last executing test programs: 1m1.030795756s ago: executing program 2 (id=1652): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000001440)=0x9) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 58.700841016s ago: executing program 2 (id=1676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000b80)={@val={0x1c, 0x800}, @val={0x1, 0x3, 0x0, 0x14, 0x14}, @mpls={[], @ipv4=@generic={{0x5, 0x4, 0x1, 0x9, 0xfc0, 0x67, 0x0, 0x5, 0x29, 0x0, @empty, @broadcast}, "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"}}}, 0xfce) 58.451797384s ago: executing program 2 (id=1679): r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 58.21985247s ago: executing program 2 (id=1683): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 57.07941517s ago: executing program 2 (id=1691): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000300)={0x28, r0, 0x1, 0x70bd2e, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x818}, 0xc010) 56.86293581s ago: executing program 2 (id=1693): futex(0x0, 0x9, 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8faa"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) 55.978176127s ago: executing program 32 (id=1693): futex(0x0, 0x9, 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8faa"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) 49.368822831s ago: executing program 4 (id=1727): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={r2}, &(0x7f00000000c0)=0x8) 48.406131367s ago: executing program 4 (id=1729): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mremap(&(0x7f0000340000/0x4000)=nil, 0x4017, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil) 48.09747043s ago: executing program 4 (id=1730): syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x601) r0 = syz_io_uring_setup(0x111, &(0x7f00000001c0)={0x0, 0x15885, 0x0, 0x2000000}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 47.949718625s ago: executing program 4 (id=1731): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 46.960786609s ago: executing program 4 (id=1737): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040341a020800000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "d32052f2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc040480c, 0x0) 46.420345425s ago: executing program 4 (id=1740): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000700)={0xfffffeff, 0x101, 0x4, 0x5, 0x11, "b3970910b877888305c1ec5ba52b4a7cbd0634"}) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 45.941503165s ago: executing program 33 (id=1740): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000700)={0xfffffeff, 0x101, 0x4, 0x5, 0x11, "b3970910b877888305c1ec5ba52b4a7cbd0634"}) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 4.441042251s ago: executing program 1 (id=2023): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000a40)=""/65, 0x41}], 0x1, 0x400006, 0x3) 4.265455647s ago: executing program 1 (id=2024): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4300, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) 3.641558305s ago: executing program 1 (id=2028): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000280)=""/239, 0xef) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 3.161995483s ago: executing program 0 (id=2032): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x8, 0x40000) fallocate(0xffffffffffffffff, 0x50, 0x91, 0x1) 2.507239853s ago: executing program 6 (id=2038): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000000c0)="954584", 0x3, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x20}, 0x80000000}, 0x1c) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0xa0000010}) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r0, 0x1) 2.211179129s ago: executing program 6 (id=2039): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 2.011421861s ago: executing program 6 (id=2040): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = dup(r0) r2 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x1163, 0xfffffffe, 0x28, 0x0, 0x0) 1.651120698s ago: executing program 5 (id=2041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002e40)=@delchain={0x24, 0x64, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x2, 0xfff3}, {}, {0xb, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.526210702s ago: executing program 6 (id=2042): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x437, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendto$packet(r0, &(0x7f00000001c0)="123c7b3c64a6dd538dcde06645bf1c1dc4044cbbba82b02d2331dd426edff5aec2fb22", 0x23, 0x20048015, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0xf0, 0x6, @broadcast}, 0x14) 1.322673693s ago: executing program 0 (id=2043): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003ac0)=""/4096, 0x1000}, 0x4}], 0x1, 0x400005aa, 0x0) 1.322323266s ago: executing program 3 (id=2044): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4300, 0x2}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='.\x02\x00', 0x4) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1.275659241s ago: executing program 6 (id=2045): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc"], 0x6c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000100004000000000000000000000000000001400"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.176783182s ago: executing program 5 (id=2046): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) 1.150368248s ago: executing program 3 (id=2047): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x3) fchdir(r1) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000080)='./file0\x00', 0x0) 1.149303252s ago: executing program 0 (id=2048): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a) shutdown(r0, 0x1) listen(r0, 0x20) poll(&(0x7f0000000040)=[{r0, 0x8150}], 0x1, 0x11ff) shutdown(r0, 0x0) 1.012545862s ago: executing program 1 (id=2049): openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) syz_io_uring_setup(0x6f13, &(0x7f0000000280)={0x0, 0x6636, 0x10100, 0x2, 0x38b}, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 975.04317ms ago: executing program 3 (id=2050): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0}, 0x101) 941.161575ms ago: executing program 6 (id=2051): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 918.075403ms ago: executing program 5 (id=2052): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x200, 0x4) recvmmsg(r0, &(0x7f0000005380)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10001, 0x0) 888.501946ms ago: executing program 0 (id=2053): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create(0x8) r2 = dup(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000180)) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x80) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000003c0)=0x10000) 709.632686ms ago: executing program 3 (id=2054): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/200, 0xc8}], 0x1, 0x400001a, 0x3) 706.238007ms ago: executing program 1 (id=2055): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 626.691014ms ago: executing program 5 (id=2056): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) 388.296671ms ago: executing program 5 (id=2057): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}], 0x1, 0x8000) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x2}, 0x8d0) 368.374889ms ago: executing program 3 (id=2058): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x1e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001400)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42) read(r0, &(0x7f0000001480)=""/4096, 0x1000) 298.514374ms ago: executing program 0 (id=2059): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="97fee259", 0x4}], 0x1, 0x0, 0x0, 0xc5}}], 0x1, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r1, &(0x7f0000000500)=ANY=[], 0x78) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 269.560567ms ago: executing program 1 (id=2060): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, 'L\x00ZtC\x00', "3eda254a1c07cb407b4000", "19469d6b", "5350b7add205a3ec"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "a712b50de47793ce", "95cee24995ee7b46c5910c328b33e518", "0cb95762", "77bd008c9a334a77"}, 0x28) 123.501773ms ago: executing program 3 (id=2061): syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}]}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 77.150649ms ago: executing program 5 (id=2062): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000030100000000000000000000000000000000000000760f00000000000000000000000000000000000007"]) 0s ago: executing program 0 (id=2063): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000001}, 0x4801) recvmmsg(r1, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/48, 0x30}], 0x1}, 0x18}], 0x1, 0x101, 0x0) kernel console output (not intermixed with test programs): tting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 250.037687][ T5999] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 250.057660][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 250.074937][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 250.094874][ T5999] usb 5-1: Product: syz [ 250.111231][ T5999] usb 5-1: Manufacturer: syz [ 250.125827][ T5999] usb 5-1: SerialNumber: syz [ 250.143632][ T5999] usb 5-1: config 0 descriptor?? [ 250.165234][ T9247] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 250.174352][ T5999] hub 5-1:0.0: bad descriptor, ignoring hub [ 250.184899][ T5999] hub 5-1:0.0: probe with driver hub failed with error -5 [ 250.185469][ T5921] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 250.261074][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.283705][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 250.302413][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 250.334186][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.354991][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.385951][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.394821][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 250.403731][ T24] usb 3-1: config 0 descriptor?? [ 250.419482][ T5921] usb 4-1: config 0 has no interfaces? [ 250.437548][ T5921] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 250.465017][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.483433][ T5921] usb 4-1: Product: syz [ 250.493560][ T5921] usb 4-1: Manufacturer: syz [ 250.513825][ T5921] usb 4-1: SerialNumber: syz [ 250.523099][ T5921] usb 4-1: config 0 descriptor?? [ 250.879732][ T24] plantronics 0003:047F:FFFF.0021: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 250.947625][ T24] usb 4-1: USB disconnect, device number 27 [ 251.069278][ T9285] mmap: syz.1.1339 (9285) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 251.086216][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1338'. [ 251.116966][ T5963] usb 3-1: USB disconnect, device number 24 [ 251.213609][ T9247] usb 5-1: reset high-speed USB device number 25 using dummy_hcd [ 251.374529][ T9247] usb 5-1: device firmware changed [ 251.380735][ T5999] usb 5-1: USB disconnect, device number 25 [ 251.554788][ T5999] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 251.669546][ T9292] capability: warning: `syz.0.1341' uses 32-bit capabilities (legacy support in use) [ 251.725677][ T5999] usb 5-1: Using ep0 maxpacket: 32 [ 251.743864][ T5999] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 251.772397][ T5999] usb 5-1: string descriptor 0 read error: -22 [ 251.785146][ T5999] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 251.804787][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 251.827432][ T5999] usb 5-1: config 0 descriptor?? [ 251.833506][ T9277] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 251.874407][ T5999] hub 5-1:0.0: bad descriptor, ignoring hub [ 251.891989][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 251.908361][ T5999] hub 5-1:0.0: probe with driver hub failed with error -5 [ 252.082179][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.112323][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 252.140550][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.155102][ T1211] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 252.166770][ T9307] loop9: detected capacity change from 0 to 7 [ 252.175818][ T9307] Dev loop9: unable to read RDB block 7 [ 252.181673][ T9307] loop9: unable to read partition table [ 252.190473][ T24] usb 4-1: config 0 descriptor?? [ 252.204077][ T9307] loop9: partition table beyond EOD, truncated [ 252.214960][ T9307] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 252.245016][ T5921] usb 5-1: USB disconnect, device number 26 [ 252.286270][ T5999] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 252.324869][ T1211] usb 2-1: Using ep0 maxpacket: 32 [ 252.339771][ T1211] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 252.369296][ T1211] usb 2-1: config 0 has no interface number 0 [ 252.379816][ T1211] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 252.389907][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.398535][ T1211] usb 2-1: Product: syz [ 252.423615][ T1211] usb 2-1: Manufacturer: syz [ 252.430814][ T1211] usb 2-1: SerialNumber: syz [ 252.445615][ T1211] usb 2-1: config 0 descriptor?? [ 252.457799][ T1211] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 252.474985][ T5999] usb 1-1: Using ep0 maxpacket: 8 [ 252.619850][ T5999] usb 1-1: unable to get BOS descriptor or descriptor too short [ 252.658567][ T5999] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 252.668800][ T24] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 252.684029][ T5999] usb 1-1: can't read configurations, error -71 [ 252.709566][ T1211] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 252.711316][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0022/input/input50 [ 252.822690][ T1211] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 252.842640][ T9290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.866312][ T9290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.975273][ T24] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 253.216395][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 253.217027][ T24] usb 2-1: USB disconnect, device number 25 [ 253.327148][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 253.382418][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 253.437294][ T24] quatech2 2-1:0.51: device disconnected [ 253.462761][ T9320] input: syz1 as /devices/virtual/input/input51 [ 253.538376][ T5921] usb 4-1: USB disconnect, device number 28 [ 254.102155][ T9336] input: syz1 as /devices/virtual/input/input52 [ 255.581977][ T30] audit: type=1326 audit(1754853412.691:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.2.1367" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7fc00000 [ 255.859397][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.865913][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.497044][ T9416] syzkaller1: entered promiscuous mode [ 257.500350][ T9418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1397'. [ 257.502599][ T9416] syzkaller1: entered allmulticast mode [ 257.614892][ T1211] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 257.784945][ T1211] usb 2-1: Using ep0 maxpacket: 8 [ 257.803586][ T1211] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 257.816741][ T1211] usb 2-1: config 179 has no interface number 0 [ 257.823178][ T1211] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 257.864759][ T1211] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 257.900857][ T1211] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 257.939258][ T1211] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 257.975960][ T1211] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 258.018688][ T1211] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 258.045499][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.079810][ T9414] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 258.252820][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 258.373632][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input53 [ 258.424825][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 258.444963][ T1211] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 258.450121][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 