last executing test programs: 1m50.280234352s ago: executing program 2 (id=1971): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vim2m(&(0x7f0000000580), 0x41, 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c001780080001800400", @ANYRES64=r0], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) 1m49.995906109s ago: executing program 2 (id=1975): r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x101, 0x48001051, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x39, 0x1a, r2, 0x0) fanotify_mark(r0, 0x80, 0x8, r2, 0x0) 1m49.804661238s ago: executing program 2 (id=1978): ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f00000000c0)={0x7, 0x4, 0x12, 0xfffffffc, 0xfd, "0da2c380dc02fd0d2ef747bbe47963e09145ce", 0x2, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[]) 1m49.569243689s ago: executing program 2 (id=1981): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f00000003c0)='./file0\x00', 0x231) 1m49.436203042s ago: executing program 2 (id=1983): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000001600)=""/19, 0x13}], 0x2}}], 0x1, 0x600100a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000540)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "000000000000001e"}, 0x10}}, 0x4040) 1m49.064395743s ago: executing program 2 (id=1987): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1m48.384583395s ago: executing program 32 (id=1987): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1m24.726967836s ago: executing program 0 (id=2168): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x2000000000000, &(0x7f00000021c0)=[{0x4, 0xffffffff}], 0x1, 0x4, 0x0, 0x0, 0x65}) 1m23.74999092s ago: executing program 0 (id=2179): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) readv(r3, &(0x7f0000002540)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1) 1m23.237474946s ago: executing program 0 (id=2183): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa4000021) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) 1m22.826026556s ago: executing program 0 (id=2186): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000c0c0)="f1187c2666e938b0d719606210914a175384a7d8bfa08a4ce1a6704c4c59dca5bd31c2e0daaec1bf1788b64cc764755c8227d255c9fcb56cddc8d23a8719578a528df745f0862275073dd2c88521736ffbb58e980e9803aa1406002487d226af95eedef88d3c768b748c28d604cd82f416f3c4f2071aac0274092945c94a4911345f1fb12c47fd864cef58c44ad5fb5348fea8246b3604a4c9c9a827e4aae4f7677d023169ef281c43f5341372d459170f25365fa911efb58b1a0c883d98677cce26aed7f8410a54aee36c963dd8f82fe532fd73594ee6f83265b5fbf2507319d73f87cb6d2050a7b1e001ec563d4170d9ca49e019c1f34a3f6a29e4adc72fcc343bb15caaa44814a11a621d682070b253354508d7b97b1439ad827954b305797e4de400c046ff93c99fa15125daa8b53581ae5392373621d5beffde817abdd5f4feb80aef8cbec83ad2a830c773ae907c19f5385e77e3adc425fc5d8dfd53312af6cb6556f8e3d871add2dc48a37fc05c65f32149a0ac179386d1016590ed19baede89d890902306e3ca40ddf9ea5f54b51cab0b6bc1bdddea7e6a64746cef6ecebedc1c51c670b0af450099c4052caf1eb0d4137a74f41f101a604fe08ef524e12f8f831c30e15da0947f6f584ae2ad96de45e3143f5a9dbce67edbdf5904a0ca1db282fb70dbec4870f6aeba8a74b24900d7c5a0758afadc26ac6f93695eeec1611d7a1123098420302ac2ecfb31bd545695b61c9f36663cf7ce86cd7ac350670893acf0d065fab2dc2ea43505b261393d285fbceaebe30e0d1fbf8baacb9eaf9f6ca84c598c5604fd4b11412a027760671956d312a4cd2e2dd54100519a0a8f93f5b229728bac624870cefd815a6b6d1ce8b06e045c47ee2f91e3524493df21f46cdd00a60c39f49d29965dbed6f408c42b29a3f76e0f840762b273628f7834397bb37d931231ab16f6cc7bbb5ca17fe83fc5ac8c67b120b19d8dbc3ef054e7490851bbf11c4cd19d8aad281fc054613050013dec6821e034f10413f96e289f81f10a52fc941992692b2c3b849d949b5c6465f335cd7876caff414d0a00ec927c2766c83249ca5e2d5dc9a524ea5142375bae891c8bcb34e8b4044964b8141841c619c6b1da249cf65b9c16506926804e4e388b60638c46128b43ab76a32659a5e3fa64c75609e31cc2738392a868434d9108c7710d72f8a34827943ded46328621b39b646cb663500467580b76cd6ee0217149dac6168499edcbff45193f49bd28fd105740f641f341ff8ded97ebea072d805062b35819f28541423b0e16ef996323f5907b0b2a0703e9fd5c6a511787cf6321a87f648170efd691aede0c178e0daf53da03829e4e7617b5b834c6b4196d926c7d7a54b9f1b3d3bc09bb7f22fb18f09150e34bec2102eafe634e13454a9d5cdc10da8e880cddaf892af35c437768b62c73f67ccd8764c34669a91f9d669fa1ebcc4159e4be7d4e589a59cb70c1ba77ef7a6a2c6fa4481c5f2c025ee26e24ea59215f971b1bd22af51af1334432d149a9574cac0d4cb145de1038fc37317b947fffb232209f8c65dce28179c950c7b23bd1052db323662512c5fb41acc84c4e42d1daa9be21e6c1d22b6bedd5f28d2241afc578e2a33e12d1b1b6427c620ce5d80c4a5ef351b2cdaa598c478b56bf79d9dcb8b8556503c66b44b27e8df8e046469a5da9390f58144b8766f9f51d39e8d5bd44e1ad024fed57ec1a3b18f04e6bb3b011f1b23031d85c498766cb10f66e3868a76ef1e388018292fdc4435e14bcf7ff6067535ee3764d8deb725cc0fe0afffe4285958ec9595ae5c5cb04834d15429435272e5b0510f246ce806895b85ba2f81912f76f6b955e28febafbd0c2e854479c4a6150b85c05bd54a1d0d37877e6fd3ae20046380dbf82bf9c8fa8a8d48f76cfc376fc9e0e4fdf0ccb785e9833c6c9ba006f7e59318ac733c3a1250f40ceb7ac3a167727bf89daea038372e212f02cf677a009cdfd224b41fc3c142b0882a53c1b9b7de6e99974d80ff8506c71ad3e063d7bc5c5366042b1cf952c6f76fad74fb16b9d9c9804589ae4f4afbc7bbaa340c1093d76a01fb254c5ea168e83b39bd3c97b8ace4f32612b63e841fd6eb304a663e4f43fcfb5f435716df89146d0ebc0c1517734ca4c90b9dd5db6820a4d730a9a7e6748d0d2b7def30a1c242fa36f52c3f685555b0828e1dd59023290ef4626d3759462cad9371d72a9c63824c91d5cc304ab43279f199811a604c164493794986b643ba6bf53d0a9ec7e304488b18bb2eedde5c128b2ef0303f85ed54875e38d4adbbfd477e8fe9a2217f084000813aecedcccb1dbe482b4856b9ceecb28d40bde5e8376eb8c29dc71b85d4b345fc411937234b318238e962f0d5dd46fdf5149685cb3c4f9c2710f4173f4ec616f7036ccf83ba228e1cc7b205cde9b57f00502d4d1c2af6dffaa37ad30fe0f5d955cfee2e00f48cb7ba02ab86748d0238914c66ca9ad9ff0e8bf2705e527c56b0d63a9b5a7b1da19424bc0c81d627b1389a42626654d901eff0f37d64e0cc894ab2c4399c67b846839a1c40033f4f9ecf8410fc63672ad471253fadd976df6510137d903a76ccf14509dd8839024608d707c4eb69cbcd5ba9cdddb7fbac1c963a99ef6e75eea8924aad62d6aea792042cb372131a83730a6ee7de386410d91697dad01d85ffcb22b3679573fea63a38c192b1b1e3a722adacaaf8e855843e1366763456c86ba9934302e0abfea2044386f31c457cb7ff445d7b00e3ed7d1dd4b2f92c845f65af3a3f68de96dd9b7bba62b7fefb52639b6796ca56d902f9dad52f42a1b79fc814c8a58033daa9f43ee3c540cfd08b0ed21941d67dc3ee37fcb855fa4a03453833714d8f8abf83256c503713adf7f8aee122cdb01d0ed27945d42633b0fc3b2fd51f8a9d403e792c9b77be56c257110669b46bd0f8bea9ec7b895b0b1bc9a9485a51e72763c3ccaf6210af7652ccd437722b359d20bc124e7055c5e41ddc5eb66f966647a3b91f1c51f3c6e340d6e203fcd30f39dd0398f0a1c9fa58f2da697033f5988cbc6e5c8e1fce7904112964b2ac5f938b9132d680f3cb0d8ec2fb65162113462ec459356bc9d28d9efdeb9983d79ed04da1a78f02ea8f5b42210a23d9c98a734dab4069dad2a532ebced93f5dad2ec9290b0016e6db7c3c9ca3ebc71d805aafc113ac93d1e68c637000879fd736cd8a42474e607da884df065a06f4d64054512a396d99cb7dfaad6a91cfce8288cf995e83a1ffd2ec83483a807c7ab3d0703e956222dbbc2fc5d57661fd186626b41a2e18144d592174cc8e45f1580593206e6d7c7f3236eeb41aa772e663834768dc21a4c216490612e6e912ad48f1d90650f1a9a29239ffa8f00747833038b75e8759c50799eba59ba58a1ddd3d9b49806e2c7ae143e88f704d0a5556429445a41ad83a95e43bf32fe2f6954ca030a3f2697014cb351c89cbd3d2792cc73371cae124e5c0055201036c7c0c73d94215214b33234f4e21071743cd553b8d96e3387151860f5143f16980020954d80b7f60955f9c09a6501e9d0eee4d8793e9ca2d04a8aa6831d2e54c0397c6c9f2486b79d06aee46f064c02e77fc4bd7bdf31b9dcf520e26ebb7a02ff3d9eef1357dbcc83877f5613c7a8c4e3a4636d2e0161a663a946f651cb5915f0776088c3de6b59b5ed0002a1fd5f7eb316ab62fef44af65abb81f96f495f867e128e8829a3d2693e00a5b2a14a6b76dff7c1cd80e26dca00482b3055741fcc7973e33346264f268e22ee4a74fb45066eb24cdbf71ea7c69d3fe9e9ce52dcc7e9b0645474ba2a635c36a83135cd98f892c2619a5724faff0aed7e236cad81184dd05dc5645c7e7ad52ef76d615255b2936bc40f0ea017035a8bfacc18c7bc52ec0e29d70126a6e912c6d06856a12ec2792738a9a1c2b2bd1e9b39db4fd115bc901e0d3fba472ea0182604cc9e73cc772117d49dbf41c7098076e20867d8eeb7b927701bd5cd21bc2b32e4ee2ab86f143770b4718f7c9ebdd32fdef6170ca284d4102360242f4d007fdcdd8fcfbb90e7d9b693fb1101dec0fa152a7417f70003159ca3633299cae4035793aa7668df47b09e0fad406e278a6105bbd2b9a523c1a8fdb394b9de39d3d9e1ce9d9ba717014dbe59855a92ff2375a3a3477c8bd22cde51e5bbb738b92ef4f3781e605c24e7140b2504b59328cb8e20c5c5d19acca392bbf60194e6257f674df0f99945132d78c76f182f2eb52058a908abf568352d50a7aa4d061380cc58cea53f166a753ffc4a51e90a0f46104decd9eaa77d48300f2c7901465effda4fdb0e70f7ede3541890732d4ff10eef7745ca362eb336febc2609f50f237eac6d4950593bfefe0718ae3bbf227ddd524178b39ce4341e68e4c1e5c65b506b73965c5e6ba8e7472d3b573d41b4e458c97d1f0164376cb24fdc38bce00df871938e65f46c3df4fc20e574581d6631d759c316af7f7709e05e9dc465b87234029ae78f071d892d5e7ab7fab90cbaba55acb3e654a18a5f0bf79d6e471d53b5fca51085a65534dbfa953379c4d4a0022f03da76fce767cfe2930992935ea897fc56dc23d377004d119c9b648986e402b035b7927e567db9019c915c0ab54e6e45435336e37d974a7ea3dfad73915badda2e0c32b87391e3226ef0509ec6a33462a246e62e0fb83065db0270c6c026415dfac7be0e7b1e790631347665e789ce6be41e7ea32b987465ca6a803508a52626d92858156920f841da0532854cd5c966f02911d10a4e12f687801d7b87891e0d7a1ed0279e3cbea3d73b3886e798d39460ef71ebafd803e3d367a0c67c31d502021a796e6c351caca55865902dea97edf28ca7f4da37d62e17df5245e52510e1d5bac6851e1a2bb2228aeb6add3c07bad5798176145d1b46d5ae3169581f2286f6ca3b09ce4c44df0031d6ed077e6af6226b6e21634037079331094fd3bcd0126d5c88069d1c240eba9a4ef943552dd69a2786301a0d94ba5f4afad155583d81cae6f68e600979674d05c5593ada14dccf11745118dfb6da366a15655469cc0fe0d31cabff9a84e40896f8726bb64bb0c548b8b7a7c031967ef8a38e85063eeeb48d271aa893cda1c66204cd3b2c35e27fa7dd972bc396283e24671b9f4c1bd9a4dcf30c8887864305b3f92ec1e678f85d552d411f8c2012bc77ae55d6d8a7c31bb6a9b80a530ef2900961a5c59fa0716f5b6ac2aa5b231005539414b2abb7ea3f7b4044e91e463f02e9c51891458084782209323f856148ed89c83d2fc194c127e47ae5bd711f5b130e6b21775090c6156cbe9737b33865b48489f4533945c4b9491add986d3095956796c1b217bf6b09ec63958fca7a9ec6b5435bb3fdbaca8a7520c7ba79098c47cd9208351b54e292509d4bc33bf40eaac6caa9f94d0918a7461e6bb8e8b259d3d90d641dec6612dc14b683ac4cbc217f6d108f666e66817867c70f3550d1ce37daf358cce35b8231fb70a4b1e302718163e5a628e8f653eeb25041290ef5f5289ec33dcec3bece209afaf2c4c8ed6145768ac945034473b01b63986f9882514722dd85df95448be18a59c5408ec8c95d203e7a4aebc68999c760d3f3929d0d28f7d8d0ea7c02a813515c5a82fc04cdcf20654c91af430aa34859a77eeca938842600afc6035605a0a9c01acdb164f2b2c3d4d7534c5292d08edb1adc446fedce1a14b7defb274051614de5157e8b5864f7ad8bf6d2f98515c07171afbb8c9d29a2202087bba880441bf68084d5bfdf3a7926ea2767a24bacdd5a6b98080b044071b3c21854333b84156771bbffe0458aed18e110ee0ec37f542b53afd04b76bbce6653d49434f0a8fe97d11cca1b211922bc48b0fa7526693889d0ae2b5a5f7746bd20803db5c57563137910efe92c6f4e0417978ac3af913d46fa9d49acf5f84de8e67f90b409bc78c30b58913f0149eab1629c1e8409190894f2591e208f3b61ed699670de4621675e9ca789cadb219013682d0655b785065dd4d2193f0a81b84f27330aa7a06fc09979239eff65b0327bd7887dd671bc4a51ca7dcca404fc24699a7703bdb1fe4b5175760f682531523ed75396e556b391b627035bbd9e323a004ec1875771b72f02af7711046a16e1df4fe22c8cc064bef1a401a430d2ed959aae3ab82db7a86b74821ed07dcf98ca76070b6e18fc749ef2ffeeec9585bd21aedaf8c05918bfd2f9ab1e1a6f023c0f2a2a418f5ecf711526525a165652eeab3ae16405ed177706844d1ca239f52641e0a66d89565d0b83cedc51d337496b2c5318cd5f44e6122c617387f85c3a6f76dc4d437e45f790c5f489bd56e56b8fa1e3111806429cd4ccf871b887ab9d8ee379f4cdd23bdbc476428ff912adcf7a84810c81943a778e57bbc3690911b5e046988dc85b7ccd09b7fc061f9259369601252aaeb4863d8d57796f1f4518130c911d1a331953663ef8a80fec491308297ccea77691fe14820aca10c6719c205988802791a54348222d6a34d9bf656696f396b27cfdea9d5b0e36838640d68ebe3be9ad72450232b66a5db274087e7a350a7d6abd95adf2557ee93154a966aab798b45c2fb1d5fa1f92db67a5bb2819e580dc15955249065189e4d1621c4517a67a76da14090a90b4da7272f57acc4228b49a1e5dc30002c11d03df9b60c382c026fac97ca1e389d6bb2af95494c2775b789988860478cb1e0a0e8e6a5b823fcaf6f8a031983408624a301bfad96784c9fe217e0c656cff8b65b3897a966c5ab572d269e30124ee813ac08ecec1aa40b73a3149e0647a00c612c0910878a079b5c163029435356473beced7fbc6ded2ee3e313082501fa91dc3ff05e4be525212ab350dceb9ac95c4f1db5399ea008b8609cb0c0f1a1319b9de77bbff478c197b9318005cf401a84f49499808fc403ea3ff9e1874d5ebe7997a0c03d977542c1877348da98f1d05641c9debd0dbba6b14ce8a83ac11de52ba7451cd1bb75f58ecc32676b3d00a76ce09e5695380ecc2e73f44ece11f77238d39696572e46761c7d5e638e94693591b70fffd8ab98b3294fc2614e3ce314a4947d0515baeab18ca4a23d479fa0a55d2950082cb770dbc34e138e9469f218a657dcdfee84cac9131cf6ad38000630aaf3fad747cb1dfc777188bafc927e7371ae2be48772afc09b6837784c8365c0ac6caac7de7ede4202ba8d28b18e6d20a217c30776f97546dc65822ff02be3be42f6043f828927ddcd693a7b691f9312aed70b5346cab9ff0d21e8783677bd71cd1b5e4975e588e121a90cdb6b4d3219effc8a868dd110f5cdfc119c121c84c2ad04189f84cec8f7d98d71ebb1f9793af002e2d645d7cfc03e3a4f61c28ff69f08024a93b8c712df64c83859374ae6d5575048d7baa3a0fab0ec0ecc731e3523d9deaebed7de16e9c6c453093de8738f8d7f4a244a6f15432cb494855c6c9b840d514af760c73b88099a66fc926b2f05befc766729f109ea436bbbb5ce2513fe654d7e0b379b49ed555cbddb8a690132417a31f48e530449ffe71d1f851acb1bdf245ec02dd39925782511c0d8930f17a14c54906d96a2daf27144914135cef344451982b50c71c1e5bf7d63f646fbdb749e2e9ce8e84ed334fb90d9ab7c6e7b265bdff840606ec572b035877e7d18cad3fa246ed000ec243d38da351fbea47a54dbea0942fbbf3fd9b00f19c21417159eedf477eb6af4ea228cde4ed64cc2d6890db81c74e5e08720dbea0f5364c1923cef7e0a883188a99896483d2977646bc9ebe9c8667fa68b3aa9cd961ad1dcaeba799eec564d20d771390c2ea12eb8cad0575d08320515c790155dcf477952c72c536e1bb2d6bdca553b02d23992129ce65d520c9f38bd385e37b98ac6c6974bd1fce4d53a7d11666ab3c04b6ff39f93ea50790aa027062d99c1486c5c692eefb05c29737b178526c91b62595f79396d40f2558148dd72652806ffd9fb334e744a2025070780d684dedb6db564fc76a5cf6f75766806e5c644bdb58c6c2aefe02a523f676aef200a3ea928810be43ec4367ec203edae43eedecb608cc48cde469217e36002b8419ba55ce00044a6d3590ba22c77001347c1545d07486d6a5f70ad9561fee62ee4eda80953218711d68ead9b38f3ef1012a952a572b38a5c90536754717799777574874b45e0b39e938ab2d31823bb1f44f965e225be271b69a9ccb32da2df01c65401df771f5e3e195ac977e627e3c4b522928d95391c1f6869ec2e340caf3f336e246d042da8fbe9702980babbb45067d82abebdfe34e3832c123575c479b66a33e22e47a5d8f7ee3c40fb538a3bb7a08ec13017f4c58f7ef769b7597f7252c8b6d0e4bbcefe0e32b4c1c92c5da2506d2be19bb6f71e662fb81f016404c96c50e4ad61dd3ba73746ce0489136d3b0414992f506900151bfbdf118a0e2f998f893560225da2c19280238cab9a986c747a265b22c0d6473f8248f83a3e155f4ee67cbde536b3c4dce586cc8d8ea15e55f3569ede91d29f9fdbaa88d20909f3dc3450e22ddb91722ed6e42f515db47259b74e25966408f4cab33177a74a038daf0967864330fc0be9f1f2b685cfa288bf89e72fecefca841fd0564a47826e586b6d4eb8dacbbfb0808a3255d5f69a8c56ca6e17f2041eff85aaa4eac86c1008d428d91237ec5e2cedad5383703ea7ca8e7dfb483ffd8e1f2abe1a90af170660f881f6cac3025087d72b6454bbc3f8b7308a27ee8a6e8294955903b0a69f66dbb4b6d7dfa2e726ebbdf91908990b042bd09ae9a6f6cd39a4d626f62b2efd8e85c02adeb492a9c97a4e883cd2660b570d0cf5b13c60fb58d60f07ca43b2b3a21843f85801c8d824d2bee451b86db0a61b45142a397372a3deb3bc10d80bf4f9907f5f3200c65f9cb6dd6411284ad5f7b837cb121c42b99f1e517569fc12b2606cb3f45daa0597a8aec824bfd4a31e4b17d5715ec48e8b9e666a5a9f881884b5d06cad31f1830d76db5bae7ef1833b727f6a15c0f32b8e561b41d4f286c74c901201ca52b95dd2b7bc930f5c7702eb282f4dce8dbb37f5137996967a07b0131da890e27edbbf5f5bcd3885889277d6faca161a138460fd1e70ef41179389c87338eb9eae94f2b8167e7e0683836b6153b7428ce1969da01b096eea0b4e7d5d85bb96037c17ee9ca630921367f17eb83845264fec0ecc866e58f845f2f32be57ea9d5c2c595f82efa6608c4c8946f0f56f3856fdaf3b8c0f78a017604521c727a136c2ac28c16ae19da2482c199eb7930fda5198f8269c774b8b2bd769c377a6f86416c2c3579e57a329e74021597aa1ed4e6da50806bdbdee831101cfa13b97e99fd512e43fa414f7b4cf1262c16b9e30ac4c34b108355ac16b6053751fb8c2f4eb4bbf7edcfbd0184f2250344e47bbfe9ca50f0e91e65c78270c58603c20679d739b454d1ec3301fd6b884d00d7539bdd3178126aca8ae37b9d8ecfcf14e62e653864d3ee4f1fae9ffb2197ed8a2455c90359b6a09910b79c2822f04bf07b6a27e01c9f1883fbcd08b7c26d7c8c25271338914cbc157dbbd0efada31709841831c71c1aaf111d0d46845d9aaeb7249dae34fdb050047ac38fbf0b746f33d6ea0baa5d4f7ddadeacb5831b7f9d5e219e4bae55d0b8594f52f0011badef967afef02884ce212c3341c340ee8fdca78e887b7bf2a98c31d1bb8a3969b8b4c939c362cd3edc19598fae9ccd82c88aabbad4c4ae278aa1b59d2003375cc932210f4a636af6c3126f200c8a7ac82d8226f244661ac6d73aa76edb53fa5b2216f645e873de27fbf580c7148fa72f992a220d1d4f499779e25c8b996c580a1165848d23088a6369957841653e291c7f520a8665997bf958ff7da53bef74eea85e3a1a3657945513137351cd4aab8499f23718abb8f66dd7d60e9775639e32ca1e8faacdb8f6b66d0b1b714af355773f1aed034f2e4cdaa17bac308dfd889bf123762b5c894de392a3081af84195438fdfd1868e2d978bf3ec1df5e81b9f8f6afdfbe3dc344f2a6dbf550080e403690d2ca7cfc0244014939aa79a8b3a0933e2bbc226385e3e4188a1ba2b37c34e02fd28c31f2c48d1a83294da501ab012d1d5e5fd26cd41ee71b4a150cf784486f9f6b5ab510cf07cf9792dd9e4d8bf48f06464fc957885d346fc501f21a07ac7fc71b9c01519cf4d2fa766d15eaf459fc429ace3a1a61ba078da7324ac06e65d7f36271f6898e8ccd673edeb25571c44606d7bde39d5195472e727bc7e2a2d1578328cdaf90400a7843f31793ad33d0f32885bf9b1f0e56d4a3ec40a1094e0ecec32a1712b88ff3008213795ffece882254753011c6988931fc9f19b5ad0891e20887b47ccf460e303842bb4c0b62163868e805b3bae6e4937a476e7eafe9fde0d0cf62223f714c69be6833c10d06f91a78016b1c00087415ac4a5b7b5e10f98a3e19adf60d56d5bee918c1c7ebbf7cfc37130ffae2ad7a620250c7387069ecc926f34069b717b97bf2a0ef0a2bf796034e88d30aa4235744a1aa5601ba718add8cd0cf38411f4787cd22e21dbacd9e480b13af38477a70d2a4800f680fa7cc8684fd467b86555422b1a901144b03e4327b2573769cb02de90e8e30df7afd2e571e2946d23a0efe02bac8e9698d12589378e28d1c36ce328a27abff98eca7b6da95daa681700397ce62c9b50a47cedeafd51b62e953413639a9d9978fb3e1604027751da66b5e481ec1e4697d64a4477c67ec2967e2389b6f716f77c810a62a5fd78c69907f4a4dc210db30d5d000000002c9c81f0dbeecb33a702f4860426e7d1c26d1a00ee4c62e3d671d545b26aab8ac758c53cea2250ed929aa715bf513a5fa242b78ddbc263990c42025ba2a52e368f6a18e2cfc0a6047e7f0e7187c3e36d61905cf0c1824a08e5c240ec56b04c909390322ce24f35001e8d5a599ffadbe2a8755920cc488f40be225110310d4e9e4d4cfa34f953c6f6cc6a5f8a89373739dc5da9445947fb58bec2c8e5b7f8c349d6df29e6a87336dd7bccb036139922faf14f3eeb92ba12d0084b1da8d36a3f9656414c0f32a1b2575a5147568ad96c2125701fc67d00e9d78788bfd0188276727d568bb0800a576913dbc5c1035fbcaa5359bc9b7fca0ef528903250be1a942e59727789ec61ee1ae617c3a23d3a89044a9ec729ef0cf7ec6a3d01e06e864c2e24c38a8389826c2cd471cca5cfd18a34050f24b99dcd26d418465a5e3623d7c9dffe7e65fc25f90710f42d00fb81b33a2db18d0ff7955c8d87ba8fdfe1186b638312505c7810dd0ead9c7722fcef542d2a73f107993e3ec78d3a0b15506ebd4d13a72384f77268b44c32a957aefda0bed253e76cb09012f104bd0c1f04e96b1fc60d08eb79ce9216fe1fde6ffe65d09056c9643ada21ef080b9da75c10f71ad334e4d3b5d3a0e55bd1ffcc18259cd28f6bbdfab16575cdcce86c95f894cd001e795cdaeac95c90d1ba94806ea2fdf45906eb7a2ba0613503f7aa7397e78c964ad3251d297ea76d88b4221efccb2c00", 0x2000, &(0x7f0000000d00)={&(0x7f00000080c0)={0x50, 