 1-1: config 0 has no interfaces? [ 217.112116][ T5022] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 217.112145][ T5022] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.112164][ T5022] usb 1-1: Product: syz [ 217.112177][ T5022] usb 1-1: Manufacturer: syz [ 217.112189][ T5022] usb 1-1: SerialNumber: syz [ 217.114073][ T5022] usb 1-1: config 0 descriptor?? [ 219.629062][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.489'. [ 221.950636][ T14] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 222.741854][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 222.752211][ T14] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 222.807392][ T14] usb 2-1: config 179 has no interface number 0 [ 222.825653][ T14] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 222.889343][ T14] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 223.097680][ T14] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 223.438424][ T14] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 223.483430][ T14] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 223.739668][ T14] usb 2-1: config 179 interface 65 has no altsetting 0 [ 223.747007][ T14] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 223.760699][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.819413][ T14] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input25 [ 224.041601][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 224.051986][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 224.096662][ T14] usb 2-1: USB disconnect, device number 29 [ 224.279947][ T14] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 226.085241][ T14] usb 1-1: USB disconnect, device number 31 [ 227.809002][ T4756] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 228.016836][ T4756] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.017037][ T4756] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 228.017115][ T4756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.034831][ T4756] usb 4-1: config 0 descriptor?? [ 228.056085][ T4756] pwc: Askey VC010 type 2 USB webcam detected. [ 228.443220][ T4756] pwc: recv_control_msg error -32 req 02 val 2b00 [ 228.465509][ T4756] pwc: recv_control_msg error -32 req 02 val 2700 [ 228.603718][ T4756] pwc: recv_control_msg error -32 req 02 val 2c00 [ 228.633173][ T4756] pwc: recv_control_msg error -32 req 04 val 1000 [ 229.254781][ T5028] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 229.328917][ T5027] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 229.370910][ T4756] pwc: recv_control_msg error -32 req 04 val 1300 [ 229.384232][ T6349] trusted_key: encrypted_key: key user:syz not found [ 229.390616][ T4756] pwc: recv_control_msg error -32 req 04 val 1400 [ 229.438889][ T5028] usb 3-1: Using ep0 maxpacket: 16 [ 229.445553][ T4756] pwc: recv_control_msg error -32 req 02 val 2000 [ 229.446604][ T5028] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.489599][ T5028] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.513244][ T4756] pwc: recv_control_msg error -32 req 02 val 2100 [ 229.527984][ T5028] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 229.537523][ T5027] usb 2-1: Using ep0 maxpacket: 16 [ 229.558349][ T4756] pwc: recv_control_msg error -32 req 04 val 1500 [ 229.587182][ T5028] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.598376][ T6355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.533'. [ 229.607700][ T5028] usb 3-1: Product: syz [ 229.612576][ T4756] pwc: recv_control_msg error -32 req 02 val 2500 [ 229.621455][ T5028] usb 3-1: Manufacturer: syz [ 229.626134][ T5028] usb 3-1: SerialNumber: syz [ 229.660073][ T4756] pwc: recv_control_msg error -32 req 02 val 2400 [ 229.687934][ T4756] pwc: recv_control_msg error -32 req 02 val 2600 [ 229.706785][ T4756] pwc: recv_control_msg error -32 req 02 val 2900 [ 229.936240][ T4756] pwc: recv_control_msg error -71 req 04 val 1100 [ 229.948680][ T4756] pwc: recv_control_msg error -71 req 04 val 1200 [ 230.065949][ T4756] pwc: Registered as video103. [ 230.071742][ T5028] usb 3-1: 0:2 : does not exist [ 230.076992][ T5028] usb 3-1: unit 6 not found! [ 230.139228][ T4756] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input26 [ 230.248630][ T4756] usb 4-1: USB disconnect, device number 25 [ 231.765227][ T22] usb 3-1: USB disconnect, device number 30 [ 232.189839][ T22] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 232.694754][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 232.713118][ T22] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 232.803432][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.803463][ T22] usb 3-1: Product: syz [ 232.803477][ T22] usb 3-1: Manufacturer: syz [ 232.803491][ T22] usb 3-1: SerialNumber: syz [ 232.805097][ T22] usb 3-1: config 0 descriptor?? [ 232.811357][ T22] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 232.812700][ T22] usb 3-1: Detected FT-X [ 233.011304][ T22] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 233.212734][ T22] ftdi_sio 3-1:0.0: GPIO initialisation failed: -32 [ 233.239200][ T22] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 233.466058][ T5027] usb 2-1: unable to get BOS descriptor or descriptor too short [ 233.510551][ T5027] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 233.544106][ T5027] usb 2-1: can't read configurations, error -71 [ 234.174798][ T5022] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 234.618875][ T5022] usb 4-1: Using ep0 maxpacket: 32 [ 234.627508][ T5022] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 234.652866][ T5022] usb 4-1: config 0 has no interface number 0 [ 234.682253][ T5022] usb 4-1: config 0 interface 89 has no altsetting 0 [ 234.699604][ T5022] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 234.714093][ T5022] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.723633][ T5022] usb 4-1: Product: syz [ 234.730533][ T5022] usb 4-1: Manufacturer: syz [ 234.739339][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 234.751680][ T5022] usb 4-1: SerialNumber: syz [ 234.783584][ T5022] usb 4-1: config 0 descriptor?? [ 234.868359][ T4756] usb 3-1: USB disconnect, device number 31 [ 234.906947][ T4756] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 234.907255][ T4756] ftdi_sio 3-1:0.0: device disconnected [ 235.298223][ T6413] fuse: Bad value for 'fd' [ 236.914659][ T4756] usb 4-1: USB disconnect, device number 26 [ 236.989139][ T5022] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 237.239310][ T5022] usb 3-1: Using ep0 maxpacket: 16 [ 237.868928][ T22] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 237.880648][ T6443] [U] „ [ 238.168920][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 238.186990][ T22] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 238.226448][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.262589][ T22] usb 1-1: Product: syz [ 238.282366][ T22] usb 1-1: Manufacturer: syz [ 238.306054][ T22] usb 1-1: SerialNumber: syz [ 238.340574][ T22] usb 1-1: config 0 descriptor?? [ 238.373208][ T22] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 238.417689][ T22] usb 1-1: Detected FT-X [ 238.570497][ T22] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 238.801103][ T22] ftdi_sio 1-1:0.0: GPIO initialisation failed: -32 [ 238.823394][ T22] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 240.595800][ T14] usb 1-1: USB disconnect, device number 32 [ 240.607711][ T14] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 240.629910][ T14] ftdi_sio 1-1:0.0: device disconnected [ 240.924975][ T5022] usb 3-1: unable to get BOS descriptor or descriptor too short [ 240.984599][ T5022] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 241.010766][ T5022] usb 3-1: can't read configurations, error -71 [ 241.286679][ T6460] fuse: Bad value for 'fd' [ 241.363467][ T6479] siw: device registration error -23 [ 242.398992][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 242.476696][ T6492] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 242.503362][ T6492] CIFS mount error: No usable UNC path provided in device string! [ 242.503362][ T6492] [ 242.514093][ T6492] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 243.629192][ T4756] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 244.439000][ T4756] usb 3-1: Using ep0 maxpacket: 16 [ 245.337517][ T4750] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 245.351480][ T6510] [U] „ [ 245.791490][ T4750] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.821376][ T4750] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 245.843587][ T4750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.894290][ T4750] usb 2-1: config 0 descriptor?? [ 245.926166][ T4750] pwc: Askey VC010 type 2 USB webcam detected. [ 246.315091][ T4750] pwc: recv_control_msg error -32 req 02 val 2b00 [ 246.328429][ T4750] pwc: recv_control_msg error -32 req 02 val 2700 [ 246.360595][ T4750] pwc: recv_control_msg error -32 req 02 val 2c00 [ 246.403825][ T4750] pwc: recv_control_msg error -32 req 04 val 1000 [ 246.427453][ T4750] pwc: recv_control_msg error -32 req 04 val 1300 [ 246.470054][ T4750] pwc: recv_control_msg error -32 req 04 val 1400 [ 246.503340][ T4750] pwc: recv_control_msg error -32 req 02 val 2000 [ 246.541426][ T4750] pwc: recv_control_msg error -32 req 02 val 2100 [ 246.563145][ T4750] pwc: recv_control_msg error -32 req 04 val 1500 [ 246.586578][ T4750] pwc: recv_control_msg error -32 req 02 val 2500 [ 246.609816][ T4750] pwc: recv_control_msg error -32 req 02 val 2400 [ 246.623690][ T4750] pwc: recv_control_msg error -32 req 02 val 2600 [ 246.651192][ T4750] pwc: recv_control_msg error -32 req 02 val 2900 [ 246.961178][ T4750] pwc: recv_control_msg error -71 req 04 val 1100 [ 246.987233][ T4750] pwc: recv_control_msg error -71 req 04 val 1200 [ 247.021978][ T6532] fuse: Bad value for 'fd' [ 247.742890][ T4750] pwc: Registered as video103. [ 247.754271][ T4750] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input27 [ 247.869039][ T4750] usb 2-1: USB disconnect, device number 32 [ 249.469139][ T4756] usb 3-1: unable to get BOS descriptor or descriptor too short [ 249.540538][ T4756] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 249.586676][ T4756] usb 3-1: chopping to 0 config(s) [ 249.619475][ T4756] usb 3-1: can't read configurations, error -32 [ 251.087675][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 252.528964][ T14] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 252.728831][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 252.730591][ T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.730616][ T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.733109][ T14] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.733135][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.733147][ T14] usb 5-1: Product: syz [ 252.733156][ T14] usb 5-1: Manufacturer: syz [ 252.733164][ T14] usb 5-1: SerialNumber: syz [ 252.848889][ T4756] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 253.038826][ T4756] usb 4-1: Using ep0 maxpacket: 16 [ 253.141491][ T14] usb 5-1: 0:2 : does not exist [ 253.148485][ T14] usb 5-1: unit 6 not found! [ 254.238937][ T5028] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 254.498856][ T5028] usb 2-1: Using ep0 maxpacket: 32 [ 254.506397][ T5028] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 254.516286][ T5028] usb 2-1: config 0 has no interface number 0 [ 254.525934][ T5028] usb 2-1: config 0 interface 89 has no altsetting 0 [ 255.019504][ T5028] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 255.029709][ T5028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.039522][ T5028] usb 2-1: Product: syz [ 255.045303][ T5028] usb 2-1: Manufacturer: syz [ 255.050684][ T5028] usb 2-1: SerialNumber: syz [ 255.069660][ T5028] usb 2-1: config 0 descriptor?? [ 255.086957][ T5028] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 255.096916][ T5028] em28xx 2-1:0.89: Video interface 89 found: bulk [ 255.375457][ T41] usb 5-1: USB disconnect, device number 26 [ 255.688934][ T5028] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 255.792419][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.798863][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.519310][ T5028] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 256.538099][ T5028] em28xx 2-1:0.89: board has no eeprom [ 256.932016][ T5028] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 256.958943][ T5028] em28xx 2-1:0.89: analog set to bulk mode. [ 256.969050][ T14] em28xx 2-1:0.89: Registering V4L2 extension [ 257.479266][ T41] usb 2-1: USB disconnect, device number 33 [ 257.532900][ T41] em28xx 2-1:0.89: Disconnecting em28xx [ 257.756224][ T14] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 257.768365][ T14] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 257.788611][ T14] em28xx 2-1:0.89: No AC97 audio processor [ 257.818425][ T14] usb 2-1: Decoder not found [ 257.843819][ T14] em28xx 2-1:0.89: failed to create media graph [ 257.864816][ T14] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 257.916008][ T4756] usb 4-1: unable to get BOS descriptor or descriptor too short [ 257.931650][ T4756] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 