258.501963][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.528984][ T24] usb 4-1: Product: syz [ 258.548253][ T24] usb 4-1: Manufacturer: syz [ 258.563157][ T24] usb 4-1: SerialNumber: syz [ 258.612780][ T1211] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 258.616292][ T24] usb 4-1: config 0 descriptor?? [ 258.663121][ T1211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.675498][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 258.691077][ T1211] usb 1-1: Product: syz [ 258.695661][ T1211] usb 1-1: Manufacturer: syz [ 258.701043][ T1211] usb 1-1: SerialNumber: syz [ 258.715727][ T1211] usb 1-1: config 0 descriptor?? [ 258.729248][ T1211] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 258.847931][ T5953] usb 2-1: USB disconnect, device number 26 [ 258.848217][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 258.864799][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 259.626687][ T30] audit: type=1326 audit(1754853416.741:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.4.1418" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 259.654590][ T30] audit: type=1326 audit(1754853416.771:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.4.1418" exe="/root/syz-executor" sig=0 arch=40000003 syscall=52 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 259.744292][ T30] audit: type=1326 audit(1754853416.801:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.4.1418" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 259.759701][ T1211] usb 1-1: USB disconnect, device number 26 [ 259.811211][ T30] audit: type=1326 audit(1754853416.811:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.4.1418" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 259.842853][ T5953] usb 4-1: USB disconnect, device number 29 [ 260.874956][ T5953] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 261.043077][ T9495] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1429'. [ 261.057318][ T5953] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.075283][ T5953] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.135491][ T5953] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 261.182641][ T5953] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.225361][ T5953] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.246819][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.288520][ T5953] usb 1-1: Product: syz [ 261.292879][ T5953] usb 1-1: Manufacturer: syz [ 261.320795][ T5953] usb 1-1: SerialNumber: syz [ 261.351843][ T5953] cdc_mbim 1-1:1.0: skipping garbage [ 261.556251][ T9489] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 262.188973][ T9489] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 262.421716][ T5953] cdc_mbim 1-1:1.0: bind() failure [ 262.481044][ T5953] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 262.506436][ T5953] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 262.535190][ T5953] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 262.570178][ T5953] usb 1-1: USB disconnect, device number 27 [ 262.773812][ T30] audit: type=1326 audit(1754853419.881:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 262.808376][ T1211] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 262.869030][ T30] audit: type=1326 audit(1754853419.881:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 262.939486][ T30] audit: type=1326 audit(1754853419.881:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 262.963198][ T30] audit: type=1326 audit(1754853419.881:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 262.999069][ T30] audit: type=1326 audit(1754853419.881:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 263.025043][ T1211] usb 5-1: Using ep0 maxpacket: 16 [ 263.035436][ T1211] usb 5-1: config 0 has no interfaces? [ 263.035448][ T30] audit: type=1326 audit(1754853419.881:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 263.048087][ T1211] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 263.135075][ T1211] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 263.144449][ T30] audit: type=1326 audit(1754853419.921:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 263.194595][ T1211] usb 5-1: Manufacturer: syz [ 263.240979][ T1211] usb 5-1: config 0 descriptor?? [ 263.250148][ T30] audit: type=1326 audit(1754853419.921:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 263.275066][ T30] audit: type=1326 audit(1754853419.921:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 263.323568][ T30] audit: type=1326 audit(1754853419.921:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 263.426899][ T9556] loop8: detected capacity change from 0 to 7 [ 263.468511][ T9556] Dev loop8: unable to read RDB block 7 [ 263.497300][ T9556] loop8: unable to read partition table [ 263.503263][ T9556] loop8: partition table beyond EOD, truncated [ 263.575593][ T9556] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 263.646971][ T5983] Dev loop8: unable to read RDB block 7 [ 263.658143][ T5983] loop8: unable to read partition table [ 263.694362][ T5983] loop8: partition table beyond EOD, truncated [ 263.708541][ T9562] Dev loop8: unable to read RDB block 7 [ 263.714459][ T9562] loop8: unable to read partition table [ 263.730217][ T9538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1447'. [ 263.745189][ T9562] loop8: partition table beyond EOD, truncated [ 263.752769][ T9562] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 263.778724][ T9] usb 5-1: USB disconnect, device number 27 [ 263.904981][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 264.091750][ T10] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 264.126302][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.147564][ T10] usb 4-1: config 0 descriptor?? [ 264.808621][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 264.966046][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 264.973930][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.994821][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 265.028892][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 265.079065][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.101635][ T9] usb 3-1: config 0 descriptor?? [ 265.229013][ T10] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 265.249977][ T10] usb 4-1: USB disconnect, device number 30 [ 265.597670][ T9] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 265.611606][ T9] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 265.625066][ T9] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 265.645928][ T9] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 265.654515][ T9] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 265.662808][ T9] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 265.680654][ T9] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 265.704889][ T9] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 265.717808][ T9] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 265.744512][ T9] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 265.777704][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 265.784014][ T9] HID 045e:07da: Invalid code 768 type 1 [ 265.823721][ T9] HID 045e:07da: Invalid code 769 type 1 [ 265.853912][ T9] HID 045e:07da: Invalid code 770 type 1 [ 265.866137][ T9] HID 045e:07da: Invalid code 771 type 1 [ 265.873596][ T9] HID 045e:07da: Invalid code 772 type 1 [ 265.894489][ T9] HID 045e:07da: Invalid code 773 type 1 [ 265.902708][ T9] HID 045e:07da: Invalid code 774 type 1 [ 265.921811][ T9] HID 045e:07da: Invalid code 775 type 1 [ 265.932488][ T9] HID 045e:07da: Invalid code 776 type 1 [ 266.015983][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0023/input/input55 [ 266.143341][ T9] microsoft 0003:045E:07DA.0023: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 266.635379][ T24] usb 3-1: USB disconnect, device number 25 [ 266.764850][ T5953] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 266.894451][ T9635] sit0: entered promiscuous mode [ 266.915931][ T9635] netlink: 'syz.0.1487': attribute type 1 has an invalid length. [ 266.924377][ T9635] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1487'. [ 266.945170][ T5953] usb 2-1: Using ep0 maxpacket: 8 [ 266.963150][ T5953] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 267.005047][ T5953] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 267.038630][ T5953] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 267.079170][ T5953] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 267.134902][ T5953] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.173083][ T5953] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 267.186760][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.414517][ T5953] usb 2-1: usb_control_msg returned -32 [ 267.432062][ T5953] usbtmc 2-1:16.0: can't read capabilities [ 267.674363][ T9661] cgroup: fork rejected by pids controller in /syz0 [ 267.775141][ T5953] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 267.960917][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 267.971938][ T5953] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 267.984932][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 267.985578][ T5953] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.006919][ T5953] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.019161][ T5953] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.033123][ T5953] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.047166][ T5953] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 268.057874][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.145544][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 268.154303][ T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 268.171972][ T10] usb 4-1: config 0 has no interface number 0 [ 268.185585][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.212423][ T10] usb 4-1: config 0 interface 85 has no altsetting 0 [ 268.227705][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 268.249570][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.253177][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.264766][ T10] usb 4-1: Product: syz [ 268.272688][ T10] usb 4-1: Manufacturer: syz [ 268.279306][ T10] usb 4-1: SerialNumber: syz [ 268.290189][ T5953] usb 5-1: GET_CAPABILITIES returned 0 [ 268.291381][ T10] usb 4-1: config 0 descriptor?? [ 268.310893][ T5953] usbtmc 5-1:16.0: can't read capabilities [ 268.433509][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.501683][ T5953] usb 5-1: USB disconnect, device number 28 [ 268.719132][ T9657] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90 [ 268.929519][ T10] appletouch 4-1:0.85: Geyser mode initialized. [ 268.956597][ T10] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input56 [ 269.145552][ T10] usb 4-1: USB disconnect, device number 31 [ 269.145570][ C1] appletouch 4-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 269.216269][ T10] appletouch 4-1:0.85: input: appletouch disconnected [ 269.396295][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.423301][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.439504][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.456106][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.473519][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.533290][ T10] usb 2-1: USB disconnect, device number 27 [ 269.597908][ T1211] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 269.632592][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1509'. [ 269.643791][ T9685] openvswitch: netlink: nsh attr 0 has unexpected len 152 expected 0 [ 269.652918][ T9685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.815826][ T1211] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 269.831236][ T1211] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 269.844152][ T1211] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 269.859591][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.893732][ T9681] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 269.928610][ T1211] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 270.244914][ T5953] usb 5-1: USB disconnect, device number 29 [ 271.603369][ T5868] Bluetooth: hci0: command tx timeout [ 272.754978][ T5963] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 272.844003][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.904298][ T9698] kthread_run failed with err -4 [ 272.927376][ T5963] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.968278][ T5963] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.993800][ T5963] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 273.013377][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 273.028371][ T5963] usb 5-1: SerialNumber: syz [ 273.057016][ T5963] cdc_acm 5-1:1.0: skipping garbage [ 273.068637][ T5963] cdc_acm 5-1:1.0: skipping garbage [ 273.093080][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.094801][ T5963] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 273.123221][ T5963] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 273.134867][ T5963] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 273.470947][ T5953] usb 5-1: USB disconnect, device number 30 [ 273.569331][ T36] bridge_slave_1: left allmulticast mode [ 273.577196][ T36] bridge_slave_1: left promiscuous mode [ 273.583117][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.599517][ T36] bridge_slave_0: left allmulticast mode [ 273.606817][ T36] bridge_slave_0: left promiscuous mode [ 273.612857][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.684877][ T5868] Bluetooth: hci0: command tx timeout [ 275.122232][ T10] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 275.338780][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.486864][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.502369][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 275.512517][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.543116][ T36] bond0 (unregistering): Released all slaves [ 275.547426][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 275.633383][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.774992][ T5868] Bluetooth: hci0: command tx timeout [ 275.869048][ T10] usb 5-1: usb_control_msg returned -32 [ 275.876126][ T10] usbtmc 5-1:16.0: can't read capabilities [ 276.058094][ T9752] syzkaller1: entered promiscuous mode [ 276.071166][ T9752] syzkaller1: entered allmulticast mode [ 276.265968][ T9759] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 276.287981][ T5953] usb 5-1: USB disconnect, device number 31 [ 276.344607][ T9683] chnl_net:caif_netlink_parms(): no params data found [ 276.487107][ T36] hsr_slave_0: left promiscuous mode [ 276.504787][ T36] hsr_slave_1: left promiscuous mode [ 276.516202][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.542538][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.580262][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.600499][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.673233][ T36] veth1_macvtap: left promiscuous mode [ 276.686248][ T36] veth0_macvtap: left promiscuous mode [ 276.703827][ T36] veth1_vlan: left promiscuous mode [ 276.715338][ T36] veth0_vlan: left promiscuous mode [ 276.897601][ T9694] Set syz1 is full, maxelem 65536 reached [ 277.845232][ T5868] Bluetooth: hci0: command tx timeout [ 278.011492][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1548'. [ 278.269827][ T36] team0 (unregistering): Port device team_slave_1 removed [ 278.352380][ T36] team0 (unregistering): Port device team_slave_0 removed [ 279.156479][ T9821] batadv_slave_1: entered promiscuous mode [ 279.196792][ T9821] batadv_slave_1: left promiscuous mode [ 279.392001][ T9683] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.422755][ T9683] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.444981][ T9683] bridge_slave_0: entered allmulticast mode [ 279.453270][ T9683] bridge_slave_0: entered promiscuous mode [ 279.499412][ T9683] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.555227][ T9683] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.573528][ T9683] bridge_slave_1: entered allmulticast mode [ 279.611638][ T9683] bridge_slave_1: entered promiscuous mode [ 279.808256][ T9683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.860096][ T9683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.875578][ T10] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 279.958442][ T9683] team0: Port device team_slave_0 added [ 279.991067][ T9683] team0: Port device team_slave_1 added [ 280.015680][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 280.053485][ T9853] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1566'. [ 280.062956][ T9853] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1566'. [ 280.066711][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 280.074130][ T9853] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 280.101313][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 280.123972][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 280.150403][ T10] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 280.177416][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.177433][ T9683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.177451][ T9683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.192494][ T10] usb 4-1: Product: syz [ 280.192519][ T10] usb 4-1: Manufacturer: syz [ 280.228267][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 280.242906][ T10] usb 4-1: SerialNumber: syz [ 280.252379][ T9] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 280.265444][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 280.275007][ T9683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.294061][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 280.307206][ T10] usb 4-1: config 0 descriptor?? [ 280.310033][ T9683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.322948][ T9838] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 280.324983][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 280.356294][ T9838] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 280.364169][ T9683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.366189][ T10] usb 4-1: ucan: probing device on interface #0 [ 280.403951][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 280.414456][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.443298][ T9683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.447936][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 280.491389][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.566649][ T9683] hsr_slave_0: entered promiscuous mode [ 280.573555][ T9683] hsr_slave_1: entered promiscuous mode [ 280.582819][ T9683] debugfs: 'hsr0' already exists in 'hsr' [ 280.589634][ T9683] Cannot create hsr debugfs directory [ 280.674791][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 280.729367][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 280.741175][ T9] usbtmc 3-1:16.0: can't read capabilities [ 280.808830][ T10] usb 4-1: ucan: device reported invalid tx-fifo size [ 280.824794][ T10] usb 4-1: ucan: probe failed; try to update the device firmware [ 280.832348][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.858463][ T24] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 280.890944][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.910600][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.934544][ T24] usb 2-1: Product: syz [ 280.948099][ T24] usb 2-1: Manufacturer: syz [ 280.959281][ T24] usb 2-1: SerialNumber: syz [ 281.102580][ T9] usb 3-1: USB disconnect, device number 26 [ 281.232368][ T9859] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 281.369141][ T5999] usb 4-1: USB disconnect, device number 32 [ 281.819749][ T24] cdc_ncm 2-1:1.0: bind() failure [ 281.849450][ T24] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 281.864578][ T24] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 281.888170][ T24] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 281.942929][ T24] usb 2-1: USB disconnect, device number 28 [ 282.493299][ T9683] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 282.515696][ T9683] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 282.572004][ T9683] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 282.675689][ T9683] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 283.101701][ T9683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.184346][ T9683] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.237048][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.244300][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.340998][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.348314][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.523127][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1586'. [ 283.563478][ T9927] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1586'. [ 283.590034][ T9927] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1586'. [ 283.717656][ T9683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.945266][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 284.011257][ T9683] veth0_vlan: entered promiscuous mode [ 284.073902][ T9683] veth1_vlan: entered promiscuous mode [ 284.117693][ T24] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 284.127761][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.152393][ T24] usb 4-1: config 0 descriptor?? [ 284.399106][ T24] kaweth 4-1:0.0: Firmware present in device. [ 284.589116][ T24] kaweth 4-1:0.0: Statistics collection: 0 [ 284.595235][ T24] kaweth 4-1:0.0: Multicast filter limit: 0 [ 284.601263][ T24] kaweth 4-1:0.0: MTU: 0 [ 284.622578][ T24] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 285.199600][ T24] kaweth 4-1:0.0: Error setting receive filter [ 285.210305][ T24] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 285.250641][ T24] usb 4-1: USB disconnect, device number 33 [ 286.024995][ T5999] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 286.068613][ T5953] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 286.155890][ T9] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 286.175985][ T5999] usb 3-1: Using ep0 maxpacket: 32 [ 286.200049][ T5999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.223959][ T5999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.239843][ T5999] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 286.251023][ T5999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.266123][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.281159][ T5953] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 286.304519][ T5999] usb 3-1: config 0 descriptor?? [ 286.318955][ T5953] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 286.326881][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.342322][ T5999] hub 3-1:0.0: USB hub found [ 286.352560][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.367215][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.391576][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 286.394902][ T5953] usb 2-1: config 0 descriptor?? [ 286.416365][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.437981][ T9] usb 4-1: Product: syz [ 286.445715][ T9] usb 4-1: Manufacturer: syz [ 286.457845][ T9] usb 4-1: SerialNumber: syz [ 286.570772][ T5999] hub 3-1:0.0: 2 ports detected [ 286.699134][ T9] usb 4-1: 0:2 : does not exist [ 286.726855][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 286.815131][ T9] usb 4-1: USB disconnect, device number 34 [ 286.932007][ T5953] kovaplus 0003:1E7D:2D50.0024: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 286.972472][ T5983] udevd[5983]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.430064][T10014] input: syz1 as /devices/virtual/input/input58 [ 287.493346][ T5953] kovaplus 0003:1E7D:2D50.0024: couldn't init struct kovaplus_device [ 287.518940][ T5953] kovaplus 0003:1E7D:2D50.0024: couldn't install mouse [ 287.536120][ T5953] kovaplus 0003:1E7D:2D50.0024: probe with driver kovaplus failed with error -71 [ 287.586793][ T5953] usb 2-1: USB disconnect, device number 29 [ 287.607822][ T5999] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 287.643658][ T5999] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 287.696905][ T5999] usbhid 3-1:0.0: can't add hid device: -32 [ 287.703007][ T5999] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 287.786096][ T5999] usb 3-1: USB disconnect, device number 27 [ 288.055292][ T5963] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 288.193968][ T9683] veth0_macvtap: entered promiscuous mode [ 288.238765][ T5963] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.251589][ T5963] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 288.263878][ T9683] veth1_macvtap: entered promiscuous mode [ 288.274815][ T5963] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 288.286894][ T5963] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 288.315631][ T9683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.324602][ T5963] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 288.358211][ T9683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.367125][ T5963] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 288.395799][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.395994][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.420977][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.459433][T10018] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 288.479975][ T5963] hub 4-1:1.0: bad descriptor, ignoring hub [ 288.486389][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.495150][ T5963] hub 4-1:1.0: probe with driver hub failed with error -5 [ 288.495744][ T5963] cdc_wdm 4-1:1.0: skipping garbage [ 288.511982][ T5963] cdc_wdm 4-1:1.0: skipping garbage [ 288.527405][ T5963] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 288.533550][ T5963] cdc_wdm 4-1:1.0: Unknown control protocol [ 288.536141][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.684782][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 288.875201][ T10] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 288.915504][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.918560][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.935526][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.956671][ T10] usb 5-1: Product: syz [ 288.981405][ T10] usb 5-1: Manufacturer: syz [ 288.991148][ T10] usb 5-1: SerialNumber: syz [ 288.992829][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.023195][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.063244][ T30] kauditd_printk_skb: 122 callbacks suppressed [ 289.063265][ T30] audit: type=1326 audit(1754853446.171:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f37558 code=0x7ffc0000 [ 289.064205][ T10] usb 5-1: config 0 descriptor?? [ 289.114439][ T30] audit: type=1326 audit(1754853446.171:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37539 code=0x7ffc0000 [ 289.166172][ T30] audit: type=1326 audit(1754853446.171:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37539 code=0x7ffc0000 [ 289.273523][ T30] audit: type=1326 audit(1754853446.171:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37539 code=0x7ffc0000 [ 289.373443][ T30] audit: type=1326 audit(1754853446.171:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f37558 code=0x7ffc0000 [ 289.428209][T10018] usb 4-1: reset low-speed USB device number 35 using dummy_hcd [ 289.472881][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1608'. [ 289.536203][ T30] audit: type=1326 audit(1754853446.171:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37539 code=0x7ffc0000 [ 289.645255][ T30] audit: type=1326 audit(1754853446.211:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f37558 code=0x7ffc0000 [ 289.672918][ T10] usb 5-1: USB disconnect, device number 32 [ 289.724863][ T5999] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 289.761891][ T30] audit: type=1326 audit(1754853446.211:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37539 code=0x7ffc0000 [ 289.793313][ T30] audit: type=1326 audit(1754853446.211:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f37558 code=0x7ffc0000 [ 289.820308][ T30] audit: type=1326 audit(1754853446.211:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f37558 code=0x7ffc0000 [ 289.843238][T10018] usb 4-1: device firmware changed [ 289.852037][T10018] cdc_wdm 4-1:1.0: Error autopm - -16 [ 289.863055][ T9] usb 4-1: USB disconnect, device number 35 [ 289.895667][ T5999] usb 1-1: Using ep0 maxpacket: 16 [ 289.922060][ T5999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.961924][ T5999] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 289.982355][ T5999] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 289.993244][ T5999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.009854][ T5999] usb 1-1: config 0 descriptor?? [ 290.027672][ T9] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 290.187832][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.198521][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 290.207769][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.221047][ T9] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 290.230318][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.256157][T10031] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 290.275095][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 290.281270][ T9] hub 4-1:1.0: probe with driver hub failed with error -5 [ 290.289311][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 290.294589][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 290.301082][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 290.306545][ T9] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 290.335061][ T5963] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 290.460867][ T5999] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 290.471417][ T5999] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 290.481123][ T5999] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 290.493631][ T5963] usb 3-1: Using ep0 maxpacket: 16 [ 290.503789][ T5999] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 290.516404][ T5999] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 290.524067][ T5999] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 290.538324][ T5999] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 290.546103][ T5963] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 290.563961][ T5999] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 290.573711][ T5963] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 170, changing to 11 [ 290.589502][ T5999] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 290.597521][ T5963] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 34661, setting to 1024 [ 290.610289][ T5999] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 290.619021][ T5999] hid_map_usage: 9351 callbacks suppressed [ 290.619040][ T5999] HID 045e:07da: Invalid code 65791 type 1 [ 290.630953][ T5963] usb 3-1: config 0 interface 0 has no altsetting 0 [ 290.638015][ T5999] HID 045e:07da: Invalid code 768 type 1 [ 290.646374][ T5921] usb 4-1: USB disconnect, device number 36 [ 290.646794][ T5999] HID 045e:07da: Invalid code 769 type 1 [ 290.662035][ T5999] HID 045e:07da: Invalid code 770 type 1 [ 290.668492][ T5999] HID 045e:07da: Invalid code 771 type 1 [ 290.674786][ T5963] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 290.683856][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.692303][ T5999] HID 045e:07da: Invalid code 772 type 1 [ 290.698236][ T5999] HID 045e:07da: Invalid code 773 type 1 [ 290.704046][ T5963] usb 3-1: Product: syz [ 290.709268][ T5999] HID 045e:07da: Invalid code 774 type 1 [ 290.720575][ T5963] usb 3-1: Manufacturer: syz [ 290.728502][ T5963] usb 3-1: SerialNumber: syz [ 290.733340][ T5999] HID 045e:07da: Invalid code 775 type 1 [ 290.745380][ T5963] usb 3-1: config 0 descriptor?? [ 290.751539][ T5999] HID 045e:07da: Invalid code 776 type 1 [ 290.758555][T10045] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 290.808586][ T5999] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0025/input/input59 [ 290.917354][ T5999] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 290.994832][T10045] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 291.043528][ T5963] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input60 [ 291.404505][ T5921] usb 3-1: USB disconnect, device number 28 [ 291.512794][ T5963] usb 1-1: USB disconnect, device number 28 [ 