last executing test programs: 1m22.626745162s ago: executing program 1 (id=1844): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000200)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 1m22.507788411s ago: executing program 1 (id=1847): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000001200)={'#! ', './file0', [{0x20, '\x98\xe1Cvg\x9cO\x16\xc0TC\xe8\xb8\x91W\xb8\x84\xdf\xbe\xbd\x8f\x81!\xf2V[\x03V\xba/\xb9+\xd2\x95\xe0t\x0f<}T\v\x0f\xe8\xae\x89\xfa^\xce\xae[t/\x12\x1f\x02\x85\xbd\xbc\r(\xfd\xf2\xeeB\x12\xdc\x06\x1d\xd8\x86g\xcf\xb6\xde\xeb\xfc\xfc~A\x95\x8a6'}, {0x20, '5\xed\xe9\xe8\f\xcb\x82;\xc5\x98\"\x1c\x8d\xbb,X}\xec\x9f\xe5\xf0\x1f\x02\a\x0e\xe09\x17\xa9\xdbXP\x94}L\x17WT\xc0Rc\xe5\xd3\x9a\xcfGr3\xbaf\x8aS\xc6Q\x16\xf4\x9f\x02u.\xaf\xf3\xb8\x0e\x85a8\x03\x02\xf4\xf1\\b\x1ew\xd4F\xf1\xf9I\xe4\xca\xb1\xa51Sk\xdf\xc7\xd2\x87.b\xb9|+\x9f3@\xdfs\xa0\x01\x8fV/0\x8bo\xccQ\x9c\x9e\xae!b\xa0 \xea\xa4(C\n\x96\xdf\xd2\xd6\x91\x90\x83 \xb2\xb4\xac{\x02\xde,Ff\x98\x84\x16\x1b\x96\xac\x9e\x17\xf0\x13\xfa\xd1+\xcc\x19\x81ZZ\xa0\xde\xeb\xf3`\x0e\x87:` \x1b\xec\xc81\xb7\x91\xfdcL\xdcH/0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) 1m20.512841998s ago: executing program 1 (id=1880): r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000000c0)={{0x77359400}, {r2, r3+60000000}}, 0x0) 1m20.151410212s ago: executing program 32 (id=1880): r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000000c0)={{0x77359400}, {r2, r3+60000000}}, 0x0) 1.437462575s ago: executing program 0 (id=2998): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) pwritev2(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)="d593", 0x2}], 0x1, 0xe7b, 0x0, 0xf) 1.349817516s ago: executing program 0 (id=2999): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.325352665s ago: executing program 3 (id=3000): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xe099, 0x0, 0x1, 0xb5}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffff9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1.226510261s ago: executing program 0 (id=3001): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 1.222667249s ago: executing program 2 (id=3002): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, r1, 0xee00) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x0, 0xfffe}, 0x20) 1.152247121s ago: executing program 4 (id=3003): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 1.127889735s ago: executing program 2 (id=3004): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x40891}, 0x24000000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 1.018722922s ago: executing program 3 (id=3005): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x103100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={r1, 0x0, r2, 0x3, 0x2, 0x7f0, 0x6, 0x10, 0x1, 0x4, 0x38f, 0x80000b8}) 1.01781535s ago: executing program 4 (id=3006): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000900", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000060006"], 0x4c}}, 0x0) 966.535637ms ago: executing program 0 (id=3007): unshare(0x22020600) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x29) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 858.815091ms ago: executing program 2 (id=3008): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000000000038005080080003000dac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) 797.81016ms ago: executing program 3 (id=3009): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') r1 = fanotify_init(0x0, 0x400) fanotify_mark(r1, 0x11, 0x8001003, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') pread64(r2, &(0x7f0000000000)=""/17, 0x11, 0x3) 796.02703ms ago: executing program 4 (id=3010): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700), 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 702.905735ms ago: executing program 5 (id=3011): r0 = creat(&(0x7f0000000380)='./file0\x00', 0x8) close(r0) userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) 659.646304ms ago: executing program 2 (id=3012): r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x118) r1 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x2, 0x0, 0x9}}, 0x28) sendfile(r2, r1, 0x0, 0x4000000053d2) 637.184696ms ago: executing program 0 (id=3013): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 548.437245ms ago: executing program 3 (id=3014): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000009c0)={0x40, r1, 0x801, 0x70bd2e, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac0c}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "afc3904a7802e165bda3a0d0db"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xba83542b86c80fd7}, 0x4) 540.8513ms ago: executing program 4 (id=3015): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000000)) 506.408399ms ago: executing program 0 (id=3016): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0x7e) close(r0) socket(0x40000000015, 0x5, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 418.876368ms ago: executing program 5 (id=3017): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x4e22, 0x3, @mcast1, 0x1000}}, {{0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}}, 0x108) 418.56777ms ago: executing program 2 (id=3018): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0}]) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000e0ffff6902"]) 367.579709ms ago: executing program 3 (id=3019): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 353.745438ms ago: executing program 5 (id=3020): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000004b704000000000000850000000300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\xe6Z\xeaF\r\xc6\xe5P\xaa\xb8\x15w\x7f\xb8O\x106\x19yP\x8d\xc1\xce\xac\xa0\xa1\xa1\x800x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="490900000000000000001500000004002b8008000300", @ANYRES32=r3, @ANYBLOB="08002a0000000000050029000100000020002b80040003800800010001040000050002"], 0x58}}, 0x0) 182.183544ms ago: executing program 5 (id=3022): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r0, 0x7f9) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000140)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b0f33b49db96ad24d12595fbea5", 0x29) 131.421779ms ago: executing program 2 (id=3023): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = io_uring_setup(0x7f07, &(0x7f0000005980)={0x0, 0x40846c9, 0x10, 0x86, 0x350}) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f00000000c0)={0x7}, 0x0) 122.488376ms ago: executing program 5 (id=3024): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r1, &(0x7f0000005d40)=[{{&(0x7f0000000600)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="10000000000000000000c0"], 0x10}}], 0x1, 0x400c0) sendfile(r1, r0, 0x0, 0x20000023893) 86.549592ms ago: executing program 3 (id=3025): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x401) listen(r0, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) shutdown(r0, 0x0) 14.049643ms ago: executing program 4 (id=3026): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0x4) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x10, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0x14}}], 0x4b, 0x0, 0x0) 0s ago: executing program 5 (id=3027): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=ANY=[], 0x168}, 0x0, 0x20000000, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 203.035951][ T5976] usb 2-1: config 0 interface 0 has no altsetting 0 [ 203.042743][ T5976] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 203.053203][ T5976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.065127][ T5976] usb 2-1: config 0 descriptor?? [ 203.115246][ T5890] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 203.147062][ T5167] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.157565][ T5167] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 203.174398][ T5167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.185238][ T5167] usb 4-1: config 0 descriptor?? [ 203.200295][ T5167] pwc: Askey VC010 type 2 USB webcam detected. [ 203.210551][ T24] usb 5-1: USB disconnect, device number 12 [ 203.289074][ T5890] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 203.298595][ T5890] usb 1-1: config 0 has no interface number 0 [ 203.308397][ T5890] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 203.318027][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.326848][ T5890] usb 1-1: Product: syz [ 203.331160][ T5890] usb 1-1: Manufacturer: syz [ 203.336366][ T5890] usb 1-1: SerialNumber: syz [ 203.349452][ T5890] usb 1-1: config 0 descriptor?? [ 203.492198][ T5976] apple 0003:05AC:0247.0011: fixing up Magic Keyboard JIS report descriptor [ 203.502614][ T5976] apple 0003:05AC:0247.0011: unexpected long global item [ 203.511395][ T5976] apple 0003:05AC:0247.0011: parse failed [ 203.517444][ T5976] apple 0003:05AC:0247.0011: probe with driver apple failed with error -22 [ 203.601340][ T5167] pwc: recv_control_msg error -32 req 02 val 2b00 [ 203.630323][ T5167] pwc: recv_control_msg error -32 req 02 val 2700 [ 203.764496][ T5976] usb 2-1: USB disconnect, device number 15 [ 203.790420][ T5890] usb 1-1: Firmware: major: 22, minor: 220, hardware type: UNKNOWN (68) [ 203.853741][ T5167] pwc: recv_control_msg error -71 req 04 val 1000 [ 203.880103][ T5167] pwc: recv_control_msg error -71 req 04 val 1300 [ 203.891443][ T5167] pwc: recv_control_msg error -71 req 04 val 1400 [ 203.900508][ T5167] pwc: recv_control_msg error -71 req 02 val 2000 [ 203.907870][ T5167] pwc: recv_control_msg error -71 req 02 val 2100 [ 203.925653][ T5167] pwc: recv_control_msg error -71 req 04 val 1500 [ 203.949448][ T5167] pwc: recv_control_msg error -71 req 02 val 2500 [ 203.964896][ T5167] pwc: recv_control_msg error -71 req 02 val 2400 [ 203.977898][ T5167] pwc: recv_control_msg error -71 req 02 val 2600 [ 203.986599][ T5167] pwc: recv_control_msg error -71 req 02 val 2900 [ 203.994280][ T5890] usb 1-1: Firmware: build [ 203.999802][ T5167] pwc: recv_control_msg error -71 req 02 val 2800 [ 204.011194][ T5167] pwc: recv_control_msg error -71 req 04 val 1100 [ 204.020585][ T5167] pwc: recv_control_msg error -71 req 04 val 1200 [ 204.043218][ T5167] pwc: Registered as video103. [ 204.066149][ T5167] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 204.090517][ T5167] usb 4-1: USB disconnect, device number 15 [ 204.195951][ T5890] usb 1-1: failed to fetch extended address, random address set [ 204.203719][ T5890] usb 1-1: atusb_probe: initialization failed, error = -524 [ 204.218135][ T5890] atusb 1-1:0.128: probe with driver atusb failed with error -524 [ 204.231797][ T5890] usb 1-1: USB disconnect, device number 16 [ 204.446174][ T5976] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 204.604531][ T5976] usb 5-1: Using ep0 maxpacket: 8 [ 204.611768][ T5976] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 204.620296][ T5976] usb 5-1: config 150 has no interface number 0 [ 204.626924][ T5976] usb 5-1: config 150 interface 204 has no altsetting 0 [ 204.633900][ T5976] usb 5-1: config 150 interface 1 has no altsetting 0 [ 204.643318][ T5976] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 204.653094][ T5976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.661246][ T5976] usb 5-1: Product: syz [ 204.665637][ T5976] usb 5-1: Manufacturer: syz [ 204.670264][ T5976] usb 5-1: SerialNumber: syz [ 204.714503][ T5913] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 204.867847][ T5913] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 204.887307][ T5913] usb 4-1: config 0 has no interface number 0 [ 204.895944][ T5976] xr_serial 5-1:150.204: xr_serial converter detected [ 204.917883][ T5913] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 204.927444][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.935996][ T5913] usb 4-1: Product: syz [ 204.942943][ T5913] usb 4-1: Manufacturer: syz [ 204.948636][ T5913] usb 4-1: SerialNumber: syz [ 204.956813][ T5913] usb 4-1: config 0 descriptor?? [ 205.064107][ T8641] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 205.182253][ T5913] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 205.194563][ T5913] usb 4-1: No valid video chain found. [ 205.215192][ T5913] usb 4-1: USB disconnect, device number 16 [ 205.484535][ T5906] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 205.618504][ T8657] loop2: detected capacity change from 0 to 7 [ 205.630412][ T8657] Dev loop2: unable to read RDB block 7 [ 205.636323][ T8657] loop2: unable to read partition table [ 205.642355][ T8657] loop2: partition table beyond EOD, truncated [ 205.649141][ T8657] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 205.654750][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 205.682813][ T5906] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 205.699107][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.707969][ T5906] usb 1-1: Product: syz [ 205.714183][ T5976] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 205.729532][ T5976] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 205.739770][ T5906] usb 1-1: Manufacturer: syz [ 205.748659][ T5906] usb 1-1: SerialNumber: syz [ 205.757178][ T5976] usb 5-1: USB disconnect, device number 13 [ 205.770544][ T5906] usb 1-1: config 0 descriptor?? [ 205.779133][ T5976] xr_serial 5-1:150.204: device disconnected [ 205.781272][ T8659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1160'. [ 206.074556][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 206.202528][ T5906] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 206.225019][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 206.245262][ T5906] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 206.255615][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 206.265095][ T5906] usb 1-1: media controller created [ 206.274109][ T9] usb 2-1: config index 0 descriptor too short (expected 95, got 59) [ 206.292652][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 206.318151][ T9] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 206.346802][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.360823][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.377282][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.394718][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.403369][ T8646] dtv5100: wlen = 0, aborting. [ 206.410035][ T9] usb 2-1: Product: syz [ 206.415573][ T9] usb 2-1: Manufacturer: syz [ 206.420299][ T9] usb 2-1: SerialNumber: syz [ 206.426971][ T5906] zl10353_read_register: readreg error (reg=127, ret==0) [ 206.442000][ T5906] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 206.474699][ T5906] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 206.488294][ T5906] usb 1-1: USB disconnect, device number 17 [ 206.532884][ T5906] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 206.642234][ T8661] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 206.657135][ T9] usb 2-1: 0:2 : does not exist [ 206.680635][ T9] usb 2-1: USB disconnect, device number 16 [ 206.736972][ T5976] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 206.908532][ T5976] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 206.917962][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.933329][ T5976] usb 5-1: config 0 descriptor?? [ 206.941800][ T5976] cp210x 5-1:0.0: cp210x converter detected [ 207.064724][ T5906] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 207.238214][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 207.292644][ T5906] usb 4-1: config 1 has no interface number 0 [ 207.317144][ T5906] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.328789][ T5906] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 207.373427][ T5976] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 207.392477][ T5906] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x31, changing to 0x1 [ 207.411933][ T5906] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 207.456506][ T5906] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.460400][ T8756] netlink: 'syz.2.1183': attribute type 13 has an invalid length. [ 207.497555][ T8756] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.1183'. [ 207.841374][ T5976] usb 5-1: cp210x converter now attached to ttyUSB0 [ 207.912805][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.921166][ T5976] usb 5-1: USB disconnect, device number 14 [ 207.930060][ T5906] usb 4-1: Product: syz [ 207.934287][ T5906] usb 4-1: Manufacturer: syz [ 207.939845][ T5976] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 207.947990][ T5906] usb 4-1: SerialNumber: syz [ 207.978975][ T5976] cp210x 5-1:0.0: device disconnected [ 208.024508][ T30] audit: type=1326 audit(1754615057.675:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8763 comm="syz.2.