257.935956][ T14] em28xx 2-1:0.89: Registering snapshot button... [ 257.959231][ T4756] usb 4-1: can't read configurations, error -71 [ 257.988648][ T14] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input28 [ 258.040103][ T14] em28xx 2-1:0.89: Remote control support is not available for this card. [ 258.063289][ T41] em28xx 2-1:0.89: Closing input extension [ 258.069384][ T41] em28xx 2-1:0.89: Deregistering snapshot button [ 258.116282][ T41] em28xx 2-1:0.89: Freeing device [ 262.438444][ T6724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.653'. [ 262.828865][ T4755] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 263.042836][ T4755] usb 3-1: Using ep0 maxpacket: 8 [ 263.050481][ T4755] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 263.065748][ T4755] usb 3-1: config 179 has no interface number 0 [ 263.107451][ T4755] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 263.120717][ T4755] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 263.285634][ T4755] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 263.297323][ T4755] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 263.308827][ T4755] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 263.322446][ T4755] usb 3-1: config 179 interface 65 has no altsetting 0 [ 263.329380][ T4755] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 263.339237][ T41] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 263.357056][ T4755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.385151][ T4755] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input29 [ 263.541142][ T41] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 263.565088][ T41] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.587487][ T41] usb 1-1: config 0 has no interface number 0 [ 263.594502][ T41] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 263.616645][ T41] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.633720][ T41] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 263.644487][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.652766][ T41] usb 1-1: Product: syz [ 263.657041][ T41] usb 1-1: Manufacturer: syz [ 263.664141][ T41] usb 1-1: SerialNumber: syz [ 263.678960][ T41] usb 1-1: config 0 descriptor?? [ 263.815475][ T5028] usb 3-1: USB disconnect, device number 36 [ 263.815633][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 263.829842][ T5028] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 263.907288][ T41] usbtouchscreen: probe of 1-1:0.117 failed with error -32 [ 264.021306][ T41] usb 1-1: USB disconnect, device number 33 [ 264.350954][ T26] audit: type=1326 audit(1756874290.493:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2228f8ebe9 code=0x7ffc0000 [ 265.664918][ T26] audit: type=1326 audit(1756874290.493:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f2228f8ebe9 code=0x7ffc0000 [ 265.717307][ T26] audit: type=1326 audit(1756874290.503:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2228f8ebe9 code=0x7ffc0000 [ 265.741118][ T26] audit: type=1326 audit(1756874290.503:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2228f8ebe9 code=0x7ffc0000 [ 265.989370][ T6765] netlink: 64 bytes leftover after parsing attributes in process `syz.0.667'. [ 267.474504][ T6790] netlink: 'syz.2.675': attribute type 1 has an invalid length. [ 267.501766][ T6790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.609501][ T6790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.731521][ T26] audit: type=1326 audit(1756874293.743:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.0.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 268.004810][ T6790] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 268.008922][ T26] audit: type=1326 audit(1756874293.743:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.0.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 268.046036][ T6790] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 268.066533][ T26] audit: type=1326 audit(1756874293.743:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.0.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 268.188938][ T26] audit: type=1326 audit(1756874293.743:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.0.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 268.292917][ T6797] device gretap1 entered promiscuous mode [ 268.326235][ T6797] bond1: (slave gretap1): making interface the new active one [ 268.382609][ T4750] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 268.388942][ T5028] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 268.408671][ T6797] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 268.579131][ T5028] usb 4-1: Using ep0 maxpacket: 8 [ 268.618874][ T4750] usb 2-1: Using ep0 maxpacket: 16 [ 269.293935][ T5028] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 269.872022][ T5028] usb 4-1: config 179 has no interface number 0 [ 269.894925][ T5028] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 269.945872][ T5028] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 269.998862][ T4755] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 270.030803][ T5028] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 270.062019][ T5028] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 270.074363][ T5028] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 270.096988][ T5028] usb 4-1: config 179 interface 65 has no altsetting 0 [ 270.105830][ T5028] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 270.115880][ T5028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.188968][ T4755] usb 1-1: Using ep0 maxpacket: 16 [ 270.189310][ T5028] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input31 [ 270.218557][ T4755] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.245865][ T4755] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.297108][ T4755] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 270.306901][ T41] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 270.501220][ T4755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.510483][ T4755] usb 1-1: Product: syz [ 270.514831][ T4755] usb 1-1: Manufacturer: syz [ 270.519784][ T4755] usb 1-1: SerialNumber: syz [ 270.553315][ T5028] usb 4-1: USB disconnect, device number 29 [ 270.559543][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 271.298943][ T41] usb 5-1: Using ep0 maxpacket: 32 [ 271.316319][ T5028] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 271.320679][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.419956][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.439497][ T41] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 271.448672][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.474014][ T41] usb 5-1: config 0 descriptor?? [ 271.499628][ T4755] usb 1-1: 0:2 : does not exist [ 271.705921][ T4755] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 271.789843][ T6822] smb3: Unknown parameter 'fd' [ 272.353700][ T41] glorious 0003:258A:0033.0007: item fetching failed at offset 0/3 [ 272.379026][ T4755] usb 1-1: USB disconnect, device number 34 [ 272.388476][ T41] glorious: probe of 0003:258A:0033.0007 failed with error -22 [ 272.568920][ T41] usb 5-1: USB disconnect, device number 27 [ 272.680394][ T6325] udevd[6325]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.918512][ T26] audit: type=1326 audit(1756874299.063:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033c98ebe9 code=0x7ffc0000 [ 273.447776][ T4758] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 273.489517][ T26] audit: type=1326 audit(1756874299.063:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f033c98ebe9 code=0x7ffc0000 [ 273.517283][ T26] audit: type=1326 audit(1756874299.063:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033c98ebe9 code=0x7ffc0000 [ 273.547737][ T26] audit: type=1326 audit(1756874299.063:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6828 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033c98ebe9 code=0x7ffc0000 [ 273.688956][ T4758] usb 3-1: Using ep0 maxpacket: 32 [ 273.696051][ T4758] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 273.729023][ T4758] usb 3-1: config 0 has no interface number 0 [ 273.755714][ T4758] usb 3-1: config 0 interface 12 has no altsetting 0 [ 273.763214][ T4750] usb 2-1: unable to get BOS descriptor or descriptor too short [ 273.886821][ T4750] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 273.895115][ T4750] usb 2-1: can't read configurations, error -71 [ 273.903151][ T4758] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 273.936042][ T4758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.950667][ T4758] usb 3-1: Product: syz [ 273.954883][ T4758] usb 3-1: Manufacturer: syz [ 273.960747][ T4758] usb 3-1: SerialNumber: syz [ 273.967021][ T4758] usb 3-1: config 0 descriptor?? [ 274.765840][ T6849] sd 0:0:1:0: device reset [ 274.789448][ T4750] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 276.349507][ T4750] usb 2-1: Using ep0 maxpacket: 16 [ 276.488464][ T4750] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 276.512560][ T4758] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 276.560283][ T4758] f81534 3-1:0.12: f81534_find_config_idx: read failed: -32 [ 276.612782][ T4750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.641354][ T4758] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 276.696526][ T4750] usb 2-1: Product: syz [ 276.722025][ T4758] f81534: probe of 3-1:0.12 failed with error -32 [ 276.766090][ T4750] usb 2-1: Manufacturer: syz [ 276.814791][ T4750] usb 2-1: SerialNumber: syz [ 276.943207][ T4750] usb 2-1: config 0 descriptor?? [ 277.329726][ T4750] usb 2-1: can't set config #0, error -71 [ 277.382184][ T4750] usb 2-1: USB disconnect, device number 35 [ 277.494124][ T5028] usb 3-1: USB disconnect, device number 37 [ 277.938846][ T5022] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 278.000994][ T6881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.704'. [ 278.021849][ T4750] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 278.118937][ T4757] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 278.148966][ T5022] usb 4-1: Using ep0 maxpacket: 32 [ 278.162092][ T5022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.179028][ T5022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.192741][ T5022] usb 4-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 278.203343][ T5022] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.300374][ T4750] usb 2-1: Using ep0 maxpacket: 16 [ 278.329511][ T4757] usb 5-1: Using ep0 maxpacket: 16 [ 278.343234][ T4750] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.343459][ T5022] usb 4-1: config 0 descriptor?? [ 278.368953][ T4750] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.807117][ T5022] glorious 0003:258A:0033.0008: item fetching failed at offset 0/3 [ 278.962570][ T5022] glorious: probe of 0003:258A:0033.0008 failed with error -22 [ 278.963545][ T4750] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.122839][ T5028] usb 4-1: USB disconnect, device number 30 [ 279.144335][ T4750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.184190][ T4750] usb 2-1: Product: syz [ 279.363300][ T4750] usb 2-1: Manufacturer: syz [ 279.408887][ T4750] usb 2-1: SerialNumber: syz [ 280.189541][ T4750] usb 2-1: 0:2 : does not exist [ 280.349062][ T5022] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 280.739086][ T5022] usb 3-1: Using ep0 maxpacket: 16 [ 281.075712][ T4750] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 281.124921][ T4750] usb 2-1: USB disconnect, device number 36 [ 281.191812][ T5022] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 281.357665][ T5022] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.034178][ T5022] usb 3-1: Product: syz [ 282.038423][ T5022] usb 3-1: Manufacturer: syz [ 282.044226][ T5022] usb 3-1: SerialNumber: syz [ 282.060751][ T5022] usb 3-1: config 0 descriptor?? [ 282.068247][ T5022] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 282.078205][ T5022] usb 3-1: Detected FT-X [ 282.081685][ T6325] udevd[6325]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.204527][ T6914] netlink: 24 bytes leftover after parsing attributes in process `syz.3.715'. [ 282.272435][ T5022] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 282.325878][ T6917] netlink: 64 bytes leftover after parsing attributes in process `syz.0.716'. [ 282.507248][ T5022] ftdi_sio 3-1:0.0: GPIO initialisation failed: -5 [ 282.519045][ T5022] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 283.481488][ T4757] usb 5-1: unable to get BOS descriptor or descriptor too short [ 283.522260][ T4757] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 283.569143][ T4757] usb 5-1: chopping to 0 config(s) [ 283.574328][ T4757] usb 5-1: can't read configurations, error -32 [ 284.308904][ T4757] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 284.546838][ T4750] usb 3-1: USB disconnect, device number 38 [ 284.566477][ T4750] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 284.622447][ T4750] ftdi_sio 3-1:0.0: device disconnected [ 285.723620][ T6961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.728'. [ 288.158836][ T14] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 