291.524100][T10058] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 292.004943][ T5963] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 292.191621][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.224641][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.235722][ T5963] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 292.286065][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.322625][ T5963] usb 5-1: config 0 descriptor?? [ 292.825032][ T5963] cm6533_jd 0003:0D8C:0022.0026: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 293.157321][ T5963] usb 5-1: USB disconnect, device number 33 [ 293.165881][ T1211] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 293.242521][T10108] tipc: Started in network mode [ 293.258187][T10108] tipc: Node identity ac1414aa, cluster identity 4711 [ 293.276849][T10108] tipc: Enabled bearer , priority 10 [ 293.341866][ T1211] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 293.363390][ T1211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 293.398919][ T1211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 293.428374][T10089] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1630'. [ 293.441252][ T1211] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.482315][ T1211] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.491739][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.527470][ T1211] usb 2-1: config 0 descriptor?? [ 293.542746][T10100] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 293.875611][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'. [ 293.967991][T10118] netlink: 'syz.0.1643': attribute type 12 has an invalid length. [ 293.988938][T10118] netlink: 'syz.0.1643': attribute type 29 has an invalid length. [ 293.997292][T10118] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1643'. [ 294.006970][T10118] netlink: 'syz.0.1643': attribute type 2 has an invalid length. [ 294.015773][T10118] netlink: 'syz.0.1643': attribute type 3 has an invalid length. [ 294.077411][ T1211] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 294.085216][T10120] ipvlan2: entered promiscuous mode [ 294.406408][ T9] tipc: Node number set to 2886997162 [ 295.343291][ T9] usb 2-1: USB disconnect, device number 30 [ 295.608699][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1659'. [ 296.053070][ T9] IPVS: starting estimator thread 0... [ 296.059197][T10161] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 296.144988][ T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 296.194806][T10165] IPVS: using max 25 ests per chain, 60000 per kthread [ 296.305631][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 296.323181][ T24] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 296.342623][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 296.351368][ T24] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 296.383792][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.436240][ T24] usb 4-1: config 0 descriptor?? [ 297.231551][T10202] cgroup: fork rejected by pids controller in /syz1 [ 297.240952][ T24] hid_parser_main: 5 callbacks suppressed [ 297.240979][ T24] corsair-cpro 0003:1B1C:0C10.0028: unknown main item tag 0x0 [ 297.258756][ T24] corsair-cpro 0003:1B1C:0C10.0028: unknown main item tag 0x0 [ 297.277945][ T24] corsair-cpro 0003:1B1C:0C10.0028: unknown main item tag 0x0 [ 297.294310][ T24] corsair-cpro 0003:1B1C:0C10.0028: unknown main item tag 0x0 [ 297.320598][ T24] corsair-cpro 0003:1B1C:0C10.0028: unknown main item tag 0x0 [ 297.351145][ T24] corsair-cpro 0003:1B1C:0C10.0028: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 297.756435][ T24] corsair-cpro 0003:1B1C:0C10.0028: probe with driver corsair-cpro failed with error -110 [ 297.779603][ T1211] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 297.789769][ T24] usb 4-1: USB disconnect, device number 37 [ 297.924326][ T2993] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.974481][ T1211] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 298.006849][ T1211] usb 1-1: config 0 has no interface number 0 [ 298.027838][ T1211] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 298.046309][ T1211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.055149][ T1211] usb 1-1: Product: syz [ 298.065057][ T1211] usb 1-1: Manufacturer: syz [ 298.080063][ T1211] usb 1-1: SerialNumber: syz [ 298.109250][ T1211] usb 1-1: config 0 descriptor?? [ 298.137557][ T2993] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.209009][ T5999] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 298.290301][ T2993] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.387381][ T5999] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.416253][ T5999] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.445524][ T5999] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 298.464912][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 298.472989][ T5999] usb 5-1: SerialNumber: syz [ 298.482377][ T2993] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.546918][ T1211] usb 1-1: Firmware version (0.0) predates our first public release. [ 298.559376][ T1211] usb 1-1: Please update to version 0.2 or newer [ 298.568656][ T1211] usb 1-1: Firmware: build [ 298.722342][ T5999] usb 5-1: 0:2 : does not exist [ 298.815015][ T5999] usb 5-1: USB disconnect, device number 34 [ 298.833058][ T1211] usb 1-1: USB disconnect, device number 29 [ 299.042261][ T5983] udevd[5983]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.104099][ T2993] bridge_slave_1: left allmulticast mode [ 299.120376][ T2993] bridge_slave_1: left promiscuous mode [ 299.132298][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.182619][ T2993] bridge_slave_0: left allmulticast mode [ 299.195455][ T2993] bridge_slave_0: left promiscuous mode [ 299.201425][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.255359][ T5866] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.265791][ T5866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.277122][ T5866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.290653][ T5866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.304271][ T5866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.275016][ T5999] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 300.467580][ T5999] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 300.497873][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 300.511812][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 300.529858][ T5999] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 300.552735][ T5866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.576231][ T5866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.594301][ T5866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.601524][ T5999] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 300.612613][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.643267][ T5866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.651902][ T5866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.664199][ T5999] usb 5-1: config 0 descriptor?? [ 300.706024][ T2993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.753965][ T2993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.782524][ T2993] bond0 (unregistering): Released all slaves [ 300.847806][T10260] binder: 10259:10260 ioctl c0306201 800003c0 returned -14 [ 301.150249][ T5999] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 301.370093][ T5868] Bluetooth: hci4: command tx timeout [ 301.628825][ T2993] hsr_slave_0: left promiscuous mode [ 301.637800][ T2993] hsr_slave_1: left promiscuous mode [ 301.644173][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.653539][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.663895][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.671987][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.714212][ T2993] veth1_macvtap: left promiscuous mode [ 301.723055][ T2993] veth0_macvtap: left promiscuous mode [ 301.732245][ T2993] veth1_vlan: left promiscuous mode [ 301.739849][ T2993] veth0_vlan: left promiscuous mode [ 302.744201][ T5868] Bluetooth: hci3: command tx timeout [ 302.792343][ T2993] team0 (unregistering): Port device team_slave_1 removed [ 302.840605][ T2993] team0 (unregistering): Port device team_slave_0 removed [ 302.939208][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 303.107186][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 303.121011][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 303.144069][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.156365][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 303.163065][ T24] usb 1-1: New USB device found, idVendor=227d, idProduct=0709, bcdDevice= 0.00 [ 303.173618][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.186453][ T24] usb 1-1: config 0 descriptor?? [ 303.341108][ T5944] usb 5-1: USB disconnect, device number 35 [ 303.449547][ T5868] Bluetooth: hci4: command tx timeout [ 303.602563][ T24] hid (null): report_id 60507 is invalid [ 303.612268][ T24] hid (null): invalid report_count 13028 [ 303.618794][ T24] hid (null): unknown global tag 0xd [ 303.624442][ T24] hid (null): unknown global tag 0xd [ 303.630468][ T24] hid (null): unknown global tag 0xd [ 303.632854][T10303] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 303.641519][ T24] hid (null): invalid report_count 583099849 [ 303.649743][T10303] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 303.728214][ T24] hid-generic 0003:227D:0709.002A: unknown main item tag 0x0 [ 303.785000][ T24] hid-generic 0003:227D:0709.002A: unknown main item tag 0x0 [ 303.828154][ T24] hid-generic 0003:227D:0709.002A: unknown main item tag 0x0 [ 303.878444][ T24] hid-generic 0003:227D:0709.002A: unknown main item tag 0x0 [ 303.911481][ T24] hid-generic 0003:227D:0709.002A: unknown main item tag 0x0 [ 303.929623][ T24] hid-generic 0003:227D:0709.002A: unknown main item tag 0x0 [ 303.971999][ T24] hid-generic 0003:227D:0709.002A: unknown main item tag 0x0 [ 303.984186][ T24] hid-generic 0003:227D:0709.002A: unexpected long global item [ 303.997174][ T24] hid-generic 0003:227D:0709.002A: probe with driver hid-generic failed with error -22 [ 304.042021][T10235] chnl_net:caif_netlink_parms(): no params data found [ 304.049127][ T24] usb 1-1: USB disconnect, device number 30 [ 304.423485][ T2993] IPVS: stop unused estimator thread 0... [ 304.430279][T10322] netlink: 'syz.4.1715': attribute type 25 has an invalid length. [ 304.446774][T10322] netlink: 'syz.4.1715': attribute type 1 has an invalid length. [ 304.463925][T10322] bridge0: port 1(bridge_slave_0) entered learning state [ 304.541267][T10258] chnl_net:caif_netlink_parms(): no params data found [ 304.805765][ T5868] Bluetooth: hci3: command tx timeout [ 304.886019][ T2993] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.908345][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 304.908366][ T30] audit: type=1800 audit(1754853462.021:1485): pid=10343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1719" name="nullb0" dev="devtmpfs" ino=3591 res=0 errno=0 [ 304.941856][ T2993] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 305.318018][ T2993] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.328706][ T2993] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 305.440330][T10235] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.451397][T10235] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.459245][T10235] bridge_slave_0: entered allmulticast mode [ 305.467825][T10235] bridge_slave_0: entered promiscuous mode [ 305.477267][T10235] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.484486][T10235] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.492244][T10235] bridge_slave_1: entered allmulticast mode [ 305.500963][T10235] bridge_slave_1: entered promiscuous mode [ 305.525076][ T2993] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.535679][ T5868] Bluetooth: hci4: command tx timeout [ 305.540387][ T2993] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 305.617284][T10235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.646543][T10258] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.653772][T10258] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.661217][T10258] bridge_slave_0: entered allmulticast mode [ 305.668926][T10258] bridge_slave_0: entered promiscuous mode [ 305.681579][T10235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.706127][ T2993] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.719889][ T2993] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 305.740932][T10258] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.750411][T10258] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.758821][T10258] bridge_slave_1: entered allmulticast mode [ 305.771604][T10258] bridge_slave_1: entered promiscuous mode [ 305.863277][T10235] team0: Port device team_slave_0 added [ 305.897780][T10235] team0: Port device team_slave_1 added [ 305.932927][T10258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.172391][T10258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.217564][T10235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.224565][T10235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.268985][T10235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.284897][ T5999] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 306.412517][T10235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.420273][T10235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.450479][T10235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.464864][ T5999] usb 4-1: Using ep0 maxpacket: 16 [ 306.477919][ T5999] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.503923][ T5999] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.527132][ T5999] usb 4-1: config 0 interface 0 has no altsetting 0 [ 306.533266][T10258] team0: Port device team_slave_0 added [ 306.540090][ T5999] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 306.551249][ T5999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.584249][ T5999] usb 4-1: config 0 descriptor?? [ 306.604773][ T5944] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 306.666301][T10258] team0: Port device team_slave_1 added [ 306.673046][ T2993] bridge_slave_1: left allmulticast mode [ 306.683387][ T2993] bridge_slave_1: left promiscuous mode [ 306.690515][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.701289][ T2993] bridge_slave_0: left allmulticast mode [ 306.707618][ T2993] bridge_slave_0: left promiscuous mode [ 306.713714][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.769548][ T5944] usb 1-1: Using ep0 maxpacket: 32 [ 306.780520][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.807353][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.835034][ T5944] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 306.854338][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.872192][ T5944] usb 1-1: config 0 descriptor?? [ 306.893802][ T5868] Bluetooth: hci3: command tx timeout [ 307.029400][ T5999] hid (null): report_id 11059 is invalid [ 307.053237][ T5999] hid (null): unknown global tag 0xfa [ 307.140612][ T5999] cougar 0003:060B:500A.002B: usage count exceeds max: fixing up report descriptor [ 307.172766][ T5999] cougar 0003:060B:500A.002B: unexpected long global item [ 307.189138][ T5999] cougar 0003:060B:500A.002B: parse failed [ 307.199401][ T5999] cougar 0003:060B:500A.002B: probe with driver cougar failed with error -22 [ 307.233297][ T5999] usb 4-1: USB disconnect, device number 38 [ 307.359233][ T5944] savu 0003:1E7D:2D5A.002C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 307.605039][ T5868] Bluetooth: hci4: command tx timeout [ 307.663314][ T2993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.678156][ T2993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.692424][ T2993] bond0 (unregistering): Released all slaves [ 307.705806][ T5944] usb 1-1: USB disconnect, device number 31 [ 307.885523][ T2993] bond1 (unregistering): (slave bond2): Releasing backup interface [ 307.893776][ T2993] bond2 (unregistering): left promiscuous mode [ 307.910104][ T2993] bond1 (unregistering): Released all slaves [ 308.107166][ T2993] bond2 (unregistering): Released all slaves [ 308.295949][T10235] hsr_slave_0: entered promiscuous