0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x2020100, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0) 1m22.321687112s ago: executing program 0 (id=2189): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000180)={0x80, 0x1, 'client0\x00', 0x1, "896c81dd59ff28d2", "e5dbc741536b0e2fbb12e9338ec8dcb3e07c903fc30e8a11d477e3fb04eb2f74", 0x3, 0x4}) 1m21.30206835s ago: executing program 0 (id=2194): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1m20.618767713s ago: executing program 33 (id=2194): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 6.067373783s ago: executing program 3 (id=2830): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x3, 0x3e3}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8}) 5.779527994s ago: executing program 3 (id=2832): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) 2.886786469s ago: executing program 3 (id=2850): openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.65710718s ago: executing program 3 (id=2852): syz_genetlink_get_family_id$tipc2(&(0x7f0000000f40), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0xd, 0x3a, @empty, @empty, 0x7, 0x80, 0xfffffffc, 0xdc67}}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.64805325s ago: executing program 4 (id=2853): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in6=@loopback, 0xfffd, 0x1, 0x0, 0x0, 0xa}, {0x2, 0x6, 0x6, 0x0, 0x7, 0x4, 0x1}, {0x4000000005c, 0x7, 0xfffffffffffffff9, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d6, 0x32}, 0xa, @in6=@mcast2, 0xffffffde, 0x0, 0x2, 0x7f, 0x7}}, 0xe8) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x40040d4) 2.395335527s ago: executing program 4 (id=2855): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x7d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) read(r0, &(0x7f00000000c0)=""/175, 0x20) 2.309591492s ago: executing program 3 (id=2857): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r2}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 2.162900115s ago: executing program 3 (id=2859): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x40, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.095335067s ago: executing program 4 (id=2860): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0x30000018}) 2.032779056s ago: executing program 6 (id=2862): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000540)=""/51, 0x33) getdents(r1, 0xfffffffffffffffd, 0x58) 1.904399229s ago: executing program 6 (id=2864): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_drn={0x6e, 0x20, {0x6, 0x4}}], 0x20}) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000140)={0x10001}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.901590376s ago: executing program 5 (id=2865): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="af8d195ac29a", 0x6}], 0x1}}], 0x1, 0x44008090) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x4) 1.778830784s ago: executing program 5 (id=2866): r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = fanotify_init(0x202, 0x1000) r2 = open(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x500, 0x142) fanotify_mark(r1, 0x1, 0x48000013, r2, 0x0) 1.646046785s ago: executing program 1 (id=2867): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x1000) r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ptrace$peeksig(0x4209, r1, 0x0, 0x0) 1.591780901s ago: executing program 6 (id=2868): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x1, 0x83}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0xc86, 0x0, 0xe, 0x0, 0x0) 1.464966238s ago: executing program 1 (id=2869): r0 = socket(0x10, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xa0179e08}) epoll_wait(r1, &(0x7f00000002c0)=[{}, {}], 0x2, 0xdca) 1.305194171s ago: executing program 1 (id=2870): r0 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r0) ptrace(0x4208, r0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x5, 0x4002) 1.237224682s ago: executing program 6 (id=2871): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x7}, @timestamp], 0x59) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 1.045533935s ago: executing program 4 (id=2872): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f00007dc000/0x3000)=nil], 0x0, &(0x7f00000000c0), 0x0) 939.450214ms ago: executing program 6 (id=2873): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) r2 = syz_io_uring_setup(0x10e, &(0x7f00000001c0)={0x0, 0xfad6, 0x80, 0x5, 0x98}, &(0x7f00000003c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 770.075205ms ago: executing program 4 (id=2874): syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x80, &(0x7f00000001c0)=@string={0x80, 0x3, "255120b05a22beb99eeef6ebd65c9a16e1827ad2c38ac2f3b415647e3c722714952db2e3554fe8c555ccfba03c58d8ebbf84f04d17be5d87ee80081c5dc08cca7accb6fcd3e57bb65a1eec3b0c0198d1c1043d1663ad5fffc0b952b398ff2bab2380661e54dd085c847ae832ba666480cb697cf700394ae2e6404e43fe26"}}, {0x41, &(0x7f0000000340)=@string={0x41, 0x3, "dab3f1389bc660c57da79c152e1150cedaf574f8734b5828879c856719fea868bddaeb2c2ac47bddc32c14a0ee3d31fa9de65e934d01d171c99648bf0dbdac"}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) 767.683087ms ago: executing program 5 (id=2875): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) preadv2(r1, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/45, 0x2d}], 0x1, 0xfff, 0x2, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) close_range(r0, 0xffffffffffffffff, 0x0) 703.93776ms ago: executing program 6 (id=2876): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b6cec20ca08602058c60102030109024b0001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 572.92292ms ago: executing program 5 (id=2877): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) unshare(0x22020400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/135, &(0x7f0000000500), &(0x7f0000000280), 0x4, r1}, 0x38) 491.188204ms ago: executing program 5 (id=2878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_ACT={0x4}]}}]}, 0x38}}, 0x40) 359.255946ms ago: executing program 1 (id=2879): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x200, 0x8af, 0x8}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x7, 0x10200000}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 325.48692ms ago: executing program 5 (id=2880): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x20, 0x10, 0x3, "08bf40"}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x9}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x7}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB='@\x00='], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x40, 0x8, 0x1, 'c'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x8}}) 192.059488ms ago: executing program 1 (id=2881): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) read$FUSE(r0, &(0x7f0000004440)={0x2020}, 0x2020) 18.098686ms ago: executing program 1 (id=2882): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x8080000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000040)={0xd000, 0x19000}) 0s ago: executing program 4 (id=2883): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000440)={0x0, 0x0, 0x1, 'I'}, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): 970] usb 1-1: SerialNumber: syz [ 273.063712][ T5970] usb 1-1: config 0 descriptor?? [ 273.087013][T10451] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 273.092591][ T5224] bcm5974 2-1:0.0: could not read from device [ 273.104031][ T5970] hub 1-1:0.0: bad descriptor, ignoring hub [ 273.115531][ T5970] hub 1-1:0.0: probe with driver hub failed with error -5 [ 273.127046][ T5224] bcm5974 2-1:0.0: could not read from device [ 273.154334][ T5946] usb 2-1: USB disconnect, device number 26 [ 273.188589][ T5862] usb 4-1: Using ep0 maxpacket: 8 [ 273.221373][ T5862] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 273.255110][ T5862] usb 4-1: config 179 has no interface number 0 [ 273.284832][ T5862] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 273.325177][ T5862] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 273.355174][ T5862] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 273.392687][ T5862] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 273.449330][ T5862] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 273.473270][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.482806][ T5970] usb 1-1: USB disconnect, device number 28 [ 273.506991][T10462] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 273.824072][ T5862] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input43 [ 273.984089][T10491] loop7: detected capacity change from 0 to 7 [ 274.036865][ T55] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 274.129368][ T44] usb 4-1: USB disconnect, device number 31 [ 274.135470][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 274.135510][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 275.138830][ T5946] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 275.178665][ T5862] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 275.308431][ T5946] usb 1-1: Using ep0 maxpacket: 32 [ 275.319255][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.339674][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.353632][ T5946] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 275.368527][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.385576][ T5946] usb 1-1: config 0 descriptor?? [ 275.430442][ T5862] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 275.448572][ T5862] usb 5-1: config 0 has no interface number 0 [ 275.454756][ T5862] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 275.474490][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.517767][ T5862] usb 5-1: config 0 descriptor?? [ 275.561422][ T5862] usb 5-1: selecting invalid altsetting 1 [ 275.605249][ T5862] dvb_ttusb_budget: ttusb_init_controller: error [ 275.649533][ T5862] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 275.718685][ T5970] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 275.797119][ T5862] DVB: Unable to find symbol cx22700_attach() [ 275.878892][ T5970] usb 4-1: Using ep0 maxpacket: 8 [ 275.882830][ T5946] ft260 0003:0403:6030.0021: unknown main item tag 0x7 [ 275.897205][ T5862] DVB: Unable to find symbol tda10046_attach() [ 275.911835][ T5970] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 275.921243][ T5862] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 275.932563][ T5970] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 275.944172][ T5970] usb 4-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 275.953002][ T5862] usb 5-1: USB disconnect, device number 25 [ 275.987404][ T5970] usb 4-1: Product: syz [ 276.009182][ T5970] usb 4-1: Manufacturer: syz [ 276.013857][ T5970] usb 4-1: SerialNumber: syz [ 276.040066][ T5970] usb 4-1: config 0 descriptor?? [ 276.073624][ T5970] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 276.077828][ T5946] ft260 0003:0403:6030.0021: chip code: 6424 8183 [ 276.269013][ T5970] gspca_zc3xx: reg_w_i err -71 [ 276.279672][ T5946] ft260 0003:0403:6030.0021: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 276.298751][ T30] audit: type=1326 audit(1758794945.467:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.1.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bda38eec9 code=0x7ffc0000 [ 276.358213][ T30] audit: type=1326 audit(1758794945.477:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.1.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8bda38eec9 code=0x7ffc0000 [ 276.421719][ T30] audit: type=1326 audit(1758794945.477:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.1.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bda38eec9 code=0x7ffc0000 [ 276.444128][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.487670][T10539] input: syz0 as /devices/virtual/input/input44 [ 276.497031][ T30] audit: type=1326 audit(1758794945.477:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.1.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8bda38eec9 code=0x7ffc0000 [ 276.528698][ T30] audit: type=1326 audit(1758794945.487:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.1.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bda38eec9 code=0x7ffc0000 [ 276.580698][ T30] audit: type=1326 audit(1758794945.487:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.1.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bda38eec9 code=0x7ffc0000 [ 276.609524][ T30] audit: type=1326 audit(1758794945.527:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.1.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8bda38eec9 code=0x7ffc0000 [ 276.637638][ T30] audit: type=1326 audit(1758794945.527:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.1.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bda38eec9 code=0x7ffc0000 [ 276.661528][ T30] audit: type=1326 audit(1758794945.527:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.1.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bda38eec9 code=0x7ffc0000 [ 276.684468][ T30] audit: type=1326 audit(1758794945.537:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.1.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8bda38eec9 code=0x7ffc0000 [ 276.727965][ T5946] ft260 0003:0403:6030.0021: failed to retrieve status: -71 [ 276.746410][ T5946] ft260 0003:0403:6030.0021: failed to reset I2C controller: -71 [ 276.802057][ T5946] usb 1-1: USB disconnect, device number 29 [ 276.872333][ T5970] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 276.904118][ T5970] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 276.941690][ T5970] usb 4-1: USB disconnect, device number 32 [ 277.295343][T10553] dlm: non-version read from control device 4 [ 277.308534][ T5970] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 277.490397][ T5970] usb 4-1: Using ep0 maxpacket: 8 [ 277.513673][ T5970] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 277.543982][ T5970] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 277.568553][ T5970] usb 4-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 277.589959][ T5970] usb 4-1: Product: syz [ 277.602134][ T5970] usb 4-1: Manufacturer: syz [ 277.606827][ T5970] usb 4-1: SerialNumber: syz [ 277.644399][ T5970] usb 4-1: config 0 descriptor?? [ 277.670470][ T5970] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 277.776890][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1850'. [ 278.305939][ T5970] gspca_zc3xx: reg_w_i err -71 [ 278.908545][ T5970] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 278.936398][ T5970] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 278.976487][ T5970] usb 4-1: USB disconnect, device number 33 [ 279.814539][T10618] netlink: 'syz.3.1870': attribute type 4 has an invalid length. [ 280.340572][T10625] pim6reg1: entered promiscuous mode [ 280.350805][T10625] pim6reg1: entered allmulticast mode [ 281.152458][T10655] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 281.367113][T10662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.858385][ T44] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 282.033149][ T44] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 282.052474][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 282.078510][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 282.102517][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.134375][ T44] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.145639][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.175344][ T44] usb 5-1: config 0 descriptor?? [ 282.181260][T10668] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 282.622739][ T44] plantronics 0003:047F:FFFF.0022: reserved main item tag 0xd [ 282.698917][ T44] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 282.943400][ T44] usb 5-1: USB disconnect, device number 26 [ 283.221856][T10703] netlink: 146780 bytes leftover after parsing attributes in process `syz.2.1902'. [ 283.453508][ T44] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 283.640120][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 283.653848][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.665128][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.684663][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 283.731273][ T44] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 283.740884][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.779923][ T44] usb 4-1: config 0 descriptor?? [ 283.847789][ T5959] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 284.022651][ T5959] usb 5-1: Using ep0 maxpacket: 32 [ 284.043304][ T5959] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 284.065504][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.123893][ T5959] usb 5-1: config 0 descriptor?? [ 284.153488][ T5959] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 284.223527][ T44] HID 045e:07da: Invalid code 65791 type 1 [ 284.241893][T10735] bridge: RTM_NEWNEIGH with invalid ether address [ 284.270412][ T44] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0023/input/input46 [ 284.284149][T10735] bridge: RTM_NEWNEIGH with invalid ether address [ 284.339847][ T44] microsoft 0003:045E:07DA.0023: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 284.451025][ T44] usb 4-1: USB disconnect, device number 34 [ 284.636155][T10742] fido_id[10742]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 284.768136][T10751] netlink: 'syz.2.1923': attribute type 29 has an invalid length. [ 284.777911][T10751] netlink: 'syz.2.1923': attribute type 29 has an invalid length. [ 284.878619][ T5970] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 285.052951][ T5970] usb 2-1: Using ep0 maxpacket: 8 [ 285.089827][ T5970] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 285.101542][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.115853][ T5970] usb 2-1: config 0 descriptor?? [ 285.218447][ T44] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 285.334961][ T5970] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 285.400905][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 285.410997][ T44] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 285.420170][ T5959] gspca_vc032x: reg_w err -71 [ 285.425183][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.437004][ T44] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 285.441154][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.457618][ T44] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 285.469760][ T44] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 285.473202][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.494222][ T44] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.495880][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.528533][ T44] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 285.546914][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.555263][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.555280][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.555291][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.555301][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.555312][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.555322][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.555333][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.555344][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.555354][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.555364][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.555375][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.621842][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.627181][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.633191][ T5959] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.638874][ T5959] gspca_vc032x: Unknown sensor... [ 285.644583][ T5959] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 285.666211][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1926'. [ 285.675709][ T5959] usb 5-1: USB disconnect, device number 27 [ 285.829687][T10762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1928'. [ 285.862924][ T44] usb 3-1: GET_CAPABILITIES returned 0 [ 285.897308][ T44] usbtmc 3-1:16.0: can't read capabilities [ 286.187633][ T44] usb 3-1: USB disconnect, device number 27 [ 286.193879][T10755] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 286.354154][ T5970] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 286.377720][ T5970] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 286.454429][ T5970] asix 2-1:0.0: probe with driver asix failed with error -71 [ 286.510797][ T5970] usb 2-1: USB disconnect, device number 27 [ 287.001547][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1939'. [ 287.189738][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 287.189758][ T30] audit: type=1326 audit(1758794956.367:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10793 comm="syz.1.1941" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8bda38eec9 code=0x0 [ 287.610564][ T5970] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 287.635404][T10806] loop5: detected capacity change from 0 to 7 [ 287.745519][T10810] binder: 10809:10810 ioctl c0306201 2000000001c0 returned -22 [ 287.788746][ T5970] usb 4-1: Using ep0 maxpacket: 16 [ 287.800546][ T5970] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.829253][ T5970] usb 4-1: config 0 interface 0 has no altsetting 0 [ 287.860772][ T5970] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 287.957104][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.021054][ T5970] usb 4-1: config 0 descriptor?? [ 288.538958][ T5970] nzxt-smart2 0003:1E71:2009.0024: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 288.676418][T10839] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.905820][ T10] usb 4-1: USB disconnect, device number 35 [ 289.543361][T10862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.724955][T10864] netlink: 'syz.3.1973': attribute type 3 has an invalid length. [ 290.238971][ T5946] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 290.398386][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 290.415856][ T5946] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 290.442811][ T5946] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.464784][ T5946] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.485278][ T5946] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.505232][ T5946] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.529821][ T5946] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.560043][ T5946] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.608802][ T5946] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.645244][ T5946] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.672581][ T5946] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 290.692576][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 290.727131][ T5946] usb 5-1: SerialNumber: syz [ 290.748170][ T5946] usb 5-1: config 0 descriptor?? [ 290.780857][ T5946] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input48 [ 290.817857][ T6824] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.993193][ T5224] bcm5974 5-1:0.0: could not read from device [ 290.999397][ T6824] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.040005][ T5224] bcm5974 5-1:0.0: could not read from device [ 291.056178][ T5946] usb 5-1: USB disconnect, device number 28 [ 291.087543][ T5224] bcm5974 5-1:0.0: could not read from device [ 291.098239][ T6824] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.233445][ T6824] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.352681][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1991'. [ 291.635680][ T6824] bridge_slave_1: left allmulticast mode [ 291.678583][ T6824] bridge_slave_1: left promiscuous mode [ 291.710504][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.849441][ T6824] bridge_slave_0: left allmulticast mode [ 291.858473][ T6824] bridge_slave_0: left promiscuous mode [ 291.864372][ T6824] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.281474][ T5874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 292.304081][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 292.312894][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.333587][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 292.343794][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 292.539627][T10935] loop4: detected capacity change from 0 to 2560 [ 292.585926][T10935] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 292.630931][T10935] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 292.664555][T10935] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 292.705989][T10935] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 292.753417][T10935] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 292.774984][T10935] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 292.799155][T10935] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 292.808662][T10935] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 292.817312][T10935] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 292.828025][T10935] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 293.622859][ T919] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 293.669864][ T6824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.679103][ T919] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 293.743636][ T6824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.796135][ T6824] bond0 (unregistering): Released all slaves [ 294.431714][ T5883] Bluetooth: hci0: command tx timeout [ 295.098470][ T6824] hsr_slave_0: left promiscuous mode [ 295.116333][ T6824] hsr_slave_1: left promiscuous mode [ 295.128938][ T5862] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 295.151922][ T6824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.205350][ T6824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.266045][ T6824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.280957][ T6824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.320987][ T6824] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 295.333318][ T5862] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 295.346549][ T6824] batman_adv: batadv0: Removing interface: virt_wifi0 [ 295.348357][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.388688][ T5862] usb 1-1: Product: syz [ 295.393603][ T5862] usb 1-1: Manufacturer: syz [ 295.398236][ T5862] usb 1-1: SerialNumber: syz [ 295.506592][ T6824] veth1_macvtap: left promiscuous mode [ 295.516867][T11010] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2023'. [ 295.534396][ T5862] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 295.538576][ T6824] veth0_macvtap: left promiscuous mode [ 295.553638][ T6824] veth1_vlan: left promiscuous mode [ 295.566685][ T6824] veth0_vlan: left promiscuous mode [ 295.586671][ T5970] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 295.611253][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2023'. [ 295.841588][ T5862] usb 1-1: USB disconnect, device number 30 [ 296.496774][ T30] audit: type=1326 audit(1758794965.677:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.2031" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f821438eec9 code=0x0 [ 296.511154][ T5883] Bluetooth: hci0: command tx timeout [ 296.518658][ C1] vkms_vblank_simulate: vblank timer overrun [ 296.669667][ T5970] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 296.696372][ T5970] ath9k_htc: Failed to initialize the device [ 296.740661][ T5862] usb 1-1: ath9k_htc: USB layer deinitialized [ 296.903558][ T6824] team0 (unregistering): Port device team_slave_1 removed [ 297.026938][ T6824] team0 (unregistering): Port device team_slave_0 removed [ 297.037024][T11038] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.175839][T11042] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2035'. [ 297.193741][T11041] sctp: [Deprecated]: syz.1.2034 (pid 11041) Use of int in max_burst socket option. [ 297.193741][T11041] Use struct sctp_assoc_value instead [ 298.592174][ T5883] Bluetooth: hci0: command tx timeout [ 299.026386][T11068] kvm: kvm [11067]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 299.256160][T10932] chnl_net:caif_netlink_parms(): no params data found [ 299.411274][T11075] tipc: Started in network mode [ 299.418857][T11075] tipc: Node identity ac14140f, cluster identity 4711 [ 299.463959][T11075] tipc: New replicast peer: 255.255.255.255 [ 299.519424][T11075] tipc: Enabled bearer , priority 10 [ 300.279309][T10932] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.286503][T10932] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.318883][T10932] bridge_slave_0: entered allmulticast mode [ 300.345299][T10932] bridge_slave_0: entered promiscuous mode [ 300.387200][T10932] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.442180][T10932] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.474334][T10932] bridge_slave_1: entered allmulticast mode [ 300.512667][T10932] bridge_slave_1: entered promiscuous mode [ 300.640493][ T5959] tipc: Node number set to 2886997007 [ 300.669119][ T5883] Bluetooth: hci0: command tx timeout [ 300.821010][T10932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.854260][T10932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.988476][ T5959] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 301.040559][T10932] team0: Port device team_slave_0 added [ 301.168438][ T5959] usb 5-1: Using ep0 maxpacket: 16 [ 301.186736][ T5959] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 301.205262][ T5959] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 301.225722][ T5959] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 301.244571][ T5959] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 0.40 [ 301.258059][T10932] team0: Port device team_slave_1 added [ 301.264033][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.279027][ T5959] usb 5-1: Product: syz [ 301.292208][ T5959] usb 5-1: Manufacturer: syz [ 301.305212][ T5959] usb 5-1: SerialNumber: syz [ 301.427415][T10932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.457236][T10932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.549710][ T5959] usb 5-1: 0:2 : does not exist [ 301.575493][T10932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.590727][ T5959] usb 5-1: USB disconnect, device number 29 [ 301.615132][T10932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.636831][T10932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.708443][T10932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.753252][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.027035][T10932] hsr_slave_0: entered promiscuous mode [ 302.052881][T10932] hsr_slave_1: entered promiscuous mode [ 302.110900][T10932] debugfs: 'hsr0' already exists in 'hsr' [ 302.116682][T10932] Cannot create hsr debugfs directory [ 303.433606][T10932] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 303.557519][T10932] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 303.614350][T10932] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 303.664444][T10932] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 303.858638][ T5862] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 303.878680][ T5970] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 303.913073][T10932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.934521][T10932] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.002388][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.009651][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.048597][ T5970] usb 5-1: Using ep0 maxpacket: 8 [ 304.053809][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 304.055126][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.066141][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.067029][ T5862] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 304.094004][ T5970] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 304.105520][ T5970] usb 5-1: config 179 has no interface number 0 [ 304.121213][ T5862] usb 2-1: config 0 has no interface number 0 [ 304.137640][ T5970] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 304.154248][ T5862] usb 2-1: config 0 interface 184 has no altsetting 0 [ 304.178254][ T5970] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 304.202415][ T5862] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 304.222061][ T5970] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 304.238479][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.256758][ T5862] usb 2-1: Product: syz [ 304.265633][ T5970] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 304.295756][ T5862] usb 2-1: Manufacturer: syz [ 304.308598][ T5862] usb 2-1: SerialNumber: syz [ 304.319488][ T5970] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 304.339424][ T5862] usb 2-1: config 0 descriptor?? [ 304.363316][ T5862] smsc75xx v1.0.0 [ 304.367105][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.390283][T10932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.414822][T11169] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 304.588417][T10932] veth0_vlan: entered promiscuous mode [ 304.640431][T10932] veth1_vlan: entered promiscuous mode [ 304.750047][ T5970] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input49 [ 304.810847][T10932] veth0_macvtap: entered promiscuous mode [ 304.840658][T10932] veth1_macvtap: entered promiscuous mode [ 304.961680][T10932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.971517][ T5862] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 305.003626][ T5862] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 305.005999][ T10] usb 5-1: USB disconnect, device number 30 [ 305.012927][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 305.012995][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 305.065548][T10932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.128560][ T6826] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.157321][ T6826] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.189138][ T1161] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.233118][ T1161] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.436459][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.465385][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.473791][ T5862] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 305.508374][ T5862] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 305.538490][ T5862] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 305.563020][ T5862] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 305.578728][ T6826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.587087][ T5862] usb 2-1: USB disconnect, device number 28 [ 305.598566][ T6826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.534653][ T5939] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 306.718413][ T5970] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 306.726615][ T5939] usb 6-1: config 0 has no interfaces? [ 306.782869][ T5939] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 306.801613][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.812560][ T5939] usb 6-1: Product: syz [ 306.816769][ T5939] usb 6-1: Manufacturer: syz [ 306.822719][ T5939] usb 6-1: SerialNumber: syz [ 306.872836][ T5939] usb 6-1: config 0 descriptor?? [ 306.918240][ T5970] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 306.927455][ T5970] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.961832][ T5970] usb 5-1: config 0 interface 0 has no altsetting 0 [ 306.986053][ T5970] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 307.007882][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 307.016656][ T5970] usb 5-1: Product: syz [ 307.026770][ T5970] usb 5-1: Manufacturer: syz [ 307.052377][ T5970] usb 5-1: SerialNumber: syz [ 307.078785][ T5970] usb 5-1: config 0 descriptor?? [ 307.089740][ T5970] hub 5-1:0.0: bad descriptor, ignoring hub [ 307.095744][ T5970] hub 5-1:0.0: probe with driver hub failed with error -5 [ 307.211556][ T5970] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 307.216009][T11200] netlink: 'syz.5.2080': attribute type 16 has an invalid length. [ 307.233409][T11227] batadv_slave_1: entered promiscuous mode [ 307.240352][T11200] netlink: 'syz.5.2080': attribute type 17 has an invalid length. [ 307.271130][T11227] batadv_slave_1: left promiscuous mode [ 307.279434][T11226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2091'. [ 307.295077][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.370745][T11200] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 307.426179][ T10] usb 6-1: USB disconnect, device number 2 [ 307.502225][T11226] 8021q: adding VLAN 0 to HW filter on device bond1 [ 307.523990][T11230] bond1: (slave batadv1): Opening slave failed [ 307.578595][ T5946] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 307.629135][ T5970] usb 5-1: reset high-speed USB device number 31 using dummy_hcd [ 307.738568][ T5946] usb 4-1: Using ep0 maxpacket: 16 [ 307.745729][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.749958][T11239] binder: 11238:11239 ioctl c0306201 2000000003c0 returned -14 [ 307.762222][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.774454][ T5946] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 