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256b98ebe9 code=0x7ffc0000 [ 208.094618][ T30] audit: type=1326 audit(1754615057.675:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8763 comm="syz.2.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256b98ebe9 code=0x7ffc0000 [ 208.170872][ T30] audit: type=1326 audit(1754615057.685:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8763 comm="syz.2.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f256b98ebe9 code=0x7ffc0000 [ 208.227872][ T30] audit: type=1326 audit(1754615057.685:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8763 comm="syz.2.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256b98ebe9 code=0x7ffc0000 [ 208.279494][ T8768] syz.2.1188 (8768) used greatest stack depth: 19952 bytes left [ 208.281771][ T30] audit: type=1326 audit(1754615057.685:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8763 comm="syz.2.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f256b98ebe9 code=0x7ffc0000 [ 208.345256][ T30] audit: type=1326 audit(1754615057.705:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8763 comm="syz.2.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256b98ebe9 code=0x7ffc0000 [ 208.391698][ T8772] input: syz0 as /devices/virtual/input/input28 [ 208.534659][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 208.813838][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 208.883175][ T5906] cdc_ncm 4-1:1.1: bind() failure [ 208.890555][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.905217][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.917972][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 208.927857][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 208.938101][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.957533][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 208.973688][ T8790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1198'. [ 208.974391][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 209.000983][ T9] usb 1-1: Manufacturer: syz [ 209.008896][ T9] usb 1-1: config 0 descriptor?? [ 209.058462][ T5892] usb 4-1: USB disconnect, device number 17 [ 209.133408][ T30] audit: type=1326 audit(1754615058.785:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8793 comm="syz.4.1199" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4bd5f8ebe9 code=0x0 [ 209.187289][ T8796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1201'. [ 209.338033][ T9] rc_core: IR keymap rc-hauppauge not found [ 209.350541][ T9] Registered IR keymap rc-empty [ 209.356504][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.384681][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.415612][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 209.435985][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input29 [ 209.451190][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.479346][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.508146][ T8811] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1207'. [ 209.524617][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.565744][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.584514][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.614524][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.653466][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.685386][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.728261][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.766367][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 209.796515][ T9] mceusb 1-1:0.0: Registered  with mce emulator interface version 1 [ 209.844371][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 209.893481][ T9] usb 1-1: USB disconnect, device number 18 [ 212.359304][ T8888] sd 0:0:1:0: device reset [ 213.464465][ T5167] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 213.712570][ T5167] usb 1-1: config 0 has no interfaces? [ 213.924906][ T5167] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 213.958101][ T5167] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.004890][ T5167] usb 1-1: Product: syz [ 214.009134][ T5167] usb 1-1: Manufacturer: syz [ 214.023863][ T5167] usb 1-1: SerialNumber: syz [ 214.038147][ T5167] usb 1-1: config 0 descriptor?? [ 214.144557][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 214.304417][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 214.315965][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.330605][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.358548][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 214.378682][ T5906] usb 1-1: USB disconnect, device number 19 [ 214.393010][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 214.403443][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.428983][ T24] usb 3-1: config 0 descriptor?? [ 214.708805][ T30] audit: type=1326 audit(1754615064.365:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8971 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd5f8ebe9 code=0x7ffc0000 [ 214.740583][ T30] audit: type=1326 audit(1754615064.365:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8971 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd5f8ebe9 code=0x7ffc0000 [ 214.769257][ T30] audit: type=1326 audit(1754615064.385:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8971 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bd5f8ebe9 code=0x7ffc0000 [ 214.795363][ T30] audit: type=1326 audit(1754615064.385:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8971 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd5f8ebe9 code=0x7ffc0000 [ 214.819209][ T30] audit: type=1326 audit(1754615064.385:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8971 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd5f8ebe9 code=0x7ffc0000 [ 214.860221][ T24] HID 045e:07da: Invalid code 65791 type 1 [ 214.871497][ T30] audit: type=1326 audit(1754615064.395:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8971 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f4bd5f8ebe9 code=0x7ffc0000 [ 214.875010][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0012/input/input30 [ 214.908234][ T30] audit: type=1326 audit(1754615064.395:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8971 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd5f8ebe9 code=0x7ffc0000 [ 214.944239][ T30] audit: type=1326 audit(1754615064.395:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8971 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd5f8ebe9 code=0x7ffc0000 [ 214.989378][ T24] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 215.014627][ T30] audit: type=1326 audit(1754615064.395:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8971 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f4bd5f8ebe9 code=0x7ffc0000 [ 215.048159][ T30] audit: type=1326 audit(1754615064.395:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8971 comm="syz.4.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd5f8ebe9 code=0x7ffc0000 [ 215.183095][ T5167] usb 3-1: USB disconnect, device number 14 [ 215.609636][ T9004] input: syz0 as /devices/virtual/input/input31 [ 216.130871][ T9023] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 216.176360][ T9025] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1290'. [ 216.349191][ T9031] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 216.366803][ T9028] syz.2.1291 (9028) used greatest stack depth: 17992 bytes left [ 216.814439][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 216.986099][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.008536][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.025930][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.066711][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.087095][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.115575][ T24] usb 2-1: config 0 descriptor?? [ 217.191929][ T9059] loop8: detected capacity change from 0 to 8 [ 217.216228][ T9059] Dev loop8: unable to read RDB block 8 [ 217.223492][ T9059] loop8: unable to read partition table [ 217.243875][ T9059] loop8: partition table beyond EOD, truncated [ 217.250768][ T9059] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 217.559108][ T24] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 217.709993][ T24] hid-generic 0000:0D17:0000.0014: unknown main item tag 0x0 [ 217.728149][ T24] hid-generic 0000:0D17:0000.0014: unknown main item tag 0x0 [ 217.759580][ T24] hid-generic 0000:0D17:0000.0014: hidraw1: HID v0.00 Device [syz0] on syz1 [ 218.228003][ T9093] input: syz0 as /devices/virtual/input/input32 [ 219.194497][ T5890] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 219.262828][ T9132] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1335'. [ 219.385003][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.410797][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.439908][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.473655][ T5890] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.503560][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.519409][ T5890] usb 4-1: config 0 descriptor?? [ 219.611264][ T5892] usb 2-1: USB disconnect, device number 17 [ 219.957999][ T5890] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 219.981223][ T5890] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 220.032943][ T5890] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 220.061708][ T5890] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 220.079642][ T5890] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 220.099630][ T5890] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 220.142028][ T5890] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 220.243454][ T5890] usb 4-1: USB disconnect, device number 18 [ 220.276935][ T9153] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1345'. [ 221.191802][ T9178] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 222.126934][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 222.128623][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 222.133042][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 222.145360][ T5839] Bluetooth: hci4: command 0x0401 tx timeout [ 222.337698][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 222.337718][ T30] audit: type=1326 audit(1754615071.995:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256b98ebe9 code=0x7ffc0000 [ 222.386002][ T30] audit: type=1326 audit(1754615071.995:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256b98ebe9 code=0x7ffc0000 [ 222.443881][ T30] audit: type=1326 audit(1754615071.995:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f256b98ebe9 code=0x7ffc0000 [ 222.486513][ T30] audit: type=1326 audit(1754615071.995:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256b98ebe9 code=0x7ffc0000 [ 222.509432][ T30] audit: type=1326 audit(1754615072.065:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9223 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256b98ebe9 code=0x7ffc0000 [ 222.799588][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1382'. [ 222.875210][ T5906] IPVS: starting estimator thread 0... [ 222.977846][ T9244] IPVS: using max 27 ests per chain, 64800 per kthread [ 223.687659][ T9274] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1399'. [ 223.922461][ T9286] loop2: detected capacity change from 0 to 7 [ 223.932240][ T9286] Dev loop2: unable to read RDB block 7 [ 223.941064][ T9286] loop2: AHDI p2 p3 [ 223.945139][ T9286] loop2: partition table partially beyond EOD, truncated [ 223.952456][ T9286] loop2: p2 size 150995456 extends beyond EOD, truncated [ 224.064449][ T5890] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 224.222664][ T5890] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 224.249472][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.268543][ T5890] usb 5-1: Product: syz [ 224.272782][ T5890] usb 5-1: Manufacturer: syz [ 224.287840][ T5890] usb 5-1: SerialNumber: syz [ 224.301746][ T5890] usb 5-1: config 0 descriptor?? [ 224.313300][ T5890] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 224.344551][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 224.473011][ T5906] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 224.496717][ T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 224.509776][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.531843][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 224.546183][ T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 224.555248][ T9] usb 4-1: Manufacturer: syz [ 224.566467][ T9] usb 4-1: config 0 descriptor?? [ 224.645351][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 224.655142][ T5906] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.669384][ T5906] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.679948][ T5906] usb 1-1: config 0 interface 0 has no altsetting 0 [ 224.687048][ T5906] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 224.697330][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.706340][ T9] rc_core: IR keymap rc-hauppauge not found [ 224.714642][ T9] Registered IR keymap rc-empty [ 224.720721][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 224.735773][ T5906] usb 1-1: config 0 descriptor?? [ 224.749043][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input33 [ 224.803162][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 224.813231][ T24] usb 4-1: USB disconnect, device number 19 [ 225.213710][ T5906] cougar 0003:060B:500A.0016: unexpected long global item [ 225.238966][ T5906] cougar 0003:060B:500A.0016: parse failed [ 225.247698][ T5906] cougar 0003:060B:500A.0016: probe with driver cougar failed with error -22 [ 225.357919][ T5972] usb 1-1: USB disconnect, device number 20 [ 225.391371][ T5890] usb 5-1: USB disconnect, device number 15 [ 226.262758][ T9350] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 227.310597][ T9391] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1451'. [ 228.107257][ T9416] netlink: 'syz.3.1461': attribute type 10 has an invalid length. [ 228.158709][ T9416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.170017][ T9416] team0: Device bond0 failed to register rx_handler [ 228.385793][ T5890] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 228.406881][ T9429] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1467'. [ 228.418472][ T9429] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1467'. [ 228.549642][ T5890] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 228.570775][ T5890] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 228.591324][ T5890] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 228.612035][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.637899][ T9418] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 228.653794][ T5890] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 228.874250][ T5890] usb 1-1: USB disconnect, device number 21 [ 229.154244][ T9452] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 231.296150][ T5890] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 231.395450][ T9524] binder: 9521:9524 ioctl c0306201 0 returned -14 [ 231.409715][ T9524] binder: 9521:9524 ioctl 541b 0 returned -22 [ 231.460809][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.495090][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 231.533232][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 231.553471][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.584987][ T5906] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 231.592055][ T5890] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.634228][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.658699][ T5890] usb 3-1: config 0 descriptor?? [ 231.765669][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.782097][ C1] sd 0:0:1:0: [sda] tag#5122 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 231.792661][ C1] sd 0:0:1:0: [sda] tag#5122 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 231.825508][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.866058][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.879225][ T5906] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.888473][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.905458][ T5906] usb 2-1: config 0 descriptor?? [ 232.111505][ T5890] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 232.174443][ T5926] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 232.334453][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 232.356506][ T5926] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 232.372671][ T5926] usb 5-1: config 0 has no interface number 0 [ 232.381625][ T9] usb 3-1: USB disconnect, device number 15 [ 232.389947][ T5906] plantronics 0003:047F:FFFF.0018: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 232.402454][ T5926] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.427737][ T5926] usb 5-1: config 0 interface 85 has no altsetting 0 [ 232.438250][ T5926] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 232.447894][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.456080][ T5926] usb 5-1: Product: syz [ 232.460369][ T5926] usb 5-1: Manufacturer: syz [ 232.467433][ T5926] usb 5-1: SerialNumber: syz [ 232.475653][ T5926] usb 5-1: config 0 descriptor?? [ 232.540998][ T5913] usb 2-1: USB disconnect, device number 18 [ 232.819359][ T9561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.091458][ T5926] appletouch 5-1:0.85: Geyser mode initialized. [ 233.116237][ T5926] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input36 [ 233.296570][ T5972] usb 5-1: USB disconnect, device number 16 [ 233.375018][ T5972] appletouch 5-1:0.85: input: appletouch disconnected [ 233.671548][ T9597] openvswitch: netlink: IP tunnel TTL not specified. [ 234.091683][ T9618] loop9: detected capacity change from 0 to 7 [ 234.730046][ T9652] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1566'. [ 235.121986][ T9665] binder: 9664:9665 ioctl c0306201 0 returned -14 [ 235.163830][ T9665] binder: 9664:9665 ioctl 541b 0 returned -22 [ 237.228335][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1601'. [ 237.949068][ T9761] vlan4: entered allmulticast mode [ 237.958997][ T9761] team0: entered allmulticast mode [ 237.960837][ T9764] input: syz1 as /devices/virtual/input/input37 [ 237.964162][ T9761] team_slave_0: entered allmulticast mode [ 237.983092][ T9761] team_slave_1: entered allmulticast mode [ 237.995283][ T9761] bridge0: entered allmulticast mode [ 238.009618][ T9761] team0: Device vlan4 is already an upper device of the team interface [ 238.294768][ T5926] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 238.458585][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 238.467566][ T5926] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 238.479833][ T5926] usb 5-1: config 179 has no interface number 0 [ 238.489055][ T5926] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 238.506275][ T5926] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 238.520390][ T5926] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 238.534287][ T5926] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 238.551813][ T5926] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 238.571229][ T5926] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 238.580625][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.597676][ T9767] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 238.782899][ T9786] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 238.835038][ T9767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.853119][ T9767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.161898][ T9799] netlink: 'syz.1.1630': attribute type 1 has an invalid length. [ 239.180410][ T9799] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1630'. [ 239.302616][ T24] usb 5-1: USB disconnect, device number 17 [ 239.302712][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 239.317276][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 239.513097][ T9810] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1635'. [ 239.574512][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 239.736537][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 239.768561][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 239.794891][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 239.824461][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.854921][ T9805] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 239.890678][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 240.144419][ T9] usb 2-1: USB disconnect, device number 19 [ 240.484735][ T5926] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 240.644582][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 240.656314][ T5926] usb 1-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59 [ 240.665680][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.674904][ T5926] usb 1-1: Product: syz [ 240.685174][ T5926] usb 1-1: Manufacturer: syz [ 240.689834][ T5926] usb 1-1: SerialNumber: syz [ 240.720878][ T5926] usb 1-1: config 0 descriptor?? [ 240.825301][ T9858] ======================================================= [ 240.825301][ T9858] WARNING: The mand mount option has been deprecated and [ 240.825301][ T9858] and is ignored by this kernel. Remove the mand [ 240.825301][ T9858] option from the mount to silence this warning. [ 240.825301][ T9858] ======================================================= [ 240.860196][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.958306][ T5926] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 240.981917][ T5926] usb 1-1: USB disconnect, device number 22 [ 241.272289][ T9875] vivid-000: disconnect [ 241.287928][ T9874] vivid-000: reconnect [ 241.717095][ T8708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.740782][ T8708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.335361][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 242.514416][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 242.531151][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 242.561280][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.595501][ T9] usb 4-1: config 0 descriptor?? [ 242.619019][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 243.524447][ T5926] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 243.640332][ T9] gspca_nw80x: reg_w err -71 [ 243.654810][ T9] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 243.675584][ T9] usb 4-1: USB disconnect, device number 20 [ 243.699162][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.720643][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.732888][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 243.746738][ T5926] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.758670][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.796376][ T5926] usb 3-1: config 0 descriptor?? [ 244.216661][ T5926] plantronics 0003:047F:FFFF.0019: reserved main item tag 0xd [ 244.244173][ T5926] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 244.363522][ T9992] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1717'. [ 244.388137][ T9992] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1717'. [ 244.496798][ T9] usb 3-1: USB disconnect, device number 16 [ 244.691159][T10002] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.699227][T10002] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.794472][ T5926] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 244.951298][T10002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.959065][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 244.977028][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 244.988758][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 245.007917][T10002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.027720][ T5926] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 245.048895][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.077158][ T5926] usb 4-1: Product: syz [ 245.081400][ T5926] usb 4-1: Manufacturer: syz [ 245.094507][ T5926] usb 4-1: SerialNumber: syz [ 245.108534][ T5926] usb 4-1: config 0 descriptor?? [ 245.133114][ T5926] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 245.164575][ T5926] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 245.179617][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1727'. [ 245.311633][T10002] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.331369][T10002] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.339899][T10002] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.348663][T10002] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.418439][T10012] netlink: 'syz.4.1725': attribute type 2 has an invalid length. [ 245.731708][ T5926] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 245.739935][ T5926] em28xx 4-1:0.0: Config register raw data: 0x15 [ 245.941068][ T5926] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 245.957067][ T5926] em28xx 4-1:0.0: No AC97 audio processor [ 245.992696][ T5926] usb 4-1: USB disconnect, device number 21 [ 246.015236][ T5926] em28xx 4-1:0.0: Disconnecting em28xx [ 246.035454][ T5926] em28xx 4-1:0.0: Freeing device [ 246.136886][T10031] 9pnet: p9_errstr2errno: server reported unknown error [ 246.184548][ T5892] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 246.350487][ T5892] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 246.362506][ T5892] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 246.373778][ T5892] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 246.385681][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.409149][T10029] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 246.421831][ T5892] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 246.534648][ T5926] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 246.714967][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 246.726050][ T5892] usb 5-1: USB disconnect, device number 18 [ 246.739512][ T5926] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.773556][ T5926] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.805414][ T5926] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 246.825051][ T5926] usb 2-1: config 0 interface 0 has no altsetting 0 [ 246.832169][ T5926] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 246.844441][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.857658][ T5926] usb 2-1: config 0 descriptor?? [ 247.309747][ T30] audit: type=1326 audit(1754615096.965:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10065 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac6e32add9 code=0x7ffc0000 [ 247.407501][ T30] audit: type=1326 audit(1754615096.965:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10065 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac6e32add9 code=0x7ffc0000 [ 247.434829][ T30] audit: type=1326 audit(1754615096.965:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10065 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac6e32add9 code=0x7ffc0000 [ 247.460726][ T30] audit: type=1326 audit(1754615096.965:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10065 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac6e32add9 code=0x7ffc0000 [ 247.485257][ T30] audit: type=1326 audit(1754615096.965:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10065 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac6e32add9 code=0x7ffc0000 [ 247.533010][ T5926] usb 2-1: USB disconnect, device number 20 [ 247.697725][ T30] audit: type=1326 audit(1754615096.965:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10065 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac6e32add9 code=0x7ffc0000 [ 247.697777][ T30] audit: type=1326 audit(1754615096.965:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10065 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac6e32add9 code=0x7ffc0000 [ 247.697837][ T30] audit: type=1326 audit(1754615096.965:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10065 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac6e32add9 code=0x7ffc0000 [ 247.697875][ T30] audit: type=1326 audit(1754615096.965:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10065 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac6e32add9 code=0x7ffc0000 [ 247.697917][ T30] audit: type=1326 audit(1754615096.965:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10065 comm="syz.0.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac6e32add9 code=0x7ffc0000 [ 247.704717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 248.172611][T10092] loop2: detected capacity change from 0 to 7 [ 248.204513][T10092] Dev loop2: unable to read RDB block 7 [ 248.210186][T10092] loop2: unable to read partition table [ 248.236570][T10092] loop2: partition table beyond EOD, truncated [ 248.242819][T10092] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 248.274658][ T5926] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 248.425996][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 248.452227][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.463464][ T5926] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 248.490451][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.534685][ T5926] usb 4-1: config 0 descriptor?? [ 248.710720][T10112] bridge1: entered promiscuous mode [ 248.959917][ T5926] hid-picolcd 0003:04D8:C002.001B: unknown main item tag 0x0 [ 248.971207][ T5926] hid-picolcd 0003:04D8:C002.001B: unknown main item tag 0x0 [ 248.991474][ T5926] hid-picolcd 0003:04D8:C002.001B: unknown main item tag 0x0 [ 249.002720][ T5926] hid-picolcd 0003:04D8:C002.001B: unknown main item tag 0x0 [ 249.040185][ T5926] hid-picolcd 0003:04D8:C002.001B: unknown main item tag 0x0 [ 249.115213][ T5926] hid-picolcd 0003:04D8:C002.001B: No report with id 0x11 found [ 249.179775][ T5892] usb 4-1: USB disconnect, device number 22 [ 249.304450][ T5890] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 249.458109][T10135] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 249.484178][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.504440][T10135] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 249.515664][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.535036][ T5890] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 249.550644][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.571359][ T5890] usb 2-1: config 0 descriptor?? [ 249.914498][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 250.005502][ T5890] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 250.030728][ T5890] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.001C/input/input39 [ 250.075670][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 250.090309][ T9] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 250.110821][ T9] usb 5-1: config 0 has no interface number 0 [ 250.130004][ T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 250.142444][ T5926] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 250.161734][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.169957][ T9] usb 5-1: Product: syz [ 250.174260][ T9] usb 5-1: Manufacturer: syz [ 250.178944][ T9] usb 5-1: SerialNumber: syz [ 250.189700][ T5890] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 250.191350][ T9] usb 5-1: config 0 descriptor?? [ 250.227368][ T9] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 250.292305][ T5890] usb 2-1: USB disconnect, device number 21 [ 250.304580][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 250.312516][ T5926] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.337617][ T5926] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.372277][ T5926] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 250.404438][ T5926] usb 3-1: config 0 interface 0 has no altsetting 0 [ 250.421617][ T5926] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 250.441889][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.466280][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 250.488199][ T5926] usb 3-1: config 0 descriptor?? [ 250.513458][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 250.674964][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 210 [ 250.877162][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 250.878607][ T5890] usb 5-1: USB disconnect, device number 19 [ 250.893872][T10182] netlink: 408 bytes leftover after parsing attributes in process `syz.1.1801'. [ 250.908364][ T5890] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 250.927550][ T5926] hid (null): report_id 0 is invalid [ 250.933445][ T5926] hid (null): unknown global tag 0xc [ 250.933732][ T5890] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 250.941065][T10182] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1801'. [ 