mode [ 308.311333][T10235] hsr_slave_1: entered promiscuous mode [ 308.355699][T10235] debugfs: 'hsr0' already exists in 'hsr' [ 308.383178][T10235] Cannot create hsr debugfs directory [ 308.629135][T10258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.665228][T10258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.743982][T10258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.927414][T10258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.934611][T10258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.972207][T10258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.975293][ T5868] Bluetooth: hci3: command tx timeout [ 309.028241][ T2993] hsr_slave_0: left promiscuous mode [ 309.034613][ T2993] hsr_slave_1: left promiscuous mode [ 309.042709][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.063561][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.075419][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.079004][ T5944] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 309.082833][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.121960][ T2993] veth1_macvtap: left promiscuous mode [ 309.145995][ T2993] veth0_macvtap: left promiscuous mode [ 309.267938][ T5944] usb 1-1: Using ep0 maxpacket: 8 [ 309.287210][ T5944] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 309.301722][ T5944] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 309.318842][ T5944] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 309.345513][ T5944] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.387791][ T5944] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 309.423151][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.672879][ T5944] usb 1-1: GET_CAPABILITIES returned 0 [ 309.715550][ T5944] usbtmc 1-1:16.0: can't read capabilities [ 309.958602][ T9] usb 1-1: USB disconnect, device number 32 [ 310.087940][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 310.100359][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 310.122132][ T5866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 310.140099][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 310.148207][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 310.280819][ T2993] team0 (unregistering): Port device team_slave_1 removed [ 310.324442][ T2993] team0 (unregistering): Port device team_slave_0 removed [ 311.090623][T10258] hsr_slave_0: entered promiscuous mode [ 311.098912][T10258] hsr_slave_1: entered promiscuous mode [ 311.106437][T10258] debugfs: 'hsr0' already exists in 'hsr' [ 311.112249][T10258] Cannot create hsr debugfs directory [ 311.125880][ T5963] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 311.284919][ T5963] usb 4-1: Using ep0 maxpacket: 16 [ 311.293921][ T5963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.307095][ T5963] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 311.329336][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.345749][ T5963] usb 4-1: config 0 descriptor?? [ 311.608890][ T5963] usbhid 4-1:0.0: can't add hid device: -71 [ 311.621728][ T5963] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 311.632200][T10437] sctp: [Deprecated]: syz.0.1752 (pid 10437) Use of struct sctp_assoc_value in delayed_ack socket option. [ 311.632200][T10437] Use struct sctp_sack_info instead [ 311.679201][ T5963] usb 4-1: USB disconnect, device number 39 [ 312.081873][ T2993] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.119801][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 312.141633][T10416] chnl_net:caif_netlink_parms(): no params data found [ 312.244849][ T5866] Bluetooth: hci2: command tx timeout [ 312.285343][ T9] usb 1-1: device descriptor read/64, error -71 [ 312.433694][ T2993] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.535172][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 312.694266][ T2993] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.716056][ T9] usb 1-1: device descriptor read/64, error -71 [ 312.825352][ T9] usb usb1-port1: attempt power cycle [ 312.889234][ T2993] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.999222][T10416] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.010700][T10416] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.018132][T10416] bridge_slave_0: entered allmulticast mode [ 313.032343][T10416] bridge_slave_0: entered promiscuous mode [ 313.048184][T10416] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.062320][T10416] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.070130][T10416] bridge_slave_1: entered allmulticast mode [ 313.084986][T10416] bridge_slave_1: entered promiscuous mode [ 313.175278][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 313.211207][ T9] usb 1-1: device descriptor read/8, error -71 [ 313.237425][T10258] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 313.272860][T10416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.296454][T10258] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 313.316478][T10258] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 313.359844][T10416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.409520][T10258] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 313.477437][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 313.508217][ T9] usb 1-1: device descriptor read/8, error -71 [ 313.592892][T10416] team0: Port device team_slave_0 added [ 313.631494][ T9] usb usb1-port1: unable to enumerate USB device [ 313.687453][T10416] team0: Port device team_slave_1 added [ 313.750064][T10235] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 313.805262][T10235] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 313.851816][T10235] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 313.933214][ T2993] bridge_slave_1: left allmulticast mode [ 313.940893][ T2993] bridge_slave_1: left promiscuous mode [ 313.954058][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.972306][ T2993] bridge_slave_0: left allmulticast mode [ 313.978244][ T2993] bridge_slave_0: left promiscuous mode [ 313.984322][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.324886][ T5866] Bluetooth: hci2: command tx timeout [ 314.449826][ T2993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.461565][ T2993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.472053][ T2993] bond0 (unregistering): Released all slaves [ 314.494949][T10235] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 314.506667][T10416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.517586][T10416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.544406][T10416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.581041][ T5944] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 314.673258][T10416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.680385][T10416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.708483][T10416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.754848][ T5944] usb 4-1: Using ep0 maxpacket: 8 [ 314.771991][ T5944] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 314.801295][ T5944] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 314.818651][ T5944] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 314.837776][ T5944] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 314.852345][ T5944] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 314.868824][ T5944] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 314.881806][ T5944] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 314.899682][ T5944] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 314.914583][ T5944] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 314.926019][ T5944] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 314.939532][ T5944] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 314.965314][ T5944] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 314.977201][ T5944] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 314.989297][ T5944] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 315.004926][ T5944] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 315.021567][ T5944] usb 4-1: string descriptor 0 read error: -22 [ 315.028328][ T5944] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 315.037565][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.071729][ T5944] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 315.140274][T10416] hsr_slave_0: entered promiscuous mode [ 315.150696][T10416] hsr_slave_1: entered promiscuous mode [ 315.176548][T10416] debugfs: 'hsr0' already exists in 'hsr' [ 315.188491][T10416] Cannot create hsr debugfs directory [ 315.213697][ T2993] hsr_slave_0: left promiscuous mode [ 315.224610][ T2993] hsr_slave_1: left promiscuous mode [ 315.231188][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.239193][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.252437][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.260679][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.311813][ T2993] veth1_macvtap: left promiscuous mode [ 315.320169][ T2993] veth0_macvtap: left promiscuous mode [ 315.328625][ T2993] veth1_vlan: left promiscuous mode [ 315.332403][ T24] usb 4-1: USB disconnect, device number 40 [ 315.334171][ T2993] veth0_vlan: left promiscuous mode [ 315.654457][T10517] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1771'. [ 316.342636][ T2993] team0 (unregistering): Port device team_slave_1 removed [ 316.405009][ T5866] Bluetooth: hci2: command tx timeout [ 316.468962][ T2993] team0 (unregistering): Port device team_slave_0 removed [ 317.123720][T10258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.293698][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.300224][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.414546][T10258] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.461460][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.468681][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.515426][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.522643][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.565052][T10235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.785245][ T1763] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 317.829097][T10235] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.953141][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.960401][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.987331][ T1763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.025695][ T1763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.040679][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.047859][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.062529][ T1763] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 318.080096][T10416] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 318.094842][ T1763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.130940][ T1763] usb 4-1: config 0 descriptor?? [ 318.161112][T10416] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 318.173592][T10557] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101 [ 318.199225][T10416] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 318.251286][T10416] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 318.413037][ T1763] usbhid 4-1:0.0: can't add hid device: -71 [ 318.450240][ T1763] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 318.486426][ T5866] Bluetooth: hci2: command tx timeout [ 318.496832][ T1763] usb 4-1: USB disconnect, device number 41 [ 318.509683][T10258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.648077][T10235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.837399][T10258] veth0_vlan: entered promiscuous mode [ 318.858203][T10416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.924025][T10258] veth1_vlan: entered promiscuous mode [ 318.960622][T10235] veth0_vlan: entered promiscuous mode [ 319.034491][T10235] veth1_vlan: entered promiscuous mode [ 319.069589][ T30] audit: type=1326 audit(1754853476.171:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10571 comm="syz.0.1785" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf711e539 code=0x0 [ 319.093721][T10416] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.192625][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.199977][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.267759][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.275564][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.302038][T10258] veth0_macvtap: entered promiscuous mode [ 319.348484][T10258] veth1_macvtap: entered promiscuous mode [ 319.373899][T10235] veth0_macvtap: entered promiscuous mode [ 319.416172][T10235] veth1_macvtap: entered promiscuous mode [ 319.469162][T10258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.488408][T10258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.537467][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.569721][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.582695][T10235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.601746][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.621859][T10235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.652183][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.713190][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.742690][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.752798][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.802276][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.863806][T10416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.914024][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.953961][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.149962][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.172921][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.247129][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.294879][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.350528][T10416] veth0_vlan: entered promiscuous mode [ 320.372717][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.391204][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.402134][T10416] veth1_vlan: entered promiscuous mode [ 320.527019][T10416] veth0_macvtap: entered promiscuous mode [ 320.562607][T10416] veth1_macvtap: entered promiscuous mode [ 320.716939][T10416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.797651][T10416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.850865][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.885707][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 320.895512][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.933437][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.954838][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.064929][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 321.104885][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 321.113036][ T24] usb 2-1: config 0 has no interface number 0 [ 321.174543][ T24] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 321.201369][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.227027][ T24] usb 2-1: Product: syz [ 321.231516][ T24] usb 2-1: Manufacturer: syz [ 321.255853][ T24] usb 2-1: SerialNumber: syz [ 321.256515][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.284405][ T24] usb 2-1: config 0 descriptor?? [ 321.311332][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.333351][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 321.414229][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.469709][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.016799][ T1763] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 322.185316][ T1763] usb 7-1: Using ep0 maxpacket: 16 [ 322.199445][ T1763] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.226618][ T1763] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.241222][ T1763] usb 7-1: config 0 interface 0 has no altsetting 0 [ 322.260474][ T1763] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 322.297315][ T1763] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.330646][ T1763] usb 7-1: config 0 descriptor?? [ 322.358960][ T24] gspca_spca1528: reg_w err -71 [ 322.364118][ T24] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 322.433575][ T24] usb 2-1: USB disconnect, device number 31 [ 322.781814][ T1763] hid (null): nested