288.358894][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 288.420781][ T6985] smb3: Unknown parameter 'fd' [ 288.779038][ T4755] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 288.848956][ T4759] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 289.569041][ T4755] usb 1-1: Using ep0 maxpacket: 16 [ 289.578189][ T4759] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 289.598616][ T4755] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 289.614695][ T4759] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.626750][ T4755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.639211][ T4759] usb 5-1: config 0 has no interface number 0 [ 289.652477][ T4755] usb 1-1: Product: syz [ 289.663527][ T4759] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 289.677920][ T4755] usb 1-1: Manufacturer: syz [ 289.692374][ T4755] usb 1-1: SerialNumber: syz [ 289.698424][ T4759] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.727622][ T4755] usb 1-1: config 0 descriptor?? [ 289.745002][ T4755] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 289.792814][ T4759] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 289.813695][ T4755] usb 1-1: Detected FT-X [ 289.818174][ T4759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.832985][ T4759] usb 5-1: Product: syz [ 289.837546][ T4759] usb 5-1: Manufacturer: syz [ 289.844999][ T4759] usb 5-1: SerialNumber: syz [ 289.856571][ T4759] usb 5-1: config 0 descriptor?? [ 289.879629][ T7000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.742'. [ 289.947680][ T4755] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 290.076217][ T4759] usbtouchscreen: probe of 5-1:0.117 failed with error -71 [ 290.242823][ T4755] ftdi_sio 1-1:0.0: GPIO initialisation failed: -5 [ 290.957078][ T4759] usb 5-1: USB disconnect, device number 30 [ 290.963760][ T4755] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 291.684432][ T4759] usb 1-1: USB disconnect, device number 35 [ 291.793413][ T4759] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 291.808515][ T4759] ftdi_sio 1-1:0.0: device disconnected [ 292.065742][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 292.369884][ T7024] smb3: Unknown parameter 'fd' [ 292.384479][ T14] usb 2-1: unable to get BOS descriptor or descriptor too short [ 292.416271][ T14] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 292.441669][ T14] usb 2-1: can't read configurations, error -71 [ 292.572350][ T4759] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 293.350525][ T4759] usb 4-1: Using ep0 maxpacket: 16 [ 293.368451][ T4759] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.388931][ T4759] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.400561][ T4759] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 293.410209][ T4759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.418298][ T4759] usb 4-1: Product: syz [ 293.524142][ T4759] usb 4-1: Manufacturer: syz [ 293.529732][ T4759] usb 4-1: SerialNumber: syz [ 294.541041][ T7037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.753'. [ 294.667634][ T4759] usb 4-1: 0:2 : does not exist [ 294.828942][ T5027] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 294.873418][ T4759] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 294.936689][ T4759] usb 4-1: USB disconnect, device number 31 [ 295.030218][ T5027] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 295.058888][ T5027] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 295.102732][ T5027] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.133136][ T5027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.148845][ T14] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 295.178183][ T5027] usb 2-1: config 0 descriptor?? [ 295.195025][ T6325] udevd[6325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.215139][ T5027] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 295.338824][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 295.348301][ T14] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 295.388559][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.408976][ T14] usb 3-1: Product: syz [ 295.418597][ T14] usb 3-1: Manufacturer: syz [ 295.438931][ T14] usb 3-1: SerialNumber: syz [ 295.446908][ T14] usb 3-1: config 0 descriptor?? [ 295.580503][ T14] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 295.599553][ T14] usb 3-1: Detected FT-X [ 295.939423][ T14] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 296.503690][ T14] ftdi_sio 3-1:0.0: GPIO initialisation failed: -5 [ 296.519370][ T14] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 296.765962][ T7074] capability: warning: `syz.1.756' uses deprecated v2 capabilities in a way that may be insecure [ 297.558828][ T14] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 297.831840][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 298.242483][ T5022] usb 2-1: USB disconnect, device number 39 [ 298.829050][ T4755] usb 3-1: USB disconnect, device number 39 [ 298.841953][ T4755] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 298.857585][ T4755] ftdi_sio 3-1:0.0: device disconnected [ 299.543947][ T5022] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 299.870422][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.768'. [ 300.098907][ T5022] usb 2-1: Using ep0 maxpacket: 16 [ 300.106798][ T5022] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.120968][ T5022] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.134462][ T5022] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 300.144153][ T5022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.152733][ T5022] usb 2-1: Product: syz [ 300.157132][ T5022] usb 2-1: Manufacturer: syz [ 300.162494][ T5022] usb 2-1: SerialNumber: syz [ 300.328913][ T5023] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 300.534753][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 300.544434][ T5023] usb 4-1: Using ep0 maxpacket: 8 [ 300.554507][ T5023] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 300.563096][ T5023] usb 4-1: config 179 has no interface number 0 [ 300.569907][ T5023] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 300.582289][ T14] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 300.590851][ T5023] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 300.607716][ T5022] usb 2-1: 0:2 : does not exist [ 300.624902][ T14] usb 1-1: can't read configurations, error -71 [ 300.799711][ T5023] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 300.816788][ T5023] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 300.840468][ T5022] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 301.043991][ T5022] usb 2-1: USB disconnect, device number 40 [ 301.052642][ T5023] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 301.168976][ T14] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 301.278096][ T5023] usb 4-1: config 179 interface 65 has no altsetting 0 [ 301.369989][ T5023] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 301.379949][ T5023] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.420935][ T5023] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input33 [ 301.549028][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 301.557862][ T14] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 301.571746][ T14] usb 1-1: config 0 has no interface number 0 [ 301.578079][ T14] usb 1-1: config 0 interface 12 has no altsetting 0 [ 301.602771][ T5023] usb 4-1: USB disconnect, device number 32 [ 301.608751][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 301.618315][ T6325] udevd[6325]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 301.627642][ T14] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 301.653756][ T5023] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 301.664507][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.680829][ T14] usb 1-1: Product: syz [ 301.685039][ T14] usb 1-1: Manufacturer: syz [ 301.702519][ T14] usb 1-1: SerialNumber: syz [ 301.720023][ T14] usb 1-1: config 0 descriptor?? [ 304.351754][ T14] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 305.268880][ T14] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 305.276324][ T14] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 305.284485][ T14] f81534: probe of 1-1:0.12 failed with error -71 [ 305.296363][ T14] usb 1-1: USB disconnect, device number 37 [ 305.639000][ T5028] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 305.639041][ T5023] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 305.828866][ T5028] usb 2-1: Using ep0 maxpacket: 16 [ 306.017628][ T5028] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 306.061539][ T5028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.071202][ T5028] usb 2-1: Product: syz [ 306.110176][ T5028] usb 2-1: Manufacturer: syz [ 306.114805][ T5028] usb 2-1: SerialNumber: syz [ 306.134483][ T5028] usb 2-1: config 0 descriptor?? [ 306.153525][ T5028] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 306.185754][ T5028] usb 2-1: Detected FT-X [ 306.239979][ T5023] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 306.248844][ T5023] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.259699][ T5023] usb 4-1: config 0 has no interface number 0 [ 306.265811][ T5023] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 306.276347][ T5023] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.292046][ T5023] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 306.301399][ T5022] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 306.311142][ T5023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.320160][ T5023] usb 4-1: Product: syz [ 306.326452][ T5023] usb 4-1: Manufacturer: syz [ 306.331441][ T5023] usb 4-1: SerialNumber: syz [ 306.354829][ T5028] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 306.367255][ T5023] usb 4-1: config 0 descriptor?? [ 306.498815][ T4755] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 306.508859][ T5022] usb 3-1: Using ep0 maxpacket: 16 [ 306.520319][ T5022] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 306.535839][ T5022] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.544398][ T5022] usb 3-1: Product: syz [ 306.551111][ T5022] usb 3-1: Manufacturer: syz [ 306.562413][ T5022] usb 3-1: SerialNumber: syz [ 306.567710][ T5028] ftdi_sio 2-1:0.0: GPIO initialisation failed: -5 [ 306.583433][ T5023] usbtouchscreen: probe of 4-1:0.117 failed with error -71 [ 306.598941][ T5028] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 306.609939][ T5023] usb 4-1: USB disconnect, device number 33 [ 306.622377][ T5022] usb 3-1: config 0 descriptor?? [ 306.628947][ T4759] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 306.650634][ T5022] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 306.666868][ T5022] usb 3-1: Detected FT232H [ 306.682780][ T4755] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.695316][ T4755] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 306.706067][ T4755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.721075][ T4755] usb 1-1: config 0 descriptor?? [ 306.732161][ T4755] pwc: Askey VC010 type 2 USB webcam detected. [ 306.838881][ T4759] usb 5-1: Using ep0 maxpacket: 16 [ 307.137060][ T4755] pwc: recv_control_msg error -32 req 02 val 2b00 [ 307.153862][ T4755] pwc: recv_control_msg error -32 req 02 val 2700 [ 307.184480][ T4755] pwc: recv_control_msg error -32 req 02 val 2c00 [ 307.204941][ T4755] pwc: recv_control_msg error -32 req 04 val 1000 [ 307.216398][ T4755] pwc: recv_control_msg error -32 req 04 val 1300 [ 307.237329][ T4755] pwc: recv_control_msg error -32 req 04 val 1400 [ 307.254884][ T4755] pwc: recv_control_msg error -32 req 02 val 2000 [ 307.276112][ T4755] pwc: recv_control_msg error -32 req 02 val 2100 [ 307.296543][ T4755] pwc: recv_control_msg error -32 req 04 val 1500 [ 307.329169][ T4755] pwc: recv_control_msg error -32 req 02 val 2500 [ 307.350704][ T4755] pwc: recv_control_msg error -32 req 02 val 2400 [ 307.373674][ T4755] pwc: recv_control_msg error -32 req 02 val 2600 [ 307.404214][ T4755] pwc: recv_control_msg error -32 req 02 val 2900 [ 307.623175][ T4755] pwc: recv_control_msg error -71 req 04 val 1100 [ 307.630339][ T4755] pwc: recv_control_msg error -71 req 04 val 1200 [ 307.645372][ T4755] pwc: Registered as video103. [ 307.770385][ T7147] netlink: 52 bytes leftover after parsing attributes in process `syz.3.785'. [ 308.187252][ T5022] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 308.319676][ T4755] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35 [ 308.334288][ T4755] usb 1-1: USB disconnect, device number 38 [ 308.370503][ T5022] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 308.422085][ T5028] usb 2-1: USB disconnect, device number 41 [ 308.428281][ T5022] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 308.465356][ T5028] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 308.621289][ T5022] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 309.232508][ T5028] ftdi_sio 2-1:0.0: device disconnected [ 309.252888][ T5022] usb 3-1: USB disconnect, device number 40 [ 309.378649][ T5022] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 309.401459][ T5022] ftdi_sio 3-1:0.0: device disconnected [ 309.586010][ T4759] usb 5-1: unable to get BOS descriptor or descriptor too short [ 309.631465][ T4759] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 309.647125][ T4759] usb 5-1: can't read configurations, error -71 [ 310.477860][ T5022] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 310.485589][ T5023] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 310.575551][ T7171] netlink: 64 bytes leftover after parsing attributes in process `syz.3.794'. [ 310.669155][ T5022] usb 3-1: Using ep0 maxpacket: 16 [ 310.674436][ T5023] usb 1-1: Using ep0 maxpacket: 8 [ 310.683004][ T5023] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 310.691881][ T5022] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.707662][ T5023] usb 1-1: config 179 has no interface number 0 [ 310.714610][ T5022] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.729207][ T5023] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 310.741520][ T5023] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 310.754378][ T5023] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 310.768377][ T5023] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 310.780536][ T5022] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 310.791636][ T5022] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.800102][ T5023] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 310.813806][ T5022] usb 3-1: Product: syz [ 310.818032][ T5022] usb 3-1: Manufacturer: syz [ 310.823126][ T5022] usb 3-1: SerialNumber: syz [ 310.827896][ T5023] usb 1-1: config 179 interface 65 has no altsetting 0 [ 310.837891][ T5023] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 310.853203][ T5023] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.874190][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.793'. [ 310.894236][ T5023] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input36 [ 311.019500][ T4757] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 311.077348][ T5023] usb 1-1: USB disconnect, device number 39 [ 311.077384][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 311.107188][ T5023] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 311.233872][ T4757] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 311.242475][ T4757] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.256369][ T4757] usb 4-1: config 0 has no interface number 0 [ 311.265852][ T4757] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 311.265988][ T5022] usb 3-1: 0:2 : does not exist [ 311.282440][ T4757] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.301974][ T4757] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 311.312603][ T4757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.323077][ T4757] usb 4-1: Product: syz [ 311.327465][ T4757] usb 4-1: Manufacturer: syz [ 311.334288][ T4757] usb 4-1: SerialNumber: syz [ 311.352194][ T4757] usb 4-1: config 0 descriptor?? [ 311.473266][ T5022] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 311.525762][ T5022] usb 3-1: USB disconnect, device number 41 [ 311.576001][ T4757] usbtouchscreen: probe of 4-1:0.117 failed with error -32 [ 311.629086][ T4757] usb 4-1: USB disconnect, device number 34 [ 311.978160][ T7188] smb3: Unknown parameter 'fd' [ 312.569612][ T6325] udevd[6325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.905730][ T5022] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 314.739243][ T5022] usb 4-1: Using ep0 maxpacket: 16 [ 314.915300][ T7217] netlink: 64 bytes leftover after parsing attributes in process `syz.1.808'. [ 315.332314][ T7228] smb3: Unknown parameter 'fd' [ 315.608906][ T5027] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 315.768824][ T5023] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 315.799085][ T5027] usb 2-1: Using ep0 maxpacket: 16 [ 315.816333][ T5027] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.866120][ T5027] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.887762][ T5027] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 315.961865][ T5023] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 316.016577][ T5023] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.039990][ T5027] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.055733][ T5027] usb 2-1: Product: syz [ 316.061123][ T5023] usb 3-1: config 0 has no interface number 0 [ 316.068909][ T5027] usb 2-1: Manufacturer: syz [ 316.074912][ T5023] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 316.085493][ T5027] usb 2-1: SerialNumber: syz [ 316.091783][ T5023] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.116667][ T5023] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 316.126903][ T5023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.140290][ T5023] usb 3-1: Product: syz [ 316.144714][ T5023] usb 3-1: Manufacturer: syz [ 316.151492][ T5023] usb 3-1: SerialNumber: syz [ 316.169921][ T5023] usb 3-1: config 0 descriptor?? [ 316.386720][ T5023] usbtouchscreen: probe of 3-1:0.117 failed with error -32 [ 316.425233][ T5023] usb 3-1: USB disconnect, device number 42 [ 316.516694][ T5027] usb 2-1: 0:2 : does not exist [ 316.560924][ T5022] usb 4-1: unable to get BOS descriptor or descriptor too short [ 316.584111][ T5022] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 316.607512][ T5022] usb 4-1: can't read configurations, error -71 [ 316.845065][ T5027] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 316.940705][ T7244] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 316.948551][ T7244] UDF-fs: Scanning with blocksize 512 failed [ 316.957530][ T7244] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 316.965131][ T7244] UDF-fs: Scanning with blocksize 1024 failed [ 316.972697][ T7244] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 316.980314][ T7244] UDF-fs: Scanning with blocksize 2048 failed [ 316.987851][ T7244] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 316.995563][ T7244] UDF-fs: Scanning with blocksize 4096 failed [ 317.031553][ T7243] netlink: 24 bytes leftover after parsing attributes in process `syz.4.817'. [ 317.233269][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.241616][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.418077][ T5027] usb 2-1: USB disconnect, device number 42 [ 318.445426][ T6325] udevd[6325]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.755939][ T7266] netlink: 64 bytes leftover after parsing attributes in process `syz.2.822'. [ 318.865471][ T7269] smb3: Unknown parameter 'fd' [ 318.984391][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 319.988871][ T5022] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 320.188855][ T5022] usb 1-1: Using ep0 maxpacket: 16 [ 320.279093][ T4759] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 321.080475][ T4759] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 321.262848][ T4759] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.300386][ T4759] usb 5-1: config 0 has no interface number 0 [ 321.952697][ T4759] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 321.963036][ T4759] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.981887][ T4759] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 322.028626][ T4759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.053195][ T4759] usb 5-1: Product: syz [ 322.066458][ T4759] usb 5-1: Manufacturer: syz [ 322.083897][ T4759] usb 5-1: SerialNumber: syz [ 322.115271][ T4759] usb 5-1: config 0 descriptor?? [ 322.350905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.407522][ T4759] usbtouchscreen: probe of 5-1:0.117 failed with error -32 [ 323.150295][ T4759] usb 5-1: USB disconnect, device number 33 [ 323.447998][ T7307] smb3: Unknown parameter 'fd' [ 324.549173][ T7323] process 'syz.3.842' launched '/dev/fd/5' with NULL argv: empty string added [ 325.229483][ T5022] usb 1-1: unable to get BOS descriptor or descriptor too short [ 325.283323][ T5022] usb 1-1: unable to read config index 0 descriptor/start: -32 [ 325.407534][ T5022] usb 1-1: chopping to 0 config(s) [ 325.461044][ T5022] usb 1-1: can't read configurations, error -32 [ 325.618895][ T5022] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 325.808845][ T5022] usb 1-1: device descriptor read/64, error -32 [ 326.460166][ T5022] usb usb1-port1: attempt power cycle [ 326.651839][ T7347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.850'. [ 327.509927][ T7360] smb3: Unknown parameter 'fd' [ 330.458119][ T4756] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 330.658862][ T4756] usb 4-1: Using ep0 maxpacket: 16 [ 330.694013][ T4756] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 330.985390][ T4756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.993585][ T4756] usb 4-1: Product: syz [ 330.997777][ T4756] usb 4-1: Manufacturer: syz [ 331.002919][ T4756] usb 4-1: SerialNumber: syz [ 332.477515][ T4756] usb 4-1: config 0 descriptor?? [ 332.695102][ T4756] usb 4-1: can't set config #0, error -71 [ 332.720619][ T4756] usb 4-1: USB disconnect, device number 37 [ 333.119053][ T26] audit: type=1326 audit(1756874359.243:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 333.179172][ T14] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 333.416861][ T26] audit: type=1326 audit(1756874359.243:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 333.504153][ T26] audit: type=1326 audit(1756874359.243:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 333.568356][ T26] audit: type=1326 audit(1756874359.243:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.0.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 338.049066][ T4758] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 338.306387][ T4758] usb 3-1: Using ep0 maxpacket: 16 [ 338.595598][ T26] audit: type=1326 audit(1756874364.223:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7456 comm="syz.0.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 338.619822][ T26] audit: type=1326 audit(1756874364.223:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7456 comm="syz.0.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 338.768858][ T14] usb 2-1: device descriptor read/64, error -110 [ 338.943830][ T26] audit: type=1326 audit(1756874364.223:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7456 comm="syz.0.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 338.946875][ T4758] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 338.966483][ T26] audit: type=1326 audit(1756874364.223:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7456 comm="syz.0.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 339.119571][ T7469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.885'. [ 339.217268][ T4758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.227405][ T4758] usb 3-1: Product: syz [ 339.232305][ T4758] usb 3-1: Manufacturer: syz [ 339.237068][ T4758] usb 3-1: SerialNumber: syz [ 339.237080][ T7468] misc userio: The device must be registered before sending interrupts [ 339.244836][ T4758] usb 3-1: config 0 descriptor?? [ 339.279067][ T14] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 339.449073][ T14] usb 2-1: device descriptor read/64, error -32 [ 339.570524][ T14] usb usb2-port1: attempt power cycle [ 339.966645][ T4758] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 340.075383][ T14] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 340.119153][ T14] usb 2-1: device descriptor read/8, error -32 [ 340.128144][ T4758] usb 3-1: Detected FT-X [ 340.186403][ T4758] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 340.889010][ T14] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 340.963914][ T4758] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 341.056425][ T5024] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 341.797338][ T14] usb 2-1: device not accepting address 46, error -71 [ 341.806654][ T7491] syz.4.889 (7491): drop_caches: 2 [ 341.903476][ T5024] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 341.929526][ T14] usb usb2-port1: unable to enumerate USB device [ 341.931875][ T4758] usb 3-1: USB disconnect, device number 43 [ 341.947560][ T5024] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.997402][ T5024] usb 1-1: config 0 has no interface number 0 [ 342.002132][ T4758] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 342.017172][ T4758] ftdi_sio 3-1:0.0: device disconnected [ 342.026240][ T5024] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 342.038895][ T4757] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 342.057024][ T5024] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.109727][ T5024] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 342.134666][ T5024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.189861][ T5024] usb 1-1: Product: syz [ 342.202997][ T5024] usb 1-1: Manufacturer: syz [ 342.331440][ T4757] usb 4-1: config 0 has no interfaces? [ 342.342998][ T5024] usb 1-1: SerialNumber: syz [ 343.614882][ T5024] usb 1-1: config 0 descriptor?? [ 343.829070][ T5024] usbtouchscreen: probe of 1-1:0.117 failed with error -71 [ 344.508915][ T26] audit: type=1326 audit(1756874370.043:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9218ebe9 code=0x7ffc0000 [ 344.647413][ T5024] usb 1-1: USB disconnect, device number 43 [ 344.677765][ T7506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.897'. [ 344.693336][ T26] audit: type=1326 audit(1756874370.043:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f4b9218ebe9 code=0x7ffc0000 [ 344.719434][ T26] audit: type=1326 audit(1756874370.043:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9218ebe9 code=0x7ffc0000 [ 344.784633][ T7510] netlink: 64 bytes leftover after parsing attributes in process `syz.0.894'. [ 344.801556][ T26] audit: type=1326 audit(1756874370.043:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9218ebe9 code=0x7ffc0000 [ 345.841551][ T7516] misc userio: The device must be registered before sending interrupts [ 346.381126][ T4757] usb 4-1: string descriptor 0 read error: -71 [ 346.397202][ T4757] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 346.407254][ T4757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.428063][ T4757] usb 4-1: config 0 descriptor?? [ 346.444738][ T4757] usb 4-1: can't set config #0, error -71 [ 346.466264][ T4757] usb 4-1: USB disconnect, device number 38 [ 346.588900][ T4750] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 346.978968][ T4750] usb 5-1: Using ep0 maxpacket: 16 [ 347.019906][ T7536] syz.2.905[7536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.020081][ T7536] syz.2.905[7536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.509667][ T5027] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 347.838948][ T5027] usb 3-1: Using ep0 maxpacket: 16 [ 348.039919][ T26] audit: type=1326 audit(1756874374.073:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.3.