250.956436][ T5890] quatech2 5-1:0.51: device disconnected [ 251.120559][ T5972] usb 3-1: USB disconnect, device number 17 [ 251.527021][T10194] netlink: 'syz.3.1808': attribute type 3 has an invalid length. [ 251.554607][T10194] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1808'. [ 252.136335][T10213] xt_CT: No such helper "syz0" [ 252.287125][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 252.451671][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 252.464035][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 252.493847][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 252.519512][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 252.541057][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.574187][T10215] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 252.608749][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 253.036414][ T9] usb 3-1: USB disconnect, device number 18 [ 254.315113][ T5890] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 254.486356][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.496935][ T5890] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 254.514821][ T5913] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 254.517800][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.543001][ T5890] usb 4-1: config 0 descriptor?? [ 254.669951][ T5913] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 254.678899][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.693697][ T5913] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 254.711306][ T5913] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 254.723394][ T5913] usb 2-1: Manufacturer: syz [ 254.731216][ T5913] usb 2-1: config 0 descriptor?? [ 254.824429][ T5913] rc_core: IR keymap rc-hauppauge not found [ 254.830452][ T5913] Registered IR keymap rc-empty [ 254.839742][ T5913] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 254.858268][ T5913] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input40 [ 254.996280][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 255.012652][ T5890] usb 2-1: USB disconnect, device number 22 [ 255.078784][T10338] kvm: kvm [10337]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x200000000280 [ 255.212400][ T5972] usb 4-1: USB disconnect, device number 23 [ 255.586805][ T30] kauditd_printk_skb: 203 callbacks suppressed [ 255.586837][ T30] audit: type=1326 audit(1754615105.245:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10361 comm="syz.4.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd5f8ebe9 code=0x7ffc0000 [ 255.617955][ T30] audit: type=1326 audit(1754615105.245:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10361 comm="syz.4.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd5f8ebe9 code=0x7ffc0000 [ 255.680830][ T30] audit: type=1326 audit(1754615105.245:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10361 comm="syz.4.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f4bd5f8ebe9 code=0x7ffc0000 [ 255.709038][ T30] audit: type=1326 audit(1754615105.295:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10361 comm="syz.4.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd5f8ebe9 code=0x7ffc0000 [ 255.781736][ T30] audit: type=1326 audit(1754615105.295:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10361 comm="syz.4.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd5f8ebe9 code=0x7ffc0000 [ 255.893830][T10370] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1873'. [ 255.919503][T10370] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1873'. [ 255.937283][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1876'. [ 256.220082][T10386] syzkaller1: entered promiscuous mode [ 256.230066][T10386] syzkaller1: entered allmulticast mode [ 256.538055][ T8737] bridge_slave_1: left allmulticast mode [ 256.544212][ T8737] bridge_slave_1: left promiscuous mode [ 256.564536][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.653987][ T8737] bridge_slave_0: left allmulticast mode [ 256.672762][ T8737] bridge_slave_0: left promiscuous mode [ 256.679451][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.809618][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1888'. [ 257.108583][ T5892] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 257.265384][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 257.275972][ T5892] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.288145][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.304049][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.343438][ T5892] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 257.357063][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.367217][ T5892] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 257.386253][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.399404][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 257.406755][ T5892] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.447397][ T5892] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.464535][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.482533][T10410] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 257.482913][ T5892] usb 5-1: Product: syz [ 257.501016][ T5892] usb 5-1: Manufacturer: syz [ 257.505818][ T5892] usb 5-1: SerialNumber: syz [ 257.513472][T10410] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 257.529814][T10404] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 257.708357][T10413] input: syz0 as /devices/virtual/input/input41 [ 257.799350][ T8737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.823230][ T8737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.845056][ T8737] bond0 (unregistering): Released all slaves [ 257.874405][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.882441][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.982720][T10417] netlink: 'syz.2.1894': attribute type 29 has an invalid length. [ 258.562230][ T5892] cdc_ncm 5-1:1.0: bind() failure [ 258.578665][ T5892] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 258.595455][ T5892] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 258.623163][ T5892] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 258.636125][ T5892] usb 5-1: USB disconnect, device number 20 [ 258.731563][ T8737] hsr_slave_0: left promiscuous mode [ 258.762041][ T8737] hsr_slave_1: left promiscuous mode [ 258.775309][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.806115][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.959325][ T5926] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 259.151754][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 259.177869][ T5926] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 259.203506][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.221905][ T5926] usb 4-1: Product: syz [ 259.226208][ T5926] usb 4-1: Manufacturer: syz [ 259.230851][ T5926] usb 4-1: SerialNumber: syz [ 259.256945][ T5926] usb 4-1: config 0 descriptor?? [ 259.268003][ T5926] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 259.313933][T10454] binder: 10453:10454 ioctl 400c620e 200000000000 returned -22 [ 259.493607][ T5847] Bluetooth: hci4: command tx timeout [ 259.880407][ T8737] team0 (unregistering): Port device team_slave_1 removed [ 259.948222][ T8737] team0 (unregistering): Port device team_slave_0 removed [ 260.284969][ T5926] gspca_sonixj: reg_w1 err -71 [ 260.369584][ T5926] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 260.385421][ T5926] usb 4-1: USB disconnect, device number 24 [ 260.431006][T10464] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1915'. [ 260.442435][T10464] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1915'. [ 260.674921][T10407] chnl_net:caif_netlink_parms(): no params data found [ 260.845260][ T5892] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 260.877150][T10407] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.884727][T10407] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.892041][T10407] bridge_slave_0: entered allmulticast mode [ 260.951196][T10407] bridge_slave_0: entered promiscuous mode [ 260.982845][T10407] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.995512][ T8737] IPVS: stop unused estimator thread 0... [ 261.006345][T10407] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.010292][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.019607][T10407] bridge_slave_1: entered allmulticast mode [ 261.020693][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.025791][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 261.050767][T10493] netlink: 'syz.0.1924': attribute type 6 has an invalid length. [ 261.073895][T10407] bridge_slave_1: entered promiscuous mode [ 261.097873][ T5892] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 261.116398][ T5892] usb 3-1: config 0 has no interface number 0 [ 261.132177][ T5892] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 261.150823][ T5892] usb 3-1: config 0 interface 85 has no altsetting 0 [ 261.169293][ T5892] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 261.195907][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.217465][ T5892] usb 3-1: Product: syz [ 261.228004][ T30] audit: type=1804 audit(1754615110.885:535): pid=10499 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.1926" name=2F6E6577726F6F742F3336352F66696C65302FE91F7189591E9233614B dev="hugetlbfs" ino=29250 res=1 errno=0 [ 261.231359][T10407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.269476][ T5892] usb 3-1: Manufacturer: syz [ 261.274148][ T5892] usb 3-1: SerialNumber: syz [ 261.288331][ T5892] usb 3-1: config 0 descriptor?? [ 261.319614][T10407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.428428][T10505] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000004 [ 261.498431][T10407] team0: Port device team_slave_0 added [ 261.516648][T10407] team0: Port device team_slave_1 added [ 261.577001][ T5847] Bluetooth: hci4: command tx timeout [ 261.717636][T10407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.732909][T10407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.766858][T10407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.827838][T10407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.847368][T10407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.878553][T10407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.926152][ T5892] appletouch 3-1:0.85: Geyser mode initialized. [ 261.935526][T10518] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1935'. [ 261.945354][ T5892] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input42 [ 262.028950][T10407] hsr_slave_0: entered promiscuous mode [ 262.046926][T10407] hsr_slave_1: entered promiscuous mode [ 262.140480][ T5892] usb 3-1: USB disconnect, device number 19 [ 262.167960][ T5892] appletouch 3-1:0.85: input: appletouch disconnected [ 262.423627][T10532] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.431796][T10532] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.554656][T10532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.569691][T10532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.649173][T10532] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.675444][T10532] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.695215][T10532] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.704266][T10532] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.761242][T10532] ip6gretap0: left allmulticast mode [ 262.991107][T10407] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 263.018238][T10407] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 263.038539][T10407] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 263.053686][T10407] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 263.098804][T10552] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 263.125194][T10552] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 263.265484][T10407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.338189][T10407] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.396936][ T8737] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.405398][ T8737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.486042][ T8737] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.493211][ T8737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.645769][ T5847] Bluetooth: hci4: command tx timeout [ 263.758601][T10407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.984162][T10592] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 264.020649][T10592] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 264.128064][T10407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.002841][T10407] veth0_vlan: entered promiscuous mode [ 265.106053][T10407] veth1_vlan: entered promiscuous mode [ 265.147770][T10629] netlink: 'syz.2.1975': attribute type 29 has an invalid length. [ 265.164832][T10629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1975'. [ 265.240609][T10407] veth0_macvtap: entered promiscuous mode [ 265.261224][T10407] veth1_macvtap: entered promiscuous mode [ 265.322761][T10407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.350526][T10407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.370907][T10407] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.380935][T10407] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.394152][T10407] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.403786][T10407] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.424650][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 265.517983][ T8737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.538945][ T8737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.586807][ T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 265.596152][ T8735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.596859][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.608982][ T8735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.621104][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 265.632344][ T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 265.643457][ T9] usb 4-1: Manufacturer: syz [ 265.653518][ T9] usb 4-1: config 0 descriptor?? [ 265.727104][ T5847] Bluetooth: hci4: command tx timeout [ 265.765233][ T9] rc_core: IR keymap rc-hauppauge not found [ 265.774249][ T9] Registered IR keymap rc-empty [ 265.789187][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 265.824711][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input43 [ 265.876010][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 265.892236][ T24] usb 4-1: USB disconnect, device number 25 [ 265.918986][T10650] 9pnet: p9_errstr2errno: server reported unknown error @í [ 266.486218][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 266.647447][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.673725][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.700539][ T24] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 266.723349][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.751284][ T24] usb 3-1: config 0 descriptor?? [ 266.844593][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 267.012543][ T10] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 267.039968][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.053005][ T10] usb 4-1: Product: syz [ 267.059825][ T10] usb 4-1: Manufacturer: syz [ 267.066297][ T10] usb 4-1: SerialNumber: syz [ 267.074121][ T10] usb 4-1: config 0 descriptor?? [ 267.174087][ T24] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 267.204392][ T24] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 267.211704][ T24] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 267.235102][ T24] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 267.248973][ T24] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 267.269322][ T24] cm6533_jd 0003:0D8C:0022.001F: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 267.447396][ T5926] usb 3-1: USB disconnect, device number 20 [ 268.106603][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 268.129478][ T10] asix 4-1:0.0: probe with driver asix failed with error -71 [ 268.156322][ T10] usb 4-1: USB disconnect, device number 26 [ 268.209801][T10716] input: syz1 as /devices/virtual/input/input44 [ 268.487873][T10722] syzkaller1: entered promiscuous mode [ 268.516819][T10722] syzkaller1: entered allmulticast mode [ 268.786464][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 268.980667][ T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 268.990243][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.008844][ T10] usb 1-1: config 0 descriptor?? [ 269.020408][ T10] cp210x 1-1:0.0: cp210x converter detected [ 269.342797][T10751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2029'. [ 269.429907][ T10] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 269.662426][ T10] usb 1-1: cp210x converter now attached to ttyUSB0 [ 269.694605][ T5926] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 269.857106][ T24] usb 1-1: USB disconnect, device number 23 [ 269.889650][ T5926] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 269.894617][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 269.911482][ T5926] usb 3-1: config 0 has no interface number 0 [ 269.938175][ T5926] usb 3-1: config 0 interface 29 has no altsetting 0 [ 269.981651][ T5926] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 270.010097][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.044501][ T5926] usb 3-1: Product: syz [ 270.049722][ T5926] usb 3-1: Manufacturer: syz [ 270.071032][ T5926] usb 3-1: SerialNumber: syz [ 270.102680][ T5926] usb 3-1: config 0 descriptor?? [ 270.414573][ T24] cp210x 1-1:0.0: device disconnected [ 270.435749][T10763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.465562][T10763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.639203][T10763] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.652567][T10763] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.667943][T10763] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.723300][T10763] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.964682][ T5926] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 270.990117][ T5926] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 271.003594][ T5926] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 271.010935][ T5926] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 271.176393][ T5926] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -22 [ 271.178844][T10812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2046'. [ 271.222826][ T5926] usb 3-1: USB disconnect, device number 21 [ 271.786616][T10832] comedi comedi0: dt2815: I/O port conflict (0x9,2) [ 271.804524][T10788] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 271.819396][ T30] audit: type=1326 audit(1754615121.475:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10833 comm="syz.0.