delimiters [ 322.815602][ T1763] hid (null): nested delimiters [ 322.841366][ T1763] hid (null): nested delimiters [ 323.095518][ T5963] usb 7-1: USB disconnect, device number 2 [ 324.121020][ T5944] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 324.195062][ T5944] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 324.509538][T10691] fido_id[10691]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 324.765355][ T1763] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 324.945125][ T1763] usb 2-1: Using ep0 maxpacket: 32 [ 324.978774][ T1763] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.011429][ T1763] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.072356][ T1763] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 325.087618][ T1763] usb 2-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 325.114425][ T1763] usb 2-1: Product: syz [ 325.133969][ T1763] usb 2-1: Manufacturer: syz [ 325.153689][ T1763] usb 2-1: SerialNumber: syz [ 325.958025][T10728] syzkaller1: entered promiscuous mode [ 325.963899][T10728] syzkaller1: entered allmulticast mode [ 326.209063][ T1763] cdc_ncm 2-1:1.0: bind() failure [ 326.246639][ T1763] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 326.269635][ T1763] cdc_ncm 2-1:1.1: bind() failure [ 326.316001][ T1763] usb 2-1: USB disconnect, device number 32 [ 327.270940][T10763] openvswitch: netlink: IPv4 tun info is not correct [ 328.571845][T10795] netlink: 'syz.6.1847': attribute type 1 has an invalid length. [ 328.825217][ T5944] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 329.030085][T10795] (unnamed net_device) (uninitialized): option mode: invalid value (119) [ 329.035399][ T5944] usb 2-1: Using ep0 maxpacket: 8 [ 329.088805][T10808] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1850'. [ 329.094753][ T5944] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 329.145640][ T5944] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 329.197539][ T5944] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 329.236506][ T5944] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 329.274811][ T5944] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 329.284227][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.545171][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 329.559717][ T5944] usb 2-1: GET_CAPABILITIES returned 0 [ 329.593876][ T5944] usbtmc 2-1:16.0: can't read capabilities [ 329.733329][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 329.752967][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 329.804363][ T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 329.829548][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.851624][ T24] usb 7-1: config 0 descriptor?? [ 329.873657][ T24] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input62 [ 329.911553][ T9] usb 2-1: USB disconnect, device number 33 [ 330.132705][ T5218] bcm5974 7-1:0.0: could not read from device [ 330.153409][T10810] bcm5974 7-1:0.0: could not read from device [ 330.197872][ T5218] bcm5974 7-1:0.0: could not read from device [ 330.212027][ T24] usb 7-1: USB disconnect, device number 3 [ 330.987512][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 331.130129][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1867'. [ 331.177972][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1867'. [ 331.187167][ T5921] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 331.367341][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 331.379533][ T5921] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 331.394779][ T5921] usb 2-1: config 0 has no interface number 0 [ 331.422881][ T5921] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 331.445275][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.453331][ T5921] usb 2-1: Product: syz [ 331.482000][ T5921] usb 2-1: Manufacturer: syz [ 331.486766][ T5921] usb 2-1: SerialNumber: syz [ 331.511517][ T5921] usb 2-1: config 0 descriptor?? [ 331.546323][ T5921] smsc95xx v2.0.0 [ 332.364823][ T1763] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 332.566971][ T1763] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.581339][ T5921] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 332.618407][ T1763] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 332.626192][ T5921] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 332.684565][ T5921] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 332.697126][ T1763] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 332.764724][ T1763] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.765960][ T5921] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 332.806384][ T1763] usb 7-1: Product: syz [ 332.810639][ T1763] usb 7-1: Manufacturer: syz [ 332.830927][ T1763] usb 7-1: SerialNumber: syz [ 332.890087][ T5921] usb 2-1: USB disconnect, device number 34 [ 333.128637][ T1763] usb 7-1: 0:2 : does not exist [ 333.194117][ T1763] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 333.304800][ T1763] usb 7-1: USB disconnect, device number 4 [ 333.461638][ T5983] udevd[5983]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 333.805183][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 333.995083][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 334.029655][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1887'. [ 334.039235][ T9] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 334.069524][ T9] usb 2-1: config 0 has no interface number 0 [ 334.094984][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1887'. [ 334.108316][ T9] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 334.137151][T10923] netlink: 50 bytes leftover after parsing attributes in process `syz.0.1887'. [ 334.154751][ T9] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 334.183174][ T9] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 334.204759][ T5944] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 334.299057][ T9] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.327857][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 334.344211][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.376828][ T9] usb 2-1: Product: syz [ 334.389336][ T9] usb 2-1: Manufacturer: syz [ 334.394079][ T9] usb 2-1: SerialNumber: syz [ 334.399402][ T5944] usb 4-1: Using ep0 maxpacket: 16 [ 334.451539][ T9] usb 2-1: config 0 descriptor?? [ 334.462468][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.477386][T10931] pim6reg1: entered promiscuous mode [ 334.482735][T10931] pim6reg1: entered allmulticast mode [ 334.516487][ T5944] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 334.544137][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.571581][ T5944] usb 4-1: config 0 descriptor?? [ 334.702856][ T9] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 335.041925][ T5963] usb 2-1: USB disconnect, device number 35 [ 335.042015][ C0] iowarrior 2-1:0.186: iowarrior_callback - usb_submit_urb failed with result -19 [ 335.136872][ T5944] mcp2221 0003:04D8:00DD.002F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 335.318956][ T5944] usb 4-1: USB disconnect, device number 42 [ 337.000401][T10998] netlink: 'syz.1.1912': attribute type 1 has an invalid length. [ 337.074522][T10998] netlink: 'syz.1.1912': attribute type 2 has an invalid length. [ 337.485388][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 337.525345][ T1763] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 337.673933][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 337.731371][ T1763] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 337.748704][ T24] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 337.757093][ T1763] usb 2-1: config 179 has no interface number 0 [ 337.784948][ T24] usb 6-1: config 0 has no interface number 0 [ 337.791229][ T24] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 337.803247][ T1763] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 337.843730][ T1763] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 337.856119][ T24] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 337.877660][ T1763] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 337.902153][ T1763] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 337.913769][ T24] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 337.922682][T11025] netlink: 'syz.0.1921': attribute type 30 has an invalid length. [ 337.929776][ T24] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 337.941678][ T1763] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 337.960224][ T24] usb 6-1: Product: syz [ 337.965381][ T24] usb 6-1: SerialNumber: syz [ 337.981786][ T1763] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 338.001438][ T24] usb 6-1: config 0 descriptor?? [ 338.015139][ T1763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.027727][ T24] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 338.053143][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input63 [ 338.067469][T11010] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 338.111836][T11010] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 338.475478][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 338.626410][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 338.626417][ T5944] usb 2-1: USB disconnect, device number 36 [ 338.641393][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 338.775054][ T1763] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 338.821792][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.831214][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.838486][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.845877][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.853079][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.860326][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.867575][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.874757][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.881931][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.893723][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.928438][ T5944] usb 6-1: USB disconnect, device number 2 [ 338.934455][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 338.957809][ T5944] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 338.994196][ T1763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 339.034109][ T1763] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 339.043590][ T1763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.075028][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 339.102289][ T1763] usb 4-1: config 0 descriptor?? [ 339.117790][T11037] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 339.249305][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 339.281133][ T24] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 339.295203][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.315792][ T24] usb 1-1: Product: syz [ 339.330950][ T24] usb 1-1: Manufacturer: syz [ 339.336148][ T24] usb 1-1: SerialNumber: syz [ 339.366148][ T24] usb 1-1: config 0 descriptor?? [ 339.398368][ T24] gspca_main: sq930x-2.14.0 probing 2770:930c [ 339.581417][ T1763] elan 0003:04F3:0755.0030: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 339.765959][ T5921] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 339.767161][ T5963] usb 4-1: USB disconnect, device number 43 [ 339.868519][T11062] fido_id[11062]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 339.944820][ T1763] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 339.965049][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 339.974006][ T5921] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 339.988345][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.026290][ T5921] usb 2-1: config 0 descriptor?? [ 340.038860][ T5921] gspca_main: sq930x-2.14.0 probing 041e:403c [ 340.106012][ T1763] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 340.122394][ T1763] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.132379][ T1763] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.143878][ T5953] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 340.164234][ T1763] usb 6-1: config 0 interface 0 has no altsetting 0 [ 340.179322][ T1763] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.190654][ T1763] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.207230][ T1763] usb 6-1: config 0 interface 0 has no altsetting 0 [ 340.221049][ T1763] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.233491][ T1763] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.234486][ T24] gspca_sq930x: ucbus_write failed -71 [ 340.257463][ T1763] usb 6-1: config 0 interface 0 has no altsetting 0 [ 340.275620][ T1763] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.288285][ T1763] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.300203][ T1763] usb 6-1: config 0 interface 0 has no altsetting 0 [ 340.324076][ T1763] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.334937][ T5953] usb 7-1: Using ep0 maxpacket: 16 [ 340.357586][ T1763] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.371678][ T5953] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.404148][ T1763] usb 6-1: config 0 interface 0 has no altsetting 0 [ 340.411317][ T5953] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.432442][ T1763] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.452085][ T5953] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 340.461564][ T1763] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.472866][ T5953] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.481521][ T24] gspca_sq930x: Sensor ov9630 not yet treated [ 340.487900][ T1763] usb 6-1: config 0 interface 0 has no altsetting 0 [ 340.495730][ T24] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 340.513359][ T5953] usb 7-1: config 0 descriptor?? [ 340.519044][ T1763] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.540436][ T24] usb 1-1: USB disconnect, device number 37 [ 340.549237][ T1763] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.584779][ T1763] usb 6-1: config 0 interface 0 has no altsetting 0 [ 340.597157][ T1763] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 340.634175][ T1763] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 340.664806][ T1763] usb 6-1: config 0 interface 0 has no altsetting 0 [ 340.677277][ T1763] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 340.697532][ T1763] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 340.714750][ T1763] usb 6-1: Product: syz [ 340.719124][ T1763] usb 6-1: Manufacturer: syz [ 340.723886][ T1763] usb 6-1: SerialNumber: syz [ 340.739823][ T1763] usb 6-1: config 0 descriptor?? [ 340.754050][ T1763] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 341.000291][ T5953] input: HID 041e:3100 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:041E:3100.0031/input/input64 [ 341.025295][ T1763] usb 6-1: USB disconnect, device number 3 [ 341.034177][ T1763] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 341.079465][ T5953] creative-sb0540 0003:041E:3100.0031: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.6-1/input0 [ 341.094568][ T5921] gspca_sq930x: ucbus_write failed -71 [ 341.121249][ T5921] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 341.246332][ T5921] usb 2-1: USB disconnect, device number 37 [ 341.298619][ T1763] usb 7-1: USB disconnect, device number 5 [ 341.368752][T11095] fido_id[11095]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 341.816174][ T30] audit: type=1326 audit(1754853498.941:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11112 comm="syz.0.1942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 341.890026][ T30] audit: type=1326 audit(1754853498.941:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11112 comm="syz.0.1942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 341.947716][ T30] audit: type=1326 audit(1754853498.981:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11112 comm="syz.0.1942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 342.044772][ T30] audit: type=1326 audit(1754853498.991:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11112 comm="syz.0.1942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 342.124063][ T30] audit: type=1326 audit(1754853498.991:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11112 