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033c98ebe9 code=0x7ffc0000 [ 348.389058][ T5027] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 348.401398][ T26] audit: type=1326 audit(1756874374.073:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.3.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f033c98ebe9 code=0x7ffc0000 [ 348.424620][ T5027] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.437144][ T5027] usb 3-1: Product: syz [ 348.453024][ T5027] usb 3-1: Manufacturer: syz [ 348.460171][ T5027] usb 3-1: SerialNumber: syz [ 348.468172][ T5027] usb 3-1: config 0 descriptor?? [ 348.475911][ T26] audit: type=1326 audit(1756874374.073:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.3.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033c98ebe9 code=0x7ffc0000 [ 348.582059][ T5027] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 348.613024][ T5027] usb 3-1: Detected FT-X [ 348.624036][ T26] audit: type=1326 audit(1756874374.073:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.3.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033c98ebe9 code=0x7ffc0000 [ 348.783893][ T5027] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 348.986768][ T7551] netlink: 64 bytes leftover after parsing attributes in process `syz.0.910'. [ 349.200683][ T5027] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 350.070086][ T5024] usb 3-1: USB disconnect, device number 44 [ 350.107523][ T5024] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 350.222750][ T5024] ftdi_sio 3-1:0.0: device disconnected [ 350.533907][ T7568] misc userio: The device must be registered before sending interrupts [ 350.969493][ T4750] usb 5-1: unable to get BOS descriptor or descriptor too short [ 351.016511][ T4750] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 351.031628][ T4750] usb 5-1: can't read configurations, error -71 [ 351.303731][ T5027] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 351.839560][ T26] audit: type=1326 audit(1756874377.563:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033c98ebe9 code=0x7ffc0000 [ 351.909224][ T26] audit: type=1326 audit(1756874377.563:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f033c98ebe9 code=0x7ffc0000 [ 351.958966][ T26] audit: type=1326 audit(1756874377.563:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033c98ebe9 code=0x7ffc0000 [ 351.982056][ T4750] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 351.992301][ T26] audit: type=1326 audit(1756874377.563:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033c98ebe9 code=0x7ffc0000 [ 352.022211][ T26] audit: type=1326 audit(1756874378.143:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7587 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 352.053642][ T26] audit: type=1326 audit(1756874378.143:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7587 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 352.094576][ T26] audit: type=1326 audit(1756874378.143:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7587 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 352.105344][ T5027] usb 3-1: Using ep0 maxpacket: 16 [ 352.136998][ T14] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 352.161031][ T26] audit: type=1326 audit(1756874378.153:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7587 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 352.163016][ T5027] usb 3-1: config 1 has an invalid interface number: 9 but max is 2 [ 352.195681][ T4750] usb 5-1: config 0 has no interfaces? [ 352.215704][ T14] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 352.235944][ T4750] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 352.262023][ T4750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 352.299779][ T5027] usb 3-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 352.301236][ T4750] usb 5-1: SerialNumber: syz [ 352.323811][ T26] audit: type=1326 audit(1756874378.153:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7587 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 352.330798][ T5027] usb 3-1: config 1 has no interface number 3 [ 352.373422][ T4750] usb 5-1: config 0 descriptor?? [ 352.418807][ T26] audit: type=1326 audit(1756874378.153:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7587 comm="syz.0.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 352.547125][ T5027] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 352.558874][ T5027] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 352.568844][ T5027] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.580389][ T5027] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 352.590249][ T5027] usb 3-1: config 1 interface 1 has no altsetting 0 [ 352.604490][ T5027] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.464130][ T4756] usb 5-1: USB disconnect, device number 35 [ 353.569042][ T5027] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.577113][ T5027] usb 3-1: Product: syz [ 353.581745][ T5027] usb 3-1: Manufacturer: syz [ 353.586619][ T5027] usb 3-1: SerialNumber: syz [ 353.835146][ T5027] usb 3-1: USB disconnect, device number 45 [ 354.131470][ T14] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 354.190017][ T6325] udevd[6325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.316824][ T7616] misc userio: No port type given on /dev/userio [ 354.323500][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 354.334707][ T14] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 354.346161][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.357558][ T14] usb 2-1: Product: syz [ 354.363047][ T14] usb 2-1: Manufacturer: syz [ 354.368064][ T14] usb 2-1: SerialNumber: syz [ 354.380857][ T14] usb 2-1: config 0 descriptor?? [ 354.393155][ T14] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 354.402356][ T7617] misc userio: The device must be registered before sending interrupts [ 354.414422][ T14] usb 2-1: Detected FT-X [ 354.419329][ T5022] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 354.624634][ T14] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 354.638818][ T5022] usb 4-1: Using ep0 maxpacket: 16 [ 355.105085][ T14] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 355.762117][ T14] usb 2-1: USB disconnect, device number 47 [ 355.772707][ T14] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 355.782870][ T14] ftdi_sio 2-1:0.0: device disconnected [ 359.517280][ T14] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 359.738235][ T5022] usb 4-1: unable to get BOS descriptor or descriptor too short [ 359.872271][ T5022] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 359.888080][ T5022] usb 4-1: chopping to 0 config(s) [ 359.909586][ T5022] usb 4-1: can't read configurations, error -32 [ 360.000034][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 360.000121][ T26] audit: type=1326 audit(1756874386.143:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 360.053403][ T26] audit: type=1326 audit(1756874386.143:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 360.131788][ T26] audit: type=1326 audit(1756874386.153:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 360.318667][ T26] audit: type=1326 audit(1756874386.153:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 360.479821][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 360.487921][ T14] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 360.501728][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.504973][ T7669] misc userio: No port type given on /dev/userio [ 360.512378][ T14] usb 2-1: config 0 has no interface number 0 [ 360.525860][ T14] usb 2-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 360.536735][ T5024] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 360.544487][ T5022] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 360.555160][ T14] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 360.564429][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.572784][ T14] usb 2-1: Product: syz [ 360.584387][ T7670] misc userio: The device must be registered before sending interrupts [ 360.643723][ T14] usb 2-1: Manufacturer: syz [ 360.649095][ T4750] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 360.656798][ T14] usb 2-1: SerialNumber: syz [ 360.669472][ T14] usb 2-1: config 0 descriptor?? [ 360.681560][ T14] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 360.738914][ T5024] usb 3-1: Using ep0 maxpacket: 16 [ 360.746281][ T5024] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.756743][ T5024] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.768284][ T5024] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.778293][ T5024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.787715][ T5024] usb 3-1: Product: syz [ 360.792530][ T5024] usb 3-1: Manufacturer: syz [ 360.797365][ T5024] usb 3-1: SerialNumber: syz [ 361.451154][ T5024] usb 3-1: 0:2 : does not exist [ 361.667183][ T5024] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 361.748128][ T5024] usb 3-1: USB disconnect, device number 46 [ 361.779518][ T4750] usb 5-1: device descriptor read/all, error -71 [ 362.024707][ T6325] udevd[6325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.801096][ T7687] syz.0.949 (7687): drop_caches: 2 [ 362.867947][ T14] usb 2-1: USB disconnect, device number 48 [ 362.988833][ T4750] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 363.245602][ T4750] usb 5-1: Using ep0 maxpacket: 16 [ 364.180671][ T4750] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 364.199428][ T4750] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.209216][ T4750] usb 5-1: Product: syz [ 364.213437][ T4750] usb 5-1: Manufacturer: syz [ 364.218092][ T4750] usb 5-1: SerialNumber: syz [ 364.247633][ T4750] usb 5-1: config 0 descriptor?? [ 364.260115][ T4750] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 364.268378][ T4750] usb 5-1: Detected FT-X [ 364.328009][ T7706] misc userio: No port type given on /dev/userio [ 364.536686][ T7709] misc userio: The device must be registered before sending interrupts [ 364.541358][ T4750] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 364.968102][ T26] audit: type=1326 audit(1756874391.053:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c90d8ebe9 code=0x7ffc0000 [ 364.991207][ T26] audit: type=1326 audit(1756874391.053:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c90d8ebe9 code=0x7ffc0000 [ 365.013925][ T26] audit: type=1326 audit(1756874391.053:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f4c90d8ebe9 code=0x7ffc0000 [ 365.073321][ T26] audit: type=1326 audit(1756874391.053:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c90d8ebe9 code=0x7ffc0000 [ 365.171602][ T26] audit: type=1326 audit(1756874391.063:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c90d8ebe9 code=0x7ffc0000 [ 365.242363][ T4750] ftdi_sio 5-1:0.0: GPIO initialisation failed: -32 [ 365.286656][ T4750] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 365.378903][ T5022] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 365.436720][ T4750] usb 5-1: USB disconnect, device number 37 [ 365.450377][ T4750] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 365.460589][ T4750] ftdi_sio 5-1:0.0: device disconnected [ 365.658872][ T5022] usb 2-1: Using ep0 maxpacket: 16 [ 366.068823][ T4757] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 366.077094][ T4756] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 366.667258][ T4757] usb 4-1: Using ep0 maxpacket: 16 [ 366.678017][ T4756] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 16 [ 366.690299][ T4757] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.700933][ T4756] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 366.710068][ T4757] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.719515][ T4756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 366.731276][ T4756] usb 3-1: SerialNumber: syz [ 366.738447][ T4757] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.751125][ T4757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.763272][ T4756] usb 3-1: config 0 descriptor?? [ 366.771759][ T4757] usb 4-1: Product: syz [ 366.776102][ T4757] usb 4-1: Manufacturer: syz [ 366.785573][ T4757] usb 4-1: SerialNumber: syz [ 367.787847][ T4756] usb 3-1: USB disconnect, device number 47 [ 368.395289][ T4757] usb 4-1: 0:2 : does not exist [ 368.650433][ T4757] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 369.613640][ T4757] usb 4-1: USB disconnect, device number 41 [ 369.721260][ T7755] netlink: 64 bytes leftover after parsing attributes in process `syz.0.969'. [ 370.226267][ T7767] netlink: 16 bytes leftover after parsing attributes in process `syz.3.974'. [ 371.050115][ T5022] usb 2-1: unable to get BOS descriptor or descriptor too short [ 371.117935][ T5022] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 371.134538][ T5022] usb 2-1: chopping to 0 config(s) [ 371.167938][ T5022] usb 2-1: can't read configurations, error -32 [ 372.632017][ T7786] smb3: Unknown parameter 'fd' [ 373.654125][ T5027] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 373.838817][ T5027] usb 2-1: Using ep0 maxpacket: 16 [ 373.845870][ T5027] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.863658][ T5027] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.875617][ T5027] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 373.889766][ T5027] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.897947][ T5027] usb 2-1: Product: syz [ 373.905588][ T5027] usb 2-1: Manufacturer: syz [ 373.911713][ T5027] usb 2-1: SerialNumber: syz [ 373.958931][ T5028] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 374.080233][ T5022] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 374.088050][ T5024] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 374.140927][ T5028] usb 4-1: config 0 has no interfaces? [ 374.150049][ T5028] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 374.159607][ T5028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 374.167872][ T5028] usb 4-1: SerialNumber: syz [ 374.174878][ T5028] usb 4-1: config 0 descriptor?? [ 374.289021][ T5024] usb 3-1: Using ep0 maxpacket: 8 [ 374.294337][ T5022] usb 5-1: Using ep0 maxpacket: 16 [ 374.301805][ T5024] usb 3-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 374.312900][ T5024] usb 3-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 374.322349][ T5022] usb 5-1: config 1 has an invalid interface number: 9 but max is 2 [ 374.330497][ T5024] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 374.340290][ T5022] usb 5-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 374.349911][ T5024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.358183][ T5027] usb 2-1: 0:2 : does not exist [ 374.363334][ T5022] usb 5-1: config 1 has no interface number 3 [ 374.369705][ T5022] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 374.386944][ T5022] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 374.388191][ T4758] usb 4-1: USB disconnect, device number 42 [ 374.396959][ T5022] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 374.414551][ T5022] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 374.426120][ T5022] usb 5-1: config 1 interface 1 has no altsetting 0 [ 374.443474][ T5022] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 374.452832][ T5022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.460984][ T5022] usb 5-1: Product: syz [ 374.465207][ T5022] usb 5-1: Manufacturer: syz [ 374.469934][ T5022] usb 5-1: SerialNumber: syz [ 374.565571][ T5027] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 374.589760][ T5027] usb 2-1: USB disconnect, device number 51 [ 374.624537][ T5024] usb 3-1: USB disconnect, device number 48 [ 374.717248][ T6325] udevd[6325]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 374.730231][ T5022] usb 5-1: USB disconnect, device number 38 [ 374.986232][ T6872] udevd[6872]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 375.149065][ T5024] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 376.139743][ T7824] syz.3.992[7824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 376.139901][ T7824] syz.3.992[7824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 376.148971][ T5024] usb 1-1: Using ep0 maxpacket: 16 [ 377.786322][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 378.119072][ T5023] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 378.559037][ T5023] usb 3-1: Using ep0 maxpacket: 16 [ 378.568081][ T7846] smb3: Unknown parameter 'fd' [ 378.583926][ T5023] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 378.617361][ T5023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.664467][ T5023] usb 3-1: Product: syz [ 378.671220][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.677587][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.722852][ T5023] usb 3-1: Manufacturer: syz [ 378.782550][ T5023] usb 3-1: SerialNumber: syz [ 378.814613][ T5023] usb 3-1: config 0 descriptor?? [ 378.875374][ T5023] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 378.935939][ T5023] usb 3-1: Detected FT-X [ 379.063817][ T5023] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 379.344240][ T5024] usb 1-1: unable to get BOS descriptor or descriptor too short [ 379.373676][ T5024] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 379.403389][ T5024] usb 1-1: can't read configurations, error -71 [ 379.484896][ T5023] ftdi_sio 3-1:0.0: GPIO initialisation failed: -32 [ 379.503511][ T5023] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 379.525253][ T5023] usb 3-1: USB disconnect, device number 49 [ 379.538979][ T4758] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 379.583213][ T5023] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 379.676233][ T5023] ftdi_sio 3-1:0.0: device disconnected [ 379.752391][ T4758] usb 4-1: config 0 has no interfaces? [ 379.759304][ T4758] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 379.792821][ T4758] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 379.838836][ T4758] usb 4-1: SerialNumber: syz [ 379.864418][ T4758] usb 4-1: config 0 descriptor?? [ 380.088938][ T5024] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 380.089183][ T4758] usb 4-1: USB disconnect, device number 43 [ 380.176817][ T7860] syz.2.1006[7860] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 380.176992][ T7860] syz.2.1006[7860] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 380.290636][ T5024] usb 1-1: Using ep0 maxpacket: 16 [ 380.311895][ T5022] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 380.330861][ T5024] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.348821][ T5024] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 380.371150][ T5024] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 380.391305][ T5024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.408988][ T5024] usb 1-1: Product: syz [ 380.420518][ T5024] usb 1-1: Manufacturer: syz [ 380.433231][ T5024] usb 1-1: SerialNumber: syz [ 380.498869][ T5022] usb 2-1: Using ep0 maxpacket: 8 [ 380.513617][ T5022] usb 2-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 380.621872][ T5022] usb 2-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 380.753706][ T5022] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 380.885470][ T5022] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.002391][ T5024] usb 1-1: 0:2 : does not exist [ 381.221321][ T5024] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 381.387886][ T5024] usb 1-1: USB disconnect, device number 45 [ 381.442834][ T5022] usb 2-1: USB disconnect, device number 52 [ 381.552468][ T7877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1013'. [ 381.710465][ T7882] mmap: syz.3.1011 (7882) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 382.343767][ T6325] udevd[6325]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.523409][ T7889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1015'. [ 383.006763][ T7892] syz.4.1018[7892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.006912][ T7892] syz.4.1018[7892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.025762][ T7896] smb3: Unknown parameter 'fd' [ 383.951945][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1017'. [ 386.199622][ T7929] ======================================================= [ 386.199622][ T7929] WARNING: The mand mount option has been deprecated and [ 386.199622][ T7929] and is ignored by this kernel. Remove the mand [ 386.199622][ T7929] option from the mount to silence this warning. [ 386.199622][ T7929] ======================================================= [ 386.858807][ T5022] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 388.176719][ T7938] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1027'. [ 389.259623][ T7948] syz.3.1030[7948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.259787][ T7948] syz.3.1030[7948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 389.549062][ T4755] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 390.138973][ T4755] usb 1-1: device descriptor read/64, error -71 [ 390.237138][ T26] audit: type=1326 audit(1756874416.383:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.4.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2228f8ebe9 code=0x7fc00000 [ 390.422666][ T4755] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 390.638956][ T4755] usb 1-1: device descriptor read/64, error -71 [ 391.321226][ T4755] usb usb1-port1: attempt power cycle [ 391.729443][ T4755] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 391.789822][ T7989] syz.4.1043[7989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 391.789978][ T7989] syz.4.1043[7989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 391.819030][ T4755] usb 1-1: device descriptor read/8, error -71 [ 391.853321][ T7990] smb3: Unknown parameter 'fd' [ 392.178857][ T4755] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 392.234833][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1044'. [ 392.294005][ T8000] misc userio: Invalid payload size [ 392.415605][ T8003] misc userio: No port type given on /dev/userio [ 392.428957][ T4755] usb 1-1: device not accepting address 49, error -71 [ 392.452512][ T4755] usb usb1-port1: unable to enumerate USB device [ 393.061404][ T8003] misc userio: The device must be registered before sending interrupts [ 395.889121][ T4755] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 396.049357][ T4755] usb 4-1: device descriptor read/64, error -71 [ 397.031546][ T4755] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 397.063142][ T8048] misc userio: Invalid payload size [ 397.068951][ T8048] misc userio: No port type given on /dev/userio [ 397.132661][ T8051] misc userio: The device must be registered before sending interrupts [ 397.198767][ T4755] usb 4-1: device descriptor read/64, error -71 [ 397.207853][ T8053] smb3: Unknown parameter 'fd' [ 397.361390][ T4755] usb usb4-port1: attempt power cycle [ 398.228877][ T5024] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 398.269144][ T4755] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 398.301216][ T4755] usb 4-1: device descriptor read/8, error -71 [ 398.309025][ T5022] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 398.475863][ T5024] usb 2-1: Using ep0 maxpacket: 16 [ 398.501655][ T5024] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 398.518969][ T5022] usb 3-1: config 0 has an invalid interface number: 91 but max is 0 [ 398.527125][ T5022] usb 3-1: config 0 has no interface number 0 [ 398.535235][ T5024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.543574][ T5024] usb 2-1: Product: syz [ 398.548352][ T5024] usb 2-1: Manufacturer: syz [ 398.554865][ T5022] usb 3-1: New USB device found, idVendor=05ac, idProduct=a9d2, bcdDevice=95.16 [ 398.564373][ T5024] usb 2-1: SerialNumber: syz [ 398.570061][ T5022] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.578120][ T5022] usb 3-1: Product: syz [ 398.584135][ T5024] usb 2-1: config 0 descriptor?? [ 398.589367][ T5022] usb 3-1: Manufacturer: syz [ 398.595929][ T5024] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 398.604047][ T5022] usb 3-1: SerialNumber: syz [ 398.621401][ T5024] usb 2-1: Detected FT-X [ 398.640346][ T5022] usb 3-1: config 0 descriptor?? [ 398.799916][ T5024] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 399.211931][ T5024] ftdi_sio 2-1:0.0: GPIO initialisation failed: -32 [ 399.246715][ T5024] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 399.291018][ T5024] usb 2-1: USB disconnect, device number 54 [ 399.346227][ T5024] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 399.367091][ T5024] ftdi_sio 2-1:0.0: device disconnected [ 399.535190][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'. [ 400.401667][ T4755] usb 3-1: USB disconnect, device number 50 [ 400.469921][ T8097] misc userio: Invalid payload size [ 400.476015][ T8097] misc userio: No port type given on /dev/userio [ 400.534704][ T8099] misc userio: The device must be registered before sending interrupts [ 400.857242][ T8104] smb3: Unknown parameter 'fd' [ 401.418897][ T4755] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 401.607952][ T4755] usb 3-1: device descriptor read/64, error -71 [ 401.978891][ T4755] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 402.298825][ T5022] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 402.360464][ T4755] usb 3-1: device descriptor read/64, error -71 [ 402.479966][ T4755] usb usb3-port1: attempt power cycle [ 402.608898][ T5022] usb 2-1: Using ep0 maxpacket: 16 [ 402.622998][ T5022] usb 2-1: config 1 has an invalid interface number: 9 but max is 2 [ 402.631299][ T5022] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 402.648858][ T5022] usb 2-1: config 1 has no interface number 3 [ 402.655166][ T5022] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 402.668595][ T5022] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 402.685619][ T5022] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 402.696753][ T5022] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 402.736078][ T5022] usb 2-1: config 1 interface 1 has no altsetting 0 [ 402.784841][ T5022] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 402.817541][ T5022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.838322][ T5022] usb 2-1: Product: syz [ 402.842891][ T5022] usb 2-1: Manufacturer: syz [ 402.847745][ T5022] usb 2-1: SerialNumber: syz [ 402.899007][ T4755] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 402.944440][ T4755] usb 3-1: device descriptor read/8, error -71 [ 403.098982][ T5022] usb 2-1: USB disconnect, device number 55 [ 403.349293][ T4755] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 403.781176][ T4755] usb 3-1: device descriptor read/8, error -71 [ 403.913148][ T26] audit: type=1326 audit(1756874430.063:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 403.921744][ T4755] usb usb3-port1: unable to enumerate USB device [ 403.982526][ T26] audit: type=1326 audit(1756874430.063:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 404.038886][ T26] audit: type=1326 audit(1756874430.093:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 404.083102][ T6325] udevd[6325]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 404.149758][ T26] audit: type=1326 audit(1756874430.093:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 404.251404][ T26] audit: type=1326 audit(1756874430.093:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 404.354947][ T26] audit: type=1326 audit(1756874430.093:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 404.378581][ T4755] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 404.619703][ T4755] usb 3-1: Using ep0 maxpacket: 16 [ 404.713387][ T4755] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 404.715345][ T8144] misc userio: Invalid payload size [ 404.724220][ T4755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.737726][ T4755] usb 3-1: Product: syz [ 404.742268][ T4755] usb 3-1: Manufacturer: syz [ 404.747191][ T4755] usb 3-1: SerialNumber: syz [ 404.747471][ T26] audit: type=1326 audit(1756874430.093:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 404.826026][ T4755] usb 3-1: config 0 descriptor?? [ 404.847940][ T4755] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 404.867487][ T4755] usb 3-1: Detected FT-X [ 404.882406][ T26] audit: type=1326 audit(1756874430.093:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 404.903895][ T8145] misc userio: The device must be registered before sending interrupts [ 404.963181][ T26] audit: type=1326 audit(1756874430.093:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 404.985555][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.994308][ T26] audit: type=1326 audit(1756874430.093:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.0.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7b58ebe9 code=0x7ffc0000 [ 405.016752][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.088429][ T4755] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 405.582625][ T4755] ftdi_sio 3-1:0.0: GPIO initialisation failed: -5 [ 405.598791][ T4755] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 406.215341][ T8156] smb3: Unknown parameter 'fd' [ 406.281662][ T5024] usb 3-1: USB disconnect, device number 55 [ 406.312296][ T5024] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 406.409066][ T5024] ftdi_sio 3-1:0.0: device disconnected [ 407.578474][ T4757] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 408.392292][ T4757] usb 2-1: config 0 has no interfaces? [ 408.408517][ T4757] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 408.422191][ T4757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.436369][ T4757] usb 2-1: Product: syz [ 408.444696][ T4757] usb 2-1: Manufacturer: syz [ 408.450393][ T4757] usb 2-1: SerialNumber: syz [ 408.468357][ T4757] usb 2-1: config 0 descriptor?? [ 408.529431][ T4759] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 408.688891][ T4759] usb 3-1: device descriptor read/64, error -71 [ 408.742857][ T5022] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 408.795809][ T8188] misc userio: Invalid payload size [ 408.873728][ T8193] misc userio: The device must be registered before sending interrupts [ 408.958799][ T5022] usb 5-1: Using ep0 maxpacket: 16 [ 408.963534][ T4759] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 408.970907][ T5022] usb 5-1: config 1 has an invalid interface number: 9 but max is 2 [ 409.002590][ T5022] usb 5-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 409.018218][ T8195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1107'. [ 409.037812][ T5022] usb 5-1: config 1 has no interface number 3 [ 409.048333][ T5022] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 409.070518][ T5022] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 409.083165][ T5022] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 409.094702][ T5022] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 409.111574][ T5022] usb 5-1: config 1 interface 1 has no altsetting 0 [ 409.119009][ T4759] usb 3-1: device descriptor read/64, error -71 [ 409.164159][ T5022] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 409.178262][ T5022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.203511][ T5022] usb 5-1: Product: syz [ 409.213322][ T5022] usb 5-1: Manufacturer: syz [ 409.224755][ T5022] usb 5-1: SerialNumber: syz [ 409.248967][ T4759] usb usb3-port1: attempt power cycle [ 409.536200][ T5022] usb 5-1: USB disconnect, device number 39 [ 409.669645][ T4759] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 409.710553][ T4759] usb 3-1: device descriptor read/8, error -71 [ 410.109333][ T4759] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 410.489919][ T4759] usb 3-1: device descriptor read/8, error -71 [ 410.638847][ T4759] usb usb3-port1: unable to enumerate USB device [ 411.681932][ T4757] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 412.619461][ T4757] usb 4-1: Using ep0 maxpacket: 16 [ 412.632467][ T4757] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 412.702583][ T4757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.728067][ T4757] usb 4-1: Product: syz [ 412.748946][ T4757] usb 4-1: Manufacturer: syz [ 412.753696][ T4757] usb 4-1: SerialNumber: syz [ 412.787865][ T5022] usb 2-1: USB disconnect, device number 56 [ 412.801920][ T4757] usb 4-1: config 0 descriptor?? [ 412.823701][ T4757] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 412.852833][ T4757] usb 4-1: Detected FT-X [ 412.978221][ T8231] misc userio: Invalid payload size [ 413.017811][ T4757] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 413.036587][ T8233] misc userio: The device must be registered before sending interrupts [ 413.097364][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 413.491960][ T4757] ftdi_sio 4-1:0.0: GPIO initialisation failed: -5 [ 413.689531][ T4757] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 413.724884][ T4757] usb 4-1: USB disconnect, device number 48 [ 413.744809][ T4757] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 413.757407][ T4757] ftdi_sio 4-1:0.0: device disconnected [ 413.905610][ T8239] smb3: Unknown parameter 'fd' [ 414.589437][ T4759] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 414.899487][ T4759] usb 5-1: device descriptor read/64, error -71 [ 415.478510][ T4759] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 416.013330][ T4759] usb 5-1: device descriptor read/64, error -71 [ 416.207289][ T5024] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 416.225163][ T4759] usb usb5-port1: attempt power cycle [ 417.014657][ T5024] usb 3-1: config 0 has no interfaces? [ 417.048288][ T5024] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 417.076218][ T5024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.085343][ T5024] usb 3-1: Product: syz [ 417.089832][ T5024] usb 3-1: Manufacturer: syz [ 417.100057][ T5024] usb 3-1: SerialNumber: syz [ 417.148637][ T5024] usb 3-1: config 0 descriptor?? [ 417.322838][ T8298] fuse: Unknown parameter 'group_i00000000000000000000' [ 417.460978][ T4756] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 418.248961][ T4756] usb 1-1: Using ep0 maxpacket: 16 [ 418.263388][ T4756] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 418.292317][ T4756] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.304865][ T4756] usb 1-1: Product: syz [ 418.315695][ T4756] usb 1-1: Manufacturer: syz [ 418.325852][ T4756] usb 1-1: SerialNumber: syz [ 418.444238][ T4756] usb 1-1: config 0 descriptor?? [ 418.463523][ T4756] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 418.484826][ T4756] usb 1-1: Detected FT-X [ 419.181102][ T4756] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 420.184124][ T4756] ftdi_sio 1-1:0.0: GPIO initialisation failed: -5 [ 420.193134][ T4756] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 420.516880][ T5022] usb 1-1: USB disconnect, device number 50 [ 420.610801][ T5022] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 420.716062][ T5022] ftdi_sio 1-1:0.0: device disconnected [ 421.260920][ T22] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 421.451123][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.468938][ T22] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 421.506377][ T22] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 421.747236][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.758608][ T22] usb 4-1: Product: syz [ 421.763346][ T22] usb 4-1: Manufacturer: syz [ 421.833196][ T22] usb 4-1: SerialNumber: syz [ 421.949064][ T22] usb 4-1: config 0 descriptor?? [ 422.198854][ T4756] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 422.268895][ T22] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 422.325486][ T4757] usb 3-1: USB disconnect, device number 60 [ 422.418868][ T4756] usb 1-1: Using ep0 maxpacket: 16 [ 422.427105][ T4756] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.453027][ T8345] fuse: Unknown parameter 'group_i00000000000000000000' [ 422.477341][ T4756] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.492499][ T22] usb 5-1: config 0 has no interfaces? [ 422.508401][ T22] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 422.529074][ T4756] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 422.544689][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.565159][ T22] usb 5-1: Product: syz [ 422.577872][ T4756] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 422.587889][ T22] usb 5-1: Manufacturer: syz [ 422.603941][ T22] usb 5-1: SerialNumber: syz [ 422.616862][ T4756] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.642546][ T22] usb 5-1: config 0 descriptor?? [ 422.700741][ T4756] usb 1-1: config 0 descriptor?? [ 423.411892][ T5022] usb 4-1: USB disconnect, device number 49 [ 424.945057][ T4756] usbhid 1-1:0.0: can't add hid device: -71 [ 424.952629][ T4756] usbhid: probe of 1-1:0.0 failed with error -71 [ 424.962021][ T4756] usb 1-1: USB disconnect, device number 51 [ 425.934920][ T8375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1156'. [ 425.963557][ T5022] usb 5-1: USB disconnect, device number 43 [ 426.122265][ T8385] fuse: Unknown parameter 'group_i00000000000000000000' [ 426.239976][ T4756] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 426.430292][ T4756] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.447265][ T4756] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 426.458850][ T4756] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.473498][ T4756] usb 1-1: config 0 descriptor?? [ 426.487016][ T4756] pwc: Askey VC010 type 2 USB webcam detected. [ 426.550034][ T5022] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 427.261545][ T4756] pwc: recv_control_msg error -32 req 02 val 2b00 [ 427.274613][ T4756] pwc: recv_control_msg error -32 req 02 val 2700 [ 427.292848][ T4756] pwc: recv_control_msg error -32 req 02 val 2c00 [ 427.300320][ T4756] pwc: recv_control_msg error -32 req 04 val 1000 [ 427.314050][ T4756] pwc: recv_control_msg error -32 req 04 val 1300 [ 427.326053][ T4756] pwc: recv_control_msg