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac6e385ba7 code=0x7ffc0000 [ 271.848945][T10781] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 271.894382][ T30] audit: type=1326 audit(1754615121.475:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10833 comm="syz.0.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac6e32add9 code=0x7ffc0000 [ 271.944412][ T30] audit: type=1326 audit(1754615121.475:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10833 comm="syz.0.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac6e385ba7 code=0x7ffc0000 [ 271.994433][ T30] audit: type=1326 audit(1754615121.475:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10833 comm="syz.0.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac6e32add9 code=0x7ffc0000 [ 272.009010][T10788] usb 6-1: Using ep0 maxpacket: 16 [ 272.025668][T10788] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 272.040029][T10788] usb 6-1: config 0 has no interface number 0 [ 272.056747][T10788] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 272.058429][T10781] usb 5-1: Using ep0 maxpacket: 16 [ 272.068924][T10788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.079089][T10781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.079124][T10781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.079149][T10781] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 272.079194][T10781] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 272.079220][T10781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.113719][T10788] usb 6-1: Product: syz [ 272.139888][ T30] audit: type=1326 audit(1754615121.475:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10833 comm="syz.0.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac6e385ba7 code=0x7ffc0000 [ 272.170307][T10781] usb 5-1: config 0 descriptor?? [ 272.182765][ T30] audit: type=1326 audit(1754615121.475:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10833 comm="syz.0.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac6e32add9 code=0x7ffc0000 [ 272.214525][ T5847] Bluetooth: hci4: command tx timeout [ 272.219317][T10788] usb 6-1: Manufacturer: syz [ 272.234464][T10788] usb 6-1: SerialNumber: syz [ 272.250618][T10788] usb 6-1: config 0 descriptor?? [ 272.259654][ T30] audit: type=1326 audit(1754615121.475:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10833 comm="syz.0.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac6e385ba7 code=0x7ffc0000 [ 272.281283][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.292193][T10788] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 272.298999][ T30] audit: type=1326 audit(1754615121.475:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10833 comm="syz.0.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac6e32add9 code=0x7ffc0000 [ 272.320984][ T30] audit: type=1326 audit(1754615121.475:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10833 comm="syz.0.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6e38ebe9 code=0x7ffc0000 [ 272.324829][ T5926] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 272.343592][ T30] audit: type=1326 audit(1754615121.495:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10833 comm="syz.0.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac6e385ba7 code=0x7ffc0000 [ 272.514600][T10767] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 272.559392][ T5926] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 272.568290][ T5926] usb 4-1: config 0 has no interface number 0 [ 272.577450][ T5926] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 272.586894][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.608087][ T5926] usb 4-1: Product: syz [ 272.612317][ T5926] usb 4-1: Manufacturer: syz [ 272.617606][T10781] hid-multitouch 0003:0457:07DA.0020: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 272.634113][ T5926] usb 4-1: SerialNumber: syz [ 272.644966][ T5926] usb 4-1: config 0 descriptor?? [ 272.714497][T10767] usb 1-1: Using ep0 maxpacket: 16 [ 272.726755][T10767] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.740870][T10767] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 272.764362][T10767] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.791071][T10767] usb 1-1: config 0 descriptor?? [ 272.906539][ T24] usb 5-1: USB disconnect, device number 21 [ 273.268402][T10767] kye 0003:0458:5016.0021: control desc unexpectedly large [ 273.289139][T10767] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0021/input/input45 [ 273.306529][T10788] gspca_spca1528: reg_w err -71 [ 273.311589][T10788] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 273.325163][T10788] usb 6-1: USB disconnect, device number 2 [ 273.383491][T10767] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0021/input/input46 [ 273.450162][T10767] kye 0003:0458:5016.0021: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 273.482670][ T5926] asix 4-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x39 [ 273.497630][T10767] usb 1-1: USB disconnect, device number 24 [ 273.712329][T10767] usb 4-1: USB disconnect, device number 27 [ 274.175632][T10886] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2078'. [ 274.206344][T10886] netlink: 'syz.0.2078': attribute type 7 has an invalid length. [ 274.224630][T10886] netlink: 'syz.0.2078': attribute type 8 has an invalid length. [ 274.232419][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2078'. [ 274.614766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 275.917309][T10939] netlink: 'syz.0.2103': attribute type 39 has an invalid length. [ 276.190519][T10950] syzkaller1: entered promiscuous mode [ 276.196242][T10950] syzkaller1: entered allmulticast mode [ 276.466959][T10961] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2113'. [ 276.651107][T10965] loop8: detected capacity change from 0 to 8 [ 276.693617][T10965] Dev loop8: unable to read RDB block 8 [ 276.715680][T10965] loop8: unable to read partition table [ 276.721589][T10965] loop8: partition table beyond EOD, truncated [ 276.766453][T10965] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 276.886753][T10767] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 277.057016][T10767] usb 5-1: Using ep0 maxpacket: 16 [ 277.100002][T10767] usb 5-1: config 0 interface 0 has no altsetting 0 [ 277.108440][T10767] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 277.368472][T10982] kvm: kvm [10981]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x85 [ 277.711473][T10767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.722520][T10767] usb 5-1: config 0 descriptor?? [ 278.141375][T10767] hid (null): global environment stack underflow [ 278.160673][T10767] hid (null): global environment stack underflow [ 278.180682][T11001] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.191980][T10767] hid (null): report_id 3899690137 is invalid [ 278.202979][T10767] hid (null): unknown global tag 0xc [ 278.346926][ T24] usb 5-1: USB disconnect, device number 22 [ 278.454900][T10788] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 278.626401][T10788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.655132][T10788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.674523][T10788] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 278.694138][T10788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.717412][T10788] usb 6-1: config 0 descriptor?? [ 279.015093][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 279.140539][T10788] pyra 0003:1E7D:2CF6.0023: unknown main item tag 0x2 [ 279.164085][T10788] pyra 0003:1E7D:2CF6.0023: unknown global tag 0xc [ 279.192777][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 279.201979][T10788] pyra 0003:1E7D:2CF6.0023: item 0 2 1 12 parsing failed [ 279.202361][T11037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2148'. [ 279.216669][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 279.233226][T10788] pyra 0003:1E7D:2CF6.0023: parse failed [ 279.240892][T10788] pyra 0003:1E7D:2CF6.0023: probe with driver pyra failed with error -22 [ 279.249723][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.261739][ T24] usb 1-1: Product: syz [ 279.269645][ T24] usb 1-1: Manufacturer: syz [ 279.278520][ T24] usb 1-1: SerialNumber: syz [ 279.294187][ T24] usb 1-1: config 0 descriptor?? [ 279.341795][T10767] usb 6-1: USB disconnect, device number 3 [ 279.473241][T11045] input: syz0 as /devices/virtual/input/input47 [ 279.533811][ T24] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 279.657976][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 279.657995][ T30] audit: type=1800 audit(1754615129.315:550): pid=11048 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2153" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 280.340461][ T24] usb write operation failed. (-71) [ 280.353628][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 280.373951][ T24] dvbdev: DVB: registering new adapter (Terratec H7) [ 280.383074][ T24] usb 1-1: media controller created [ 280.395566][ T24] usb read operation failed. (-71) [ 280.401605][ T24] usb write operation failed. (-71) [ 280.425540][ T24] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 280.458400][ T24] usb 1-1: USB disconnect, device number 25 [ 280.764667][T10767] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 280.926871][T10767] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.940775][T10767] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 280.962264][T10767] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 280.972879][T10767] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 280.993253][T10767] usb 6-1: SerialNumber: syz [ 281.233634][T10767] usb 6-1: 0:2 : does not exist [ 281.286170][T10767] usb 6-1: USB disconnect, device number 4 [ 283.242896][T11165] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2205'. [ 283.254927][T11165] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2205'. [ 283.620829][T11172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.384617][ T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 284.584733][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 284.595200][ T24] usb 1-1: config 32 has an invalid interface number: 32 but max is 0 [ 284.620464][ T24] usb 1-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 284.646860][ T24] usb 1-1: config 32 has no interface number 0 [ 284.665003][ T24] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 284.688719][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.742314][ T24] usb 1-1: can't set config #32, error -71 [ 284.759584][ T24] usb 1-1: USB disconnect, device number 26 [ 285.074414][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 285.164517][T10788] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 285.321317][T10788] usb 4-1: Using ep0 maxpacket: 32 [ 285.364116][T10788] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 285.393949][T10788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.413405][T10788] usb 4-1: Product: syz [ 285.419660][T10788] usb 4-1: Manufacturer: syz [ 285.435756][T10788] usb 4-1: SerialNumber: syz [ 285.455480][T10788] usb 4-1: config 0 descriptor?? [ 285.474266][T10788] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 286.234654][T10791] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 286.450902][T10791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.464153][T10791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.504532][T10791] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 286.519346][T10788] gspca_stk1135: reg_w 0x7 err -71 [ 286.532420][T10788] gspca_stk1135: serial bus timeout: status=0x00 [ 286.558582][T10791] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 286.567849][T10788] gspca_stk1135: Sensor write failed [ 286.573207][T10788] gspca_stk1135: serial bus timeout: status=0x00 [ 286.579896][T11266] loop8: detected capacity change from 0 to 8 [ 286.582549][T10791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.595390][T10788] gspca_stk1135: Sensor write failed [ 286.601391][T10788] gspca_stk1135: serial bus timeout: status=0x00 [ 286.624358][T10788] gspca_stk1135: Sensor read failed [ 286.630565][T10791] usb 5-1: config 0 descriptor?? [ 286.635948][T11266] Dev loop8: unable to read RDB block 8 [ 286.644397][T11266] loop8: unable to read partition table [ 286.648998][T10788] gspca_stk1135: serial bus timeout: status=0x00 [ 286.660876][T11266] loop8: partition table beyond EOD, truncated [ 286.670776][T11266] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 286.676900][T10788] gspca_stk1135: Sensor read failed [ 286.692184][T11268] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 286.695438][T10788] gspca_stk1135: Detected sensor type unknown (0x0) [ 286.703213][T11268] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 286.722955][T10788] gspca_stk1135: serial bus timeout: status=0x00 [ 286.730252][T10788] gspca_stk1135: Sensor read failed [ 286.736068][T10788] gspca_stk1135: serial bus timeout: status=0x00 [ 286.742503][T10788] gspca_stk1135: Sensor read failed [ 286.748745][T10788] gspca_stk1135: serial bus timeout: status=0x00 [ 286.755520][T10788] gspca_stk1135: Sensor write failed [ 286.760982][T10788] gspca_stk1135: serial bus timeout: status=0x00 [ 286.768071][T10788] gspca_stk1135: Sensor write failed [ 286.773618][T10788] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 286.778459][T11268] overlayfs: failed to get uuid (501/file1, err=-13); falling back to uuid=null. [ 286.785813][T10788] usb 4-1: USB disconnect, device number 28 [ 287.097011][T10791] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 287.098633][T11281] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 287.323132][T10791] kernel write not supported for file /1035/sched (pid: 10791 comm: kworker/1:12) [ 287.353534][T10791] usb 5-1: USB disconnect, device number 23 [ 287.536844][ T30] audit: type=1326 audit(1754615137.195:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11293 comm="syz.5.2263" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02ebb8ebe9 