last executing test programs: 1m46.556312433s ago: executing program 2 (id=2879): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000001280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 1m46.423627647s ago: executing program 2 (id=2881): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x3c3100, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x10, 0x7}, 0x94) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) 1m46.245959085s ago: executing program 2 (id=2884): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x38, r3, 0x1, 0x0, 0x25dfdbff, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}]}, 0x38}}, 0x2) 1m46.022201666s ago: executing program 2 (id=2887): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 1m45.866566257s ago: executing program 2 (id=2890): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1m44.259899672s ago: executing program 2 (id=2903): socket$inet6_udp(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000340)={0x0, 0x312, 0x400, 0x200001, 0x2aa}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m43.73164651s ago: executing program 32 (id=2903): socket$inet6_udp(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000340)={0x0, 0x312, 0x400, 0x200001, 0x2aa}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 37.927175575s ago: executing program 5 (id=3659): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x5) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x8048, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x106}, 0x1c) 37.829472014s ago: executing program 5 (id=3662): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={0x0}) close(0x3) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close_range(r1, 0xffffffffffffffff, 0x0) 37.750250277s ago: executing program 5 (id=3664): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x54, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 37.544976687s ago: executing program 5 (id=3666): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x1) 37.409170388s ago: executing program 5 (id=3670): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)="eb5974e8be09e387ab90b1569489ca152362cb44b1952d7a95d4e348dd0a24fdb5fbd2dc1f3ddba2f36dd88226e8ab7b58818a357b167f7671a57d73594a9107053189f3589268715fdfc605ce82d5053ca0394bd3ef6ccbdf534483f3c1d4f9ff65fb1863033c0b1caa3693e04df2ec20276f06deaacfacc12fcba68de29bde9a2ea9ba457ea429c807659f0625a5eb47b1ec44b0aa784104dfb70463705ab40799c86b2eb83432002fec798f0bdef9e3129d6fd289675b3398fa9f922160f45eade8d18b595a0fc72cd89e7ce9112fdd0994337ac9fdf91c43f4551bc2e594a4ed9151fe9bdfa478ce6047b4a2f3a6e1a2c24151a1", 0xf6}, {&(0x7f00000022c0)="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", 0xb60}, {&(0x7f0000000300)="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", 0x13d}, {&(0x7f0000000080)="fc79ea35d065b9ab3476a577889a62263064a4f9365db73c96a2400dc5e53ae73f60b7254d3278aa75b0a65755395ca9de7ecf950a347b85775287a2fae0c370b5829b030c08d2571c104a342e4d1050b0422de409d7cb8a94b330cc7d125cf20f442f", 0x63}, {&(0x7f0000000900)="ea47bc5a315cb2157880ce304c1abce402167fd4bedfea9bbcc20cf6de0308c26ade72d36e2f01eb0e20a7b506b3c21e39c540cd8c10f12cd3bcd024240058198d7b5ab8b13a401e0ef540e84c344fc9ef33cc7a03b39d275822c8042bbac5b0553282a5931d458a28949a6540655dff4ccb62c28b165fe9fee71d10d88000ec0db22336ed6b6db60d2d766d0f736e", 0x8f}, {&(0x7f00000009c0)="8465f974b3e02d242b46ef912928809312de5bdb9fc3efedeb11c99628cfeec4a7918887ba379f68ffaf7e88027baf179d50cd31c4faacfbaf87f7c30c6ffbed1bf304c2b3e2cf5e9351d8c861e3072379e113511a8199fffee0c171582cbc39f2c1c2c7b4dae0d4dc7b3a27d20275e14043b0b5ab1f0441460fa161056205fc9ac5e3c5dd17b8f61bb2ccea83db1750b23f3ed934b59119e9a36f6eca6c616191d55e82e44bbd4fcae0b21c627285185c78d86f573f56a6249e915b07c81d437b655864b3dd5c6b44da82", 0xcb}], 0x6, 0x0, 0x0, 0x20008014}], 0x1, 0x4814) recvmmsg(r1, &(0x7f000000c4c0)=[{{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f00000052c0)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x400101c3, 0x0) 35.956052346s ago: executing program 5 (id=3694): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40081) r1 = syz_io_uring_setup(0x73d3, &(0x7f0000000680)={0x0, 0x7d89, 0x10100, 0x3, 0x289}, &(0x7f0000000540)=0x0, &(0x7f0000000700)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x1d39, 0xcec, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0}) 35.636218375s ago: executing program 33 (id=3694): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40081) r1 = syz_io_uring_setup(0x73d3, &(0x7f0000000680)={0x0, 0x7d89, 0x10100, 0x3, 0x289}, &(0x7f0000000540)=0x0, &(0x7f0000000700)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x1d39, 0xcec, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0}) 4.365817539s ago: executing program 0 (id=4017): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="1201010000f7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.278309771s ago: executing program 3 (id=4035): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8001) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5803, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x80003519, 0x0, 0x0, 0x0, 0x0) 1.922669651s ago: executing program 0 (id=4042): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000180)={0x80, 0x1, 'client0\x00', 0x1, "896c81dd59ff28d2", "e5dbc741536b0e2fbb12e9338ec8dcb3e07c903fc30e8a11d477e3fb04eb2f74", 0x3, 0x4}) 1.825245814s ago: executing program 1 (id=4043): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3d, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) open$dir(0x0, 0x800, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3d, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) 1.801213988s ago: executing program 0 (id=4045): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 1.689830199s ago: executing program 3 (id=4046): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2}}, 0x0, 0x0, 0x43, 0x0, "c43b9320585854378463e5d9ac44984ed4936350a7f170f645640905822998ca06b3a771e3ab05c927d207f7d21d93b1d5e068c6a0652a79973d9cbb62bd8c26deb2eae0b68847b15bbe30539483f6e7"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c) 1.659907032s ago: executing program 1 (id=4047): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000050000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e6174001c00048008000140000000000800024000000000080002400eb489d814000000020a010800000027f00000000000000114000000110001000f"], 0xac}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff500"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.532370263s ago: executing program 3 (id=4049): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close_range(r0, 0xffffffffffffffff, 0x0) 1.531478741s ago: executing program 4 (id=4050): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x2, 0x0, @ioapic={0xdddd1001, 0x8, 0x7, 0xffffffff, 0x0, [{0x8, 0x8, 0xfe, '\x00', 0x56}, {0xd, 0x4, 0xd9}, {0x0, 0x1, 0x1, '\x00', 0xd}, {0x4, 0xb, 0xc0, '\x00', 0x1}, {0x9, 0x3a, 0x7, '\x00', 0xa2}, {0x2, 0x2, 0x9, '\x00', 0x6}, {0xff, 0x7, 0xb2, '\x00', 0x4}, {0x5c, 0x10, 0xd, '\x00', 0x6}, {0x5, 0xb, 0x3, '\x00', 0x8}, {0x7, 0x7, 0x48, '\x00', 0x9}, {0x4d, 0x7, 0x80, '\x00', 0xc8}, {0x6, 0xa, 0x62, '\x00', 0xf2}, {0x7, 0xe, 0x7f, '\x00', 0x52}, {0x1, 0x40, 0xff, '\x00', 0x6e}, {0x0, 0x1, 0x8, '\x00', 0x3}, {0x6, 0x6, 0x6, '\x00', 0x4}, {0x2, 0x45, 0x6}, {0xd, 0x11, 0x6, '\x00', 0x4}, {0x5, 0xb, 0x0, '\x00', 0xff}, {0xb, 0x5a, 0x2, '\x00', 0xbb}, {0x97, 0x2, 0x81, '\x00', 0x9}, {0x1, 0x3, 0x8, '\x00', 0x8}, {0x7d, 0x11, 0xa, '\x00', 0x4}, {0xf7, 0xa6, 0x2, '\x00', 0xff}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.438932661s ago: executing program 1 (id=4052): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f00000009c0)=[{&(0x7f0000000200)=""/33, 0x21}], 0x1) 1.261834662s ago: executing program 6 (id=4053): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="438d", 0x2}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0x14}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000500)=""/15, 0xf}], 0x1}, 0x200}], 0x2, 0x2021, 0x0) 1.159931097s ago: executing program 4 (id=4054): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'gretap0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x85, 0x6, @broadcast}, 0x14) 1.082488889s ago: executing program 6 (id=4055): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) 1.067901984s ago: executing program 4 (id=4056): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) 908.26022ms ago: executing program 6 (id=4057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c00000002030104000000000000000000000010080001000100"], 0x1c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close(0x4) 767.256269ms ago: executing program 0 (id=4058): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000000c0)=""/77, 0x4d}], 0x1}, 0x0) 719.969046ms ago: executing program 6 (id=4059): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_hsr\x00', 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}, 0x30) sendmmsg$inet(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'], 0x30}}], 0xa8000, 0x40000840) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) 669.920437ms ago: executing program 3 (id=4060): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x6}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000010000108000000000000000000b60000", @ANYRES32=r3, @ANYBLOB="0000000000000000cc001a801800028014000700fe8000000000000000000000000000aa30000280040001800300000000000000080000000000000004000000000000000800000000000000080000000000000018000280140001801100000000000000080000000000000018000a80140007"], 0xec}}, 0x0) 639.923024ms ago: executing program 4 (id=4061): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x8) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0xfffe}}) io_uring_enter(r1, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 577.986685ms ago: executing program 0 (id=4062): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x100, 0xac}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 479.954651ms ago: executing program 1 (id=4063): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)) userfaultfd(0x1) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 405.313717ms ago: executing program 6 (id=4064): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 357.952775ms ago: executing program 3 (id=4065): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x109001, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f00000004c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0}]) 283.268069ms ago: executing program 1 (id=4066): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x7ffc, 0x2, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000180)={0x3, r2, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 266.282219ms ago: executing program 0 (id=4067): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) setpriority(0x2, 0x0, 0x6) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000480)={0x40, 0xb, 0x7, {0x7, 0x6, "4501000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 164.666216ms ago: executing program 4 (id=4068): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a", 0x2e}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000000280)=""/19, 0x13}], 0x2}, 0x0) 147.491115ms ago: executing program 3 (id=4069): close(0x3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x80000011}) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000340)="a0", 0x1}], 0x2be, 0x4) 126.539802ms ago: executing program 1 (id=4070): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x84, &(0x7f0000000b00)={0x0, 0x0, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 125.767321ms ago: executing program 6 (id=4071): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2041, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 0s ago: executing program 4 (id=4072): r0 = fsopen(&(0x7f00000003c0)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 019967][T12308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.033021][T12308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.040362][T12308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.076194][T12308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.196330][T12308] hsr_slave_0: entered promiscuous mode [ 304.212615][T12308] hsr_slave_1: entered promiscuous mode [ 304.228640][T12488] sctp: [Deprecated]: syz.3.2692 (pid 12488) Use of int in max_burst socket option. [ 304.228640][T12488] Use struct sctp_assoc_value instead [ 304.229039][T12308] debugfs: 'hsr0' already exists in 'hsr' [ 304.279372][T12308] Cannot create hsr debugfs directory [ 304.478934][ T5836] Bluetooth: hci0: command tx timeout [ 304.488946][T12500] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2695'. [ 305.361887][T12536] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2707'. [ 305.805480][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2713'. [ 305.849785][T12308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 305.863315][T12308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 305.922608][T12308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 306.006849][T12308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 306.468755][T12308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.543801][T12308] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.559467][ T5836] Bluetooth: hci0: command tx timeout [ 306.578405][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.585622][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.682464][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.689698][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.813089][T12308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.876242][T12308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.959644][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 307.039819][T12308] veth0_vlan: entered promiscuous mode [ 307.076578][T12597] syzkaller1: entered promiscuous mode [ 307.110771][T12597] syzkaller1: entered allmulticast mode [ 307.134996][T12308] veth1_vlan: entered promiscuous mode [ 307.328330][T12308] veth0_macvtap: entered promiscuous mode [ 307.357358][T12308] veth1_macvtap: entered promiscuous