307.800502][ T5946] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 307.818464][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.834111][ T5946] usb 4-1: config 0 descriptor?? [ 307.941786][T11246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2099'. [ 307.985295][T11246] bond2: entered promiscuous mode [ 307.992304][T11246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 308.176068][T11248] 8021q: adding VLAN 0 to HW filter on device bond2 [ 308.184538][T11248] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 308.199754][T11248] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 308.291161][ T5946] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 308.323839][ T5946] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 308.339285][ T5946] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 308.364924][ T5946] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0026/input/input50 [ 308.370259][ T5970] usb 5-1: USB disconnect, device number 31 [ 308.481864][ T5946] microsoft 0003:045E:07DA.0026: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 308.525186][ T5946] usb 4-1: USB disconnect, device number 36 [ 308.723408][T11255] fido_id[11255]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 309.328752][ T5973] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 309.491435][ T5973] usb 2-1: Using ep0 maxpacket: 32 [ 309.515936][ T5973] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 309.528794][ T5970] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 309.547505][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.571734][ T5973] usb 2-1: config 0 descriptor?? [ 309.582391][ T5973] gspca_main: sunplus-2.14.0 probing 041e:400b [ 309.698564][ T5970] usb 1-1: Using ep0 maxpacket: 32 [ 309.714659][ T5970] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 309.726393][ T5970] usb 1-1: config 0 has no interface number 0 [ 309.748101][ T5970] usb 1-1: config 0 interface 230 has no altsetting 0 [ 309.758014][T11293] veth0: entered promiscuous mode [ 309.768092][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2116'. [ 309.779837][ T5970] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 309.798898][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.811995][ T5970] usb 1-1: Product: syz [ 309.816239][ T5970] usb 1-1: Manufacturer: syz [ 309.822141][ T5970] usb 1-1: SerialNumber: syz [ 309.846054][ T5970] usb 1-1: config 0 descriptor?? [ 309.859161][ T5970] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 309.893214][ T5970] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 310.298483][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 310.468947][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 310.475953][ T10] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 310.484865][ T10] usb 6-1: config 0 has no interface number 0 [ 310.493441][ T10] usb 6-1: config 0 interface 184 has no altsetting 0 [ 310.504754][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 310.515784][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.524080][ T10] usb 6-1: Product: syz [ 310.528430][ T10] usb 6-1: Manufacturer: syz [ 310.533055][ T10] usb 6-1: SerialNumber: syz [ 310.547713][ T10] usb 6-1: config 0 descriptor?? [ 310.558151][ T10] smsc75xx v1.0.0 [ 310.781661][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 310.797077][ T10] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 310.815461][ T5973] gspca_sunplus: reg_w_riv err -71 [ 310.821250][ T5973] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 310.822416][ T10] usb 6-1: USB disconnect, device number 3 [ 310.855373][ T5973] usb 2-1: USB disconnect, device number 29 [ 310.939225][ T5946] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 311.098555][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 311.117802][ T5946] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.129626][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 311.136322][ T5946] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 311.145830][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.147354][T11322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2127'. [ 311.169904][ T5946] usb 5-1: config 0 descriptor?? [ 311.186225][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.186390][T11322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2127'. [ 311.202140][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.221711][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.231955][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.546308][T11334] loop2: detected capacity change from 0 to 7 [ 311.562196][T11334] loop2: [POWERTEC] p1 p2 p3 [ 311.573979][T11334] loop2: p1 start 65535 is beyond EOD, truncated [ 311.594522][T11334] loop2: p2 start 1627389952 is beyond EOD, truncated [ 311.620388][ T5946] corsair 0003:1B1C:1B34.0027: hidraw0: USB HID v0.05 Device [HID 1b1c:1b34] on usb-dummy_hcd.4-1/input0 [ 311.638585][T11334] loop2: p3 start 33554783 is beyond EOD, truncated [ 311.840788][ T919] usb 5-1: USB disconnect, device number 32 [ 311.927362][T11344] ALSA: seq fatal error: cannot create timer (-16) [ 312.149942][ T5970] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 312.937104][T11370] input: syz1 as /devices/virtual/input/input51 [ 313.477662][ T5946] usb 1-1: USB disconnect, device number 31 [ 314.747657][T11422] input: syz1 as /devices/virtual/input/input52 [ 315.928995][T11459] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2178'. [ 317.709948][ T5939] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 317.939002][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.970134][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.019495][ T5939] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.089620][ T5939] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.113737][T11514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2191'. [ 318.131892][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.178242][ T5939] usb 5-1: config 0 descriptor?? [ 318.648850][ T5939] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 318.792792][ T33] team0: Port device netdevsim0 removed [ 319.324156][ T33] bridge_slave_1: left allmulticast mode [ 319.344987][ T33] bridge_slave_1: left promiscuous mode [ 319.354857][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.385098][ T33] bridge_slave_0: left allmulticast mode [ 319.406338][ T33] bridge_slave_0: left promiscuous mode [ 319.440722][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.924309][ C0] plantronics 0003:047F:FFFF.0028: usb_submit_urb(ctrl) failed: -1 [ 319.945310][ T5970] usb 5-1: USB disconnect, device number 33 [ 320.156117][ T5874] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.170695][ T5874] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.191628][ T5874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.220193][ T5874] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.239596][ T5874] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.828807][ T33] bond0 (unregistering): left promiscuous mode [ 320.839935][ T33] bond_slave_0: left promiscuous mode [ 320.847152][ T33] bond_slave_1: left promiscuous mode [ 320.868583][ T33] dummy0: left promiscuous mode [ 320.876448][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.910186][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.936537][ T33] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 320.961236][ T33] bond0 (unregistering): Released all slaves [ 321.004897][ T33] bond1 (unregistering): Released all slaves [ 322.218052][T11562] chnl_net:caif_netlink_parms(): no params data found [ 322.241345][T11620] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2223'. [ 322.268748][ T5883] Bluetooth: hci1: command tx timeout [ 322.351740][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.370252][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.413204][ T33] batadv0: left promiscuous mode [ 322.444836][ T33] hsr_slave_0: left promiscuous mode [ 322.455931][ T33] hsr_slave_1: left promiscuous mode [ 322.487184][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.541582][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.617924][T11659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 323.972677][ T33] team0 (unregistering): Port device team_slave_1 removed [ 324.133572][ T33] team0 (unregistering): Port device team_slave_0 removed [ 324.348880][ T5883] Bluetooth: hci1: command tx timeout [ 324.911618][ T5862] IPVS: starting estimator thread 0... [ 324.924350][T11672] IPVS: nq: FWM 3 0x00000003 - no destination available [ 325.019926][T11673] IPVS: using max 31 ests per chain, 74400 per kthread [ 325.073416][ T919] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 325.251931][ T919] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.280727][ T919] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 325.301270][ T919] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 325.322388][ T919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.339543][ T919] usb 6-1: Product: syz [ 325.351335][ T919] usb 6-1: Manufacturer: syz [ 325.355982][ T919] usb 6-1: SerialNumber: syz [ 325.601643][T11668] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 325.792841][T11562] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.807426][T11562] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.824718][T11562] bridge_slave_0: entered allmulticast mode [ 325.844435][T11562] bridge_slave_0: entered promiscuous mode [ 325.860501][T11562] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.867909][T11562] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.878841][T11562] bridge_slave_1: entered allmulticast mode [ 325.887890][T11562] bridge_slave_1: entered promiscuous mode [ 325.939201][T11694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 326.039907][T11562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.077992][T11562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.200567][T11562] team0: Port device team_slave_0 added [ 326.227758][T11562] team0: Port device team_slave_1 added [ 326.251070][T11668] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 326.376461][T11562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.388095][T11562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.423723][T11562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.435166][ T5883] Bluetooth: hci1: command tx timeout [ 326.440775][ T5939] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 326.474466][ T919] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 326.482643][T11562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.486304][ T919] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 326.497844][T11562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.534497][T11562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.547348][ T919] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 326.610363][ T5939] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 326.626743][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 326.650730][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 326.675138][ T919] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 326.682878][ T5939] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 326.708135][ T5939] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 326.724383][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.745632][ T919] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 326.777067][ T5939] usb 4-1: config 0 descriptor?? [ 326.820364][ T919] usb 6-1: USB disconnect, device number 4 [ 326.874711][ T919] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 326.985906][T11562] hsr_slave_0: entered promiscuous mode [ 326.997345][T11562] hsr_slave_1: entered promiscuous mode [ 327.308037][ T5939] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 327.461431][T11732] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.811119][T11562] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 327.837620][T11562] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 327.862228][T11562] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 327.896930][T11562] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 328.294697][T11562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.440121][T11562] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.510072][ T5883] Bluetooth: hci1: command tx timeout [ 328.540168][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.547441][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.702510][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.709737][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.070548][T11562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.072084][T11771] input: syz0 as /devices/virtual/input/input54 [ 329.273672][T11562] veth0_vlan: entered promiscuous mode [ 329.362711][T11562] veth1_vlan: entered promiscuous mode [ 329.426639][ T980] usb 4-1: USB disconnect, device number 37 [ 329.525479][T11562] veth0_macvtap: entered promiscuous mode [ 329.582407][T11781] hsr0: entered allmulticast mode [ 329.587516][T11781] hsr_slave_0: entered allmulticast mode [ 329.660857][T11781] hsr_slave_1: entered allmulticast mode [ 329.684812][T11562] veth1_macvtap: entered promiscuous mode [ 329.724303][T11781] hsr_slave_0: left promiscuous mode [ 329.732610][T11781] hsr_slave_1: left promiscuous mode [ 329.789064][T11781] hsr0 (unregistering): left allmulticast mode [ 329.865378][T11562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.923630][T11562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.996176][ T33] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.041920][ T1343] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.114777][ T1343] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.148394][ T1343] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.521297][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.540309][ T919] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 330.546523][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.752680][ T919] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 330.798690][ T1343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.799269][ T919] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 330.806838][ T1343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.827401][ T919] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 330.879865][ T919] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 330.932262][T11812] kvm: Disabled LAPIC found during irq injection [ 330.932410][ T919] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 330.940846][T11812] kvm: apic: phys broadcast and lowest prio [ 331.020201][ T919] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 331.104254][ T919] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 331.128347][ T919] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 331.137028][ T919] usb 6-1: Product: syz [ 331.165488][ T919] usb 6-1: Manufacturer: syz [ 331.211521][T11802] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 331.255174][ T919] cdc_wdm 6-1:1.0: skipping garbage [ 331.269592][ T919] cdc_wdm 6-1:1.0: skipping garbage [ 331.281035][ T919] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 331.291574][ T919] cdc_wdm 6-1:1.0: Unknown control protocol [ 331.553307][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 331.554245][ T5939] usb 6-1: USB disconnect, device number 5 [ 331.560193][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 331.560217][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 333.257905][ T5939] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 333.480942][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.522269][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.574521][ T5939] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 333.668429][ T5939] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 333.722663][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.785855][ T5939] usb 4-1: config 0 descriptor?? [ 334.198631][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 334.234880][ T5939] plantronics 0003:047F:FFFF.002A: reserved main item tag 0xd [ 334.311046][ T5939] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 334.438448][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 334.474420][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 334.513371][ T10] usb 2-1: config 0 has no interface number 0 [ 334.521608][ T5939] usb 4-1: USB disconnect, device number 38 [ 334.549645][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 334.571120][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 334.608376][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.638222][ T10] usb 2-1: Product: syz [ 334.648892][T11906] fido_id[11906]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 334.672192][ T10] usb 2-1: Manufacturer: syz [ 334.687131][ T10] usb 2-1: SerialNumber: syz [ 334.749432][ T10] usb 2-1: config 0 descriptor?? [ 334.783128][ T10] smsc75xx v1.0.0 [ 335.281803][T11922] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2322'. [ 335.322462][T11922] netlink: 'syz.6.2322': attribute type 5 has an invalid length. [ 335.361922][T11922] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2322'. [ 335.496908][ T33] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.525033][ T33] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.558652][T11925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2323'. [ 335.583840][ T33] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.599109][T11925] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2323'. [ 335.603445][ T33] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.625583][T11925] netlink: 'syz.5.2323': attribute type 15 has an invalid length. [ 335.769967][T11925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2323'. [ 335.802599][T11925] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2323'. [ 335.848414][T11925] netlink: 'syz.5.2323': attribute type 15 has an invalid length. [ 335.996188][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 336.036100][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 336.049040][ T5939] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 336.064178][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 336.091756][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 336.111902][T11931] netlink: 'syz.3.2325': attribute type 1 has an invalid length. [ 336.118497][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 336.161658][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 