code=0x0 [ 287.727240][T11313] sctp: [Deprecated]: syz.0.2270 (pid 11313) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.727240][T11313] Use struct sctp_sack_info instead [ 289.306860][ C1] hrtimer: interrupt took 37866 ns [ 289.349787][T11359] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2287'. [ 290.896891][T10791] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 291.088994][T10791] usb 4-1: Using ep0 maxpacket: 16 [ 291.140635][T10791] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 291.163137][T10791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.205354][T10791] usb 4-1: config 0 descriptor?? [ 291.239667][T10791] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 292.204490][T10788] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 292.232853][T10791] usb 4-1: USB disconnect, device number 29 [ 292.355623][T10788] usb 5-1: Using ep0 maxpacket: 16 [ 292.379639][T10788] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.421332][T10788] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.431886][T10788] usb 5-1: config 0 interface 0 has no altsetting 0 [ 292.442799][T10788] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 292.452004][T10788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.476443][T10788] usb 5-1: config 0 descriptor?? [ 292.834806][T10791] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 292.900506][T10788] lenovo 0003:17EF:6009.0025: unknown main item tag 0x0 [ 292.916688][T10788] lenovo 0003:17EF:6009.0025: unknown main item tag 0x0 [ 292.934161][T10788] lenovo 0003:17EF:6009.0025: unknown main item tag 0x0 [ 292.944726][T10788] lenovo 0003:17EF:6009.0025: unknown main item tag 0x0 [ 292.959222][T10788] lenovo 0003:17EF:6009.0025: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.4-1/input0 [ 293.010507][T10791] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 293.039365][T10791] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 293.061122][T10791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.080297][T10791] usb 1-1: Product: syz [ 293.087020][T10791] usb 1-1: Manufacturer: syz [ 293.097802][T10791] usb 1-1: SerialNumber: syz [ 293.139285][T10767] usb 5-1: USB disconnect, device number 24 [ 294.142474][T10791] cdc_ncm 1-1:1.0: bind() failure [ 294.166577][T10791] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 294.189813][T10791] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 294.228913][T10791] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 294.239809][T11484] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2344'. [ 294.304642][T10791] usb 1-1: USB disconnect, device number 28 [ 294.440341][T11486] can0: slcan on ttyS3. [ 294.594491][T11486] can0 (unregistered): slcan off ttyS3. [ 294.734966][T10767] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 294.894568][T10767] usb 6-1: Using ep0 maxpacket: 32 [ 294.901935][T10767] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 294.917643][T10767] usb 6-1: config 0 has no interface number 0 [ 294.935802][T10767] usb 6-1: config 0 interface 12 has no altsetting 0 [ 294.968100][T10767] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 294.987714][T10767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.004848][T10767] usb 6-1: Product: syz [ 295.014678][T10767] usb 6-1: Manufacturer: syz [ 295.019330][T10767] usb 6-1: SerialNumber: syz [ 295.045493][T10767] usb 6-1: config 0 descriptor?? [ 295.313269][T11524] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 295.343167][T11524] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 295.575282][T11535] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2366'. [ 295.594839][T11535] nbd: must specify at least one socket [ 295.889917][T11546] binder: 11545:11546 ioctl c0306201 2000000003c0 returned -22 [ 296.071337][T10767] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 296.100840][T10767] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 296.115804][T10767] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 296.131312][T10767] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 296.158791][T10767] usb 6-1: USB disconnect, device number 5 [ 296.363010][T11567] pimreg: entered allmulticast mode [ 296.375318][T11567] pimreg: left allmulticast mode [ 296.590570][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2386'. [ 296.639505][T11579] loop8: detected capacity change from 0 to 7 [ 296.647620][T11579] Dev loop8: unable to read RDB block 7 [ 296.654484][T11579] loop8: AHDI p3 [ 296.658222][T11579] loop8: partition table partially beyond EOD, truncated [ 296.954803][T10791] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 297.124731][T10791] usb 1-1: Using ep0 maxpacket: 16 [ 297.134120][T10791] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 297.154324][T10791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.175141][T10791] usb 1-1: config 0 descriptor?? [ 297.193044][T10791] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 297.311891][T11615] netlink: 468 bytes leftover after parsing attributes in process `syz.4.2403'. [ 297.324779][T11615] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2403'. [ 297.601464][T11628] input: syz0 as /devices/virtual/input/input48 [ 297.618170][T11628] input: failed to attach handler leds to device input48, error: -6 [ 298.150371][T11655] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2421'. [ 298.160077][T10789] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 298.168539][T11655] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2421'. [ 298.209219][T10791] gspca_sonixj: reg_w1 err -71 [ 298.234673][T10791] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 298.247281][T10791] usb 1-1: USB disconnect, device number 29 [ 298.343124][T10789] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 298.353203][T10789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.367361][T10789] usb 4-1: config 0 descriptor?? [ 298.377717][T10789] cp210x 4-1:0.0: cp210x converter detected [ 298.387693][T10788] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 298.569636][T10788] usb 5-1: Using ep0 maxpacket: 16 [ 298.590108][T10788] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 298.617867][T10788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.646423][T10788] usb 5-1: Product: syz [ 298.656629][T10788] usb 5-1: Manufacturer: syz [ 298.669799][T10788] usb 5-1: SerialNumber: syz [ 298.697497][T10788] usb 5-1: config 0 descriptor?? [ 298.788244][T11670] netlink: 'syz.5.2428': attribute type 39 has an invalid length. [ 298.790613][T10789] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 298.836635][T11670] veth0_macvtap: left promiscuous mode [ 298.850833][T10789] usb 4-1: cp210x converter now attached to ttyUSB0 [ 299.008468][ T30] audit: type=1326 audit(1754615148.665:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11673 comm="syz.2.2430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f256b98ebe9 code=0x0 [ 299.052041][T10789] usb 4-1: USB disconnect, device number 30 [ 299.067311][T10789] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 299.114086][T10789] cp210x 4-1:0.0: device disconnected [ 299.134720][T10788] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 299.147233][T10788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 299.158375][T10788] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 299.167867][T10788] usb 5-1: media controller created [ 299.203583][T10788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.759226][T10788] zl10353_read_register: readreg error (reg=127, ret==0) [ 299.759291][T11654] dtv5100: wlen = 0, aborting. [ 299.768778][T10788] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 299.787355][T10788] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 299.807009][T10788] usb 5-1: USB disconnect, device number 25 [ 299.868914][T10788] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 300.000887][T11709] tipc: Started in network mode [ 300.006296][T11709] tipc: Node identity ac14142f, cluster identity 4711 [ 300.019855][T11709] tipc: New replicast peer: 0.0.0.0 [ 300.026307][T11709] tipc: Enabled bearer , priority 10 [ 300.033706][T11709] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 300.186116][T11716] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.323701][T11723] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2452'. [ 300.881053][T11748] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2463'. [ 301.154486][T10788] tipc: Node number set to 2886997039 [ 301.180882][T11744] delete_channel: no stack [ 301.417580][T11762] netlink: 'syz.2.2469': attribute type 11 has an invalid length. [ 301.786394][T11780] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 302.167671][T10788] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 302.346378][T10788] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 302.374972][T10788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.396061][T10788] usb 1-1: config 0 descriptor?? [ 302.444510][T10781] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 302.610952][T10781] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 302.620638][T10781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.622683][T10788] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 302.637410][T10781] usb 4-1: config 0 descriptor?? [ 302.823594][T10788] [drm:udl_init] *ERROR* Selecting channel failed [ 302.850792][T10781] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 302.880920][T10788] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 302.901730][T10788] [drm] Initialized udl on minor 2 [ 302.919900][T10788] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 302.951690][T10788] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 302.977530][T10789] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 302.997399][T10788] usb 1-1: USB disconnect, device number 30 [ 303.008655][T10789] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 303.097371][T10781] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 3 [ 303.104136][T10781] [drm] Initialized udl on minor 3 [ 303.475403][T10781] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 303.487911][T10781] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 303.510683][ T5926] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 303.527313][T10781] usb 4-1: USB disconnect, device number 31 [ 303.537514][ T5926] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 303.571864][T11846] loop2: detected capacity change from 0 to 7 [ 303.596379][T11846] Dev loop2: unable to read RDB block 7 [ 303.616350][T11846] loop2: unable to read partition table [ 303.638331][T11846] loop2: partition table beyond EOD, truncated [ 303.664832][T11846] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 303.829501][T11850] loop8: detected capacity change from 0 to 16384 [ 304.692423][T11868] macvlan2: entered promiscuous mode [ 304.731596][T11868] macvlan2: entered allmulticast mode [ 304.750624][T11868] gretap0: entered allmulticast mode [ 304.762323][T11870] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2515'. [ 305.504409][T10781] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 305.554512][T10788] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 305.659004][T10781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.670615][T10781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.683544][T10781] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 305.699574][T10781] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 305.708764][T10781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.720147][T10781] usb 1-1: config 0 descriptor?? [ 305.726525][T10788] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.741282][T10788] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.751413][T10788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.760571][T10788] usb 4-1: Product: syz [ 305.765544][T10788] usb 4-1: Manufacturer: syz [ 305.770251][T10788] usb 4-1: SerialNumber: syz [ 306.042152][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2529'. [ 306.195973][T10781] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 306.457280][T10789] usb 1-1: USB disconnect, device number 31 [ 306.764454][ T5926] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 306.815772][T10788] cdc_ncm 4-1:1.0: bind() failure [ 306.827471][T10788] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 306.834643][T10788] cdc_ncm 4-1:1.1: bind() failure [ 306.846257][T10788] usb 4-1: USB disconnect, device number 32 [ 306.928055][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 306.940527][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 306.951537][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 306.961423][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 306.975299][ T5926] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 306.988127][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.999534][ T5926] usb 3-1: config 0 descriptor?? [ 307.362080][T11939] 9pnet_fd: Insufficient options for proto=fd [ 307.452219][ T5926] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 307.487530][T11941] syzkaller1: entered promiscuous mode [ 307.498057][T11941] syzkaller1: entered allmulticast mode [ 307.590649][T11947] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2547'. [ 307.736440][T10788] usb 3-1: USB disconnect, device number 22 [ 307.869077][T11961] tipc: Started in network mode [ 307.874757][T11961] tipc: Node identity ff75, cluster identity 4711 [ 307.881854][T11961] tipc: Enabling of bearer rejected, failed to enable media [ 308.040158][T11970] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 308.829651][T12009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.719808][T12043] overlayfs: failed to clone upperpath [ 309.776848][T12046] overlayfs: failed to clone upperpath [ 309.893712][T12052] syzkaller1: entered promiscuous mode [ 309.904542][T12052] syzkaller1: entered allmulticast mode [ 310.324549][ T5926] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 310.494380][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 310.501665][ T5926] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 310.514400][ T5926] usb 5-1: config 0 has no interface number 0 [ 310.564955][ T5926] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 310.614354][ T5926] usb 5-1: config 0 interface 85 has no altsetting 0 [ 310.630872][ T5926] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 310.641279][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.651398][ T5926] usb 5-1: Product: syz [ 310.674408][ T5926] usb 5-1: Manufacturer: syz [ 310.679090][ T5926] usb 5-1: SerialNumber: syz [ 310.735662][ T5926] usb 5-1: config 0 descriptor?? [ 311.333154][T12099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2614'. [ 311.367515][ T5926] appletouch 5-1:0.85: Geyser mode initialized. [ 311.379808][ T5926] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input50 [ 311.584022][T10788] usb 5-1: USB disconnect, device number 26 [ 311.599400][T12111] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.607447][T12111] IPv6: NLM_F_CREATE should be set when creating new route [ 311.614832][T12111] IPv6: NLM_F_CREATE should be set when creating new route [ 311.622092][T12111] IPv6: NLM_F_CREATE should be set when creating new route [ 311.633449][T10788] appletouch 5-1:0.85: input: appletouch disconnected [ 311.747482][T12115] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not 'ethtool' [ 311.797007][ T5926] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 311.828342][ T30] audit: type=1326 audit(1754615161.485:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12117 comm="syz.0.2625" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac6e38ebe9 code=0x0 [ 311.970945][ T5926] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.982599][ T5926] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 311.995954][ T5926] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.005404][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.013561][ T5926] usb 4-1: Product: syz [ 312.026827][ T5926] usb 4-1: Manufacturer: syz [ 312.033882][ T5926] usb 4-1: SerialNumber: syz [ 312.047432][ T5926] cdc_mbim 4-1:1.0: skipping garbage [ 312.270083][T12109] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 312.616280][T10767] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 312.786529][T10767] usb 3-1: config 0 interface 0 has no altsetting 0 [ 