mode [ 307.460191][T12308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.483887][T12308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.530646][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.568561][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.577470][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.626069][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.780412][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.788269][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.004205][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.027899][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.380028][ T1750] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 308.548509][ T1750] usb 3-1: Using ep0 maxpacket: 32 [ 308.575354][ T1750] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 308.596784][ T1750] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 308.618451][ T1750] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 308.647648][ T1750] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 308.668377][ T1750] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 308.702867][ T1750] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 308.728036][ T1750] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.746437][ T1750] usb 3-1: Product: syz [ 308.753106][ T1750] usb 3-1: Manufacturer: syz [ 308.778551][ T1750] usb 3-1: SerialNumber: syz [ 308.794139][ T1750] usb 3-1: config 0 descriptor?? [ 308.924334][T12684] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 308.998446][ T5896] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 309.158479][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 309.172565][ T5896] usb 4-1: unable to get BOS descriptor or descriptor too short [ 309.195455][ T5896] usb 4-1: config 4 interface 0 has no altsetting 0 [ 309.217603][ T5896] usb 4-1: string descriptor 0 read error: -22 [ 309.227398][ T5896] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 309.247529][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.288616][ T1750] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 309.294686][ T1750] input input71: Device does not respond to id packet M [ 309.307872][ T5896] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 309.319826][ T1750] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 309.325873][ T1750] input input71: Device does not respond to id packet P [ 309.376085][ T5896] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 309.430619][ T5896] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 309.461531][ T5896] usb 4-1: media controller created [ 309.527776][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 309.567656][ T1750] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 309.586265][ T1750] input input71: Device does not respond to id packet N [ 309.622945][ T1750] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 309.648703][ T1750] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 309.670854][ T1750] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 309.694616][ T1750] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 309.719919][ T1750] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input71 [ 309.858686][ T1750] usb 3-1: USB disconnect, device number 34 [ 309.875598][ T5917] usb 4-1: USB disconnect, device number 44 [ 311.008394][ T5937] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 311.178720][ T5937] usb 2-1: Using ep0 maxpacket: 8 [ 311.237228][ T5937] usb 2-1: config 32 has an invalid interface number: 32 but max is 0 [ 311.288651][ T5937] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 311.308453][ T5937] usb 2-1: config 32 has no interface number 0 [ 311.318444][ T5937] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 311.364957][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.399598][ T5937] hub 2-1:32.32: bad descriptor, ignoring hub [ 311.426522][ T5937] hub 2-1:32.32: probe with driver hub failed with error -5 [ 311.468451][ T44] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 311.648478][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 311.665326][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.691152][ T44] usb 5-1: config 0 has no interfaces? [ 311.712370][ T44] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 311.736841][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.757477][ T44] usb 5-1: config 0 descriptor?? [ 311.922843][ T5937] usb 2-1: reset high-speed USB device number 48 using dummy_hcd [ 311.982644][ T5917] usb 5-1: USB disconnect, device number 32 [ 312.139473][ T1750] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 312.310517][ T1750] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 312.318966][ T1750] usb 4-1: config 0 has no interface number 0 [ 312.326972][ T1750] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 312.336169][ T1750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.344229][ T1750] usb 4-1: Product: syz [ 312.348542][ T1750] usb 4-1: Manufacturer: syz [ 312.354192][ T1750] usb 4-1: SerialNumber: syz [ 312.361012][ T1750] usb 4-1: config 0 descriptor?? [ 312.778078][ T1750] usb 4-1: Firmware: major: 165, minor: 244, hardware type: UNKNOWN (159) [ 312.938754][ T1211] usb 2-1: USB disconnect, device number 48 [ 312.988844][ T1750] usb 4-1: no permanent extended address found, random address set [ 313.007035][ T1750] usb 4-1: atusb_probe: initialization failed, error = -524 [ 313.008672][ T5896] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 313.023380][ T1750] atusb 4-1:0.128: probe with driver atusb failed with error -524 [ 313.169689][T12812] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.208871][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 313.220311][ T1750] usb 4-1: USB disconnect, device number 45 [ 313.233197][ T5896] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.258553][ T5896] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 313.271449][ T1211] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 313.295893][ T5896] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 313.338056][ T5896] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 313.374968][ T5896] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.404581][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.418912][ T5896] usb 5-1: Product: syz [ 313.429194][ T5896] usb 5-1: Manufacturer: syz [ 313.438869][ T5896] usb 5-1: SerialNumber: syz [ 313.470321][ T1211] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.503767][ T1211] usb 2-1: config 0 interface 0 has no altsetting 0 [ 313.525304][ T1211] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 313.552535][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.586597][ T1211] usb 2-1: Product: syz [ 313.597186][ T1211] usb 2-1: Manufacturer: syz [ 313.602242][ T1211] usb 2-1: SerialNumber: syz [ 313.610696][ T1211] usb 2-1: config 0 descriptor?? [ 313.630781][ T1211] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 313.646849][ T1211] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 313.653684][T12828] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2803'. [ 313.672380][ T1211] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 313.679951][T12828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2803'. [ 313.681889][ T1211] usb 2-1: media controller created [ 313.720017][ T1211] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 313.842729][ T1211] DVB: Unable to find symbol tda10046_attach() [ 313.861227][ T1211] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 313.874837][ T1211] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 314.213764][T12846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2810'. [ 314.477217][ T5896] cdc_ncm 5-1:1.0: bind() failure [ 314.510132][ T5896] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 314.528782][ T5896] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 314.549242][ T5896] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 314.581395][ T5896] usb 5-1: USB disconnect, device number 33 [ 315.298445][ T1211] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 315.337287][T12871] netlink: 'syz.0.2820': attribute type 12 has an invalid length. [ 315.345969][T12871] netlink: 'syz.0.2820': attribute type 29 has an invalid length. [ 315.357817][ T1211] usb 2-1: USB disconnect, device number 49 [ 315.381490][T12871] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2820'. [ 315.419167][T12871] netlink: 'syz.0.2820': attribute type 2 has an invalid length. [ 315.427920][T12871] netlink: 'syz.0.2820': attribute type 3 has an invalid length. [ 315.485921][T12871] netlink: 15 bytes leftover after parsing attributes in process `syz.0.2820'. [ 315.610193][ T5896] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 315.625475][T12878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2822'. [ 315.712007][T12878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2822'. [ 315.809191][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.830024][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.851538][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 315.866780][ T5896] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 315.877273][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.896398][ T5896] usb 5-1: config 0 descriptor?? [ 315.909064][ T1750] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 315.913205][T12894] netlink: 'syz.2.2829': attribute type 21 has an invalid length. [ 315.925208][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2829'. [ 315.935141][T12894] netlink: 'syz.2.2829': attribute type 21 has an invalid length. [ 315.944227][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2829'. [ 316.062014][ T1750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 316.073516][ T1750] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 316.090364][ T1750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.111452][ T1750] usb 2-1: config 0 descriptor?? [ 316.317413][ T5896] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 316.625577][ T1750] usbhid 2-1:0.0: can't add hid device: -71 [ 316.635087][ T1750] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 316.648203][ T1750] usb 2-1: USB disconnect, device number 50 [ 316.679264][T12910] trusted_key: syz.2.2835 sent an empty control message without MSG_MORE. [ 317.050290][T12922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2840'. [ 317.071107][T12922] netlink: 'syz.0.2840': attribute type 30 has an invalid length. [ 317.121248][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.130413][T12922] netlink: 'syz.0.2840': attribute type 30 has an invalid length. [ 317.138848][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.175845][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.202967][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.206016][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.209441][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.285651][T12926] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.620484][ C1] plantronics 0003:047F:FFFF.0032: usb_submit_urb(ctrl) failed: -1 [ 318.243967][ T30] audit: type=1326 audit(1760463854.539:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12951 comm="syz.3.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff655d8eec9 code=0x7ffc0000 [ 318.326769][ T30] audit: type=1326 audit(1760463854.539:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12951 comm="syz.3.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff655d8eec9 code=0x7ffc0000 [ 318.412657][ T1211] usb 5-1: USB disconnect, device number 34 [ 318.453722][ T30] audit: type=1326 audit(1760463854.539:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12951 comm="syz.3.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff655d2af79 code=0x7ffc0000 [ 318.541100][ T30] audit: type=1326 audit(1760463854.539:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12951 comm="syz.3.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff655d2af79 code=0x7ffc0000 [ 318.599894][ T30] audit: type=1326 audit(1760463854.539:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12951 comm="syz.3.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff655d2af79 code=0x7ffc0000 [ 318.656667][ T30] audit: type=1326 audit(1760463854.539:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12951 comm="syz.3.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff655d8eec9 code=0x7ffc0000 [ 318.706204][ T30] audit: type=1326 audit(1760463854.539:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12951 comm="syz.3.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff655d2af79 code=0x7ffc0000 [ 318.762360][T12968] __nla_validate_parse: 1 callbacks suppressed [ 318.762375][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2860'. [ 318.769975][ T30] audit: type=1326 audit(1760463854.559:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12951 comm="syz.3.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff655d2af79 code=0x7ffc0000 [ 318.831479][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2860'. [ 318.845754][ T30] audit: type=1326 audit(1760463854.559:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12951 comm="syz.3.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff655d2af79 code=0x7ffc0000 [ 318.908808][ T30] audit: type=1326 audit(1760463854.559:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12951 comm="syz.3.