comm="syz.0.1942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 342.153237][ T30] audit: type=1326 audit(1754853498.991:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11112 comm="syz.0.1942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 342.193264][ T30] audit: type=1326 audit(1754853498.991:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11112 comm="syz.0.1942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 342.223830][ T30] audit: type=1326 audit(1754853498.991:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11112 comm="syz.0.1942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 342.261293][ T30] audit: type=1326 audit(1754853498.991:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11112 comm="syz.0.1942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 342.285534][ T5921] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 342.301023][ T30] audit: type=1326 audit(1754853498.991:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11112 comm="syz.0.1942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 342.448164][ T5921] usb 7-1: Using ep0 maxpacket: 8 [ 342.460201][ T5921] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 342.468299][ T5921] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 342.511986][ T5921] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 342.541069][ T5921] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 342.561743][ T5921] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 342.580748][ T5921] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 342.589082][ T5921] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 342.610674][ T5921] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 342.632161][ T5921] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 342.720358][ T5921] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 342.756183][ T5921] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 342.763965][ T5921] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 342.799931][ T5921] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 342.834309][ T5921] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 342.879816][ T5921] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 342.912890][ T5921] usb 7-1: string descriptor 0 read error: -22 [ 342.935208][ T5921] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 342.952619][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.004094][ T5921] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 343.304808][ T5921] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 343.440845][ T9] usb 7-1: USB disconnect, device number 6 [ 343.474836][ T5921] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 343.497629][ T5921] usb 2-1: config 0 has no interface number 0 [ 343.534761][ T5921] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 343.575808][ T5921] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 343.602917][ T5921] usb 2-1: config 0 interface 255 has no altsetting 0 [ 343.617334][ T5921] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 343.657671][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.676433][ T5921] usb 2-1: config 0 descriptor?? [ 343.694536][ T5921] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 343.951931][ T1763] usb 2-1: USB disconnect, device number 38 [ 344.330729][ T5921] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 344.499941][ T5921] usb 6-1: Using ep0 maxpacket: 16 [ 344.520893][T11193] loop4: detected capacity change from 0 to 7 [ 344.527525][ T5921] usb 6-1: unable to get BOS descriptor or descriptor too short [ 344.530609][ T5983] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 344.547228][ T5983] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 344.553714][ T5921] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 344.595285][ T5983] loop4: p2 start 4294901760 is beyond EOD, truncated [ 344.601329][ T5921] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 344.630827][ T5983] loop4: p3 start 4294836224 is beyond EOD, truncated [ 344.661627][ T5983] loop4: p4 size 327680 extends beyond EOD, truncated [ 344.670592][ T5921] usb 6-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.691980][ T5983] loop4: p5 size 8323072 extends beyond EOD, truncated [ 344.715484][ T5921] usb 6-1: config 1 interface 0 has no altsetting 0 [ 344.737893][ T5983] loop4: p6 start 8192 is beyond EOD, truncated [ 344.745438][ T5921] usb 6-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 344.767508][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.783110][T11193] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 344.786901][ T5921] usb 6-1: Product: syz [ 344.800106][T11193] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 344.813255][ T5921] usb 6-1: Manufacturer: syz [ 344.825654][ T5921] usb 6-1: SerialNumber: syz [ 344.839245][T11179] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 344.873497][T11193] loop4: p2 start 4294901760 is beyond EOD, truncated [ 344.882958][T11193] loop4: p3 start 4294836224 is beyond EOD, truncated [ 344.891960][T11193] loop4: p4 size 327680 extends beyond EOD, truncated [ 344.903260][T11193] loop4: p5 size 8323072 extends beyond EOD, truncated [ 344.914349][T11193] loop4: p6 start 8192 is beyond EOD, truncated [ 345.053270][ T6061] udevd[6061]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 345.059235][ T8289] udevd[8289]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 345.070635][ T5983] udevd[5983]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 345.151696][ T5921] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input65 [ 345.249028][ T8289] udevd[8289]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 345.262782][ T6064] udevd[6064]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 345.275149][ T5983] udevd[5983]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 345.959935][ T5921] usb 6-1: USB disconnect, device number 4 [ 345.966120][ C0] bcm5974 6-1:1.0: trackpad urb failed: -19 [ 345.989768][T11177] bcm5974 6-1:1.0: could not read from device [ 346.684836][ T5921] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 346.867068][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.908041][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.943595][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 346.983278][ T5921] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 347.005043][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.005798][T11262] syzkaller1: entered promiscuous mode [ 347.045776][ T5921] usb 4-1: config 0 descriptor?? [ 347.054585][T11262] syzkaller1: entered allmulticast mode [ 347.583885][ T5921] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 347.919979][ T1763] usb 4-1: USB disconnect, device number 44 [ 348.575403][ T1763] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 348.772241][ T1763] usb 1-1: Using ep0 maxpacket: 8 [ 348.788528][ T1763] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 348.829114][ T1763] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 348.854969][ T1763] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 348.889487][ T1763] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 348.919898][ T1763] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 348.969036][ T1763] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 348.979401][ T1763] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 348.993372][ T1763] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 349.010356][ T1763] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 349.022618][ T1763] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 349.048850][ T1763] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 349.062387][ T1763] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 349.098834][ T1763] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 349.118167][ T1763] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 349.159474][ T1763] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 349.200104][ T1763] usb 1-1: string descriptor 0 read error: -22 [ 349.211780][ T1763] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 349.244779][ T1763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.348189][ T1763] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 349.793732][ T10] usb 1-1: USB disconnect, device number 38 [ 350.110752][ T5952] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 350.288533][ T5952] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 350.319271][ T5952] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 350.351946][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 350.371580][ T5952] usb 6-1: SerialNumber: syz [ 350.778037][T11371] input: syz1 as /devices/virtual/input/input66 [ 351.096519][ T5952] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 351.498604][ T1763] usb 6-1: USB disconnect, device number 5 [ 351.521100][ T1763] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 351.995773][ T5953] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 352.194721][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 352.216864][ T5953] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.227434][ T5952] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 352.247844][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.274699][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 352.300726][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 352.348272][ T5953] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 352.412174][ T5952] usb 2-1: Using ep0 maxpacket: 8 [ 352.420177][ T5952] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 352.430175][ T5953] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 352.451443][ T5952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 352.473770][ T5953] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 352.492094][ T5952] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 352.504125][ T5953] usb 4-1: Manufacturer: syz [ 352.538316][ T5953] usb 4-1: config 0 descriptor?? [ 352.543571][ T5952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 352.591220][ T5952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 352.619539][ T5952] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 352.645775][ T5952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 352.684954][ T5952] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 352.726173][ T5952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 352.758966][ T5952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 352.824757][ T5952] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 352.832596][ T5952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 352.883690][ T5952] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 352.905370][ T5952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 352.937367][ T5952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 352.990319][ T5952] usb 2-1: string descriptor 0 read error: -22 [ 352.997759][ T5953] rc_core: IR keymap rc-hauppauge not found [ 353.003803][ T5953] Registered IR keymap rc-empty [ 353.021673][ T5952] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 353.054479][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.064596][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.106010][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.134360][ T5952] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 353.151214][ T5953] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 353.191952][ T5953] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input67 [ 353.245252][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.265481][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.296425][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.314929][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.340501][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.400436][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.444938][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.495406][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.514917][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.556291][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.615418][ T5953] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 353.639195][ T24] usb 2-1: USB disconnect, device number 39 [ 353.655546][ T5953] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 353.690274][ T5953] usb 4-1: USB disconnect, device number 45 [ 354.346223][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2045'. [ 354.419230][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2045'. [ 355.503967][T11505] [ 355.506455][T11505] ===================================================== [ 355.513500][T11505] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 355.520978][T11505] 6.17.0-rc1-syzkaller #0 Not tainted [ 355.526375][T11505] ----------------------------------------------------- [ 355.533336][T11505] syz.3.2061/11505 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 355.541084][T11505] ffff888051656360 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 355.549831][T11505] [ 355.549831][T11505] and this task is already holding: [ 355.557371][T11505] ffff88803373e028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 355.567235][T11505] which would create a new lock dependency: [ 355.573123][T11505] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 355.581416][T11505] [ 355.581416][T11505] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 355.590949][T11505] (&dev->event_lock#2){..-.}-{3:3} [ 355.590984][T11505] [ 355.590984][T11505] ... which became SOFTIRQ-irq-safe at: [ 355.604134][T11505] lock_acquire+0x120/0x360 [ 355.608743][T11505] _raw_spin_lock_irqsave+0xa7/0xf0 [ 355.614203][T11505] input_event+0x76/0xe0 [ 355.618549][T11505] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 355.624551][T11505] __usb_hcd_giveback_urb+0x41a/0x690 [ 355.630313][T11505] dummy_timer+0x862/0x4550 [ 355.634909][T11505] __hrtimer_run_queues+0x52c/0xc60 [ 355.640216][T11505] hrtimer_run_softirq+0x187/0x2b0 [ 355.645620][T11505] handle_softirqs+0x283/0x870 [ 355.650578][T11505] __irq_exit_rcu+0xca/0x1f0 [ 355.655363][T11505] irq_exit_rcu+0x9/0x30 [ 355.659963][T11505] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 355.666493][T11505] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 355.673604][T11505] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 355.679968][T11505] dummy_urb_enqueue+0x58a/0x780 [ 355.685708][T11505] usb_hcd_submit_urb+0x325/0x1aa0 [ 355.691114][T11505] atp_open+0x63/0xc0 [ 355.695566][T11505] input_open_device+0x1d3/0x390 [ 355.701208][T11505] mousedev_open_device+0xcc/0x150 [ 355.707417][T11505] mousedev_open+0x2ec/0x4a0 [ 355.712568][T11505] chrdev_open+0x4cc/0x5e0 [ 355.717362][T11505] do_dentry_open+0x953/0x13f0 [ 355.724286][T11505] vfs_open+0x3b/0x340 [ 355.728945][T11505] path_openat+0x2ee5/0x3830 [ 355.734632][T11505] do_filp_open+0x1fa/0x410 [ 355.739658][T11505] do_sys_openat2+0x121/0x1c0 [ 355.745090][T11505] __x64_sys_openat+0x138/0x170 [ 355.750686][T11505] do_syscall_64+0xfa/0x3b0 [ 355.756928][T11505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.763324][T11505] [ 355.763324][T11505] to a SOFTIRQ-irq-unsafe lock: [ 355.770468][T11505] (tasklist_lock){.+.