error -32 req 04 val 1400 [ 427.333407][ T4756] pwc: recv_control_msg error -32 req 02 val 2000 [ 427.436566][ T5022] usb 5-1: config 0 has no interfaces? [ 427.454341][ T4756] pwc: recv_control_msg error -32 req 02 val 2100 [ 427.629173][ T4756] pwc: recv_control_msg error -32 req 04 val 1500 [ 427.648837][ T4756] pwc: recv_control_msg error -32 req 02 val 2500 [ 427.655920][ T4756] pwc: recv_control_msg error -32 req 02 val 2400 [ 427.664755][ T4756] pwc: recv_control_msg error -32 req 02 val 2600 [ 427.677571][ T4756] pwc: recv_control_msg error -32 req 02 val 2900 [ 428.151774][ T8401] ================================================================== [ 428.159949][ T8401] BUG: KASAN: use-after-free in rose_transmit_link+0x5b6/0x730 [ 428.167683][ T8401] Read of size 1 at addr ffff888078e71c32 by task syz.1.1163/8401 [ 428.175582][ T8401] [ 428.177931][ T8401] CPU: 0 PID: 8401 Comm: syz.1.1163 Not tainted syzkaller #0 [ 428.185307][ T8401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 428.195476][ T8401] Call Trace: [ 428.198769][ T8401] [ 428.201702][ T8401] dump_stack_lvl+0x168/0x22e [ 428.206398][ T8401] ? read_lock_is_recursive+0x10/0x10 [ 428.211810][ T8401] ? show_regs_print_info+0x12/0x12 [ 428.217060][ T8401] ? load_image+0x3b0/0x3b0 [ 428.221588][ T8401] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 428.227095][ T8401] ? __virt_addr_valid+0x188/0x540 [ 428.232362][ T8401] ? __virt_addr_valid+0x465/0x540 [ 428.237544][ T8401] ? rose_transmit_link+0x5b6/0x730 [ 428.242883][ T8401] print_report+0xa8/0x210 [ 428.247352][ T8401] kasan_report+0x10b/0x140 [ 428.251897][ T8401] ? rose_transmit_link+0x5b6/0x730 [ 428.257172][ T8401] rose_transmit_link+0x5b6/0x730 [ 428.262215][ T8401] ? skb_put+0x117/0x210 [ 428.266477][ T8401] rose_write_internal+0x1096/0x1eb0 [ 428.271779][ T8401] ? debug_object_assert_init+0x1ed/0x2f0 [ 428.277596][ T8401] ? rose_validate_nr+0x120/0x120 [ 428.282641][ T8401] ? skb_queue_purge+0x64/0x1b0 [ 428.287505][ T8401] rose_release+0x22a/0x4f0 [ 428.292028][ T8401] sock_close+0xd5/0x240 [ 428.296314][ T8401] ? sock_mmap+0x90/0x90 [ 428.300559][ T8401] __fput+0x22c/0x920 [ 428.304651][ T8401] task_work_run+0x1ca/0x250 [ 428.309246][ T8401] ? task_work_cancel+0x230/0x230 [ 428.314281][ T8401] get_signal+0x11a6/0x1350 [ 428.318803][ T8401] arch_do_signal_or_restart+0xb0/0x1230 [ 428.324445][ T8401] ? __ia32_sys_pidfd_getfd+0x80/0x80 [ 428.329914][ T8401] ? wake_bit_function+0x200/0x200 [ 428.335035][ T8401] ? __might_fault+0xa6/0x120 [ 428.339721][ T8401] ? get_sigframe_size+0x10/0x10 [ 428.344676][ T8401] ? __sys_connect+0x239/0x410 [ 428.349460][ T8401] ? exit_to_user_mode_loop+0x3b/0x110 [ 428.355013][ T8401] exit_to_user_mode_loop+0x70/0x110 [ 428.360397][ T8401] exit_to_user_mode_prepare+0xb1/0x140 [ 428.365955][ T8401] syscall_exit_to_user_mode+0x16/0x40 [ 428.371437][ T8401] do_syscall_64+0x58/0xa0 [ 428.375869][ T8401] ? clear_bhb_loop+0x60/0xb0 [ 428.380552][ T8401] ? clear_bhb_loop+0x60/0xb0 [ 428.385232][ T8401] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.391232][ T8401] RIP: 0033:0x7f4b9218ebe9 [ 428.395663][ T8401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.415388][ T8401] RSP: 002b:00007f4b93091038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 428.423947][ T8401] RAX: fffffffffffffe00 RBX: 00007f4b923c6090 RCX: 00007f4b9218ebe9 [ 428.431950][ T8401] RDX: 000000000000001c RSI: 0000200000000100 RDI: 000000000000000e [ 428.439941][ T8401] RBP: 00007f4b92211e19 R08: 0000000000000000 R09: 0000000000000000 [ 428.447926][ T8401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.455908][ T8401] R13: 00007f4b923c6128 R14: 00007f4b923c6090 R15: 00007ffc7f395008 [ 428.463921][ T8401] [ 428.466953][ T8401] [ 428.469284][ T8401] Allocated by task 5072: [ 428.473616][ T8401] kasan_set_track+0x4b/0x70 [ 428.478222][ T8401] __kasan_kmalloc+0x8e/0xa0 [ 428.482843][ T8401] rose_add_node+0x227/0xdb0 [ 428.487492][ T8401] rose_rt_ioctl+0xa4c/0xe90 [ 428.492118][ T8401] rose_ioctl+0x27a/0x790 [ 428.496463][ T8401] sock_do_ioctl+0xd3/0x2f0 [ 428.500986][ T8401] sock_ioctl+0x4ed/0x6e0 [ 428.505323][ T8401] __se_sys_ioctl+0xfa/0x170 [ 428.509957][ T8401] do_syscall_64+0x4c/0xa0 [ 428.514374][ T8401] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.520283][ T8401] [ 428.522605][ T8401] Freed by task 8400: [ 428.526593][ T8401] kasan_set_track+0x4b/0x70 [ 428.531277][ T8401] kasan_save_free_info+0x2d/0x50 [ 428.536332][ T8401] ____kasan_slab_free+0x126/0x1e0 [ 428.541469][ T8401] slab_free_freelist_hook+0x131/0x1a0 [ 428.546953][ T8401] __kmem_cache_free+0xb6/0x1f0 [ 428.551924][ T8401] rose_rt_device_down+0x4e2/0x530 [ 428.557049][ T8401] rose_device_event+0x600/0x690 [ 428.562124][ T8401] raw_notifier_call_chain+0xcb/0x160 [ 428.567499][ T8401] __dev_notify_flags+0x178/0x2d0 [ 428.572699][ T8401] dev_change_flags+0xe3/0x1a0 [ 428.577494][ T8401] dev_ifsioc+0x159/0xe90 [ 428.581827][ T8401] dev_ioctl+0x578/0xea0 [ 428.586106][ T8401] sock_do_ioctl+0x222/0x2f0 [ 428.590715][ T8401] sock_ioctl+0x4ed/0x6e0 [ 428.595058][ T8401] __se_sys_ioctl+0xfa/0x170 [ 428.599658][ T8401] do_syscall_64+0x4c/0xa0 [ 428.604075][ T8401] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.609971][ T8401] [ 428.612300][ T8401] Last potentially related work creation: [ 428.618269][ T8401] kasan_save_stack+0x3a/0x60 [ 428.622955][ T8401] __kasan_record_aux_stack+0xb2/0xc0 [ 428.628356][ T8401] call_rcu+0x154/0x980 [ 428.632517][ T8401] ip6_route_add+0xe0/0x130 [ 428.637028][ T8401] add_v4_addrs+0x8a6/0xc00 [ 428.641532][ T8401] addrconf_init_auto_addrs+0x733/0xa60 [ 428.647120][ T8401] addrconf_notify+0xaca/0xf40 [ 428.651911][ T8401] raw_notifier_call_chain+0xcb/0x160 [ 428.657292][ T8401] __dev_notify_flags+0x178/0x2d0 [ 428.662321][ T8401] dev_change_flags+0xe3/0x1a0 [ 428.667095][ T8401] do_setlink+0xc31/0x3c40 [ 428.671547][ T8401] rtnl_newlink+0x17d6/0x1ff0 [ 428.676229][ T8401] rtnetlink_rcv_msg+0x79b/0xed0 [ 428.681308][ T8401] netlink_rcv_skb+0x1de/0x420 [ 428.686106][ T8401] netlink_unicast+0x74d/0x8d0 [ 428.690963][ T8401] netlink_sendmsg+0x89e/0xbc0 [ 428.695742][ T8401] __sys_sendto+0x44f/0x5c0 [ 428.700251][ T8401] __x64_sys_sendto+0xda/0xf0 [ 428.704933][ T8401] do_syscall_64+0x4c/0xa0 [ 428.709357][ T8401] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.715258][ T8401] [ 428.717666][ T8401] The buggy address belongs to the object at ffff888078e71c00 [ 428.717666][ T8401] which belongs to the cache kmalloc-512 of size 512 [ 428.731951][ T8401] The buggy address is located 50 bytes inside of [ 428.731951][ T8401] 512-byte region [ffff888078e71c00, ffff888078e71e00) [ 428.735658][ T4756] pwc: recv_control_msg error -71 req 04 val 1100 [ 428.745241][ T8401] [ 428.745253][ T8401] The buggy address belongs to the physical page: [ 428.745268][ T8401] page:ffffea0001e39c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78e70 [ 428.745289][ T8401] head:ffffea0001e39c00 order:2 compound_mapcount:0 compound_pincount:0 [ 428.745300][ T8401] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 428.745336][ T8401] raw: 00fff00000010200 ffffea0001581600 dead000000000002 ffff888017441c80 [ 428.752508][ T4756] pwc: recv_control_msg error -71 req 04 val 1200 [ 428.754046][ T8401] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 428.810546][ T8401] page dumped because: kasan: bad access detected [ 428.816988][ T8401] page_owner tracks the page as allocated [ 428.822750][ T8401] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3640, tgid 3640 (udevadm), ts 20764415131, free_ts 17194818419 [ 428.843850][ T8401] post_alloc_hook+0x173/0x1a0 [ 428.848813][ T8401] get_page_from_freelist+0x1a26/0x1ac0 [ 428.854394][ T8401] __alloc_pages+0x1df/0x4e0 [ 428.858986][ T8401] alloc_slab_page+0x5d/0x160 [ 428.863684][ T8401] new_slab+0x87/0x2c0 [ 428.868071][ T8401] ___slab_alloc+0xbc6/0x1220 [ 428.873021][ T8401] __kmem_cache_alloc_node+0x1a0/0x260 [ 428.878488][ T8401] kmalloc_trace+0x26/0xe0 [ 428.882918][ T8401] kernfs_fop_open+0x3f1/0xcc0 [ 428.887702][ T8401] do_dentry_open+0x7e9/0x10d0 [ 428.892513][ T8401] path_openat+0x25c6/0x2e70 [ 428.897112][ T8401] do_filp_open+0x1c1/0x3c0 [ 428.901703][ T8401] do_sys_openat2+0x142/0x490 [ 428.906644][ T8401] __x64_sys_openat+0x135/0x160 [ 428.911525][ T8401] do_syscall_64+0x4c/0xa0 [ 428.915932][ T8401] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.921970][ T8401] page last free stack trace: [ 428.926633][ T8401] free_unref_page_prepare+0x8b4/0x9a0 [ 428.932129][ T8401] free_unref_page+0x2e/0x3f0 [ 428.936810][ T8401] free_contig_range+0x9d/0x150 [ 428.941652][ T8401] destroy_args+0x100/0xa31 [ 428.946168][ T8401] debug_vm_pgtable+0x32a/0x37e [ 428.951015][ T8401] do_one_initcall+0x214/0x7a0 [ 428.955797][ T8401] do_initcall_level+0x137/0x1e4 [ 428.960759][ T8401] do_initcalls+0x4b/0x8a [ 428.965099][ T8401] kernel_init_freeable+0x3fa/0x5ac [ 428.970313][ T8401] kernel_init+0x19/0x1b0 [ 428.974644][ T8401] ret_from_fork+0x1f/0x30 [ 428.979062][ T8401] [ 428.981403][ T8401] Memory state around the buggy address: [ 428.987018][ T8401] ffff888078e71b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 428.995081][ T8401] ffff888078e71b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 429.003146][ T8401] >ffff888078e71c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 429.011200][ T8401] ^ [ 429.016849][ T8401] ffff888078e71c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 429.024941][ T8401] ffff888078e71d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 429.032989][ T8401] ================================================================== [ 429.069491][ T5022] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 429.078564][ T5022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.097907][ T4756] pwc: Registered as video103. [ 429.112754][ T4756] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input45 [ 429.119935][ T5022] usb 5-1: Product: syz [ 429.145745][ T5022] usb 5-1: Manufacturer: syz [ 429.152508][ T5022] usb 5-1: SerialNumber: syz [ 429.159900][ T5022] usb 5-1: config 0 descriptor?? [ 429.173203][ T8401] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 429.180464][ T8401] CPU: 0 PID: 8401 Comm: syz.1.1163 Not tainted syzkaller #0 [ 429.187936][ T8401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 429.198431][ T8401] Call Trace: [ 429.201715][ T8401] [ 429.204669][ T8401] dump_stack_lvl+0x168/0x22e [ 429.209346][ T8401] ? memcpy+0x3c/0x60 [ 429.213421][ T8401] ? show_regs_print_info+0x12/0x12 [ 429.218634][ T8401] ? load_image+0x3b0/0x3b0 [ 429.223164][ T8401] panic+0x2c9/0x710 [ 429.227109][ T8401] ? bpf_jit_dump+0xd0/0xd0 [ 429.231744][ T8401] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 429.237734][ T8401] ? _raw_spin_unlock+0x40/0x40 [ 429.242592][ T8401] check_panic_on_warn+0x80/0xa0 [ 429.247530][ T8401] ? rose_transmit_link+0x5b6/0x730 [ 429.252753][ T8401] end_report+0x66/0x110 [ 429.256994][ T8401] kasan_report+0x118/0x140 [ 429.261504][ T8401] ? rose_transmit_link+0x5b6/0x730 [ 429.266726][ T8401] rose_transmit_link+0x5b6/0x730 [ 429.271760][ T8401] ? skb_put+0x117/0x210 [ 429.276043][ T8401] rose_write_internal+0x1096/0x1eb0 [ 429.281340][ T8401] ? debug_object_assert_init+0x1ed/0x2f0 [ 429.287081][ T8401] ? rose_validate_nr+0x120/0x120 [ 429.292111][ T8401] ? skb_queue_purge+0x64/0x1b0 [ 429.296975][ T8401] rose_release+0x22a/0x4f0 [ 429.301505][ T8401] sock_close+0xd5/0x240 [ 429.305759][ T8401] ? sock_mmap+0x90/0x90 [ 429.310020][ T8401] __fput+0x22c/0x920 [ 429.314000][ T8401] task_work_run+0x1ca/0x250 [ 429.318589][ T8401] ? task_work_cancel+0x230/0x230 [ 429.323613][ T8401] get_signal+0x11a6/0x1350 [ 429.328134][ T8401] arch_do_signal_or_restart+0xb0/0x1230 [ 429.333784][ T8401] ? __ia32_sys_pidfd_getfd+0x80/0x80 [ 429.339146][ T8401] ? wake_bit_function+0x200/0x200 [ 429.344246][ T8401] ? __might_fault+0xa6/0x120 [ 429.348969][ T8401] ? get_sigframe_size+0x10/0x10 [ 429.353905][ T8401] ? __sys_connect+0x239/0x410 [ 429.358663][ T8401] ? exit_to_user_mode_loop+0x3b/0x110 [ 429.364215][ T8401] exit_to_user_mode_loop+0x70/0x110 [ 429.369580][ T8401] exit_to_user_mode_prepare+0xb1/0x140 [ 429.375153][ T8401] syscall_exit_to_user_mode+0x16/0x40 [ 429.380609][ T8401] do_syscall_64+0x58/0xa0 [ 429.385013][ T8401] ? clear_bhb_loop+0x60/0xb0 [ 429.389794][ T8401] ? clear_bhb_loop+0x60/0xb0 [ 429.394691][ T8401] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.400613][ T8401] RIP: 0033:0x7f4b9218ebe9 [ 429.405223][ T8401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.425008][ T8401] RSP: 002b:00007f4b93091038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 429.433441][ T8401] RAX: fffffffffffffe00 RBX: 00007f4b923c6090 RCX: 00007f4b9218ebe9 [ 429.441418][ T8401] RDX: 000000000000001c RSI: 0000200000000100 RDI: 000000000000000e [ 429.449489][ T8401] RBP: 00007f4b92211e19 R08: 0000000000000000 R09: 0000000000000000 [ 429.457452][ T8401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.465444][ T8401] R13: 00007f4b923c6128 R14: 00007f4b923c6090 R15: 00007ffc7f395008 [ 429.473422][ T8401] [ 429.476700][ T8401] Kernel Offset: disabled [ 429.481221][ T8401] Rebooting in 86400 seconds..