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff655d8eec9 code=0x7ffc0000 [ 321.273197][T13042] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3356708090 (26853664720 ns) > initial count (9735166528 ns). Using initial count to start timer. [ 321.339573][T13043] kvm: Disabled LAPIC found during irq injection [ 321.500464][ T992] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.526495][ T992] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.787607][ T992] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.808720][ T992] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.916988][ T992] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.939044][ T992] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.001422][ T1750] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 322.076971][ T992] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.126868][ T992] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.188538][ T1750] usb 2-1: Using ep0 maxpacket: 8 [ 322.209248][ T1750] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 322.217662][ T1750] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 322.258018][ T1750] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 322.289083][ T1750] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 322.300336][ T1750] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.325086][ T1750] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 322.345094][ T1750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.479762][ T1211] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 322.532542][ T992] bridge_slave_1: left allmulticast mode [ 322.549542][ T992] bridge_slave_1: left promiscuous mode [ 322.567522][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.585362][ T1750] usb 2-1: usb_control_msg returned -32 [ 322.599798][ T992] bridge_slave_0: left allmulticast mode [ 322.602922][ T1750] usbtmc 2-1:16.0: can't read capabilities [ 322.605474][ T992] bridge_slave_0: left promiscuous mode [ 322.627465][ T992] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.638877][ T1211] usb 5-1: Using ep0 maxpacket: 32 [ 322.656399][ T1211] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.679600][ T1211] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 322.699996][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.718166][ T1211] usb 5-1: Product: syz [ 322.731466][ T1211] usb 5-1: Manufacturer: syz [ 322.743224][ T1211] usb 5-1: SerialNumber: syz [ 322.769425][ T1211] usb 5-1: config 0 descriptor?? [ 322.789329][ T1211] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 322.964644][T13064] usbtmc 2-1:16.0: control status returned 0 [ 322.982071][ T1211] gspca_sunplus: reg_r err -32 [ 323.176421][ T5917] usb 2-1: USB disconnect, device number 51 [ 323.541232][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 323.547984][T13084] netlink: 'syz.3.2911': attribute type 4 has an invalid length. [ 323.557715][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 323.573377][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 323.590012][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.598011][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.704293][ T992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.723640][ T992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.744512][ T992] bond0 (unregistering): Released all slaves [ 323.999730][ T1211] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 324.252917][T13110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2919'. [ 324.488440][ T1211] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 324.516772][ T992] hsr_slave_0: left promiscuous mode [ 324.524171][ T992] hsr_slave_1: left promiscuous mode [ 324.560495][ T992] veth1_macvtap: left promiscuous mode [ 324.569580][ T992] veth0_macvtap: left promiscuous mode [ 324.576337][ T992] veth1_vlan: left promiscuous mode [ 324.595872][ T992] veth0_vlan: left promiscuous mode [ 324.643656][ T1211] usb 4-1: Using ep0 maxpacket: 8 [ 324.657060][ T1211] usb 4-1: config 179 has an invalid interface number: 97 but max is 0 [ 324.669915][ T1211] usb 4-1: config 179 has no interface number 0 [ 324.682606][ T1211] usb 4-1: config 179 interface 97 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 324.699788][ T1211] usb 4-1: config 179 interface 97 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 324.711366][ T1211] usb 4-1: config 179 interface 97 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 324.722004][ T1211] usb 4-1: config 179 interface 97 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 324.736656][ T1211] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.ce [ 324.752114][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.785291][T13113] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 324.878630][ T5917] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 324.993840][ T5883] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 325.042587][ T5917] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 325.053486][ T5917] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 325.077525][ T5917] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 325.086933][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.095075][ T5917] usb 2-1: Product: syz [ 325.099345][ T5917] usb 2-1: Manufacturer: syz [ 325.103956][ T5917] usb 2-1: SerialNumber: syz [ 325.124502][ T5917] usb 2-1: config 0 descriptor?? [ 325.130823][T13130] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 325.138122][T13130] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 325.171339][ T5883] usb 1-1: config 0 has no interfaces? [ 325.182101][ T5883] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 325.191296][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.199471][ T5883] usb 1-1: Product: syz [ 325.200425][ T992] team0 (unregistering): Port device team_slave_1 removed [ 325.203900][ T5883] usb 1-1: Manufacturer: syz [ 325.215608][ T5883] usb 1-1: SerialNumber: syz [ 325.227207][ T5883] usb 1-1: config 0 descriptor?? [ 325.265007][ T992] team0 (unregistering): Port device team_slave_0 removed [ 325.321481][ T5937] usb 5-1: USB disconnect, device number 35 [ 325.358548][T13130] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 325.376681][T13130] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 325.525524][T13137] netlink: 'syz.0.2924': attribute type 16 has an invalid length. [ 325.535642][T13137] netlink: 'syz.0.2924': attribute type 17 has an invalid length. [ 325.693485][ T5826] Bluetooth: hci3: command tx timeout [ 325.767952][T13113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2920'. [ 325.787044][ T5937] usb 4-1: USB disconnect, device number 46 [ 325.788170][T13136] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2925'. [ 325.798816][ T5917] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 325.810915][T13136] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 325.852194][T13134] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.861577][T13134] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.960082][T13137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.177623][T13085] chnl_net:caif_netlink_parms(): no params data found [ 326.276957][ T5937] usb 1-1: USB disconnect, device number 40 [ 326.405782][ T992] IPVS: stop unused estimator thread 0... [ 326.414973][ T5917] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 326.459087][ T5917] usb 2-1: USB disconnect, device number 52 [ 326.661422][T13085] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.668778][T13085] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.676040][T13085] bridge_slave_0: entered allmulticast mode [ 326.683892][T13085] bridge_slave_0: entered promiscuous mode [ 326.741621][T13159] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 326.771747][T13085] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.793775][T13085] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.806190][T13085] bridge_slave_1: entered allmulticast mode [ 326.848152][T13085] bridge_slave_1: entered promiscuous mode [ 326.971633][T13170] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 327.091935][T13085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.131218][T13085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.397843][T13085] team0: Port device team_slave_0 added [ 327.428112][T13085] team0: Port device team_slave_1 added [ 327.578996][ T5917] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 327.579730][T13085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.611443][T13085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.668374][T13085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.697476][T13085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.718495][T13085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.748808][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 327.771510][ T5826] Bluetooth: hci3: command tx timeout [ 327.778651][T13085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.779843][ T5917] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 327.808396][ T5917] usb 1-1: config 0 has no interface number 0 [ 327.815380][ T5917] usb 1-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30 [ 327.831120][ T5917] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 327.854848][ T5917] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 327.887064][ T5917] usb 1-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 327.908647][ T5917] usb 1-1: config 0 interface 41 has no altsetting 0 [ 327.935110][ T5917] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 327.963505][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.991747][ T5917] usb 1-1: Product: syz [ 328.014072][ T5917] usb 1-1: Manufacturer: syz [ 328.022865][ T5917] usb 1-1: SerialNumber: syz [ 328.050651][ T5917] usb 1-1: config 0 descriptor?? [ 328.074140][T13085] hsr_slave_0: entered promiscuous mode [ 328.078457][T13189] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 328.101612][T13085] hsr_slave_1: entered promiscuous mode [ 328.106343][T13189] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 328.107994][T13085] debugfs: 'hsr0' already exists in 'hsr' [ 328.188356][T13085] Cannot create hsr debugfs directory [ 328.366783][T13189] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 328.393304][T13189] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 328.890657][T13085] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 328.950261][T13085] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 328.983174][T13085] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 329.038823][ T5917] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 329.053223][T13085] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 329.283153][ T5917] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 329.335268][ T5917] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 329.373161][T13085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.382434][ T5917] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 329.433782][ T5917] usb 1-1: USB disconnect, device number 41 [ 329.455707][T13085] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.510873][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.518061][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.640712][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.647873][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.848477][ T5826] Bluetooth: hci3: command tx timeout [ 329.947999][T13085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.117247][T13085] veth0_vlan: entered promiscuous mode [ 330.166798][T13085] veth1_vlan: entered promiscuous mode [ 330.239970][T13085] veth0_macvtap: entered promiscuous mode [ 330.269528][T13085] veth1_macvtap: entered promiscuous mode [ 330.318094][T13085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.380465][T13085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.428969][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.456092][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.485977][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.513786][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.670670][T13288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2964'. [ 330.828883][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.872301][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.946600][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.972055][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.678464][ T5883] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 331.728513][ T1211] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 331.831373][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 331.847568][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 331.847584][ T30] audit: type=1326 audit(1760463868.139:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.4.2975" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c0018eec9 code=0x0 [ 331.853304][ T5883] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 331.891374][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.912774][ T1211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.930568][ T5826] Bluetooth: hci3: command tx timeout [ 331.936165][ T1211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.947765][ T5883] usb 2-1: config 0 descriptor?? [ 331.968516][ T1211] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 331.993426][ T1211] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 332.013562][ T1211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.025934][ T1211] usb 6-1: config 0 descriptor?? [ 332.413902][ T5883] usbhid 2-1:0.0: can't add hid device: -71 [ 332.430565][ T5883] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 332.454364][ T1211] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 332.464876][ T5883] usb 2-1: USB disconnect, device number 53 [ 332.472935][ T1211] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 332.485406][ T1211] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 332.494957][ T1211] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 332.503040][ T1211] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 332.511516][ T1211] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 332.511703][T13341] syzkaller1: entered promiscuous mode [ 332.520721][ T1211] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 332.545344][T13341] syzkaller1: entered allmulticast mode [ 332.548523][ T1211] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 332.561809][ T1211] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 332.571554][ T1211] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 332.585135][ T1211] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 332.799045][ T5917] usb 6-1: USB disconnect, device