312.793323][T10767] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 312.795773][T12148] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.834445][T10767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.848337][T10767] usb 3-1: config 0 descriptor?? [ 312.898038][T12109] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 312.924709][ T5926] cdc_mbim 4-1:1.0: setting rx_max = 16384 [ 313.132480][ T5926] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 313.143827][ T5926] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 313.183135][ T5926] wwan wwan0: port wwan0mbim0 attached [ 313.218615][ T5926] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 1a:ab:56:08:de:6f [ 313.242757][T12162] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.2644'. [ 313.260349][ T5926] usb 4-1: USB disconnect, device number 33 [ 313.271817][ T5926] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 313.368164][ T5926] wwan wwan0: port wwan0mbim0 disconnected [ 313.482900][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2647'. [ 313.518118][T12169] IPVS: Error joining to the multicast group [ 313.901948][T10767] video4linux radio48: keene_cmd_set failed (-71) [ 313.910947][T10767] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 313.936364][T10767] usb 3-1: USB disconnect, device number 23 [ 314.520428][T12206] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 314.625873][T12189] netlink: 'syz.5.2659': attribute type 6 has an invalid length. [ 315.012798][T12221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2672'. [ 315.067470][T12224] input: syz0 as /devices/virtual/input/input51 [ 315.187726][T12228] input: syz1 as /devices/virtual/input/input52 [ 315.797874][T10788] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 315.885504][T10791] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 315.898903][T12267] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2692'. [ 315.976007][T10788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 315.995229][T10788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 316.054439][T10791] usb 4-1: Using ep0 maxpacket: 8 [ 316.062767][T10791] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 316.072675][T10788] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 316.088384][T10791] usb 4-1: config 0 has no interface number 0 [ 316.104482][T10791] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 316.115767][T10788] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 316.134405][T10791] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 316.154148][T10788] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 316.174453][T10788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.182539][T10788] usb 1-1: Product: syz [ 316.192151][T10791] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 316.224526][T10788] usb 1-1: Manufacturer: syz [ 316.229204][T10788] usb 1-1: SerialNumber: syz [ 316.233843][T10791] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 316.266493][T12250] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 316.276163][T10788] cdc_mbim 1-1:1.0: skipping garbage [ 316.292287][T10791] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 316.323771][T10791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.355869][T10791] usb 4-1: config 0 descriptor?? [ 316.389222][T10791] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 316.505175][T12250] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 316.512553][T12250] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 316.579061][T10767] usb 4-1: USB disconnect, device number 34 [ 316.613695][T10767] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 317.166861][T12250] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 317.199906][T12250] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 317.215128][T10788] cdc_mbim 1-1:1.0: setting tx_max = 60 [ 317.224149][T10788] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 317.233935][T12306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2709'. [ 317.252832][T10788] wwan wwan0: port wwan0mbim0 attached [ 317.388434][T10788] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 76:04:40:17:47:78 [ 317.427869][T10788] usb 1-1: USB disconnect, device number 32 [ 317.435846][T10788] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 317.513281][T10788] wwan wwan0: port wwan0mbim0 disconnected [ 317.561552][T12320] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 317.743733][T12327] netlink: 'syz.2.2716': attribute type 2 has an invalid length. [ 318.124590][T10767] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 318.312353][T10767] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 318.327534][T10767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.361574][T10767] usb 3-1: config 0 descriptor?? [ 318.378459][T10767] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 318.789698][T10767] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 318.950232][T12378] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2741'. [ 319.015252][ T5926] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 319.195730][T10767] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 319.207048][T12384] dvmrp0: entered allmulticast mode [ 319.223520][ T5926] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.236880][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 319.256312][ T5926] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 319.266294][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.274407][ T5926] usb 4-1: Product: syz [ 319.278693][ T5926] usb 4-1: Manufacturer: syz [ 319.283360][ T5926] usb 4-1: SerialNumber: syz [ 319.300821][ T5926] usb 4-1: config 0 descriptor?? [ 319.313890][ T5926] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 319.338959][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 319.357653][ T5926] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 319.376739][ T5926] usb 4-1: media controller created [ 319.398278][ T24] usb 3-1: USB disconnect, device number 24 [ 319.439445][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 319.486282][T12392] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2747'. [ 319.563972][ T5926] DVB: Unable to find symbol tda10046_attach() [ 319.581704][ T5926] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 319.617158][ T5926] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 320.453800][ T5926] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 320.476829][ T5926] usb 4-1: USB disconnect, device number 35 [ 320.594424][T10767] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 320.777163][T10767] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 320.804433][T10767] usb 1-1: config 0 has no interface number 0 [ 320.810609][T10767] usb 1-1: config 0 interface 41 has no altsetting 0 [ 320.836368][T10767] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 320.866224][T10767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.877912][T10767] usb 1-1: Product: syz [ 320.882145][T10767] usb 1-1: Manufacturer: syz [ 320.892602][T10767] usb 1-1: SerialNumber: syz [ 320.908043][T10767] usb 1-1: config 0 descriptor?? [ 321.978542][T10767] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 321.990453][T10767] usb 1-1: USB disconnect, device number 33 [ 322.303997][T12498] netlink: 15672 bytes leftover after parsing attributes in process `syz.5.2793'. [ 322.455937][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.462400][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.487264][T12502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2796'. [ 323.294210][T12530] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2808'. [ 323.344821][ T24] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 323.391835][T12535] loop2: detected capacity change from 0 to 7 [ 323.408985][T12535] Dev loop2: unable to read RDB block 7 [ 323.424206][T12535] loop2: unable to read partition table [ 323.430357][T12535] loop2: partition table beyond EOD, truncated [ 323.454659][T12535] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 323.507405][T12540] bridge0: entered promiscuous mode [ 323.526531][T12540] bridge0: left promiscuous mode [ 323.536765][ T24] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 323.559600][ T24] usb 1-1: config 0 has no interface number 0 [ 323.575961][ T24] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 323.588059][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.610874][ T24] usb 1-1: Product: syz [ 323.622898][ T24] usb 1-1: Manufacturer: syz [ 323.648096][ T24] usb 1-1: SerialNumber: syz [ 323.675503][ T24] usb 1-1: config 0 descriptor?? [ 324.029944][T12563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.354463][T10781] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 324.504530][T10781] usb 3-1: Using ep0 maxpacket: 16 [ 324.512277][T10781] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 324.525534][T10781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 324.546999][T10781] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 324.557870][T10781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.566390][T10781] usb 3-1: Product: syz [ 324.570800][T10781] usb 3-1: Manufacturer: syz [ 324.576321][T10781] usb 3-1: SerialNumber: syz [ 324.584228][T10781] usb 3-1: config 0 descriptor?? [ 324.593946][T10781] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 324.603747][T10781] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 324.727037][ T24] usb 1-1: Firmware version (0.0) predates our first public release. [ 324.739285][ T24] usb 1-1: Please update to version 0.2 or newer [ 324.786959][ T24] usb 1-1: USB disconnect, device number 34 [ 325.216168][T10781] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 325.222919][T10781] em28xx 3-1:0.0: Config register raw data: 0x41 [ 325.351524][T12599] netlink: 428 bytes leftover after parsing attributes in process `syz.0.2839'. [ 325.451064][T10781] usb 3-1: USB disconnect, device number 25 [ 325.471189][T10781] em28xx 3-1:0.0: Disconnecting em28xx [ 325.502024][T10781] em28xx 3-1:0.0: Freeing device [ 325.719206][T12615] veth1_to_bond: entered allmulticast mode [ 325.731752][T12615] veth1_to_bond: entered promiscuous mode [ 325.739535][T12614] veth1_to_bond: left promiscuous mode [ 325.747236][T12614] veth1_to_bond: left allmulticast mode [ 325.842432][T12620] sp0: Synchronizing with TNC [ 325.864681][T10788] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 326.059270][T10788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.090635][T10788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.114538][T10788] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 326.198604][T10788] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 326.221623][T10788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.247442][T10788] usb 5-1: config 0 descriptor?? [ 326.690781][T10788] plantronics 0003:047F:FFFF.0028: reserved main item tag 0xd [ 326.734161][T12641] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2869'. [ 326.739615][T10788] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 326.758899][T12641] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2869'. [ 326.983119][T10781] usb 5-1: USB disconnect, device number 27 [ 327.073000][T12651] 9pnet_fd: Insufficient options for proto=fd [ 327.784499][T12679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2876'. [ 327.861775][ T30] audit: type=1326 audit(1754615177.515:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12682 comm="syz.0.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6e38ebe9 code=0x7ffc0000 [ 327.899873][ T30] audit: type=1326 audit(1754615177.515:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12682 comm="syz.0.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6e38ebe9 code=0x7ffc0000 [ 327.922786][ T30] audit: type=1326 audit(1754615177.515:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12682 comm="syz.0.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fac6e38ebe9 code=0x7ffc0000 [ 327.945333][ T30] audit: type=1326 audit(1754615177.515:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12682 comm="syz.0.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6e38ebe9 code=0x7ffc0000 [ 328.001558][ T30] audit: type=1326 audit(1754615177.515:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12682 comm="syz.0.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6e38ebe9 code=0x7ffc0000 [ 328.084909][ T30] audit: type=1326 audit(1754615177.515:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12682 comm="syz.0.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fac6e38ebe9 code=0x7ffc0000 [ 328.123974][ T30] audit: type=1326 audit(1754615177.515:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12682 comm="syz.0.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6e38ebe9 code=0x7ffc0000 [ 328.179837][ T30] audit: type=1326 audit(1754615177.515:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12682 comm="syz.0.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6e38ebe9 code=0x7ffc0000 [ 328.206621][ T30] audit: type=1326 audit(1754615177.515:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12682 comm="syz.0.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fac6e38ebe9 code=0x7ffc0000 [ 328.274341][ T30] audit: type=1326 audit(1754615177.515:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12682 comm="syz.0.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6e38ebe9 code=0x7ffc0000 [ 328.485395][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2888'. [ 328.504776][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2888'. [ 328.524160][T10788] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 328.894431][T10788] usb 5-1: device not accepting address 28, error -71 [ 328.936179][T12732] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 329.136558][T12739] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2900'. [ 330.112340][T12775] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2915'. [ 330.130814][T12775] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2915'. [ 330.474363][T10788] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 330.627806][T10788] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 330.640807][T10788] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 330.657115][T10788] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 330.673471][T10788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 330.693270][T10788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 330.711567][T10788] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 330.721950][T10788] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 330.736100][T10788] usb 1-1: Product: syz [ 330.740463][T10788] usb 1-1: Manufacturer: syz [ 330.755548][T10788] cdc_wdm 1-1:1.0: skipping garbage [ 330.761117][T10788] cdc_wdm 1-1:1.0: skipping garbage [ 330.779957][T10788] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 330.795957][T10788] cdc_wdm 1-1:1.0: Unknown control protocol [ 330.969582][T10788] usb 1-1: USB disconnect, device number 35 [ 331.191703][T12811] netlink: 452 bytes leftover after parsing attributes in process `syz.5.2930'. [ 331.222003][T12810] syzkaller1: entered promiscuous mode [ 331.231151][T12810] syzkaller1: entered allmulticast mode [ 332.970266][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2956'. [ 333.041789][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2956'. [ 333.634373][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 333.645084][T12892] Invalid logical block size (3) [ 333.767958][T12900] netlink: 'syz.0.2971': attribute type 10 has an invalid length. [ 333.804553][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 333.812941][ T24] usb 5-1: config 0 has no interfaces? [ 333.818978][ T24] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 333.835199][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.847469][ T24] usb 5-1: config 0 descriptor?? [ 334.079073][T10788] usb 5-1: USB disconnect, device number 30 [ 334.348620][T12921] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 335.712625][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3006'. [ 335.845128][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3008'. [ 336.472545][T13008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3021'. [ 336.505198][T13008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3021'. [ 336.659301][T13015] [ 336.661699][T13015] ===================================================== [ 336.668669][T13015] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 336.676159][T13015] 6.16.0-syzkaller #0 Not tainted [ 336.681206][T13015] ----------------------------------------------------- [ 336.688242][T13015] syz.3.3025/13015 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 336.695985][T13015] ffffffff8de0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 336.704658][T13015] [ 336.704658][T13015] and this task is already holding: [ 336.712032][T13015] ffff8880699e9b20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 336.720700][T13015] which would create a new lock dependency: [ 336.726594][T13015] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 336.734214][T13015] [ 336.734214][T13015] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 336.743685][T13015] (&dev->event_lock#2){..