336.179127][ T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 336.193477][ T10] usb 2-1: USB disconnect, device number 30 [ 336.238406][ T5939] usb 7-1: Using ep0 maxpacket: 16 [ 336.253543][ T5939] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.268753][ T5939] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 336.281236][ T5939] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 336.291096][ T5939] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 336.302526][ T5939] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.317096][ T5939] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 336.334225][ T5939] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 336.343042][ T5939] usb 7-1: Manufacturer: syz [ 336.361174][ T5939] usb 7-1: config 0 descriptor?? [ 336.366198][T11931] 8021q: adding VLAN 0 to HW filter on device bond2 [ 336.456905][T11934] bond2: (slave geneve2): making interface the new active one [ 336.486081][T11934] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 336.828941][ T5939] rc_core: IR keymap rc-hauppauge not found [ 336.836224][ T5939] Registered IR keymap rc-empty [ 336.851344][ T5939] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 336.898871][ T5939] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 336.950146][ T5939] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 336.975301][ T5939] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input56 [ 337.032096][ T5939] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 337.058378][ T980] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 337.072318][ T5939] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 337.099870][ T5939] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 337.219187][ T5939] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 337.267748][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.281340][ T5939] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 337.294061][ T980] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 337.305773][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.318023][ T5939] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 337.332325][T11958] tipc: Started in network mode [ 337.340185][ T980] usb 4-1: config 0 descriptor?? [ 337.349229][ T5939] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 337.357076][T11958] tipc: Node identity ac14142f, cluster identity 4711 [ 337.377777][ T5939] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 337.400492][T11958] tipc: New replicast peer: 0.0.0.0 [ 337.428014][T11958] tipc: Enabled bearer , priority 10 [ 337.438495][ T5939] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 337.459326][T11959] tipc: New replicast peer: 255.255.255.255 [ 337.479759][ T5939] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 337.521184][ T5939] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 337.578571][ T5939] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 337.597669][ T980] usbhid 4-1:0.0: can't add hid device: -71 [ 337.620368][ T980] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 337.639200][ T5939] usb 7-1: USB disconnect, device number 2 [ 337.661482][ T980] usb 4-1: USB disconnect, device number 39 [ 338.118656][ T980] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 338.305004][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 338.327359][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.357272][ T980] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 338.371332][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.393825][ T980] usb 4-1: config 0 descriptor?? [ 338.548404][ T5862] tipc: Node number set to 2886997039 [ 338.845911][ T980] mcp2221 0003:04D8:00DD.002B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 339.263292][ T980] usb 4-1: USB disconnect, device number 40 [ 339.680173][T12014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 340.198579][ T5939] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 340.381918][ T5939] usb 4-1: Using ep0 maxpacket: 16 [ 340.399662][ T5939] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 340.407809][ T5939] usb 4-1: config 0 has no interface number 0 [ 340.459666][ T5939] usb 4-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30 [ 340.484152][ T5939] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 340.510494][ T5939] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 340.564579][ T5939] usb 4-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 340.667438][ T5939] usb 4-1: config 0 interface 41 has no altsetting 0 [ 340.715269][ T5939] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 340.748467][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.798414][ T5939] usb 4-1: Product: syz [ 340.802870][ T5939] usb 4-1: Manufacturer: syz [ 340.807500][ T5939] usb 4-1: SerialNumber: syz [ 340.871647][ T5939] usb 4-1: config 0 descriptor?? [ 340.897531][T12023] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 340.909049][ T5862] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 340.909582][T12023] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 341.062518][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.084032][ T5862] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 341.101650][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.135948][ T5862] usb 2-1: config 0 descriptor?? [ 341.148546][ T5973] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 341.186513][T12023] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 341.194601][T12023] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 341.322546][ T5973] usb 6-1: Using ep0 maxpacket: 8 [ 341.341221][ T5973] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.351665][ T5973] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.362175][ T5973] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 341.380787][ T5973] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.406499][ T5973] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 341.431072][ T5973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.624800][ T5862] steelseries 0003:1038:12B6.002C: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 341.683216][ T5973] usb 6-1: GET_CAPABILITIES returned 0 [ 341.698558][ T5973] usbtmc 6-1:16.0: can't read capabilities [ 341.831332][ T5939] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 341.887926][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 341.897111][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 341.906239][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 341.916832][ T5973] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 341.927527][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 341.936654][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 341.946495][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 341.955627][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 341.964729][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 341.975034][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 341.984148][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 341.993280][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.002387][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.011479][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.020590][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.029685][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.038773][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 342.056856][ T5862] usb 6-1: USB disconnect, device number 6 [ 342.066655][ T5939] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 342.098754][ T5970] usb 2-1: USB disconnect, device number 31 [ 342.105770][ T5939] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 342.121478][ T5939] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 342.138552][ T5973] usb 7-1: Using ep0 maxpacket: 16 [ 342.146025][ T5973] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 342.155416][ T5973] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.168144][ T5973] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.186016][ T5939] usb 4-1: USB disconnect, device number 41 [ 342.195683][ T5973] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.207485][ T5973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.224137][ T5973] usb 7-1: Product: syz [ 342.236210][ T5973] usb 7-1: Manufacturer: syz [ 342.246666][ T5973] usb 7-1: SerialNumber: syz [ 342.669450][ T5973] usb 7-1: 0:2 : does not exist [ 342.958424][ T5862] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 343.118506][ T5862] usb 4-1: Using ep0 maxpacket: 8 [ 343.126369][ T5862] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 343.134891][ T5862] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 343.146016][ T5862] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 343.158127][ T5862] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 343.168438][ T5862] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.181571][ T5862] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 343.190735][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.409455][ T5862] usb 4-1: GET_CAPABILITIES returned 0 [ 343.415169][ T5862] usbtmc 4-1:16.0: can't read capabilities [ 343.503295][ T5973] usb 7-1: USB disconnect, device number 3 [ 343.546022][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.754864][T12071] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 343.761960][ T5973] usb 4-1: USB disconnect, device number 42 [ 343.952435][ T980] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 344.126486][ T980] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 344.168377][ T980] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 344.203626][T12108] netlink: 'syz.4.2389': attribute type 1 has an invalid length. [ 344.233660][ T980] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 344.267529][T12108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.276350][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.305290][ T980] usb 2-1: Product: syz [ 344.315401][ T980] usb 2-1: Manufacturer: syz [ 344.355625][ T980] usb 2-1: SerialNumber: syz [ 344.403950][ T980] usb 2-1: config 0 descriptor?? [ 344.433803][T12110] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 344.443140][T12094] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 344.463061][T12094] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 344.487606][T12110] bond1: (slave batadv1): making interface the new active one [ 344.517615][T12110] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 344.718945][T12094] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 344.743779][T12094] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 344.818384][ T5973] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 344.998583][ T5973] usb 7-1: Using ep0 maxpacket: 8 [ 345.016662][ T5973] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.047990][ T5973] usb 7-1: config 0 has no interfaces? [ 345.073055][ T5973] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 345.103326][ T5973] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 345.138468][ T5973] usb 7-1: Product: syz [ 345.142806][ T5973] usb 7-1: Manufacturer: syz [ 345.147442][ T5973] usb 7-1: SerialNumber: syz [ 345.174193][ T5973] usb 7-1: config 0 descriptor?? [ 345.188850][ T980] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 345.545862][T12127] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.763296][ T5973] usb 7-1: USB disconnect, device number 4 [ 345.809294][ T980] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 345.857502][ T980] usb 2-1: USB disconnect, device number 32 [ 346.287181][T12148] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2404'. [ 346.330088][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2405'. [ 346.357117][T12150] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.366775][T12150] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.455078][T12241] syzkaller0: entered allmulticast mode [ 349.470857][T12243] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2433'. [ 349.565940][T12239] syzkaller0 (unregistering): left allmulticast mode [ 349.870190][ T5862] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 350.041711][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.088466][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.128397][ T5862] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 350.183366][ T5862] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 350.229006][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.285246][ T5862] usb 4-1: config 0 descriptor?? [ 350.438489][ T5946] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 350.633811][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.679793][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.728335][ T5946] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 350.742095][ T5862] plantronics 0003:047F:FFFF.002D: reserved main item tag 0xd [ 350.787912][ T5946] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 350.835323][ T5862] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 350.841811][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.960267][ T5946] usb 5-1: config 0 descriptor?? [ 351.102064][ T5970] usb 4-1: USB disconnect, device number 43 [ 351.252897][T12279] fido_id[12279]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 351.317891][T12281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 351.387715][ T5946] plantronics 0003:047F:FFFF.002E: reserved main item tag 0xd [ 351.479592][ T5946] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 351.714279][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 351.911005][ T10] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 351.953127][ T10] usb 6-1: config 0 has no interface number 0 [ 351.971349][ T10] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 352.024745][ T10] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 352.073768][ T10] usb 6-1: config 0 interface 255 has no altsetting 0 [ 352.107157][ T10] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 352.146385][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.165791][ T10] usb 6-1: config 0 descriptor?? [ 352.196234][ T10] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 352.420909][ T10] usb 6-1: USB disconnect, device number 7 [ 352.600045][ T5970] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 352.770859][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.795287][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.812552][T12320] netlink: 'syz.1.2452': attribute type 5 has an invalid length. [ 352.815854][ T5970] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 352.826660][T12320] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2452'. [ 352.863646][ T5970] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.895871][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.928523][ T5970] usb 4-1: config 0 descriptor?? [ 353.328421][ T44] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 353.387257][ T5970] plantronics 0003:047F:FFFF.002F: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 353.462124][ T5939] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 353.508526][ T44] usb 6-1: Using ep0 maxpacket: 16 [ 353.524387][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.551208][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.575471][ T44] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 353.613177][ T44] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 353.625373][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.652749][ T5939] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.662139][ T44] usb 6-1: config 0 descriptor?? [ 353.672010][ T5970] usb 4-1: USB disconnect, device number 44 [ 353.702469][ T5939] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 353.722664][ T5939] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 353.737791][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.748547][ T10] usb 5-1: reset high-speed USB device number 34 using dummy_hcd [ 353.769533][ T10] usb 5-1: device reset changed ep0 maxpacket size! [ 353.777248][ T5939] usb 2-1: config 0 descriptor?? [ 353.791505][ T5939] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 353.805171][ T5939] dvb-usb: bulk message failed: -22 (3/0) [ 353.807288][ T5862] usb 5-1: USB disconnect, device number 34 [ 353.827020][ T5939] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 353.845339][ T5939] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 353.858006][ T5939] usb 2-1: media controller created [ 353.876445][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.910905][ T5939] dvb-usb: bulk message failed: -22 (6/0) [ 353.919319][ T5939] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 353.934247][ T5939] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input58 [ 353.961176][ T5939] dvb-usb: schedule remote query interval to 150 msecs. [ 353.970015][ T5939] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 354.008551][ T5862] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 354.010647][T12331] dvb-usb: bulk message failed: -22 (2/0) [ 354.088538][ T919] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 354.130031][ T5939] dvb-usb: bulk message failed: -22 (1/0) [ 354.136044][ T5939] dvb-usb: error while querying for an remote control event. [ 354.154566][ T44] microsoft 0003:045E:07DA.0030: ignoring exceeding usage max [ 354.173102][ T44] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0030/input/input59 [ 354.184997][ T5862] usb 5-1: Using ep0 maxpacket: 8 [ 354.213102][ T5862] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.227540][ T5862] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 354.237101][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.250950][ T5862] usb 5-1: config 0 descriptor?? [ 354.270288][ T5862] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 354.292675][ T919] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 354.300054][ T5939] dvb-usb: bulk message failed: -22 (1/0) [ 354.317569][T12346] netlink: 'syz.3.2460': attribute type 1 has an invalid length. [ 354.317977][ T919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.336604][ T5939] dvb-usb: error while querying for an remote control event. [ 354.367200][ T919] usb 7-1: Product: syz [ 354.373119][ T919] usb 7-1: Manufacturer: syz [ 354.378959][ T919] usb 7-1: SerialNumber: syz [ 354.403750][ T919] usb 7-1: config 0 descriptor?? [ 354.414049][ T44] microsoft 0003:045E:07DA.0030: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 354.452251][ T44] usb 6-1: USB