number 2 [ 332.887619][T13353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2988'. [ 332.896992][T13353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2988'. [ 334.048420][ T5896] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 334.210340][ T5896] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 334.220798][ T5896] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 334.237254][ T5896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 334.252724][ T5896] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 334.287353][ T5896] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 334.316028][ T5896] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 334.329118][ T5883] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 334.338446][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 334.346459][ T5896] usb 1-1: Product: syz [ 334.375747][ T5896] usb 1-1: Manufacturer: syz [ 334.402880][ T5896] cdc_wdm 1-1:1.0: skipping garbage [ 334.408121][ T5896] cdc_wdm 1-1:1.0: skipping garbage [ 334.430785][ T5896] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 334.446939][ T5896] cdc_wdm 1-1:1.0: Unknown control protocol [ 334.509491][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 334.523105][ T5883] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 334.534763][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.578663][ T5883] usb 4-1: config 0 descriptor?? [ 334.592931][ T5883] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 334.641379][ T5830] usb 1-1: USB disconnect, device number 42 [ 335.337808][ T30] audit: type=1326 audit(1760463871.629:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13429 comm="syz.0.3021" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1ee78eec9 code=0x0 [ 335.756055][T13436] kvm: kvm [13435]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 335.806788][ T5883] gspca_nw80x: reg_w err -71 [ 335.815856][ T5883] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 335.836374][ T5883] usb 4-1: USB disconnect, device number 47 [ 336.408183][T13445] syzkaller1: entered promiscuous mode [ 336.465401][T13445] syzkaller1: entered allmulticast mode [ 336.887436][T13475] vivid-002: disconnect [ 336.892962][T13475] vivid-002: reconnect [ 337.908731][ T5896] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 338.091409][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 338.103324][ T5896] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 338.128424][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.149235][ T5896] usb 6-1: config 0 descriptor?? [ 338.809763][ T5896] usbhid 6-1:0.0: can't add hid device: -71 [ 338.833781][ T5896] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 338.870545][ T5896] usb 6-1: USB disconnect, device number 3 [ 339.052395][ T30] audit: type=1800 audit(1760463875.349:388): pid=13519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3055" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=51177 res=0 errno=0 [ 340.331880][T13558] sctp: [Deprecated]: syz.5.3069 (pid 13558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.331880][T13558] Use struct sctp_sack_info instead [ 340.644428][T13573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.041115][ T5830] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 341.346328][ T5830] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 341.414646][ T5830] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 341.439550][ T5830] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 341.448711][ T5917] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 341.473810][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.551682][T13578] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 341.565826][T13593] loop4: detected capacity change from 0 to 2560 [ 341.579981][ T5830] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 341.609434][T13593] Buffer I/O error on dev loop4, logical block 0, async page read [ 341.617394][T13593] Buffer I/O error on dev loop4, logical block 0, async page read [ 341.644486][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 341.661041][T13593] Buffer I/O error on dev loop4, logical block 0, async page read [ 341.675493][ T5917] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 341.706519][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.730525][T13593] Buffer I/O error on dev loop4, logical block 0, async page read [ 341.761375][ T5917] usb 5-1: config 0 descriptor?? [ 341.820416][T13595] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 341.862536][ T5830] usb 1-1: USB disconnect, device number 43 [ 341.871096][T13593] loop4: unable to read partition table [ 341.882193][T13593] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 341.940595][T13595] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 342.007224][T13595] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 342.026360][ T5917] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 342.042282][T13595] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 342.057875][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 342.071796][T13595] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 342.105463][ T5917] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 342.110080][T13595] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 342.124417][ T5917] usb 5-1: media controller created [ 342.201407][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 342.376149][ T5917] DVB: Unable to find symbol dib7000p_attach() [ 342.403589][ T5917] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 342.483449][T13620] netlink: 'syz.5.3092': attribute type 22 has an invalid length. [ 342.538483][ T5917] rc_core: IR keymap rc-dib0700-rc5 not found [ 342.552327][ T5917] Registered IR keymap rc-empty [ 342.567018][ T5917] dvb-usb: could not initialize remote control. [ 342.588149][ T5917] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 342.666294][T13628] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 343.398447][ T5917] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 343.580845][ T5917] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 343.615815][ T5917] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 343.636121][ T5917] usb 2-1: config 1 interface 0 has no altsetting 0 [ 343.650701][ T5917] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 343.663110][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.678414][ T5917] usb 2-1: Product: syz [ 343.690046][ T5917] usb 2-1: Manufacturer: syz [ 343.700500][ T5917] usb 2-1: SerialNumber: syz [ 343.719439][T13648] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 343.739005][T13648] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 343.789456][ T1750] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 343.948481][ T1750] usb 6-1: Using ep0 maxpacket: 32 [ 343.967812][ T1750] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.006117][ T1750] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.042755][ T1750] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 344.068646][ T1750] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.109374][ T5917] rtl8150 2-1:1.0: couldn't reset the device [ 344.115913][ T5917] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 344.128676][ T1750] usb 6-1: config 0 descriptor?? [ 344.146800][ T1750] hub 6-1:0.0: USB hub found [ 344.167208][ T5883] usb 5-1: USB disconnect, device number 36 [ 344.171367][ T5917] usb 2-1: USB disconnect, device number 54 [ 344.319900][ T5883] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 344.348611][ T5830] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 344.356504][ T1750] hub 6-1:0.0: 1 port detected [ 344.540444][ T5830] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 344.569179][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.606727][ T5830] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 344.621652][ T5830] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 344.624219][T13688] syzkaller1: entered promiscuous mode [ 344.640133][ T5830] usb 1-1: Manufacturer: syz [ 344.655959][T13688] syzkaller1: entered allmulticast mode [ 344.670546][ T5830] usb 1-1: config 0 descriptor?? [ 344.859389][ T5830] rc_core: IR keymap rc-hauppauge not found [ 344.865324][ T5830] Registered IR keymap rc-empty [ 344.909731][ T5830] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 344.943833][ T5830] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input73 [ 344.995951][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 345.005079][ T1750] hub 6-1:0.0: activate --> -90 [ 345.028900][ T5830] usb 1-1: USB disconnect, device number 44 [ 345.088405][ T44] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 345.248687][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 345.255557][ T44] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 345.268399][ T44] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 345.389840][ T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 345.406140][ T1750] usb 6-1-port1: config error [ 345.406695][ T5883] usb 6-1: USB disconnect, device number 4 [ 345.438823][ T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 345.453676][ T44] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.504782][ T44] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 345.538377][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.817743][ T44] usb 2-1: usb_control_msg returned -32 [ 345.858428][ T44] usbtmc 2-1:16.0: can't read capabilities [ 345.960482][ T1750] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 346.161228][ T1750] usb 1-1: Using ep0 maxpacket: 32 [ 346.169757][ T1750] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 346.195884][ T1750] usb 1-1: config 0 has no interface number 0 [ 346.212431][ T1750] usb 1-1: config 0 interface 184 has no altsetting 0 [ 346.230835][ T1750] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 346.253061][ T1750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.284368][ T1750] usb 1-1: Product: syz [ 346.294401][ T1750] usb 1-1: Manufacturer: syz [ 346.316101][ T1750] usb 1-1: SerialNumber: syz [ 346.340259][ T1750] usb 1-1: config 0 descriptor?? [ 346.373907][ T1750] smsc75xx v1.0.0 [ 346.604090][T13754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.621185][T13752] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 346.711622][T13756] netlink: 'syz.4.3131': attribute type 29 has an invalid length. [ 346.730067][T13756] netlink: 'syz.4.3131': attribute type 29 has an invalid length. [ 346.740051][T13756] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3131'. [ 346.823665][ T5883] usb 2-1: USB disconnect, device number 55 [ 347.585209][ T1750] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 347.642938][ T1750] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 347.672991][ T1750] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 347.702222][ T1750] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 347.745983][ T1750] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 347.766606][ T1750] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 347.789856][ T1750] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 347.861887][ T1750] usb 1-1: USB disconnect, device number 45 [ 348.313930][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 349.051804][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 349.128661][T13829] bridge0: entered promiscuous mode [ 349.144338][T13829] batman_adv: batadv0: Adding interface: macsec1 [ 349.169051][T13829] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.228506][T13829] batman_adv: batadv0: Interface activated: macsec1 [ 349.338645][ T44] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 349.357758][T13839] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 349.499352][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 349.519446][ T44] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 349.541135][ T44] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.556152][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.567522][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 349.580075][ T44] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.593623][ T5883] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 349.604398][ T44] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 349.615606][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.748753][ T5883] usb 6-1: Using ep0 maxpacket: 8 [ 349.756185][ T5883] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 349.776913][ T5883] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 349.814497][ T5883] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 349.825434][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.838919][ T5883] usb 6-1: Product: syz [ 349.843266][ T44] usb 4-1: usb_control_msg returned -32 [ 349.849202][ T5883] usb 6-1: Manufacturer: syz [ 349.853817][ T5883] usb 6-1: SerialNumber: syz [ 349.858759][ T44] usbtmc 4-1:16.0: can't read capabilities [ 349.879989][ T5883] usb 6-1: config 0 descriptor?? [ 349.905112][ T5883] streamzap 6-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 350.049347][ T1750] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 350.098478][ T5883] usb 6-1: USB disconnect, device number 5 [ 350.218427][ T1750] usb 5-1: Using ep0 maxpacket: 8 [ 350.230547][ T1750] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 350.273247][ T1750] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 350.298393][ T1750] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 350.328609][ T1750] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.342139][ T5830] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 350.358163][ T1750] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 350.367635][ T1750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.384544][T13878] loop9: detected capacity change from 0 to 7 [ 350.400603][T13878] Dev loop9: unable to read RDB block 7 [ 350.413182][T13878] loop9: AHDI p3 p4 [ 350.417317][T13878] loop9: partition table partially beyond EOD, truncated [ 350.425432][T13878] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 