-.}-{3:3} [ 336.743721][T13015] [ 336.743721][T13015] ... which became SOFTIRQ-irq-safe at: [ 336.756629][T13015] lock_acquire+0x120/0x360 [ 336.761235][T13015] _raw_spin_lock_irqsave+0xa7/0xf0 [ 336.766564][T13015] input_event+0x7a/0xc0 [ 336.770912][T13015] xpad360_process_packet+0x1fe/0xda0 [ 336.776386][T13015] xpad_irq_in+0x1555/0x2560 [ 336.781078][T13015] __usb_hcd_giveback_urb+0x417/0x690 [ 336.786608][T13015] dummy_timer+0x862/0x4550 [ 336.791220][T13015] __hrtimer_run_queues+0x52c/0xc60 [ 336.796527][T13015] hrtimer_run_softirq+0x187/0x2b0 [ 336.801745][T13015] handle_softirqs+0x283/0x870 [ 336.806628][T13015] __irq_exit_rcu+0xca/0x1f0 [ 336.811316][T13015] irq_exit_rcu+0x9/0x30 [ 336.815653][T13015] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 336.821378][T13015] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 336.827453][T13015] __handle_mm_fault+0x28f/0x5620 [ 336.832585][T13015] handle_mm_fault+0x2d5/0x7f0 [ 336.837453][T13015] do_user_addr_fault+0xa81/0x1390 [ 336.842674][T13015] exc_page_fault+0x76/0xf0 [ 336.847271][T13015] asm_exc_page_fault+0x26/0x30 [ 336.852218][T13015] [ 336.852218][T13015] to a SOFTIRQ-irq-unsafe lock: [ 336.859242][T13015] (tasklist_lock){.+.+}-{3:3} [ 336.859273][T13015] [ 336.859273][T13015] ... which became SOFTIRQ-irq-unsafe at: [ 336.871917][T13015] ... [ 336.871927][T13015] lock_acquire+0x120/0x360 [ 336.879120][T13015] _raw_read_lock+0x36/0x50 [ 336.883720][T13015] __do_wait+0xde/0x740 [ 336.887979][T13015] do_wait+0x1f8/0x520 [ 336.892153][T13015] kernel_wait+0xab/0x170 [ 336.896591][T13015] call_usermodehelper_exec_work+0xbe/0x230 [ 336.902678][T13015] process_scheduled_works+0xade/0x17b0 [ 336.908321][T13015] worker_thread+0x8a0/0xda0 [ 336.913014][T13015] kthread+0x70e/0x8a0 [ 336.917189][T13015] ret_from_fork+0x3fc/0x770 [ 336.921895][T13015] ret_from_fork_asm+0x1a/0x30 [ 336.926762][T13015] [ 336.926762][T13015] other info that might help us debug this: [ 336.926762][T13015] [ 336.937011][T13015] Chain exists of: [ 336.937011][T13015] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 336.937011][T13015] [ 336.950104][T13015] Possible interrupt unsafe locking scenario: [ 336.950104][T13015] [ 336.958445][T13015] CPU0 CPU1 [ 336.963815][T13015] ---- ---- [ 336.969182][T13015] lock(tasklist_lock); [ 336.973439][T13015] local_irq_disable(); [ 336.980205][T13015] lock(&dev->event_lock#2); [ 336.987448][T13015] lock(&f_owner->lock); [ 336.994336][T13015] [ 336.997822][T13015] lock(&dev->event_lock#2); [ 337.005756][T13015] [ 337.005756][T13015] *** DEADLOCK *** [ 337.005756][T13015] [ 337.013911][T13015] 5 locks held by syz.3.3025/13015: [ 337.019148][T13015] #0: ffff888035613d18 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 337.028586][T13015] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: sk_wake_async+0x7f/0x280 [ 337.037843][T13015] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 337.046931][T13015] #3: ffff888074c940c0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 337.056107][T13015] #4: ffff8880699e9b20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 337.065203][T13015] [ 337.065203][T13015] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 337.075618][T13015] -> (&dev->event_lock#2){..-.}-{3:3} { [ 337.081396][T13015] IN-SOFTIRQ-W at: [ 337.085562][T13015] lock_acquire+0x120/0x360 [ 337.092078][T13015] _raw_spin_lock_irqsave+0xa7/0xf0 [ 337.099294][T13015] input_event+0x7a/0xc0 [ 337.105560][T13015] xpad360_process_packet+0x1fe/0xda0 [ 337.112968][T13015] xpad_irq_in+0x1555/0x2560 [ 337.119572][T13015] __usb_hcd_giveback_urb+0x417/0x690 [ 337.126963][T13015] dummy_timer+0x862/0x4550 [ 337.133481][T13015] __hrtimer_run_queues+0x52c/0xc60 [ 337.140696][T13015] hrtimer_run_softirq+0x187/0x2b0 [ 337.147823][T13015] handle_softirqs+0x283/0x870 [ 337.154614][T13015] __irq_exit_rcu+0xca/0x1f0 [ 337.161213][T13015] irq_exit_rcu+0x9/0x30 [ 337.167462][T13015] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 337.175106][T13015] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 337.183100][T13015] __handle_mm_fault+0x28f/0x5620 [ 337.190143][T13015] handle_mm_fault+0x2d5/0x7f0 [ 337.196934][T13015] do_user_addr_fault+0xa81/0x1390 [ 337.204063][T13015] exc_page_fault+0x76/0xf0 [ 337.210668][T13015] asm_exc_page_fault+0x26/0x30 [ 337.217548][T13015] INITIAL USE at: [ 337.221633][T13015] lock_acquire+0x120/0x360 [ 337.228058][T13015] _raw_spin_lock_irqsave+0xa7/0xf0 [ 337.235191][T13015] input_inject_event+0xab/0x320 [ 337.242054][T13015] kbd_led_trigger_activate+0xbc/0x100 [ 337.249439][T13015] led_trigger_set+0x52d/0x950 [ 337.256140][T13015] led_trigger_set_default+0x260/0x2a0 [ 337.263532][T13015] led_classdev_register_ext+0x73d/0x930 [ 337.271205][T13015] input_leds_connect+0x517/0x790 [ 337.278176][T13015] input_register_device+0xceb/0x10b0 [ 337.285476][T13015] atkbd_connect+0x70e/0x9c0 [ 337.292009][T13015] serio_driver_probe+0x82/0xa0 [ 337.298793][T13015] really_probe+0x26a/0x9a0 [ 337.305218][T13015] __driver_probe_device+0x18c/0x2f0 [ 337.312440][T13015] driver_probe_device+0x4f/0x430 [ 337.319384][T13015] __driver_attach+0x452/0x700 [ 337.326083][T13015] bus_for_each_dev+0x230/0x2b0 [ 337.333034][T13015] serio_handle_event+0x1a2/0x860 [ 337.340023][T13015] process_scheduled_works+0xade/0x17b0 [ 337.347500][T13015] worker_thread+0x8a0/0xda0 [ 337.354026][T13015] kthread+0x70e/0x8a0 [ 337.360022][T13015] ret_from_fork+0x3fc/0x770 [ 337.366533][T13015] ret_from_fork_asm+0x1a/0x30 [ 337.373223][T13015] } [ 337.375907][T13015] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 337.385134][T13015] -> (&new->fa_lock){....}-{3:3} { [ 337.390377][T13015] INITIAL USE at: [ 337.394371][T13015] lock_acquire+0x120/0x360 [ 337.400643][T13015] _raw_write_lock_irq+0xa2/0xf0 [ 337.407352][T13015] fasync_remove_entry+0xf1/0x1c0 [ 337.414160][T13015] lease_modify+0x1ca/0x3c0 [ 337.420435][T13015] locks_remove_file+0x4bf/0xea0 [ 337.427315][T13015] __fput+0x3ab/0xa70 [ 337.433076][T13015] task_work_run+0x1d1/0x260 [ 337.439428][T13015] exit_to_user_mode_loop+0xec/0x110 [ 337.446461][T13015] do_syscall_64+0x2bd/0x3b0 [ 337.452811][T13015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.460456][T13015] INITIAL READ USE at: [ 337.464910][T13015] lock_acquire+0x120/0x360 [ 337.471597][T13015] _raw_read_lock_irqsave+0xaf/0x100 [ 337.479066][T13015] kill_fasync+0x199/0x4d0 [ 337.485676][T13015] lease_break_callback+0x26/0x30 [ 337.492925][T13015] __break_lease+0x6a5/0x1620 [ 337.499793][T13015] do_dentry_open+0xd62/0x1970 [ 337.506758][T13015] vfs_open+0x3b/0x340 [ 337.513026][T13015] path_openat+0x2ee5/0x3830 [ 337.519840][T13015] do_filp_open+0x1fa/0x410 [ 337.526553][T13015] do_sys_openat2+0x121/0x1c0 [ 337.533441][T13015] __x64_sys_openat+0x138/0x170 [ 337.540511][T13015] do_syscall_64+0xfa/0x3b0 [ 337.547212][T13015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.555296][T13015] } [ 337.557894][T13015] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 337.566767][T13015] ... acquired at: [ 337.570683][T13015] lock_acquire+0x120/0x360 [ 337.575375][T13015] _raw_read_lock_irqsave+0xaf/0x100 [ 337.580955][T13015] kill_fasync+0x199/0x4d0 [ 337.585566][T13015] mousedev_notify_readers+0x6f1/0xc00 [ 337.591221][T13015] mousedev_event+0x602/0x1320 [ 337.596175][T13015] input_handle_events_default+0xd4/0x1a0 [ 337.602087][T13015] input_pass_values+0x285/0x890 [ 337.607216][T13015] input_event_dispose+0x330/0x6b0 [ 337.612597][T13015] input_inject_event+0x1fe/0x320 [ 337.617839][T13015] evdev_write+0x2fc/0x480 [ 337.622448][T13015] vfs_write+0x27e/0xa90 [ 337.626879][T13015] ksys_write+0x145/0x250 [ 337.631434][T13015] do_syscall_64+0xfa/0x3b0 [ 337.636126][T13015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.642214][T13015] [ 337.644557][T13015] -> (&f_owner->lock){....}-{3:3} { [ 337.649925][T13015] INITIAL USE at: [ 337.653846][T13015] lock_acquire+0x120/0x360 [ 337.659944][T13015] _raw_write_lock_irq+0xa2/0xf0 [ 337.666473][T13015] __f_setown+0x67/0x370 [ 337.672313][T13015] generic_setlease+0xd5d/0x1240 [ 337.678847][T13015] fcntl_setlease+0x3a2/0x4c0 [ 337.685127][T13015] do_fcntl+0x6a9/0x1910 [ 337.690971][T13015] __se_sys_fcntl+0xc8/0x150 [ 337.697152][T13015] do_syscall_64+0xfa/0x3b0 [ 337.703241][T13015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.710831][T13015] INITIAL READ USE at: [ 337.715180][T13015] lock_acquire+0x120/0x360 [ 337.721706][T13015] _raw_read_lock_irqsave+0xaf/0x100 [ 337.729008][T13015] send_sigio+0x38/0x370 [ 337.735292][T13015] kill_fasync+0x24d/0x4d0 [ 337.741730][T13015] lease_break_callback+0x26/0x30 [ 337.748774][T13015] __break_lease+0x6a5/0x1620 [ 337.755470][T13015] do_dentry_open+0xd62/0x1970 [ 337.762250][T13015] vfs_open+0x3b/0x340 [ 337.768337][T13015] path_openat+0x2ee5/0x3830 [ 337.774957][T13015] do_filp_open+0x1fa/0x410 [ 337.781500][T13015] do_sys_openat2+0x121/0x1c0 [ 337.788204][T13015] __x64_sys_openat+0x138/0x170 [ 337.795071][T13015] do_syscall_64+0xfa/0x3b0 [ 337.801587][T13015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.809600][T13015] } [ 337.812111][T13015] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 337.820990][T13015] ... acquired at: [ 337.824802][T13015] lock_acquire+0x120/0x360 [ 337.829489][T13015] _raw_read_lock_irqsave+0xaf/0x100 [ 337.834964][T13015] send_sigio+0x38/0x370 [ 337.839397][T13015] kill_fasync+0x24d/0x4d0 [ 337.844090][T13015] lease_break_callback+0x26/0x30 [ 337.849311][T13015] __break_lease+0x6a5/0x1620 [ 337.854182][T13015] do_dentry_open+0xd62/0x1970 [ 337.859134][T13015] vfs_open+0x3b/0x340 [ 337.863409][T13015] path_openat+0x2ee5/0x3830 [ 337.868193][T13015] do_filp_open+0x1fa/0x410 [ 337.872886][T13015] do_sys_openat2+0x121/0x1c0 [ 337.877757][T13015] __x64_sys_openat+0x138/0x170 [ 337.882795][T13015] do_syscall_64+0xfa/0x3b0 [ 337.887487][T13015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.893567][T13015] [ 337.895899][T13015] [ 337.895899][T13015] the dependencies between the lock to be acquired [ 337.895911][T13015] and SOFTIRQ-irq-unsafe lock: [ 337.909537][T13015] -> (tasklist_lock){.+.+}-{3:3} { [ 337.914691][T13015] HARDIRQ-ON-R at: [ 337.918701][T13015] lock_acquire+0x120/0x360 [ 337.924867][T13015] _raw_read_lock+0x36/0x50 [ 337.931027][T13015] __do_wait+0xde/0x740 [ 337.936856][T13015] do_wait+0x1f8/0x520 [ 337.942607][T13015] kernel_wait+0xab/0x170 [ 337.948611][T13015] call_usermodehelper_exec_work+0xbe/0x230 [ 337.956170][T13015] process_scheduled_works+0xade/0x17b0 [ 337.963382][T13015] worker_thread+0x8a0/0xda0 [ 337.969637][T13015] kthread+0x70e/0x8a0 [ 337.975408][T13015] ret_from_fork+0x3fc/0x770 [ 337.981670][T13015] ret_from_fork_asm+0x1a/0x30 [ 337.988105][T13015] SOFTIRQ-ON-R at: [ 337.992114][T13015] lock_acquire+0x120/0x360 [ 337.998275][T13015] _raw_read_lock+0x36/0x50 [ 338.004529][T13015] __do_wait+0xde/0x740 [ 338.010357][T13015] do_wait+0x1f8/0x520 [ 338.016194][T13015] kernel_wait+0xab/0x170 [ 338.022234][T13015] call_usermodehelper_exec_work+0xbe/0x230 [ 338.029795][T13015] process_scheduled_works+0xade/0x17b0 [ 338.037005][T13015] worker_thread+0x8a0/0xda0 [ 338.043275][T13015] kthread+0x70e/0x8a0 [ 338.049010][T13015] ret_from_fork+0x3fc/0x770 [ 338.055265][T13015] ret_from_fork_asm+0x1a/0x30 [ 338.061801][T13015] INITIAL USE at: [ 338.065715][T13015] lock_acquire+0x120/0x360 [ 338.071791][T13015] _raw_write_lock_irq+0xa2/0xf0 [ 338.078304][T13015] copy_process+0x21d5/0x3b80 [ 338.084570][T13015] kernel_clone+0x224/0x7f0 [ 338.090661][T13015] user_mode_thread+0xdd/0x140 [ 338.097002][T13015] rest_init+0x23/0x300 [ 338.102749][T13015] start_kernel+0x47d/0x500 [ 338.108833][T13015] x86_64_start_reservations+0x24/0x30 [ 338.115878][T13015] x86_64_start_kernel+0x143/0x1c0 [ 338.122598][T13015] common_startup_64+0x13e/0x147 [ 338.129120][T13015] INITIAL READ USE at: [ 338.133462][T13015] lock_acquire+0x120/0x360 [ 338.139976][T13015] _raw_read_lock+0x36/0x50 [ 338.146501][T13015] __do_wait+0xde/0x740 [ 338.152695][T13015] do_wait+0x1f8/0x520 [ 338.158781][T13015] kernel_wait+0xab/0x170 [ 338.165148][T13015] call_usermodehelper_exec_work+0xbe/0x230 [ 338.173051][T13015] process_scheduled_works+0xade/0x17b0 [ 338.180609][T13015] worker_thread+0x8a0/0xda0 [ 338.187221][T13015] kthread+0x70e/0x8a0 [ 338.193305][T13015] ret_from_fork+0x3fc/0x770 [ 338.199920][T13015] ret_from_fork_asm+0x1a/0x30 [ 338.206701][T13015] } [ 338.209229][T13015] ... key at: [] tasklist_lock+0x18/0x40 [ 338.216970][T13015] ... acquired at: [ 338.220776][T13015] lock_acquire+0x120/0x360 [ 338.225463][T13015] _raw_read_lock+0x36/0x50 [ 338.230147][T13015] send_sigio+0x101/0x370 [ 338.234671][T13015] kill_fasync+0x24d/0x4d0 [ 338.239277][T13015] sock_wake_async+0x137/0x160 [ 338.244228][T13015] sk_wake_async+0x184/0x280 [ 338.249004][T13015] mptcp_destroy_common+0x152/0x320 [ 338.254485][T13015] mptcp_disconnect+0x23d/0x700 [ 338.259521][T13015] inet_shutdown+0x1c1/0x390 [ 338.264304][T13015] __x64_sys_shutdown+0x13c/0x1a0 [ 338.269522][T13015] do_syscall_64+0xfa/0x3b0 [ 338.274212][T13015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.280292][T13015] [ 338.282652][T13015] [ 338.282652][T13015] stack backtrace: [ 338.288576][T13015] CPU: 1 UID: 0 PID: 13015 Comm: syz.3.3025 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 338.288598][T13015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.288616][T13015] Call Trace: [ 338.288628][T13015] [ 338.288642][T13015] dump_stack_lvl+0x189/0x250 [ 338.288667][T13015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.288686][T13015] ? __pfx__printk+0x10/0x10 [ 338.288714][T13015] validate_chain+0x1f05/0x2140 [ 338.288745][T13015] __lock_acquire+0xab9/0xd20 [ 338.288765][T13015] ? send_sigio+0x101/0x370 [ 338.288787][T13015] lock_acquire+0x120/0x360 [ 338.288802][T13015] ? send_sigio+0x101/0x370 [ 338.288825][T13015] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 338.288844][T13015] ? do_raw_read_lock+0x3d/0x90 [ 338.288869][T13015] _raw_read_lock+0x36/0x50 [ 338.288883][T13015] ? send_sigio+0x101/0x370 [ 338.288906][T13015] send_sigio+0x101/0x370 [ 338.288931][T13015] kill_fasync+0x24d/0x4d0 [ 338.288954][T13015] ? kill_fasync+0x53/0x4d0 [ 338.288979][T13015] sock_wake_async+0x137/0x160 [ 338.289000][T13015] ? sk_wake_async+0x7f/0x280 [ 338.289018][T13015] sk_wake_async+0x184/0x280 [ 338.289036][T13015] mptcp_destroy_common+0x152/0x320 [ 338.289067][T13015] mptcp_disconnect+0x23d/0x700 [ 338.289087][T13015] inet_shutdown+0x1c1/0x390 [ 338.289109][T13015] __x64_sys_shutdown+0x13c/0x1a0 [ 338.289138][T13015] do_syscall_64+0xfa/0x3b0 [ 338.289157][T13015] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.289174][T13015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.289192][T13015] ? clear_bhb_loop+0x60/0xb0 [ 338.289212][T13015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.289229][T13015] RIP: 0033:0x7f58fbb8ebe9 [ 338.289245][T13015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.289262][T13015] RSP: 002b:00007f58fc946038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 338.289281][T13015] RAX: ffffffffffffffda RBX: 00007f58fbdb5fa0 RCX: 00007f58fbb8ebe9 [ 338.289294][T13015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 338.289304][T13015] RBP: 00007f58fbc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 338.289315][T13015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.289325][T13015] R13: 00007f58fbdb6038 R14: 00007f58fbdb5fa0 R15: 00007ffdafd316e8 [ 338.289346][T13015] [ 338.289395][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.527711][ C1] vkms_vblank_simulate: vblank timer overrun