disconnect, device number 8 [ 354.484210][T12346] 8021q: adding VLAN 0 to HW filter on device bond3 [ 354.501013][ T5939] dvb-usb: bulk message failed: -22 (1/0) [ 354.547905][ T5939] dvb-usb: error while querying for an remote control event. [ 354.603141][T12349] fido_id[12349]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 354.607496][ T5939] usb 2-1: USB disconnect, device number 33 [ 354.764021][ T5939] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 354.815301][ T30] audit: type=1326 audit(1758795023.997:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12352 comm="syz.3.2462" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae79f8eec9 code=0x0 [ 354.873642][ T919] usb 7-1: Firmware: major: 220, minor: 80, hardware type: UNKNOWN (174) [ 355.087911][ T919] usb 7-1: no permanent extended address found, random address set [ 355.107844][ T919] usb 7-1: atusb_probe: initialization failed, error = -524 [ 355.134387][ T919] atusb 7-1:0.0: probe with driver atusb failed with error -524 [ 355.320473][ T919] usb 7-1: USB disconnect, device number 5 [ 355.485793][ T5862] gspca_vc032x: reg_w err -71 [ 355.490790][ T5862] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 355.510342][ T5862] usb 5-1: USB disconnect, device number 35 [ 355.898918][T12370] input: syz0 as /devices/virtual/input/input60 [ 356.768289][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056147800: rx timeout, send abort [ 356.778788][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056147000: rx timeout, send abort [ 356.788610][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056147800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 356.804342][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056147000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 357.155954][T12402] netlink: 'syz.3.2480': attribute type 1 has an invalid length. [ 357.174975][T12402] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2480'. [ 357.338720][ T980] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 357.392716][T12408] netlink: 'syz.5.2484': attribute type 9 has an invalid length. [ 357.425428][T12408] netlink: 'syz.5.2484': attribute type 7 has an invalid length. [ 357.438662][T12408] netlink: 'syz.5.2484': attribute type 8 has an invalid length. [ 357.528611][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 357.555940][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.577353][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.596057][ T980] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 357.606190][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.625976][ T980] usb 5-1: config 0 descriptor?? [ 357.638598][ T5862] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 357.648956][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 357.820727][ T5862] usb 4-1: config 0 has no interfaces? [ 357.828970][ T5862] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 357.857209][ T10] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 357.859420][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.868481][ T10] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 107, changing to 10 [ 357.914187][ T5862] usb 4-1: config 0 descriptor?? [ 357.935706][ T10] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 40974, setting to 1024 [ 357.974955][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 357.987865][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 357.997665][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 358.006866][ T10] usb 2-1: Product: syz [ 358.011503][ T10] usb 2-1: Manufacturer: syz [ 358.016155][ T10] usb 2-1: SerialNumber: syz [ 358.032858][ T10] usb 2-1: config 0 descriptor?? [ 358.047735][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 358.075067][ T980] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5012.0031/input/input61 [ 358.086998][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 358.112354][ T10] usb 2-1: selecting invalid altsetting 0 [ 358.204946][ T980] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5012.0031/input/input62 [ 358.340524][ T980] kye 0003:0458:5012.0031: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.4-1/input0 [ 358.429966][ T980] usb 5-1: USB disconnect, device number 36 [ 358.654798][T12414] fido_id[12414]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 358.782605][T12410] usb 2-1: reset high-speed USB device number 34 using dummy_hcd [ 358.971393][T12419] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2488'. [ 359.011980][T12410] usb 2-1: device firmware changed [ 359.032494][ T5946] usb 2-1: USB disconnect, device number 34 [ 359.040462][ T5862] usb 4-1: USB disconnect, device number 45 [ 359.093225][T12421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 359.250350][ T5946] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 359.434796][ T5946] usb 2-1: unable to get BOS descriptor or descriptor too short [ 359.444087][ T5946] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 359.456309][ T5946] usb 2-1: can't read configurations, error -71 [ 360.101367][T12441] batman_adv: batadv0: Adding interface: macsec2 [ 360.155718][T12441] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.237337][T12441] batman_adv: batadv0: Interface activated: macsec2 [ 360.958937][ T5946] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 361.058620][ T919] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 361.129315][ T5946] usb 4-1: Using ep0 maxpacket: 32 [ 361.153933][ T5946] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 361.172697][ T5946] usb 4-1: config 0 has no interface number 0 [ 361.187984][ T5946] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 361.218501][ T5946] usb 4-1: config 0 interface 85 has no altsetting 0 [ 361.248752][ T5946] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 361.248928][ T919] usb 5-1: Using ep0 maxpacket: 8 [ 361.270582][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.293412][ T5946] usb 4-1: Product: syz [ 361.298109][ T919] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 361.303505][ T5946] usb 4-1: Manufacturer: syz [ 361.330019][ T919] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 361.334691][ T5946] usb 4-1: SerialNumber: syz [ 361.361056][ T919] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 361.374634][ T5946] usb 4-1: config 0 descriptor?? [ 361.386765][T12480] kvm: emulating exchange as write [ 361.403908][ T919] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 361.428397][ T919] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.455794][ T919] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 361.495990][ T919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.754152][ T919] usb 5-1: usb_control_msg returned -32 [ 361.778405][ T919] usbtmc 5-1:16.0: can't read capabilities [ 362.009498][ T5946] appletouch 4-1:0.85: Geyser mode initialized. [ 362.018082][ T5946] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input63 [ 362.255810][ T5946] usb 4-1: USB disconnect, device number 46 [ 362.311271][ T5946] appletouch 4-1:0.85: input: appletouch disconnected [ 362.479966][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2523'. [ 362.703562][T12515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 362.751620][ T5946] usb 5-1: USB disconnect, device number 37 [ 362.964184][T12522] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.794574][T12569] netlink: 'syz.6.2550': attribute type 1 has an invalid length. [ 364.883119][T12569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 364.959094][T12575] openvswitch: netlink: IPv4 tun info is not correct [ 365.012610][T12573] bond1: (slave geneve2): making interface the new active one [ 365.070271][T12573] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 365.598522][ T919] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 365.758592][ T919] usb 4-1: Using ep0 maxpacket: 32 [ 365.782269][ T919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.810146][ T919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.835281][ T919] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 365.872687][ T919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.899408][ T919] usb 4-1: config 0 descriptor?? [ 366.341302][ T919] ft260 0003:0403:6030.0032: unknown main item tag 0x7 [ 366.536475][ T919] ft260 0003:0403:6030.0032: chip code: 6424 8183 [ 366.608411][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 366.737296][ T919] ft260 0003:0403:6030.0032: uart interface is not supported [ 366.878351][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 366.896646][ T10] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 366.905184][ T10] usb 7-1: config 0 has no interface number 0 [ 366.918399][ T10] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 366.963352][ T5862] usb 4-1: USB disconnect, device number 47 [ 366.973071][ T10] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 366.988440][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.996491][ T10] usb 7-1: Product: syz [ 367.044214][ T10] usb 7-1: Manufacturer: syz [ 367.063313][ T10] usb 7-1: SerialNumber: syz [ 367.087443][ T10] usb 7-1: config 0 descriptor?? [ 367.099862][ T10] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 367.114867][ T10] em28xx 7-1:0.132: Video interface 132 found: [ 367.506445][ T10] em28xx 7-1:0.132: chip ID is em2884 [ 368.189052][ T5946] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 368.320684][ T10] em28xx 7-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 368.354446][ T10] em28xx 7-1:0.132: failed to read eeprom (err=-5) [ 368.371063][ T10] em28xx 7-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 368.385423][ T5946] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.410150][ T5946] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 368.442504][ T5946] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 368.458149][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 368.478386][ T10] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 368.492863][ T5946] usb 2-1: SerialNumber: syz [ 368.502943][ T10] em28xx 7-1:0.132: analog set to bulk mode. [ 368.530774][ T5939] em28xx 7-1:0.132: Registering V4L2 extension [ 368.569367][ T10] usb 7-1: USB disconnect, device number 6 [ 368.608963][ T10] em28xx 7-1:0.132: Disconnecting em28xx [ 368.817032][ T5946] usb 2-1: 0:2 : does not exist [ 368.868751][ T5946] usb 2-1: USB disconnect, device number 37 [ 368.944294][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 368.970296][ T5939] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 368.994233][ T5939] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 369.022700][ T5939] em28xx 7-1:0.132: No AC97 audio processor [ 369.063712][ T5939] usb 7-1: Decoder not found [ 369.083240][ T5939] em28xx 7-1:0.132: failed to create media graph [ 369.104421][ T5939] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 369.145088][ T5939] em28xx 7-1:0.132: Remote control support is not available for this card. [ 369.158832][ T5862] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 369.183292][ T10] em28xx 7-1:0.132: Closing input extension [ 369.234408][ T10] em28xx 7-1:0.132: Freeing device [ 369.328588][ T5862] usb 5-1: Using ep0 maxpacket: 8 [ 369.364457][ T5862] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 369.376109][ T5862] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 369.393924][ T5862] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 369.406098][ T5862] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 369.436488][ T5862] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 369.513875][ T5862] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 369.536903][ T5862] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 369.580252][ T5862] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 369.670845][ T5862] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 369.740419][ T5862] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 369.819786][ T5862] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 369.840455][ T5862] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 369.885574][ T5862] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 369.939681][ T5862] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 369.996740][ T5862] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 370.023249][ T5939] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 370.026850][ T5862] usb 5-1: string descriptor 0 read error: -22 [ 370.086083][ T5862] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 370.117614][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.179010][ T5862] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 370.189752][ T5939] usb 6-1: Using ep0 maxpacket: 32 [ 370.228444][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.249991][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.275482][ T5939] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 370.305397][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.319820][ T5939] usb 6-1: config 0 descriptor?? [ 370.331299][ T5939] hub 6-1:0.0: USB hub found [ 370.516885][ T980] usb 5-1: USB disconnect, device number 38 [ 370.516972][T12679] usb 5-1: Couldn't submit interrupt_out_urb -19 [ 370.537901][ T5939] hub 6-1:0.0: 1 port detected [ 371.158871][ T5939] hub 6-1:0.0: activate --> -90 [ 371.361060][ T10] usb 6-1: USB disconnect, device number 9 [ 371.642871][ T30] audit: type=1326 audit(1758795040.827:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12715 comm="syz.4.2613" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f274318eec9 code=0x0 [ 371.968361][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 372.148600][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 372.167210][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.186881][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.204435][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 372.223806][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.266570][ T10] usb 4-1: config 0 descriptor?? [ 372.319160][ T10] hub 4-1:0.0: USB hub found [ 372.524852][ T10] hub 4-1:0.0: 1 port detected [ 373.140497][ T10] hub 4-1:0.0: activate --> -90 [ 373.174603][T12781] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.468794][ T5862] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 373.562347][ T980] usb 4-1: USB disconnect, device number 48 [ 373.635939][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 373.658938][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 373.675462][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 373.687400][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 373.701424][ T5862] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.719354][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.733004][ T5862] usb 5-1: config 0 descriptor?? [ 373.740590][T12800] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2644'. [ 374.088573][ T919] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 374.173004][ T5862] plantronics 0003:047F:FFFF.0033: ignoring exceeding usage max [ 374.223645][ T5862] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 374.251438][T12809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.274134][ T919] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.306121][ T919] usb 7-1: config 0 has no interfaces? [ 374.321828][ T919] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 374.348516][ T919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.373515][ T919] usb 7-1: config 0 descriptor?? [ 375.078364][ T980] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 375.228656][ T980] usb 6-1: Using ep0 maxpacket: 8 [ 375.247062][ T980] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 375.262270][ T980] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 375.274827][ T980] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 375.286043][ T980] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.299498][ T980] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 375.329802][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.576409][ T980] usb 6-1: GET_CAPABILITIES returned 0 [ 375.587903][ T980] usbtmc 6-1:16.0: can't read capabilities [ 375.634038][T12846] loop3: detected capacity change from 0 to 7 [ 375.646839][T12846] Dev loop3: unable to read RDB block 7 [ 375.653373][T12846] loop3: unable to read partition table [ 375.659586][T12846] loop3: partition table beyond EOD, truncated [ 375.665844][T12846] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 375.676051][ T5862] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 375.840442][ T980] usb 6-1: USB disconnect, device number 10 [ 375.860356][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.881110][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.919140][ T5862] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 375.942222][ T5862] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 375.956272][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.982492][ T5862] usb 4-1: config 0 descriptor?? [ 376.150279][ T44] usb 5-1: USB disconnect, device number 39 [ 376.461506][ T5862] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 376.890681][ T44] usb 7-1: USB disconnect, device number 7 [ 377.048765][ T5862] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 377.252594][ T5862] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 377.303610][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.334875][ T5862] usb 6-1: Product: syz [ 377.353945][ T5862] usb 6-1: Manufacturer: syz [ 377.381437][ T5862] usb 6-1: SerialNumber: syz [ 377.407154][ T5862] usb 6-1: config 0 descriptor?? [ 377.433671][ T5862] ch341 6-1:0.0: ch341-uart converter detected [ 377.730074][ C0] plantronics 0003:047F:FFFF.0034: usb_submit_urb(ctrl) failed: -1 [ 378.472287][ T5862] ch341-uart ttyUSB0: break control not supported, using simulated break [ 378.495941][ T5862] usb 6-1: ch341-uart converter now attached to ttyUSB0 [ 378.514475][ T5970] usb 4-1: USB disconnect, device number 49 [ 378.527897][ T5862] usb 6-1: USB disconnect, device number 11 [ 378.600130][ T5862] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 378.635003][ T5862] ch341 6-1:0.0: device disconnected [ 378.817008][T12912] vcan0: tx drop: invalid da for name 0x0000000000000400 [ 379.429084][ T5862] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 379.659456][ T5862] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 379.691114][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.728779][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.775077][ T5862] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 379.875484][ T5862] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 379.908608][ T5862] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 379.930141][ T5862] usb 7-1: Manufacturer: syz [ 379.969188][ T5862] usb 7-1: config 0 descriptor?? [ 380.276791][T12956] netlink: 'syz.1.2703': attribute type 29 has an invalid length. [ 380.295658][T12956] netlink: 'syz.1.2703': attribute type 29 has an invalid length. [ 380.328888][T12956] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2703'. [ 380.368364][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 380.411105][ T5862] appleir 0003:05AC:8243.0035: unknown main item tag 0x0 [ 380.464742][ T5862] appleir 0003:05AC:8243.0035: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 380.564967][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 380.591838][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.635511][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.664918][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 380.709122][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.736710][ T10] usb 6-1: config 0 descriptor?? [ 380.801995][ T10] hub 6-1:0.0: USB hub found [ 380.979052][ T10] hub 6-1:0.0: 1 port detected [ 381.020730][T12979] syzkaller1: entered promiscuous mode [ 381.030472][T12979] syzkaller1: entered allmulticast mode [ 381.614040][ T10] hub 6-1:0.0: activate --> -90 [ 381.628968][ T5970] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 381.794907][ T5970] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 381.806976][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.816673][ T5970] usb 5-1: Product: syz [ 381.823161][ T5970] usb 5-1: Manufacturer: syz [ 381.827800][ T5970] usb 5-1: SerialNumber: syz [ 381.833256][ T5862] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 381.845060][ T5970] usb 5-1: config 0 descriptor?? [ 382.008376][ T5862] usb 2-1: Using ep0 maxpacket: 8 [ 382.020906][ T5862] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 382.032424][ T10] usb 6-1-port1: config error [ 382.032628][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.050453][ T10] usb 6-1-port1: cannot disable (err = -71) [ 382.061923][ T10] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 382.077701][ T10] usb 6-1: Failed to suspend device, error -71 [ 382.086626][T12999] delete_channel: no stack [ 382.092068][ T5862] usb 2-1: config 0 descriptor?? [ 382.189040][ T44] usb 6-1: USB disconnect, device number 12 [ 382.254127][T13002] dvmrp0: entered allmulticast mode [ 382.276735][ T5970] airspy 5-1:0.0: Board ID: 00 [ 382.287316][ T5970] airspy 5-1:0.0: Firmware version: [ 382.540076][ T5939] usb 7-1: USB disconnect, device number 8 [ 382.742619][T13013] input: syz1 as /devices/virtual/input/input64 [ 382.956240][T13020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 382.967152][T13019] KVM: debugfs: duplicate directory 13019-4 [ 383.082414][ T5970] airspy 5-1:0.0: usb_control_msg() failed -71 request 0f [ 383.115814][ T5970] airspy 5-1:0.0: Registered as swradio24 [ 383.132074][ T5970] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 383.163779][ T5970] usb 5-1: USB disconnect, device number 40 [ 383.299945][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2734'. [ 383.342301][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2734'. [ 383.377372][ T5862] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 383.414426][ T5862] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 383.459851][ T5862] asix 2-1:0.0: probe with driver asix failed with error -71 [ 383.496660][ T5862] usb 2-1: USB disconnect, device number 38 [ 383.792802][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.799464][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.910451][ T5970] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 383.968836][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 384.099742][ T5970] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 384.126922][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.144341][ T5970] usb 4-1: config 0 descriptor?? [ 384.168379][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 384.173436][ T5970] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 384.201330][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.233969][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.260803][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 384.291324][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.321180][ T10] usb 5-1: Product: syz [ 384.335067][ T10] usb 5-1: Manufacturer: syz [ 384.343966][ T10] usb 5-1: SerialNumber: syz [ 384.509014][ T5862] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 384.516786][ T919] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 384.582155][ T5970] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 384.627882][ T10] usb 5-1: 0:2 : does not exist [ 384.646747][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 384.691541][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.713040][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.734665][ T919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 384.756573][ T10] usb 5-1: USB disconnect, device number 41 [ 384.762353][ T5862] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 384.778798][ T919] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 384.797527][ T5862] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 384.808807][ T919] usb 7-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 384.836006][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.851081][ T919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.880328][ T919] usb 7-1: config 0 descriptor?? [ 384.895852][ T5862] usb 6-1: config 0 descriptor?? [ 384.896381][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.908103][T13048] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 384.994388][ T5970] cpia1 4-1:0.0: only firmware version 1 is supported (got: 32) [ 385.002580][ T5973] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 385.174684][ T5973] usb 2-1: config 0 has no interfaces? [ 385.174742][T13048] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2741'. [ 385.205523][ T5973] usb 2-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 385.229575][ T5973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.237641][ T5973] usb 2-1: Product: syz [ 385.254559][ T5970] usb 4-1: USB disconnect, device number 50 [ 385.267623][ T5973] usb 2-1: Manufacturer: syz [ 385.276490][ T5973] usb 2-1: SerialNumber: syz [ 385.289796][ T5973] usb 2-1: config 0 descriptor?? [ 385.379891][ T5862] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 385.582519][ T5970] usb 2-1: USB disconnect, device number 39 [ 385.723291][ T919] usbhid 7-1:0.0: can't add hid device: -71 [ 385.749309][ T919] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 385.791784][ T919] usb 7-1: USB disconnect, device number 9 [ 386.447740][T13087] syzkaller1: entered promiscuous mode [ 386.466270][T13087] syzkaller1: entered allmulticast mode [ 386.588977][ C1] plantronics 0003:047F:FFFF.0036: usb_submit_urb(ctrl) failed: -1 [ 386.688640][ T919] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 386.818342][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 386.848421][ T919] usb 2-1: Using ep0 maxpacket: 8 [ 386.856221][ T919] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 386.866343][ T919] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 386.882196][ T919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 386.893841][ T919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 386.907965][ T919] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.929996][ T919] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 386.945188][ T919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.028573][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 387.041466][ T10] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 387.052460][ T10] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 387.095143][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 387.118646][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 387.143063][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 387.178615][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 387.202017][ T919] usb 2-1: usb_control_msg returned -32 [ 387.207666][ T919] usbtmc 2-1:16.0: can't read capabilities [ 387.212731][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 387.233316][T13108] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2766'. [ 387.259576][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.299142][ T10] usb 5-1: config 0 descriptor?? [ 387.336774][ T5939] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 387.388046][ T5973] usb 6-1: USB disconnect, device number 13 [ 387.453218][T13116] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2769'. [ 387.476708][T13116] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2769'. [ 387.530963][ T5939] usb 4-1: config 0 has no interfaces? [ 387.549655][ T5939] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 387.562924][ T10] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 387.585642][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.617193][ T5939] usb 4-1: Product: syz [ 387.631421][ T5939] usb 4-1: Manufacturer: syz [ 387.642423][ T5939] usb 4-1: SerialNumber: syz [ 387.666723][ T5939] usb 4-1: config 0 descriptor?? [ 387.782327][ C1] usblp0: nonzero read bulk status received: -71 [ 387.790968][ T5973] usb 5-1: USB disconnect, device number 42 [ 387.811760][ T5973] usblp0: removed [ 388.037075][ T5946] usb 4-1: USB disconnect, device number 51 [ 388.725148][T13143] netlink: 'syz.3.2780': attribute type 2 has an invalid length. [ 388.742385][T13143] netlink: 'syz.3.2780': attribute type 4 has an invalid length. [ 388.755042][T13143] netlink: 'syz.3.2780': attribute type 8 has an invalid length. [ 388.773611][T13143] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2780'. [ 388.849034][T13146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2782'. [ 389.480462][ T5973] usb 2-1: USB disconnect, device number 40 [ 390.361504][T13191] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 390.710232][T13202] netlink: 67 bytes leftover after parsing attributes in process `syz.3.2806'. [ 390.858710][ T5939] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 391.068656][ T5939] usb 2-1: Using ep0 maxpacket: 16 [ 391.083216][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.123963][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.158439][ T5973] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 391.161941][ T5939] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 391.243948][ T5939] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 391.277785][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.328338][ T5973] usb 4-1: Using ep0 maxpacket: 32 [ 391.339317][ T5939] usb 2-1: config 0 descriptor?? [ 391.376085][ T5973] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 391.403761][ T5973] usb 4-1: config 0 has no interface number 0 [ 391.426457][ T5973] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 391.491052][ T5973] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 391.525430][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.552592][ T5973] usb 4-1: Product: syz [ 391.565993][ T5973] usb 4-1: Manufacturer: syz [ 391.575028][ T5973] usb 4-1: SerialNumber: syz [ 391.617986][ T5973] usb 4-1: config 0 descriptor?? [ 391.634847][ T5973] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 391.647739][ T5973] em28xx 4-1:0.132: Video interface 132 found: [ 391.829966][ T5939] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0037/input/input65 [ 391.912568][ T5939] microsoft 0003:045E:07DA.0037: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 392.046058][ T5973] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 392.090131][ T5946] usb 2-1: USB disconnect, device number 41 [ 392.161120][T13221] fido_id[13221]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 392.479896][ T5973] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 392.511857][ T5973] em28xx 4-1:0.132: board has no eeprom [ 392.738498][ T5973] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 392.785686][ T5973] em28xx 4-1:0.132: analog set to bulk mode. [ 392.801320][ T919] em28xx 4-1:0.132: Registering V4L2 extension [ 392.861303][ T5973] usb 4-1: USB disconnect, device number 52 [ 392.891852][ T5973] em28xx 4-1:0.132: Disconnecting em28xx [ 393.319649][T13248] loop6: detected capacity change from 0 to 524287999 [ 393.486502][ T919] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 393.520973][ T919] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 393.550038][ T919] em28xx 4-1:0.132: No AC97 audio processor [ 393.567593][ T919] usb 4-1: Decoder not found [ 393.590724][ T919] em28xx 4-1:0.132: failed to create media graph [ 393.623151][ T919] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 393.654799][ T919] em28xx 4-1:0.132: Remote control support is not available for this card. [ 393.684264][ T5973] em28xx 4-1:0.132: Closing input extension [ 393.693702][T13262] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.721715][ T5973] em28xx 4-1:0.132: Freeing device [ 394.238584][ T919] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 394.428571][ T919] usb 5-1: Using ep0 maxpacket: 32 [ 394.445606][ T919] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 394.487213][ T919] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 394.541584][ T919] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.625014][ T919] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 394.654903][ T919] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 394.717576][ T919] usb 5-1: Product: syz [ 394.732729][ T919] usb 5-1: Manufacturer: syz [ 394.737398][ T919] usb 5-1: SerialNumber: syz [ 394.824697][ T919] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input66 [ 395.150609][ T5970] usb 5-1: USB disconnect, device number 43 [ 395.274378][ T5970] appletouch 5-1:1.0: input: appletouch disconnected [ 395.438434][ T5939] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 395.716508][ T919] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 396.130655][ T919] usb 7-1: config 0 has no interfaces? [ 396.153200][ T919] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 396.168342][ T5939] usb 2-1: Using ep0 maxpacket: 8 [ 396.199828][ T5939] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 396.200370][ T919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.209853][ T5939] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 396.259464][ T5939] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 396.264698][ T919] usb 7-1: config 0 descriptor?? [ 396.322846][ T5939] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.352883][ T5939] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 396.392841][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.637102][ T5939] usb 2-1: GET_CAPABILITIES returned 0 [ 396.663959][ T5939] usbtmc 2-1:16.0: can't read capabilities [ 396.891703][ T5973] usb 7-1: USB disconnect, device number 10 [ 396.910456][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 396.919613][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 396.928718][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 396.937834][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 396.962945][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 396.972111][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 396.981305][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 396.990502][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 397.002542][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 397.011654][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 397.020720][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 397.029788][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 397.046294][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 397.055450][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 397.064704][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 397.074251][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 397.096229][ T5939] usb 2-1: USB disconnect, device number 42 [ 397.185591][T13323] netlink: 'syz.5.2854': attribute type 29 has an invalid length. [ 397.205431][T13323] netlink: 'syz.5.2854': attribute type 29 has an invalid length. [ 397.215188][T13323] netlink: 500 bytes leftover after parsing attributes in process `syz.5.2854'. [ 397.356335][T13327] loop2: detected capacity change from 0 to 7 [ 397.363951][T13327] Dev loop2: unable to read RDB block 7 [ 397.379253][T13327] loop2: unable to read partition table [ 397.394273][T13327] loop2: partition table beyond EOD, truncated [ 397.402045][T13327] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 397.783777][ T5973] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 397.962158][ T5973] usb 4-1: Using ep0 maxpacket: 8 [ 397.972398][ T5973] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 397.988332][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.007548][ T5973] usb 4-1: Product: syz [ 398.022097][ T5973] usb 4-1: Manufacturer: syz [ 398.031234][ T5973] usb 4-1: SerialNumber: syz [ 398.050972][ T5973] usb 4-1: config 0 descriptor?? [ 398.081056][ T5973] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 398.654231][ T30] audit: type=1326 audit(1758795067.837:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13360 comm="syz.1.2870" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8bda38eec9 code=0x0 [ 398.996811][T13373] vivid-001: disconnect [ 399.014644][T13373] vivid-001: reconnect [ 399.289055][ T919] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 399.308794][ T5973] gspca_sonixj: reg_w1 err -71 [ 399.389750][ T5973] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 399.407079][ T5973] usb 4-1: USB disconnect, device number 53 [ 399.458410][ T919] usb 7-1: Using ep0 maxpacket: 32 [ 399.465624][ T919] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.482424][ T919] usb 7-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 399.493380][ T919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.501967][ T919] usb 7-1: Product: syz [ 399.506327][ T919] usb 7-1: Manufacturer: syz [ 399.511476][ T919] usb 7-1: SerialNumber: syz [ 399.520650][ T919] usb 7-1: config 0 descriptor?? [ 399.530977][ T919] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 399.608627][ T5862] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 399.688208][T13389] [ 399.690610][T13389] ===================================================== [ 399.697552][T13389] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 399.705032][T13389] syzkaller #0 Not tainted [ 399.709458][T13389] ----------------------------------------------------- [ 399.716387][T13389] syz.4.2883/13389 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 399.724114][T13389] ffff888028b486a8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 399.732837][T13389] [ 399.732837][T13389] and this task is already holding: [ 399.740208][T13389] ffff888054ac2028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 399.749984][T13389] which would create a new lock dependency: [ 399.755882][T13389] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 399.763988][T13389] [ 399.763988][T13389] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 399.773436][T13389] (&client->buffer_lock){..