350.508132][ T5837] udevd[5837]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 350.538740][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 350.572109][ T5830] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.582526][ T5830] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 350.605373][ T1750] usb 5-1: GET_CAPABILITIES returned 0 [ 350.610994][ T5830] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 350.620127][ T1750] usbtmc 5-1:16.0: can't read capabilities [ 350.626964][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.656499][ T5830] usb 2-1: config 0 descriptor?? [ 350.672685][ T5830] hub 2-1:0.0: bad descriptor, ignoring hub [ 350.692151][ T5830] hub 2-1:0.0: probe with driver hub failed with error -5 [ 350.720273][ T5830] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 350.989748][ T5883] usb 2-1: USB disconnect, device number 56 [ 353.608476][ T5830] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 353.770292][ T5830] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 353.789967][ T5830] usb 2-1: config 0 has no interface number 0 [ 353.796160][ T5830] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 353.813525][ T5830] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 353.825736][ T5830] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 353.837132][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.857958][ T5830] usb 2-1: config 0 descriptor?? [ 353.880059][T13939] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 354.973333][T13981] netlink: 'syz.0.3224': attribute type 1 has an invalid length. [ 354.979026][T13980] netlink: 'syz.5.3223': attribute type 13 has an invalid length. [ 355.057136][T13981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 355.080767][T13983] bond1: (slave geneve2): making interface the new active one [ 355.091453][T13983] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 355.316806][T13992] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3228'. [ 355.332209][T13992] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3228'. [ 355.601724][T13881] usbtmc 4-1:16.0: usb_control_msg returned -110 [ 355.620779][ T5830] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior2 [ 355.659108][ T1211] usb 5-1: USB disconnect, device number 37 [ 355.679254][ T5883] usb 4-1: USB disconnect, device number 48 [ 355.693266][ T5830] usb 2-1: USB disconnect, device number 57 [ 356.988452][ T5896] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 357.149272][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 357.162639][ T5896] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 357.183433][ T5896] usb 2-1: config 0 has no interface number 0 [ 357.205039][ T5896] usb 2-1: config 0 interface 184 has no altsetting 0 [ 357.240357][ T5896] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 357.250978][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.259661][ T5896] usb 2-1: Product: syz [ 357.263971][ T5896] usb 2-1: Manufacturer: syz [ 357.298600][ T5896] usb 2-1: SerialNumber: syz [ 357.319318][ T5896] usb 2-1: config 0 descriptor?? [ 357.341091][ T5896] smsc75xx v1.0.0 [ 357.344920][ T5896] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 357.376162][ T5896] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 357.405017][T14046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3251'. [ 357.576538][ T1211] usb 2-1: USB disconnect, device number 58 [ 358.017412][T14078] netlink: 512 bytes leftover after parsing attributes in process `syz.0.3265'. [ 358.030858][T14078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.044630][T14080] veth0: entered promiscuous mode [ 358.064004][T14080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3266'. [ 359.054513][T14108] input: syz0 as /devices/virtual/input/input76 [ 359.306052][T14117] input: syz1 as /devices/virtual/input/input77 [ 360.588597][ T1750] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 360.630139][T14153] netlink: 'syz.5.3297': attribute type 4 has an invalid length. [ 360.758441][ T1750] usb 5-1: Using ep0 maxpacket: 16 [ 360.784691][ T1750] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.832726][ T1750] usb 5-1: config 0 has no interfaces? [ 360.854671][ T1750] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 360.868393][ T1750] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.887405][ T1750] usb 5-1: Product: syz [ 360.901586][ T1750] usb 5-1: Manufacturer: syz [ 360.942055][ T1750] usb 5-1: SerialNumber: syz [ 360.979617][ T1750] usb 5-1: config 0 descriptor?? [ 361.098422][ T1211] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 361.289861][ T1211] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.318391][ T1211] usb 4-1: config 0 has no interfaces? [ 361.323932][ T1211] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 361.344151][T14145] netlink: 'syz.4.3295': attribute type 13 has an invalid length. [ 361.378410][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.392904][T14145] netlink: 'syz.4.3295': attribute type 17 has an invalid length. [ 361.484866][T14145] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 361.862190][ T10] usb 5-1: USB disconnect, device number 38 [ 361.909571][ T1211] usb 4-1: config 0 descriptor?? [ 362.677729][ T10] usb 4-1: USB disconnect, device number 49 [ 363.384074][T14207] ip6gre1: entered allmulticast mode [ 364.004741][T14234] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.822725][ T30] audit: type=1326 audit(1760463901.119:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14262 comm="syz.5.3346" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa92e78eec9 code=0x0 [ 364.869604][T14266] loop6: detected capacity change from 0 to 7 [ 364.884714][ T5837] Dev loop6: unable to read RDB block 7 [ 364.896310][ T5837] loop6: AHDI p3 [ 364.900971][ T5837] loop6: partition table partially beyond EOD, truncated [ 364.913116][T14266] Dev loop6: unable to read RDB block 7 [ 364.921559][T14266] loop6: AHDI p3 [ 364.925342][T14266] loop6: partition table partially beyond EOD, truncated [ 365.240463][T14277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.617596][T14296] ALSA: seq fatal error: cannot create timer (-16) [ 365.904720][T14309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3366'. [ 366.557880][T14343] pim6reg1: entered promiscuous mode [ 366.567412][T14343] pim6reg1: entered allmulticast mode [ 366.598443][ T10] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 366.763474][ T10] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 366.786599][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.811672][ T10] usb 6-1: Product: syz [ 366.826497][T14355] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3386'. [ 366.831298][ T10] usb 6-1: Manufacturer: syz [ 366.862424][T14355] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3386'. [ 366.869406][ T10] usb 6-1: SerialNumber: syz [ 366.887292][ T10] usb 6-1: config 0 descriptor?? [ 367.304152][ T10] airspy 6-1:0.0: Board ID: 00 [ 367.310935][ T10] airspy 6-1:0.0: Firmware version: [ 367.368956][ T5896] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 367.539040][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 367.562917][ T5896] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 367.578378][ T5896] usb 1-1: config 0 interface 0 has no altsetting 0 [ 367.597874][ T5896] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 367.609528][ T44] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 367.630151][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.640840][ T5896] usb 1-1: Product: syz [ 367.645021][ T5896] usb 1-1: Manufacturer: syz [ 367.652163][ T5896] usb 1-1: SerialNumber: syz [ 367.677363][ T5896] usb 1-1: config 0 descriptor?? [ 367.770796][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 367.790335][ T44] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 367.815487][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.842546][ T44] usb 4-1: config 0 descriptor?? [ 367.864753][ T44] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22 [ 367.909892][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 367.925179][ T5896] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input78 [ 367.970782][ T5896] imon:send_packet: packet tx failed (-71) [ 367.999555][ T5896] imon 1-1:0.0: panel buttons/knobs setup failed [ 368.064913][ T44] usb 4-1: USB disconnect, device number 50 [ 368.100579][ T5896] rc_core: IR keymap rc-imon-pad not found [ 368.106542][ T10] airspy 6-1:0.0: usb_control_msg() failed -71 request 0f [ 368.112569][ T5896] Registered IR keymap rc-empty [ 368.119275][ T10] airspy 6-1:0.0: Registered as swradio24 [ 368.124140][ T5896] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 368.125019][ T10] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 368.136929][ T10] usb 6-1: USB disconnect, device number 6 [ 368.149886][ T5896] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 368.164273][ T5896] imon:send_packet: packet tx failed (-71) [ 368.189970][ T5896] imon 1-1:0.0: remote input dev register failed [ 368.196719][ T5896] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 368.233455][ T5896] imon 1-1:0.0: unable to initialize intf0, err 0 [ 368.242702][ T5896] imon:imon_probe: failed to initialize context! [ 368.255233][ T5896] imon 1-1:0.0: unable to register, err -19 [ 368.269250][ T5896] usb 1-1: USB disconnect, device number 46 [ 368.439582][ T5830] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 368.578557][ T5896] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 368.625615][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.652488][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.676908][ T5830] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 368.706337][ T5830] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 368.733216][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 368.740586][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.747865][ T5896] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 368.764090][ T5896] usb 1-1: config 0 interface 0 has no altsetting 0 [ 368.770030][ T5830] usb 5-1: config 0 descriptor?? [ 368.827512][ T5896] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 368.844431][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.862798][ T5896] usb 1-1: Product: syz [ 368.872921][ T5896] usb 1-1: Manufacturer: syz [ 368.895838][ T5896] usb 1-1: SerialNumber: syz [ 368.911334][ T5896] usb 1-1: config 0 descriptor?? [ 368.973891][T14402] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 369.141652][ T5896] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input80 [ 369.209269][ T5830] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 369.465592][T14422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 369.478441][ T5896] rc_core: IR keymap rc-imon-pad not found [ 369.484326][ T5896] Registered IR keymap rc-empty [ 369.498594][ T5896] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 369.509292][ T5896] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 369.550491][ T5896] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 369.564411][ T5896] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input81 [ 369.579416][ T5896] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:47> initialized [ 369.748663][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 369.749530][ T5830] usb 1-1: USB disconnect, device number 47 [ 370.518668][ C0] plantronics 0003:047F:FFFF.0034: usb_submit_urb(ctrl) failed: -1 [ 370.760707][ T10] hid_parser_main: 5 callbacks suppressed [ 370.761088][ T10] hid-generic 0000:0003:0001.0035: unknown main item tag 0x0 [ 370.781181][ T10] hid-generic 0000:0003:0001.0035: unknown main item tag 0x0 [ 370.793822][ T10] hid-generic 0000:0003:0001.0035: hidraw1: HID v0.03 Device [syz0] on syz1 [ 370.796497][T14457] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 371.001586][T14458] fido_id[14458]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 371.435704][ T5896] usb 5-1: USB disconnect, device number 39 [ 371.987741][T14494] loop5: detected capacity change from 0 to 7 [ 372.028565][T14494] Dev loop5: unable to read RDB block 7 [ 372.034177][T14494] loop5: unable to read partition table [ 372.072495][T14494] loop5: partition table beyond EOD, truncated [ 372.113100][T14494] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 372.129180][T14496] syzkaller1: entered promiscuous mode [ 372.148782][T14496] syzkaller1: entered allmulticast mode [ 373.460890][T14532] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 373.513819][ T5896] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 373.692200][ T5896] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 373.711316][ T5896] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 373.768178][ T5896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 373.801671][ T5896] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 373.848799][ T5896] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 373.890193][ T5896] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 373.918478][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 373.932618][ T5896] usb 1-1: Product: syz [ 373.947483][ T5896] usb 1-1: Manufacturer: syz [ 373.982276][ T5896] cdc_wdm 1-1:1.0: skipping garbage [ 374.006007][ T5896] cdc_wdm 1-1:1.0: skipping garbage [ 374.028263][ T5896] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 374.054934][ T5896] cdc_wdm 1-1:1.0: Unknown control protocol [ 374.341674][T14559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3469'. [ 374.368494][T14559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3469'. [ 374.428404][ T5830] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 374.580673][ T5830] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 374.590637][ T5830] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 374.608423][ T5830] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.690595][ T5830] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 374.710956][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.746173][ T5830] usb 2-1: Product: syz [ 374.764138][ T5830] usb 2-1: Manufacturer: syz [ 374.779452][ T5830] usb 2-1: SerialNumber: syz [ 374.818182][ T5830] hub 2-1:1.0: bad descriptor, ignoring hub [ 374.848450][ T5830] hub 2-1:1.0: probe with driver hub failed with error -5 [ 375.024073][ T5830] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 59 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 375.036776][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3475'. [ 375.369114][ T5830] usb 2-1: USB disconnect, device number 59 [ 375.378544][ T5830] usblp1: removed [ 375.718762][ T5830] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 375.925360][ T5830] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 375.953562][ T5830] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 375.978475][ T5830] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.062026][ T5830] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 376.080674][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.114873][ T5830] usb 2-1: Product: syz [ 376.124995][ T5830] usb 2-1: Manufacturer: syz [ 376.155846][ T5830] usb 2-1: SerialNumber: syz [ 376.179816][ T5830] hub 2-1:1.0: bad descriptor, ignoring hub [ 376.207273][ T5830] hub 2-1:1.0: probe with driver hub failed with error -5 [ 376.393758][ C1] wdm_int_callback: 2599 callbacks suppressed [ 376.393787][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 376.406483][ C1] wdm_int_callback: 2599 callbacks suppressed [ 376.406504][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 376.422639][ T5896] usb 1-1: USB disconnect, device number 48 [ 376.425999][ T5830] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 60 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 376.554549][ T5830] usb 2-1: USB disconnect, device number 60 [ 376.595848][ T5830] usblp1: removed [ 377.046730][T14618] capability: warning: `syz.5.3493' uses 32-bit capabilities (legacy support in use) [ 377.436088][T14645] netlink: 'syz.4.3503': attribute type 10 has an invalid length. [ 377.445770][T14639] bond0: (slave dummy0): Releasing backup interface [ 377.474028][T14639] bridge_slave_0: left allmulticast mode [ 377.491457][T14645] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3503'. [ 377.509367][T14639] bridge_slave_0: left promiscuous mode [ 377.533575][T14639] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.593458][T14639] bridge_slave_1: left allmulticast mode [ 377.602950][T14639] bridge_slave_1: left promiscuous mode [ 377.619586][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 377.629298][T14651] sctp: [Deprecated]: syz.1.3506 (pid 14651) Use of int in max_burst socket option. [ 377.629298][T14651] Use struct sctp_assoc_value instead [ 377.646686][T14639] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.670814][T14639] bond0: (slave bond_slave_0): Releasing backup interface [ 377.701751][T14639] team0: Port device team_slave_0 removed [ 377.727460][T14639] team0: Port device team_slave_1 removed [ 377.735217][T14639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.745792][T14639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.755565][T14639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.763610][T14639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.779843][T14639] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 377.797854][T14645] team0: entered promiscuous mode [ 377.812435][T14645] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 377.830067][T14645] bridge0: port 1(team0) entered blocking state [ 377.843672][T14645] bridge0: port 1(team0) entered disabled state [ 377.859266][T14645] team0: entered allmulticast mode [ 377.870138][T14645] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 377.883932][T14645] bridge0: port 1(team0) entered blocking state [ 377.890413][T14645] bridge0: port 1(team0) entered forwarding state [ 377.902582][ T992] bridge0: port 1(team0) entered disabled state [ 377.912696][T14653] netlink: 'syz.5.3507': attribute type 20 has an invalid length. [ 377.921153][T14657] batadv_slave_1: entered promiscuous mode [ 377.927075][T14653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3507'. [ 377.950659][T14659] batadv_slave_1: left promiscuous mode [ 377.971312][ T1338] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.980458][T14653] netlink: 'syz.5.3507': attribute type 20 has an invalid length. [ 378.007370][ T1338] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.022975][T14653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3507'. [ 378.046290][ T1338] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.075188][ T1338] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.194142][T14665] kvm: MONITOR instruction emulated as NOP! [ 378.392719][T14676] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 378.398137][T14678] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.492134][T14680] dummy0: Caught tx_queue_len zero misconfig [ 378.666765][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.673132][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.978296][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 379.173366][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.195708][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.248425][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 379.295123][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 379.316964][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.357587][ T10] usb 6-1: config 0 descriptor?? [ 379.755829][T14733] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3540'. [ 379.823732][ T10] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 380.455263][ T44] usb 6-1: USB disconnect, device number 7 [ 381.038606][ T5830] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 381.210362][ T5830] usb 1-1: config 0 has no interfaces? [ 381.215894][ T5830] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 381.247072][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.283275][ T5830] usb 1-1: config 0 descriptor?? [ 381.508220][ T1750] psmouse serio7: Failed to reset mouse on : -5 [ 381.602081][ T5830] usb 1-1: USB disconnect, device number 49 [ 381.798499][ T5883] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 381.939348][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 381.951201][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 381.962991][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 381.974441][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 381.985617][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 381.999438][ T5883] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 382.008868][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.023544][ T5883] usb 4-1: config 0 descriptor?? [ 382.088603][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 382.097974][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 382.117429][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.127536][ T10] usb 5-1: Product: syz [ 382.131994][ T10] usb 5-1: Manufacturer: syz [ 382.136617][ T10] usb 5-1: SerialNumber: syz [ 382.144573][ T10] usb 5-1: config 0 descriptor?? [ 382.161093][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 382.442785][ T5883] plantronics 0003:047F:FFFF.0037: ignoring exceeding usage max [ 382.469234][ T5883] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 383.365992][ T10] gspca_sonixj: reg_w1 err -71 [ 383.448644][ T10] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 383.476317][ T10] usb 5-1: USB disconnect, device number 40 [ 383.825759][T14851] netlink: 'syz.5.3592': attribute type 39 has an invalid length. [ 384.414072][T14874] syzkaller1: entered promiscuous mode [ 384.428543][T14874] syzkaller1: entered allmulticast mode [ 384.532188][ T1211] usb 4-1: USB disconnect, device number 51 [ 385.338437][ T1750] misc userio: Buffer overflowed, userio client isn't keeping up [ 385.762215][T14898] netlink: 'syz.4.3612': attribute type 13 has an invalid length. [ 385.980239][T14907] netlink: 'syz.5.3615': attribute type 13 has an invalid length. [ 386.220352][ T5883] IPVS: starting estimator thread 0... [ 386.309118][T14916] IPVS: using max 24 ests per chain, 57600 per kthread [ 386.390807][T14925] netlink: 'syz.4.3623': attribute type 1 has an invalid length. [ 386.410982][ T1750] input: PS/2 Generic Mouse as /devices/serio7/input/input83 [ 386.473948][T14925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 386.505541][T14930] bond1: (slave geneve2): making interface the new active one [ 386.515280][T14930] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 386.558464][ T5937] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 386.648409][ T1750] psmouse serio7: Failed to enable mouse on [ 386.720305][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 386.732437][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.754865][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.781391][ T5937] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 386.806294][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.821340][ T5937] usb 4-1: config 0 descriptor?? [ 386.984226][T14951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.247496][ T5937] savu 0003:1E7D:2D5A.0038: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 387.534538][ T5937] usb 4-1: USB disconnect, device number 52 [ 389.019717][T15022] input: syz0 as /devices/virtual/input/input84 [ 389.117394][T15026] veth1_to_bridge: entered promiscuous mode [ 389.130204][T15026] veth1_to_bridge: left promiscuous mode [ 389.706115][ T992] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.738635][ T992] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.940683][T15053] input: syz0 as /devices/virtual/input/input85 [ 389.977844][ T992] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.015237][ T992] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.199987][ T992] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.248419][ T992] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.408167][T15071] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3687'. [ 390.442035][ T992] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.458923][ T992] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.475667][T15075] netlink: 'syz.1.3685': attribute type 6 has an invalid length. [ 390.971296][ T992] bridge_slave_1: left allmulticast mode [ 390.976990][ T992] bridge_slave_1: left promiscuous mode [ 390.985494][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.013735][ T992] bridge_slave_0: left allmulticast mode [ 391.025046][ T992] bridge_slave_0: left promiscuous mode [ 391.039787][ T992] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.344662][T15107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.204273][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 392.217922][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 392.227937][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 392.236112][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 392.253329][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 392.762092][ T992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.774781][ T992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.785710][ T992] bond0 (unregistering): Released all slaves [ 392.829925][ T5830] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 393.001425][ T5830] usb 1-1: Using ep0 maxpacket: 16 [ 393.009747][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.022885][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.033020][ T5830] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 393.047236][ T5830] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 393.056546][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.070603][ T5830] usb 1-1: config 0 descriptor?? [ 393.302277][ T992] hsr_slave_0: left promiscuous mode [ 393.310160][ T992] hsr_slave_1: left promiscuous mode [ 393.316417][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.324440][ T992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.345580][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.379530][ T992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.430117][ T992] veth1_macvtap: left promiscuous mode [ 393.442558][ T992] veth0_macvtap: left promiscuous mode [ 393.455536][ T992] veth1_vlan: left promiscuous mode [ 393.466349][ T992] veth0_vlan: left promiscuous mode [ 393.490024][T15144] random: crng reseeded on system resumption [ 393.569793][ T5830] input: HID 0955:7214 Haptics as /devices/virtual/input/input86 [ 393.746179][ T5830] shield 0003:0955:7214.0039: Registered Thunderstrike controller [ 393.778799][ T5830] shield 0003:0955:7214.0039: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 393.878415][ T1750] shield 0003:0955:7214.0039: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 393.893516][ T5830] usb 1-1: USB disconnect, device number 50 [ 393.926271][ T1750] shield 0003:0955:7214.0039: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 393.958988][ T1750] shield 0003:0955:7214.0039: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 394.012710][ T1750] shield 0003:0955:7214.0039: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 394.323859][ T5836] Bluetooth: hci3: command tx timeout [ 394.372850][T15182] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3354154791 (6708309582 ns) > initial count (4455734788 ns). Using initial count to start timer. [ 394.474896][T15184] input: syz0 as /devices/virtual/input/input87 [ 394.731212][ T992] team0 (unregistering): Port device team_slave_1 removed [ 394.787562][ T992] team0 (unregistering): Port device team_slave_0 removed [ 394.898427][ T5903] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 395.060936][ T5903] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 395.075413][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.085790][ T5903] usb 4-1: Product: syz [ 395.093374][ T5903] usb 4-1: Manufacturer: syz [ 395.098134][ T5903] usb 4-1: SerialNumber: syz [ 395.113210][ T5903] usb 4-1: config 0 descriptor?? [ 395.127286][ T5903] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 