+}-{3:3} [ 355.770502][T11505] [ 355.770502][T11505] ... which became SOFTIRQ-irq-unsafe at: [ 355.783336][T11505] ... [ 355.783352][T11505] lock_acquire+0x120/0x360 [ 355.790658][T11505] _raw_read_lock+0x36/0x50 [ 355.795443][T11505] __do_wait+0xde/0x740 [ 355.801233][T11505] do_wait+0x1f8/0x520 [ 355.805430][T11505] kernel_wait+0xab/0x170 [ 355.810897][T11505] call_usermodehelper_exec_work+0xbe/0x230 [ 355.817021][T11505] process_scheduled_works+0xade/0x17b0 [ 355.822976][T11505] worker_thread+0x8a0/0xda0 [ 355.827780][T11505] kthread+0x70e/0x8a0 [ 355.832319][T11505] ret_from_fork+0x3f9/0x770 [ 355.837394][T11505] ret_from_fork_asm+0x1a/0x30 [ 355.842996][T11505] [ 355.842996][T11505] other info that might help us debug this: [ 355.842996][T11505] [ 355.853620][T11505] Chain exists of: [ 355.853620][T11505] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 355.853620][T11505] [ 355.867776][T11505] Possible interrupt unsafe locking scenario: [ 355.867776][T11505] [ 355.876178][T11505] CPU0 CPU1 [ 355.881685][T11505] ---- ---- [ 355.887088][T11505] lock(tasklist_lock); [ 355.891664][T11505] local_irq_disable(); [ 355.899537][T11505] lock(&dev->event_lock#2); [ 355.906933][T11505] lock(&client->buffer_lock); [ 355.914685][T11505] [ 355.918242][T11505] lock(&dev->event_lock#2); [ 355.923469][T11505] [ 355.923469][T11505] *** DEADLOCK *** [ 355.923469][T11505] [ 355.931964][T11505] 7 locks held by syz.3.2061/11505: [ 355.937824][T11505] #0: ffff88802981c118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 355.947613][T11505] #1: ffff888020f88230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 355.958360][T11505] #2: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 355.968316][T11505] #3: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 355.978085][T11505] #4: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 355.987252][T11505] #5: ffff88803373e028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 355.997442][T11505] #6: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 356.006590][T11505] [ 356.006590][T11505] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 356.017267][T11505] -> (&dev->event_lock#2){..-.}-{3:3} { [ 356.023015][T11505] IN-SOFTIRQ-W at: [ 356.027079][T11505] lock_acquire+0x120/0x360 [ 356.033573][T11505] _raw_spin_lock_irqsave+0xa7/0xf0 [ 356.040703][T11505] input_event+0x76/0xe0 [ 356.046879][T11505] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 356.054365][T11505] __usb_hcd_giveback_urb+0x41a/0x690 [ 356.061912][T11505] dummy_timer+0x862/0x4550 [ 356.068455][T11505] __hrtimer_run_queues+0x52c/0xc60 [ 356.075484][T11505] hrtimer_run_softirq+0x187/0x2b0 [ 356.082424][T11505] handle_softirqs+0x283/0x870 [ 356.089017][T11505] __irq_exit_rcu+0xca/0x1f0 [ 356.095521][T11505] irq_exit_rcu+0x9/0x30 [ 356.101596][T11505] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 356.109088][T11505] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 356.116897][T11505] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 356.124628][T11505] dummy_urb_enqueue+0x58a/0x780 [ 356.131398][T11505] usb_hcd_submit_urb+0x325/0x1aa0 [ 356.138427][T11505] atp_open+0x63/0xc0 [ 356.144239][T11505] input_open_device+0x1d3/0x390 [ 356.151105][T11505] mousedev_open_device+0xcc/0x150 [ 356.158046][T11505] mousedev_open+0x2ec/0x4a0 [ 356.164468][T11505] chrdev_open+0x4cc/0x5e0 [ 356.170722][T11505] do_dentry_open+0x953/0x13f0 [ 356.177400][T11505] vfs_open+0x3b/0x340 [ 356.183292][T11505] path_openat+0x2ee5/0x3830 [ 356.189881][T11505] do_filp_open+0x1fa/0x410 [ 356.196476][T11505] do_sys_openat2+0x121/0x1c0 [ 356.203202][T11505] __x64_sys_openat+0x138/0x170 [ 356.209884][T11505] do_syscall_64+0xfa/0x3b0 [ 356.216239][T11505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.224051][T11505] INITIAL USE at: [ 356.228123][T11505] lock_acquire+0x120/0x360 [ 356.234478][T11505] _raw_spin_lock_irqsave+0xa7/0xf0 [ 356.241516][T11505] input_inject_event+0xa5/0x340 [ 356.248480][T11505] kbd_led_trigger_activate+0xbc/0x100 [ 356.255793][T11505] led_trigger_set+0x52a/0x950 [ 356.262497][T11505] led_trigger_set_default+0x260/0x2a0 [ 356.269891][T11505] led_classdev_register_ext+0x73d/0x930 [ 356.277622][T11505] input_leds_connect+0x517/0x790 [ 356.284488][T11505] input_register_device+0xd00/0x1140 [ 356.291601][T11505] atkbd_connect+0x72e/0xa00 [ 356.297946][T11505] serio_driver_probe+0x7f/0xd0 [ 356.304666][T11505] really_probe+0x26d/0x9e0 [ 356.310921][T11505] __driver_probe_device+0x18c/0x2f0 [ 356.317962][T11505] driver_probe_device+0x4f/0x430 [ 356.324911][T11505] __driver_attach+0x452/0x700 [ 356.331609][T11505] bus_for_each_dev+0x233/0x2b0 [ 356.338207][T11505] serio_handle_event+0x1f9/0x8d0 [ 356.345064][T11505] process_scheduled_works+0xade/0x17b0 [ 356.352642][T11505] worker_thread+0x8a0/0xda0 [ 356.359053][T11505] kthread+0x70e/0x8a0 [ 356.364870][T11505] ret_from_fork+0x3f9/0x770 [ 356.371209][T11505] ret_from_fork_asm+0x1a/0x30 [ 356.377719][T11505] } [ 356.380308][T11505] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 356.389681][T11505] -> (&client->buffer_lock){....}-{3:3} { [ 356.395424][T11505] INITIAL USE at: [ 356.399325][T11505] lock_acquire+0x120/0x360 [ 356.405503][T11505] _raw_spin_lock+0x2e/0x40 [ 356.411760][T11505] evdev_pass_values+0xb9/0xbd0 [ 356.418223][T11505] evdev_events+0x1e6/0x340 [ 356.424474][T11505] input_pass_values+0x285/0x890 [ 356.431221][T11505] input_event_dispose+0x330/0x6b0 [ 356.437899][T11505] input_inject_event+0x1dd/0x340 [ 356.444496][T11505] evdev_write+0x2fc/0x480 [ 356.450941][T11505] vfs_write+0x27b/0xb30 [ 356.456767][T11505] ksys_write+0x145/0x250 [ 356.462721][T11505] __do_fast_syscall_32+0xb6/0x2b0 [ 356.469409][T11505] do_fast_syscall_32+0x34/0x80 [ 356.475830][T11505] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 356.483925][T11505] } [ 356.486583][T11505] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 356.494857][T11505] ... acquired at: [ 356.498745][T11505] lock_acquire+0x120/0x360 [ 356.503434][T11505] _raw_spin_lock+0x2e/0x40 [ 356.508251][T11505] evdev_pass_values+0xb9/0xbd0 [ 356.513331][T11505] evdev_events+0x1e6/0x340 [ 356.518048][T11505] input_pass_values+0x285/0x890 [ 356.523286][T11505] input_event_dispose+0x330/0x6b0 [ 356.528664][T11505] input_inject_event+0x1dd/0x340 [ 356.533900][T11505] evdev_write+0x2fc/0x480 [ 356.538597][T11505] vfs_write+0x27b/0xb30 [ 356.543022][T11505] ksys_write+0x145/0x250 [ 356.547533][T11505] __do_fast_syscall_32+0xb6/0x2b0 [ 356.553091][T11505] do_fast_syscall_32+0x34/0x80 [ 356.558132][T11505] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 356.564722][T11505] [ 356.567131][T11505] [ 356.567131][T11505] the dependencies between the lock to be acquired [ 356.567140][T11505] and SOFTIRQ-irq-unsafe lock: [ 356.580831][T11505] -> (tasklist_lock){.+.+}-{3:3} { [ 356.586225][T11505] HARDIRQ-ON-R at: [ 356.590387][T11505] lock_acquire+0x120/0x360 [ 356.596931][T11505] _raw_read_lock+0x36/0x50 [ 356.603554][T11505] __do_wait+0xde/0x740 [ 356.609728][T11505] do_wait+0x1f8/0x520 [ 356.615922][T11505] kernel_wait+0xab/0x170 [ 356.622268][T11505] call_usermodehelper_exec_work+0xbe/0x230 [ 356.630351][T11505] process_scheduled_works+0xade/0x17b0 [ 356.637899][T11505] worker_thread+0x8a0/0xda0 [ 356.644516][T11505] kthread+0x70e/0x8a0 [ 356.650608][T11505] ret_from_fork+0x3f9/0x770 [ 356.657465][T11505] ret_from_fork_asm+0x1a/0x30 [ 356.664247][T11505] SOFTIRQ-ON-R at: [ 356.668501][T11505] lock_acquire+0x120/0x360 [ 356.675033][T11505] _raw_read_lock+0x36/0x50 [ 356.681559][T11505] __do_wait+0xde/0x740 [ 356.687924][T11505] do_wait+0x1f8/0x520 [ 356.694056][T11505] kernel_wait+0xab/0x170 [ 356.700570][T11505] call_usermodehelper_exec_work+0xbe/0x230 [ 356.708928][T11505] process_scheduled_works+0xade/0x17b0 [ 356.716846][T11505] worker_thread+0x8a0/0xda0 [ 356.723818][T11505] kthread+0x70e/0x8a0 [ 356.730105][T11505] ret_from_fork+0x3f9/0x770 [ 356.736725][T11505] ret_from_fork_asm+0x1a/0x30 [ 356.743738][T11505] INITIAL USE at: [ 356.747922][T11505] lock_acquire+0x120/0x360 [ 356.754474][T11505] _raw_write_lock_irq+0xa2/0xf0 [ 356.761343][T11505] copy_process+0x224f/0x3c00 [ 356.768108][T11505] kernel_clone+0x21e/0x840 [ 356.775052][T11505] user_mode_thread+0xdd/0x140 [ 356.781850][T11505] rest_init+0x23/0x300 [ 356.788361][T11505] start_kernel+0x3a9/0x410 [ 356.794873][T11505] x86_64_start_reservations+0x24/0x30 [ 356.802390][T11505] x86_64_start_kernel+0x143/0x1c0 [ 356.809641][T11505] common_startup_64+0x13e/0x147 [ 356.816527][T11505] INITIAL READ USE at: [ 356.821227][T11505] lock_acquire+0x120/0x360 [ 356.828200][T11505] _raw_read_lock+0x36/0x50 [ 356.835071][T11505] __do_wait+0xde/0x740 [ 356.841680][T11505] do_wait+0x1f8/0x520 [ 356.848261][T11505] kernel_wait+0xab/0x170 [ 356.855037][T11505] call_usermodehelper_exec_work+0xbe/0x230 [ 356.863558][T11505] process_scheduled_works+0xade/0x17b0 [ 356.871710][T11505] worker_thread+0x8a0/0xda0 [ 356.878735][T11505] kthread+0x70e/0x8a0 [ 356.885168][T11505] ret_from_fork+0x3f9/0x770 [ 356.892196][T11505] ret_from_fork_asm+0x1a/0x30 [ 356.899342][T11505] } [ 356.902102][T11505] ... key at: [] tasklist_lock+0x18/0x40 [ 356.910200][T11505] ... acquired at: [ 356.914214][T11505] lock_acquire+0x120/0x360 [ 356.918993][T11505] _raw_read_lock+0x36/0x50 [ 356.923780][T11505] send_sigio+0x101/0x370 [ 356.928632][T11505] kill_fasync+0x24d/0x4d0 [ 356.933669][T11505] sock_wake_async+0x137/0x160 [ 356.938636][T11505] sk_wake_async+0x184/0x280 [ 356.943491][T11505] unix_release_sock+0x768/0xd30 [ 356.948611][T11505] unix_release+0x92/0xd0 [ 356.953461][T11505] sock_close+0xc0/0x240 [ 356.957879][T11505] __fput+0x449/0xa70 [ 356.962152][T11505] task_work_run+0x1d4/0x260 [ 356.967127][T11505] exit_to_user_mode_loop+0xec/0x110 [ 356.972690][T11505] __do_fast_syscall_32+0x1f4/0x2b0 [ 356.978173][T11505] do_fast_syscall_32+0x34/0x80 [ 356.983378][T11505] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 356.990231][T11505] [ 356.992652][T11505] -> (&f_owner->lock){....}-{3:3} { [ 356.998045][T11505] INITIAL USE at: [ 357.002184][T11505] lock_acquire+0x120/0x360 [ 357.009314][T11505] _raw_write_lock_irq+0xa2/0xf0 [ 357.016325][T11505] __f_setown+0x67/0x370 [ 357.022413][T11505] fcntl_dirnotify+0x3fa/0x6a0 [ 357.029099][T11505] do_fcntl+0x6d0/0x1910 [ 357.035298][T11505] do_compat_fcntl64+0x477/0x720 [ 357.042186][T11505] __do_fast_syscall_32+0xb6/0x2b0 [ 357.049088][T11505] do_fast_syscall_32+0x34/0x80 [ 357.055880][T11505] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.063951][T11505] INITIAL READ USE at: [ 357.068462][T11505] lock_acquire+0x120/0x360 [ 357.075413][T11505] _raw_read_lock_irqsave+0xaf/0x100 [ 357.082900][T11505] send_sigio+0x38/0x370 [ 357.089351][T11505] dnotify_handle_event+0x169/0x440 [ 357.096725][T11505] fsnotify+0x1814/0x1a80 [ 357.103495][T11505] path_openat+0x171e/0x3830 [ 357.110347][T11505] do_filp_open+0x1fa/0x410 [ 357.117064][T11505] do_sys_openat2+0x121/0x1c0 [ 357.124182][T11505] __ia32_sys_creat+0x8f/0xc0 [ 357.131308][T11505] __do_fast_syscall_32+0xb6/0x2b0 [ 357.138714][T11505] do_fast_syscall_32+0x34/0x80 [ 357.145918][T11505] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.154525][T11505] } [ 357.157107][T11505] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 357.166318][T11505] ... acquired at: [ 357.170496][T11505] lock_acquire+0x120/0x360 [ 357.176004][T11505] _raw_read_lock_irqsave+0xaf/0x100 [ 357.181662][T11505] send_sigio+0x38/0x370 [ 357.186078][T11505] kill_fasync+0x24d/0x4d0 [ 357.190686][T11505] lease_break_callback+0x26/0x30 [ 357.196415][T11505] __break_lease+0x6a2/0x1620 [ 357.201287][T11505] do_dentry_open+0x8b7/0x13f0 [ 357.206363][T11505] vfs_open+0x3b/0x340 [ 357.210700][T11505] path_openat+0x2ee5/0x3830 [ 357.215558][T11505] do_filp_open+0x1fa/0x410 [ 357.220239][T11505] do_sys_openat2+0x121/0x1c0 [ 357.225371][T11505] __ia32_compat_sys_open+0x117/0x140 [ 357.231025][T11505] __do_fast_syscall_32+0xb6/0x2b0 [ 357.236942][T11505] do_fast_syscall_32+0x34/0x80 [ 357.241978][T11505] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.248656][T11505] [ 357.251069][T11505] -> (&new->fa_lock){....}-{3:3} { [ 357.256206][T11505] INITIAL USE at: [ 357.260102][T11505] lock_acquire+0x120/0x360 [ 357.266273][T11505] _raw_write_lock_irq+0xa2/0xf0 [ 357.272821][T11505] fasync_remove_entry+0xf1/0x1c0 [ 357.279591][T11505] __fput+0x8a2/0xa70 [ 357.285316][T11505] task_work_run+0x1d4/0x260 [ 357.291590][T11505] exit_to_user_mode_loop+0xec/0x110 [ 357.298569][T11505] __do_fast_syscall_32+0x1f4/0x2b0 [ 357.305364][T11505] do_fast_syscall_32+0x34/0x80 [ 357.311976][T11505] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.319877][T11505] INITIAL READ USE at: [ 357.324263][T11505] lock_acquire+0x120/0x360 [ 357.330788][T11505] _raw_read_lock_irqsave+0xaf/0x100 [ 357.338167][T11505] kill_fasync+0x199/0x4d0 [ 357.345133][T11505] do_splice+0xf79/0x1660 [ 357.351905][T11505] __se_sys_splice+0x2e1/0x460 [ 357.358770][T11505] __do_fast_syscall_32+0xb6/0x2b0 [ 357.365990][T11505] do_fast_syscall_32+0x34/0x80 [ 357.373065][T11505] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.381669][T11505] } [ 357.384169][T11505] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 357.392945][T11505] ... acquired at: [ 357.396762][T11505] lock_acquire+0x120/0x360 [ 357.401452][T11505] _raw_read_lock_irqsave+0xaf/0x100 [ 357.407017][T11505] kill_fasync+0x199/0x4d0 [ 357.411700][T11505] evdev_pass_values+0x627/0xbd0 [ 357.416832][T11505] evdev_events+0x1e6/0x340 [ 357.421606][T11505] input_pass_values+0x285/0x890 [ 357.426813][T11505] input_event_dispose+0x330/0x6b0 [ 357.432192][T11505] input_inject_event+0x1dd/0x340 [ 357.437577][T11505] evdev_write+0x2fc/0x480 [ 357.442217][T11505] vfs_write+0x27b/0xb30 [ 357.446739][T11505] ksys_write+0x145/0x250 [ 357.451341][T11505] __do_fast_syscall_32+0xb6/0x2b0 [ 357.456893][T11505] do_fast_syscall_32+0x34/0x80 [ 357.462136][T11505] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.468908][T11505] [ 357.471234][T11505] [ 357.471234][T11505] stack backtrace: [ 357.477303][T11505] CPU: 1 UID: 0 PID: 11505 Comm: syz.3.2061 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 357.477327][T11505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 357.477339][T11505] Call Trace: [ 357.477347][T11505] [ 357.477355][T11505] dump_stack_lvl+0x189/0x250 [ 357.477379][T11505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.477397][T11505] ? __pfx__printk+0x10/0x10 [ 357.477422][T11505] validate_chain+0x1f05/0x2140 [ 357.477446][T11505] __lock_acquire+0xab9/0xd20 [ 357.477471][T11505] ? kill_fasync+0x199/0x4d0 [ 357.477488][T11505] lock_acquire+0x120/0x360 [ 357.477510][T11505] ? kill_fasync+0x199/0x4d0 [ 357.477531][T11505] _raw_read_lock_irqsave+0xaf/0x100 [ 357.477551][T11505] ? kill_fasync+0x199/0x4d0 [ 357.477568][T11505] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 357.477586][T11505] ? do_raw_spin_lock+0x121/0x290 [ 357.477607][T11505] kill_fasync+0x199/0x4d0 [ 357.477624][T11505] ? kill_fasync+0x53/0x4d0 [ 357.477641][T11505] evdev_pass_values+0x627/0xbd0 [ 357.477667][T11505] ? evdev_pass_values+0x5e1/0xbd0 [ 357.477691][T11505] evdev_events+0x1e6/0x340 [ 357.477712][T11505] ? evdev_events+0x79/0x340 [ 357.477733][T11505] ? input_pass_values+0x8d/0x890 [ 357.477754][T11505] input_pass_values+0x285/0x890 [ 357.477778][T11505] ? input_handle_event+0x70c/0xf30 [ 357.477796][T11505] input_event_dispose+0x330/0x6b0 [ 357.477815][T11505] input_inject_event+0x1dd/0x340 [ 357.477833][T11505] ? input_inject_event+0xb6/0x340 [ 357.477850][T11505] evdev_write+0x2fc/0x480 [ 357.477874][T11505] ? __pfx_evdev_write+0x10/0x10 [ 357.477897][T11505] ? bpf_lsm_file_permission+0x9/0x20 [ 357.477915][T11505] ? security_file_permission+0x75/0x290 [ 357.477936][T11505] ? rw_verify_area+0x255/0x4d0 [ 357.477955][T11505] ? __lock_acquire+0xab9/0xd20 [ 357.477977][T11505] ? __pfx_evdev_write+0x10/0x10 [ 357.478000][T11505] vfs_write+0x27b/0xb30 [ 357.478022][T11505] ? __pfx_vfs_write+0x10/0x10 [ 357.478042][T11505] ? __fget_files+0x2a/0x420 [ 357.478056][T11505] ? __fget_files+0x2a/0x420 [ 357.478068][T11505] ? __fget_files+0x3a0/0x420 [ 357.478080][T11505] ? __fget_files+0x2a/0x420 [ 357.478096][T11505] ksys_write+0x145/0x250 [ 357.478117][T11505] ? __pfx_ksys_write+0x10/0x10 [ 357.478137][T11505] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.478159][T11505] __do_fast_syscall_32+0xb6/0x2b0 [ 357.478182][T11505] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.478203][T11505] do_fast_syscall_32+0x34/0x80 [ 357.478233][T11505] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.478252][T11505] RIP: 0023:0xf708e539 [ 357.478266][T11505] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 357.478281][T11505] RSP: 002b:00000000f547e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 357.478300][T11505] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 357.478311][T11505] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 357.478321][T11505] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 357.478331][T11505] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 357.478340][T11505] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 357.478355][T11505]