-.}-{3:3} [ 399.773462][T13389] [ 399.773462][T13389] ... which became SOFTIRQ-irq-safe at: [ 399.786531][T13389] lock_acquire+0x120/0x360 [ 399.791135][T13389] _raw_spin_lock+0x2e/0x40 [ 399.795757][T13389] evdev_pass_values+0xb9/0xbd0 [ 399.800694][T13389] evdev_events+0x1e6/0x340 [ 399.805280][T13389] input_pass_values+0x288/0x890 [ 399.810307][T13389] input_event_dispose+0x3e5/0x6b0 [ 399.815511][T13389] input_event+0x89/0xe0 [ 399.819842][T13389] hidinput_hid_event+0x1362/0x1ca0 [ 399.825133][T13389] hid_process_event+0x4be/0x620 [ 399.830197][T13389] hid_report_raw_event+0xe91/0x16d0 [ 399.835585][T13389] hid_input_report+0x43e/0x520 [ 399.840522][T13389] hid_irq_in+0x47e/0x6d0 [ 399.844951][T13389] __usb_hcd_giveback_urb+0x376/0x540 [ 399.850412][T13389] dummy_timer+0x862/0x4550 [ 399.855014][T13389] __hrtimer_run_queues+0x529/0xc60 [ 399.860302][T13389] hrtimer_run_softirq+0x187/0x2b0 [ 399.865499][T13389] handle_softirqs+0x283/0x870 [ 399.870352][T13389] __irq_exit_rcu+0xca/0x1f0 [ 399.875030][T13389] irq_exit_rcu+0x9/0x30 [ 399.879379][T13389] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 399.885100][T13389] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 399.891166][T13389] __sanitizer_cov_trace_pc+0x5d/0x70 [ 399.896634][T13389] kmalloc_reserve+0x2c/0x290 [ 399.901403][T13389] __alloc_skb+0x142/0x2d0 [ 399.905910][T13389] netlink_sendmsg+0x5c6/0xb30 [ 399.910766][T13389] __sock_sendmsg+0x21c/0x270 [ 399.915563][T13389] ____sys_sendmsg+0x505/0x830 [ 399.920432][T13389] ___sys_sendmsg+0x21f/0x2a0 [ 399.925198][T13389] __x64_sys_sendmsg+0x19b/0x260 [ 399.930232][T13389] do_syscall_64+0xfa/0x3b0 [ 399.934862][T13389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.940853][T13389] [ 399.940853][T13389] to a SOFTIRQ-irq-unsafe lock: [ 399.947885][T13389] (tasklist_lock){.+.+}-{3:3} [ 399.947917][T13389] [ 399.947917][T13389] ... which became SOFTIRQ-irq-unsafe at: [ 399.960562][T13389] ... [ 399.960572][T13389] lock_acquire+0x120/0x360 [ 399.967762][T13389] _raw_read_lock+0x36/0x50 [ 399.972352][T13389] __do_wait+0xde/0x740 [ 399.976600][T13389] do_wait+0x1f8/0x520 [ 399.980788][T13389] kernel_wait+0xab/0x170 [ 399.985216][T13389] call_usermodehelper_exec_work+0xbe/0x230 [ 399.991216][T13389] process_scheduled_works+0xae1/0x17b0 [ 399.997025][T13389] worker_thread+0x8a0/0xda0 [ 400.001706][T13389] kthread+0x70e/0x8a0 [ 400.005868][T13389] ret_from_fork+0x439/0x7d0 [ 400.010544][T13389] ret_from_fork_asm+0x1a/0x30 [ 400.015404][T13389] [ 400.015404][T13389] other info that might help us debug this: [ 400.015404][T13389] [ 400.025628][T13389] Chain exists of: [ 400.025628][T13389] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 400.025628][T13389] [ 400.038761][T13389] Possible interrupt unsafe locking scenario: [ 400.038761][T13389] [ 400.047096][T13389] CPU0 CPU1 [ 400.052478][T13389] ---- ---- [ 400.057849][T13389] lock(tasklist_lock); [ 400.062113][T13389] local_irq_disable(); [ 400.068871][T13389] lock(&client->buffer_lock); [ 400.076259][T13389] lock(&new->fa_lock); [ 400.083034][T13389] [ 400.086527][T13389] lock(&client->buffer_lock); [ 400.091559][T13389] [ 400.091559][T13389] *** DEADLOCK *** [ 400.091559][T13389] [ 400.099708][T13389] 7 locks held by syz.4.2883/13389: [ 400.104914][T13389] #0: ffff888146b17118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 400.114078][T13389] #1: ffff8881462d6230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 400.124204][T13389] #2: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 400.133898][T13389] #3: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 400.143491][T13389] #4: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 400.152640][T13389] #5: ffff888054ac2028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 400.162837][T13389] #6: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 400.171910][T13389] [ 400.171910][T13389] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 400.182313][T13389] -> (&client->buffer_lock){..-.}-{3:3} { [ 400.188052][T13389] IN-SOFTIRQ-W at: [ 400.192034][T13389] lock_acquire+0x120/0x360 [ 400.198200][T13389] _raw_spin_lock+0x2e/0x40 [ 400.204370][T13389] evdev_pass_values+0xb9/0xbd0 [ 400.210987][T13389] evdev_events+0x1e6/0x340 [ 400.217142][T13389] input_pass_values+0x288/0x890 [ 400.223731][T13389] input_event_dispose+0x3e5/0x6b0 [ 400.230502][T13389] input_event+0x89/0xe0 [ 400.236417][T13389] hidinput_hid_event+0x1362/0x1ca0 [ 400.243275][T13389] hid_process_event+0x4be/0x620 [ 400.249867][T13389] hid_report_raw_event+0xe91/0x16d0 [ 400.256815][T13389] hid_input_report+0x43e/0x520 [ 400.263321][T13389] hid_irq_in+0x47e/0x6d0 [ 400.269312][T13389] __usb_hcd_giveback_urb+0x376/0x540 [ 400.276342][T13389] dummy_timer+0x862/0x4550 [ 400.282496][T13389] __hrtimer_run_queues+0x529/0xc60 [ 400.289347][T13389] hrtimer_run_softirq+0x187/0x2b0 [ 400.296126][T13389] handle_softirqs+0x283/0x870 [ 400.302550][T13389] __irq_exit_rcu+0xca/0x1f0 [ 400.308798][T13389] irq_exit_rcu+0x9/0x30 [ 400.314693][T13389] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 400.322014][T13389] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 400.329650][T13389] __sanitizer_cov_trace_pc+0x5d/0x70 [ 400.336767][T13389] kmalloc_reserve+0x2c/0x290 [ 400.343098][T13389] __alloc_skb+0x142/0x2d0 [ 400.349166][T13389] netlink_sendmsg+0x5c6/0xb30 [ 400.355603][T13389] __sock_sendmsg+0x21c/0x270 [ 400.361942][T13389] ____sys_sendmsg+0x505/0x830 [ 400.368369][T13389] ___sys_sendmsg+0x21f/0x2a0 [ 400.374700][T13389] __x64_sys_sendmsg+0x19b/0x260 [ 400.381301][T13389] do_syscall_64+0xfa/0x3b0 [ 400.387463][T13389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.395017][T13389] INITIAL USE at: [ 400.398956][T13389] lock_acquire+0x120/0x360 [ 400.405072][T13389] _raw_spin_lock_irqsave+0xa7/0xf0 [ 400.411873][T13389] evdev_ioctl_handler+0x1969/0x1f10 [ 400.418746][T13389] __se_sys_ioctl+0xf9/0x170 [ 400.424906][T13389] do_syscall_64+0xfa/0x3b0 [ 400.430984][T13389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.438451][T13389] } [ 400.440953][T13389] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 400.449108][T13389] [ 400.449108][T13389] the dependencies between the lock to be acquired [ 400.449118][T13389] and SOFTIRQ-irq-unsafe lock: [ 400.462624][T13389] -> (tasklist_lock){.+.+}-{3:3} { [ 400.467932][T13389] HARDIRQ-ON-R at: [ 400.472084][T13389] lock_acquire+0x120/0x360 [ 400.478597][T13389] _raw_read_lock+0x36/0x50 [ 400.485096][T13389] __do_wait+0xde/0x740 [ 400.491270][T13389] do_wait+0x1f8/0x520 [ 400.497343][T13389] kernel_wait+0xab/0x170 [ 400.503678][T13389] call_usermodehelper_exec_work+0xbe/0x230 [ 400.511577][T13389] process_scheduled_works+0xae1/0x17b0 [ 400.519120][T13389] worker_thread+0x8a0/0xda0 [ 400.525708][T13389] kthread+0x70e/0x8a0 [ 400.531780][T13389] ret_from_fork+0x439/0x7d0 [ 400.538367][T13389] ret_from_fork_asm+0x1a/0x30 [ 400.545133][T13389] SOFTIRQ-ON-R at: [ 400.549286][T13389] lock_acquire+0x120/0x360 [ 400.555800][T13389] _raw_read_lock+0x36/0x50 [ 400.562299][T13389] __do_wait+0xde/0x740 [ 400.568463][T13389] do_wait+0x1f8/0x520 [ 400.574539][T13389] kernel_wait+0xab/0x170 [ 400.580870][T13389] call_usermodehelper_exec_work+0xbe/0x230 [ 400.588769][T13389] process_scheduled_works+0xae1/0x17b0 [ 400.596312][T13389] worker_thread+0x8a0/0xda0 [ 400.602907][T13389] kthread+0x70e/0x8a0 [ 400.608980][T13389] ret_from_fork+0x439/0x7d0 [ 400.615572][T13389] ret_from_fork_asm+0x1a/0x30 [ 400.622340][T13389] INITIAL USE at: [ 400.626409][T13389] lock_acquire+0x120/0x360 [ 400.632836][T13389] _raw_write_lock_irq+0xa2/0xf0 [ 400.639689][T13389] copy_process+0x224f/0x3c00 [ 400.646281][T13389] kernel_clone+0x21e/0x840 [ 400.652708][T13389] user_mode_thread+0xdd/0x140 [ 400.659386][T13389] rest_init+0x23/0x300 [ 400.665459][T13389] start_kernel+0x3a9/0x410 [ 400.671880][T13389] x86_64_start_reservations+0x24/0x30 [ 400.679259][T13389] x86_64_start_kernel+0x143/0x1c0 [ 400.686289][T13389] common_startup_64+0x13e/0x147 [ 400.693147][T13389] INITIAL READ USE at: [ 400.697654][T13389] lock_acquire+0x120/0x360 [ 400.704514][T13389] _raw_read_lock+0x36/0x50 [ 400.711361][T13389] __do_wait+0xde/0x740 [ 400.717870][T13389] do_wait+0x1f8/0x520 [ 400.724292][T13389] kernel_wait+0xab/0x170 [ 400.730974][T13389] call_usermodehelper_exec_work+0xbe/0x230 [ 400.739229][T13389] process_scheduled_works+0xae1/0x17b0 [ 400.747120][T13389] worker_thread+0x8a0/0xda0 [ 400.754056][T13389] kthread+0x70e/0x8a0 [ 400.760478][T13389] ret_from_fork+0x439/0x7d0 [ 400.767423][T13389] ret_from_fork_asm+0x1a/0x30 [ 400.774538][T13389] } [ 400.777218][T13389] ... key at: [] tasklist_lock+0x18/0x40 [ 400.785117][T13389] ... acquired at: [ 400.789089][T13389] lock_acquire+0x120/0x360 [ 400.793778][T13389] _raw_read_lock+0x36/0x50 [ 400.798457][T13389] send_sigurg+0x12b/0x420 [ 400.803050][T13389] sk_send_sigurg+0x6c/0x2e0 [ 400.807821][T13389] queue_oob+0x420/0x4f0 [ 400.812245][T13389] unix_stream_sendmsg+0xc3f/0xdf0 [ 400.817542][T13389] __sock_sendmsg+0x21c/0x270 [ 400.822403][T13389] ____sys_sendmsg+0x52d/0x830 [ 400.827345][T13389] ___sys_sendmsg+0x21f/0x2a0 [ 400.832201][T13389] __sys_sendmmsg+0x227/0x430 [ 400.837056][T13389] __x64_sys_sendmmsg+0xa0/0xc0 [ 400.842089][T13389] do_syscall_64+0xfa/0x3b0 [ 400.846770][T13389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.852837][T13389] [ 400.855159][T13389] -> (&f_owner->lock){....}-{3:3} { [ 400.860481][T13389] INITIAL USE at: [ 400.864506][T13389] lock_acquire+0x120/0x360 [ 400.870759][T13389] _raw_write_lock_irq+0xa2/0xf0 [ 400.877437][T13389] __f_setown+0x67/0x370 [ 400.883421][T13389] fcntl_dirnotify+0x3fa/0x6a0 [ 400.889925][T13389] do_fcntl+0x6d0/0x1910 [ 400.895912][T13389] __se_sys_fcntl+0xc8/0x150 [ 400.902251][T13389] do_syscall_64+0xfa/0x3b0 [ 400.908510][T13389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.916168][T13389] INITIAL READ USE at: [ 400.920594][T13389] lock_acquire+0x120/0x360 [ 400.927280][T13389] _raw_read_lock_irqsave+0xaf/0x100 [ 400.934740][T13389] send_sigio+0x38/0x370 [ 400.941160][T13389] dnotify_handle_event+0x169/0x440 [ 400.948558][T13389] fsnotify+0x1814/0x1a80 [ 400.955101][T13389] vfs_mkdir+0x477/0x510 [ 400.961538][T13389] do_mkdirat+0x247/0x590 [ 400.968052][T13389] __x64_sys_mkdirat+0x87/0xa0 [ 400.975004][T13389] do_syscall_64+0xfa/0x3b0 [ 400.981688][T13389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.989756][T13389] } [ 400.992357][T13389] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 401.001309][T13389] ... acquired at: [ 401.005202][T13389] lock_acquire+0x120/0x360 [ 401.009888][T13389] _raw_read_lock_irqsave+0xaf/0x100 [ 401.015352][T13389] send_sigio+0x38/0x370 [ 401.019772][T13389] kill_fasync+0x24d/0x4d0 [ 401.024376][T13389] lease_break_callback+0x26/0x30 [ 401.029600][T13389] __break_lease+0x6a5/0x1620 [ 401.034462][T13389] do_dentry_open+0x8b7/0x13f0 [ 401.039410][T13389] vfs_open+0x3b/0x340 [ 401.043671][T13389] path_openat+0x2ee5/0x3830 [ 401.048462][T13389] do_filp_open+0x1fa/0x410 [ 401.053164][T13389] do_sys_openat2+0x121/0x1c0 [ 401.058026][T13389] __x64_sys_open+0x11e/0x150 [ 401.062883][T13389] do_syscall_64+0xfa/0x3b0 [ 401.067569][T13389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.073639][T13389] [ 401.075967][T13389] -> (&new->fa_lock){....}-{3:3} { [ 401.081118][T13389] INITIAL USE at: [ 401.085028][T13389] lock_acquire+0x120/0x360 [ 401.091120][T13389] _raw_write_lock_irq+0xa2/0xf0 [ 401.097639][T13389] fasync_remove_entry+0xf1/0x1c0 [ 401.104246][T13389] lease_modify+0x1ca/0x3c0 [ 401.110331][T13389] locks_remove_file+0x4bf/0xea0 [ 401.116852][T13389] __fput+0x3ab/0xa70 [ 401.122406][T13389] task_work_run+0x1d1/0x260 [ 401.128576][T13389] exit_to_user_mode_loop+0xec/0x110 [ 401.135445][T13389] do_syscall_64+0x2bd/0x3b0 [ 401.141610][T13389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.149074][T13389] INITIAL READ USE at: [ 401.153409][T13389] lock_acquire+0x120/0x360 [ 401.159934][T13389] _raw_read_lock_irqsave+0xaf/0x100 [ 401.167228][T13389] kill_fasync+0x199/0x4d0 [ 401.173645][T13389] lease_break_callback+0x26/0x30 [ 401.180682][T13389] __break_lease+0x6a5/0x1620 [ 401.187365][T13389] do_dentry_open+0x8b7/0x13f0 [ 401.194126][T13389] vfs_open+0x3b/0x340 [ 401.200199][T13389] path_openat+0x2ee5/0x3830 [ 401.206789][T13389] do_filp_open+0x1fa/0x410 [ 401.213297][T13389] do_sys_openat2+0x121/0x1c0 [ 401.219972][T13389] __x64_sys_open+0x11e/0x150 [ 401.226646][T13389] do_syscall_64+0xfa/0x3b0 [ 401.233152][T13389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.241048][T13389] } [ 401.243547][T13389] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 401.252231][T13389] ... acquired at: [ 401.256029][T13389] lock_acquire+0x120/0x360 [ 401.260713][T13389] _raw_read_lock_irqsave+0xaf/0x100 [ 401.266170][T13389] kill_fasync+0x199/0x4d0 [ 401.270766][T13389] evdev_pass_values+0x627/0xbd0 [ 401.275884][T13389] evdev_events+0x1e6/0x340 [ 401.280572][T13389] input_pass_values+0x288/0x890 [ 401.285687][T13389] input_event_dispose+0x330/0x6b0 [ 401.290980][T13389] input_inject_event+0x1dd/0x340 [ 401.296187][T13389] evdev_write+0x2fc/0x480 [ 401.300779][T13389] vfs_write+0x27e/0xb30 [ 401.305200][T13389] ksys_write+0x145/0x250 [ 401.309716][T13389] do_syscall_64+0xfa/0x3b0 [ 401.314404][T13389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.320474][T13389] [ 401.322820][T13389] [ 401.322820][T13389] stack backtrace: [ 401.328737][T13389] CPU: 1 UID: 0 PID: 13389 Comm: syz.4.2883 Not tainted syzkaller #0 PREEMPT(full) [ 401.328757][T13389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 401.328776][T13389] Call Trace: [ 401.328784][T13389] [ 401.328791][T13389] dump_stack_lvl+0x189/0x250 [ 401.328814][T13389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.328834][T13389] ? __pfx__printk+0x10/0x10 [ 401.328861][T13389] validate_chain+0x1f05/0x2140 [ 401.328888][T13389] __lock_acquire+0xab9/0xd20 [ 401.328915][T13389] ? kill_fasync+0x199/0x4d0 [ 401.328935][T13389] lock_acquire+0x120/0x360 [ 401.328958][T13389] ? kill_fasync+0x199/0x4d0 [ 401.328982][T13389] _raw_read_lock_irqsave+0xaf/0x100 [ 401.328998][T13389] ? kill_fasync+0x199/0x4d0 [ 401.329016][T13389] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 401.329030][T13389] ? do_raw_spin_lock+0x121/0x290 [ 401.329054][T13389] kill_fasync+0x199/0x4d0 [ 401.329073][T13389] ? kill_fasync+0x53/0x4d0 [ 401.329092][T13389] evdev_pass_values+0x627/0xbd0 [ 401.329111][T13389] ? evdev_pass_values+0x681/0xbd0 [ 401.329131][T13389] evdev_events+0x1e6/0x340 [ 401.329146][T13389] ? evdev_events+0x79/0x340 [ 401.329162][T13389] ? input_pass_values+0x8d/0x890 [ 401.329183][T13389] input_pass_values+0x288/0x890 [ 401.329201][T13389] ? input_handle_event+0x70c/0xf30 [ 401.329225][T13389] input_event_dispose+0x330/0x6b0 [ 401.329250][T13389] input_inject_event+0x1dd/0x340 [ 401.329273][T13389] ? input_inject_event+0xb6/0x340 [ 401.329296][T13389] evdev_write+0x2fc/0x480 [ 401.329315][T13389] ? __pfx_evdev_write+0x10/0x10 [ 401.329333][T13389] ? bpf_lsm_file_permission+0x9/0x20 [ 401.329354][T13389] ? security_file_permission+0x75/0x290 [ 401.329377][T13389] ? rw_verify_area+0x255/0x4d0 [ 401.329398][T13389] ? __lock_acquire+0xab9/0xd20 [ 401.329420][T13389] ? __pfx_evdev_write+0x10/0x10 [ 401.329438][T13389] vfs_write+0x27e/0xb30 [ 401.329462][T13389] ? __pfx_vfs_write+0x10/0x10 [ 401.329484][T13389] ? __fget_files+0x2a/0x420 [ 401.329499][T13389] ? __fget_files+0x2a/0x420 [ 401.329512][T13389] ? __fget_files+0x3a0/0x420 [ 401.329525][T13389] ? __fget_files+0x2a/0x420 [ 401.329542][T13389] ksys_write+0x145/0x250 [ 401.329565][T13389] ? __pfx_ksys_write+0x10/0x10 [ 401.329586][T13389] ? rcu_is_watching+0x15/0xb0 [ 401.329604][T13389] ? do_syscall_64+0xbe/0x3b0 [ 401.329624][T13389] do_syscall_64+0xfa/0x3b0 [ 401.329641][T13389] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.329658][T13389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.329674][T13389] ? clear_bhb_loop+0x60/0xb0 [ 401.329692][T13389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.329712][T13389] RIP: 0033:0x7f274318eec9 [ 401.329734][T13389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.329761][T13389] RSP: 002b:00007f27413ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 401.329779][T13389] RAX: ffffffffffffffda RBX: 00007f27433e5fa0 RCX: 00007f274318eec9 [ 401.329792][T13389] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 401.329803][T13389] RBP: 00007f2743211f91 R08: 0000000000000000 R09: 0000000000000000 [ 401.329813][T13389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.329823][T13389] R13: 00007f27433e6038 R14: 00007f27433e5fa0 R15: 00007f274350fa28 [ 401.329841][T13389] [ 401.693966][ T919] gspca_sunplus: reg_r err -32 [ 401.782702][ T5862] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 401.792145][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.800305][ T5862] usb 6-1: Product: syz [ 401.804477][ T5862] usb 6-1: Manufacturer: syz [ 401.809137][ T5862] usb 6-1: SerialNumber: syz [ 401.816174][ T5862] usb 6-1: config 0 descriptor?? [ 402.760925][ T919] sunplus 7-1:0.0: probe with driver sunplus failed with error -32 [ 402.772217][ T919] usb 7-1: USB disconnect, device number 11 [ 402.830103][ T5862] usb 6-1: non-Atmel transceiver xxxx0008 [ 403.031133][ T5862] usb 6-1: Firmware version (0.0) predates our first public release. [ 403.041087][ T5862] usb 6-1: Please update to version 0.2 or newer [ 403.047706][ T5862] usb 6-1: atusb_probe: initialization failed, error = -19 [ 403.059171][ T5862] usb 6-1: USB disconnect, device number 14