395.361220][T15139] chnl_net:caif_netlink_parms(): no params data found [ 395.652776][T15139] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.666679][T15139] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.675066][T15139] bridge_slave_0: entered allmulticast mode [ 395.686177][T15139] bridge_slave_0: entered promiscuous mode [ 395.696123][T15139] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.703885][T15139] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.712468][T15139] bridge_slave_1: entered allmulticast mode [ 395.721556][T15139] bridge_slave_1: entered promiscuous mode [ 395.818570][ T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 395.841196][T15139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.872895][T15139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.005531][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.032515][T15139] team0: Port device team_slave_0 added [ 396.048433][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.058231][ T10] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 396.070890][T15139] team0: Port device team_slave_1 added [ 396.098508][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.148199][ T10] usb 1-1: config 0 descriptor?? [ 396.252903][T15139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.287337][T15139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.370258][T15232] vivid-002: ================= START STATUS ================= [ 396.383130][T15139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.390770][ T5903] usb 4-1: USB disconnect, device number 53 [ 396.408609][T15232] vivid-002: Radio HW Seek Mode: Bounded [ 396.414671][T15232] vivid-002: Radio Programmable HW Seek: false [ 396.424926][ T5836] Bluetooth: hci3: command tx timeout [ 396.446969][T15139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.449147][T15232] vivid-002: RDS Rx I/O Mode: [ 396.462086][T15139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.464353][T15232] Block I/O [ 396.466957][T15139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.568545][T15232] [ 396.578461][T15232] vivid-002: Generate RBDS Instead of RDS: false [ 396.618454][T15232] vivid-002: RDS Reception: true [ 396.628482][T15232] vivid-002: RDS Program Type: 0 inactive [ 396.644882][T15232] vivid-002: RDS PS Name: inactive [ 396.658434][T15232] vivid-002: RDS Radio Text: inactive [ 396.678395][T15232] vivid-002: RDS Traffic Announcement: false inactive [ 396.685332][T15139] hsr_slave_0: entered promiscuous mode [ 396.695165][T15232] vivid-002: RDS Traffic Program: false inactive [ 396.709385][T15139] hsr_slave_1: entered promiscuous mode [ 396.721774][T15232] vivid-002: RDS Music: false inactive [ 396.732991][T15139] debugfs: 'hsr0' already exists in 'hsr' [ 396.737556][T15232] vivid-002: ================== END STATUS ================== [ 396.747099][T15139] Cannot create hsr debugfs directory [ 396.995011][ T10] hid-led 0003:27B8:01ED.003A: probe with driver hid-led failed with error -71 [ 397.023889][ T10] usb 1-1: USB disconnect, device number 51 [ 397.397537][T15139] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 397.417763][T15139] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 397.440383][T15139] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 397.474362][T15139] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 397.718270][T15139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.781091][T15139] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.809939][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.817100][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.877945][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.885135][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.115850][T15139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.217837][T15139] veth0_vlan: entered promiscuous mode [ 398.235728][T15139] veth1_vlan: entered promiscuous mode [ 398.308489][ T44] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 398.311611][T15139] veth0_macvtap: entered promiscuous mode [ 398.341213][T15139] veth1_macvtap: entered promiscuous mode [ 398.373868][T15139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.412806][T15139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.440293][ T7295] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.468655][ T7295] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.479784][ T5836] Bluetooth: hci3: command tx timeout [ 398.488536][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 398.509204][ T7295] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.530749][ T44] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a5, bcdDevice=eb.4c [ 398.541270][ T7295] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.548405][ T1750] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 398.550115][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.603971][ T44] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 398.641366][ T44] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 398.653022][ T44] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 398.700601][ T1750] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.715210][ T7295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.733350][ T1750] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 398.756513][ T7295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.765225][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.767894][ T1750] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 398.773777][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.795820][ T44] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 398.801132][ T1750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 398.828774][ T44] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 398.855343][ T1750] usb 2-1: SerialNumber: syz [ 398.888478][ T44] usb 4-1: dvb_usb_v2: found a 'Terratec H7 Rev.4' in warm state [ 398.954029][ T44] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 399.008874][ T44] dvbdev: DVB: registering new adapter (Terratec H7 Rev.4) [ 399.019133][ T44] usb 4-1: media controller created [ 399.024439][ T44] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 399.075991][ T44] usb 4-1: dvb_usb_v2: MAC address: 00:00:00:00:00:00 [ 399.131164][ T1750] usb 2-1: 0:2 : does not exist [ 399.155313][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 399.229414][ T1750] usb 2-1: USB disconnect, device number 61 [ 399.411704][T15323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3754'. [ 399.414034][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.499156][ T44] usb 4-1: USB disconnect, device number 54 [ 399.530894][T15327] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3756'. [ 399.543385][T15327] openvswitch: netlink: Message has 512 unknown bytes. [ 399.667914][T15329] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 399.985767][ T30] audit: type=1326 audit(1760463936.279:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15349 comm="syz.1.3767" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb63b18eec9 code=0x0 [ 400.558599][ T5836] Bluetooth: hci3: command tx timeout [ 401.361320][T15394] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.608465][ T5883] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 401.778890][ T5883] usb 1-1: Using ep0 maxpacket: 8 [ 401.791530][ T5883] usb 1-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 401.812422][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.830971][ T5883] usb 1-1: config 0 descriptor?? [ 401.845527][ T5883] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 401.891311][T15416] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 401.917769][T15416] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 402.041142][ T5883] usb 1-1: qt2_attach - failed to power on unit: -71 [ 402.051896][ T5883] quatech2 1-1:0.0: probe with driver quatech2 failed with error -71 [ 402.067574][ T5883] usb 1-1: USB disconnect, device number 52 [ 402.248841][ T5937] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 402.411841][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.426349][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.446419][ T5937] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 402.455584][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.477683][ T5937] usb 2-1: config 0 descriptor?? [ 402.925740][ T5937] waterforce 0003:1044:7A4D.003B: unknown main item tag 0x0 [ 402.951686][ T5937] waterforce 0003:1044:7A4D.003B: unknown main item tag 0x0 [ 402.966518][ T5937] waterforce 0003:1044:7A4D.003B: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.1-1/input0 [ 402.988405][T15317] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 403.059528][ T5937] waterforce 0003:1044:7A4D.003B: fw version request failed with -38 [ 403.122939][ T5937] usb 2-1: USB disconnect, device number 62 [ 403.158418][T15317] usb 1-1: Using ep0 maxpacket: 32 [ 403.178582][T15317] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 403.199775][T15317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.207924][T15317] usb 1-1: Product: syz [ 403.212639][T15317] usb 1-1: Manufacturer: syz [ 403.217257][T15317] usb 1-1: SerialNumber: syz [ 403.228573][ T5883] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 403.228965][T15317] usb 1-1: config 0 descriptor?? [ 403.249491][T15317] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 403.400862][ T5883] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 403.411970][ T5883] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 403.424284][ T5883] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 403.433617][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.456734][T15450] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 403.470152][ T5883] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 403.733710][ T5883] usb 7-1: USB disconnect, device number 2 [ 404.483947][T15317] gspca_stk1135: reg_w 0xd err -71 [ 404.506194][T15317] gspca_stk1135: serial bus timeout: status=0x00 [ 404.530331][T15317] gspca_stk1135: Sensor write failed [ 404.543649][T15317] gspca_stk1135: serial bus timeout: status=0x00 [ 404.557338][T15317] gspca_stk1135: Sensor write failed [ 404.568069][T15317] gspca_stk1135: serial bus timeout: status=0x00 [ 404.580276][T15317] gspca_stk1135: Sensor read failed [ 404.587118][T15317] gspca_stk1135: serial bus timeout: status=0x00 [ 404.596671][T15317] gspca_stk1135: Sensor read failed [ 404.602181][T15317] gspca_stk1135: Detected sensor type unknown (0x0) [ 404.611011][T15317] gspca_stk1135: serial bus timeout: status=0x00 [ 404.621483][T15317] gspca_stk1135: Sensor read failed [ 404.626828][T15317] gspca_stk1135: serial bus timeout: status=0x00 [ 404.633428][T15317] gspca_stk1135: Sensor read failed [ 404.642096][T15317] gspca_stk1135: serial bus timeout: status=0x00 [ 404.648743][T15317] gspca_stk1135: Sensor write failed [ 404.654135][T15317] gspca_stk1135: serial bus timeout: status=0x00 [ 404.660880][T15317] gspca_stk1135: Sensor write failed [ 404.666355][T15317] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 404.696137][T15317] usb 1-1: USB disconnect, device number 53 [ 404.821863][ T5883] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 404.841074][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 405.002949][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 405.025605][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 405.026037][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 405.052235][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 405.084251][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 405.088405][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 405.111240][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 405.128147][ T5883] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 405.138373][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 405.149721][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.173762][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 405.179696][ T5883] usb 5-1: config 0 descriptor?? [ 405.203297][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.245009][ T10] usb 7-1: config 0 descriptor?? [ 405.298482][T15500] ALSA: mixer_oss: invalid OSS volume 'eneve2' [ 405.306075][T15500] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 405.314533][T15500] ALSA: mixer_oss: invalid OSS volume '1543' [ 405.338516][T15500] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 405.358387][T15500] ALSA: mixer_oss: invalid OSS volume '1668' [ 405.364618][T15500] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 405.631066][ T5883] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 405.650386][ T5883] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 405.668475][ T5883] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 405.670909][ T10] plantronics 0003:047F:FFFF.003D: ignoring exceeding usage max [ 405.678920][ T5883] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 405.711778][ T5883] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 405.736864][ T10] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 405.753053][ T5883] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 405.773854][ T5883] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 405.788536][ T5883] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 405.816827][ T5883] plantronics 0003:047F:FFFF.003C: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 405.920379][ T5903] usb 5-1: USB disconnect, device number 41 [ 406.018567][T15509] fido_id[15509]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 406.584856][T15527] kvm: kvm [15525]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 406.624611][T15317] usb 7-1: USB disconnect, device number 3 [ 406.802165][T15534] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3838'. [ 406.812478][T15534] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 407.092126][T15545] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1876317852 (240168685056 ns) > initial count (238957770112 ns). Using initial count to start timer. [ 407.109886][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.312668][T15593] netlink: 'syz.1.3861': attribute type 22 has an invalid length. [ 409.018423][ T5903] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 409.193585][ T5903] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.224367][ T5903] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 409.260994][ T5903] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 409.290901][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.321885][ T5903] usb 2-1: config 0 descriptor?? [ 409.345496][ T5903] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 409.367468][ T5903] dvb-usb: bulk message failed: -22 (3/0) [ 409.406623][ T5903] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 409.442468][ T5903] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 409.468443][ T5903] usb 2-1: media controller created [ 409.488847][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 409.564115][ T5903] dvb-usb: bulk message failed: -22 (6/0) [ 409.578435][ T5903] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 409.611602][ T5903] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input88 [ 409.679037][ T5903] dvb-usb: schedule remote query interval to 150 msecs. [ 409.702146][ T5903] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 409.858441][ T5903] dvb-usb: bulk message failed: -22 (1/0) [ 409.864255][ T5903] dvb-usb: error while querying for an remote control event. [ 410.025193][T15641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.098476][ T5903] dvb-usb: bulk message failed: -22 (1/0) [ 410.118146][ T5903] dvb-usb: error while querying for an remote control event. [ 410.298434][ T5903] dvb-usb: bulk message failed: -22 (1/0) [ 410.316709][ T5903] dvb-usb: error while querying for an remote control event. [ 410.358525][T15657] input: syz0 as /devices/virtual/input/input89 [ 410.529329][ T5903] dvb-usb: bulk message failed: -22 (1/0) [ 410.536613][ T5903] dvb-usb: error while querying for an remote control event. [ 410.708449][ T1211] dvb-usb: bulk message failed: -22 (1/0) [ 410.717651][ T1211] dvb-usb: error while querying for an remote control event. [ 410.819343][ T10] usb 2-1: USB disconnect, device number 63 [ 410.876898][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 410.928446][ T5903] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 411.151519][ T5903] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 411.205570][ T5903] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 411.229349][ T5903] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 411.261032][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.297457][T15673] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 411.328818][ T5903] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 411.575180][ T5903] usb 5-1: USB disconnect, device number 42 [ 411.913428][ T10] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 411.978707][T15317] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 412.100395][ T10] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 412.115948][ T10] usb 1-1: config 0 has no interface number 0 [ 412.123515][ T10] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 412.140133][T15317] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.151545][ T10] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 412.166278][T15317] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 412.176865][T15317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.185371][ T10] usb 1-1: config 0 interface 255 has no altsetting 0 [ 412.194587][ T10] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 412.206616][T15317] usb 2-1: config 0 descriptor?? [ 412.219504][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.233439][T15317] pwc: Askey VC010 type 2 USB webcam detected. [ 412.261122][ T10] usb 1-1: config 0 descriptor?? [ 412.279990][ T10] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 412.486051][ T10] usb 1-1: USB disconnect, device number 54 [ 412.640922][T15317] pwc: recv_control_msg error -32 req 02 val 2b00 [ 412.654355][T15317] pwc: recv_control_msg error -32 req 02 val 2700 [ 412.667366][T15317] pwc: recv_control_msg error -32 req 02 val 2c00 [ 412.894495][T15317] pwc: recv_control_msg error -71 req 04 val 1300 [ 412.932062][T15317] pwc: recv_control_msg error -71 req 04 val 1400 [ 412.947361][T15317] pwc: recv_control_msg error -71 req 02 val 2000 [ 412.962734][T15317] pwc: recv_control_msg error -71 req 02 val 2100 [ 412.991054][T15317] pwc: recv_control_msg error -71 req 04 val 1500 [ 413.019774][T15317] pwc: recv_control_msg error -71 req 02 val 2500 [ 413.032173][T15317] pwc: recv_control_msg error -71 req 02 val 2400 [ 413.051444][T15317] pwc: recv_control_msg error -71 req 02 val 2600 [ 413.067227][T15317] pwc: recv_control_msg error -71 req 02 val 2900 [ 413.084474][T15317] pwc: recv_control_msg error -71 req 02 val 2800 [ 413.098939][T15317] pwc: recv_control_msg error -71 req 04 val 1100 [ 413.109852][T15317] pwc: recv_control_msg error -71 req 04 val 1200 [ 413.138180][T15317] pwc: Registered as video103. [ 413.163545][T15317] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input90 [ 413.214861][T15317] usb 2-1: USB disconnect, device number 64 [ 413.316277][ T30] audit: type=1326 audit(1760463949.609:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15762 comm="syz.4.3901" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c0018eec9 code=0x0 [ 413.357795][ T30] audit: type=1326 audit(1760463949.639:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15756 comm="syz.0.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ee78eec9 code=0x7fc00000 [ 413.754600][T15778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3906'. [ 413.954227][ T30] audit: type=1326 audit(1760463950.229:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15756 comm="syz.0.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb1ee78eec9 code=0x7fc00000 [ 414.185780][T15778] team0 (unregistering): Port device team_slave_0 removed [ 414.257715][ T30] audit: type=1326 audit(1760463950.539:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15791 comm="syz.6.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a178eec9 code=0x7ffc0000 [ 414.294212][T15778] team0 (unregistering): Port device team_slave_1 removed [ 414.353210][ T30] audit: type=1326 audit(1760463950.539:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15791 comm="syz.6.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a178eec9 code=0x7ffc0000 [ 414.450651][ T30] audit: type=1326 audit(1760463950.539:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15791 comm="syz.6.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fb7a178eec9 code=0x7ffc0000 [ 414.535716][ T30] audit: type=1326 audit(1760463950.539:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15791 comm="syz.6.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a178eec9 code=0x7ffc0000 [ 416.047584][T15827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3930'. [ 416.118419][T15317] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 416.269046][T15317] usb 4-1: Using ep0 maxpacket: 16 [ 416.302863][T15317] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 416.335958][T15317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 416.350055][T15317] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 416.369762][T15317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.377851][T15317] usb 4-1: Product: syz [ 416.382791][T15317] usb 4-1: Manufacturer: syz [ 416.387457][T15317] usb 4-1: SerialNumber: syz [ 416.399905][T15317] usb 4-1: config 0 descriptor?? [ 416.423891][T15317] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 416.433823][T15317] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 416.488692][ T44] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 416.648175][ T5836] Bluetooth: hci3: Unknown advertising packet type: 0x78 [ 416.648262][ T5836] Bluetooth: hci3: adv larger than maximum supported [ 416.656081][ T5836] Bluetooth: hci3: Malformed LE Event: 0x0d [ 416.658672][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 416.703938][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 416.714040][ T44] usb 2-1: no configurations [ 416.723277][ T44] usb 2-1: can't read configurations, error -22 [ 417.036204][T15317] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 417.067022][T15317] em28xx 4-1:0.0: Config register raw data: 0x36 [ 417.078349][T15317] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 417.084588][T15317] em28xx 4-1:0.0: No AC97 audio processor [ 417.188443][ T1750] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 417.388642][ T1750] usb 5-1: Using ep0 maxpacket: 32 [ 417.395308][ T1750] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 417.405628][ T1750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.418240][ T1750] usb 5-1: config 0 descriptor?? [ 417.427369][T15878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3954'. [ 417.494665][T15317] usb 4-1: USB disconnect, device number 55 [ 417.508610][ T1211] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 417.629619][ T1750] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 417.639951][ T1750] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 417.649991][ T1750] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 417.657139][ T1750] usb 5-1: media controller created [ 417.673783][ T1750] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 417.678556][ T1211] usb 7-1: Using ep0 maxpacket: 32 [ 417.696814][ T1211] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 417.706589][ T1211] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.717475][ T1211] usb 7-1: config 0 descriptor?? [ 417.833267][ T1750] az6027: usb out operation failed. (-71) [ 417.842527][ T1750] az6027: usb out operation failed. (-71) [ 417.848988][ T1750] stb0899_attach: Driver disabled by Kconfig [ 417.855094][ T1750] az6027: no front-end attached [ 417.855094][ T1750] [ 417.862920][ T1750] az6027: usb out operation failed. (-71) [ 417.868872][ T1750] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 417.877796][ T1750] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input91 [ 417.893954][ T1750] dvb-usb: schedule remote query interval to 400 msecs. [ 417.901195][ T1750] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 417.915304][ T1750] usb 5-1: USB disconnect, device number 43 [ 417.938933][ T1211] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 417.964932][ T1211] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 417.972702][ T1750] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 417.992944][ T1211] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 418.002507][ T1211] usb 7-1: media controller created [ 418.021764][ T1211] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 418.143222][ T1211] az6027: usb out operation failed. (-71) [ 418.154328][ T1211] az6027: usb out operation failed. (-71) [ 418.163114][ T1211] stb0899_attach: Driver disabled by Kconfig [ 418.171207][ T1211] az6027: no front-end attached [ 418.171207][ T1211] [ 418.180033][ T1211] az6027: usb out operation failed. (-71) [ 418.185835][ T1211] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 418.194734][ T1211] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input92 [ 418.217445][ T1211] dvb-usb: schedule remote query interval to 400 msecs. [ 418.226829][ T1211] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 418.242193][ T1211] usb 7-1: USB disconnect, device number 4 [ 418.306164][ T1211] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 418.398561][ T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 418.568596][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 418.586361][ T10] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 418.598407][ T10] usb 4-1: config 0 has no interface number 0 [ 418.604541][ T10] usb 4-1: config 0 interface 230 has no altsetting 0 [ 418.629117][ T10] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 418.638197][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.650208][ T10] usb 4-1: Product: syz [ 418.654657][ T10] usb 4-1: Manufacturer: syz [ 418.659758][ T10] usb 4-1: SerialNumber: syz [ 418.669874][ T10] usb 4-1: config 0 descriptor?? [ 418.681488][ T10] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 418.730478][ T10] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 419.123969][T15918] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 419.188673][T15317] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 419.348898][T15317] usb 7-1: Using ep0 maxpacket: 8 [ 419.363882][T15317] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 419.378458][T15317] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 419.393777][T15317] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 419.410045][T15317] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 419.421488][T15317] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.435714][T15317] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 419.446663][T15317] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.591573][ T30] audit: type=1326 audit(1760463955.889:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15938 comm="syz.0.3978" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1ee78eec9 code=0x0 [ 419.679103][T15317] usb 7-1: GET_CAPABILITIES returned 0 [ 419.684654][T15317] usbtmc 7-1:16.0: can't read capabilities [ 419.985257][T15909] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 419.992271][T15953] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -90 [ 420.002711][ T5883] usb 7-1: USB disconnect, device number 5 [ 420.685391][T15969] futex_wake_op: syz.1.3989 tries to shift op by 32; fix this program [ 420.686066][ T30] audit: type=1326 audit(1760463956.979:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15967 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63b18eec9 code=0x7ffc0000 [ 420.762072][ T30] audit: type=1326 audit(1760463956.979:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15967 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb63b18eec9 code=0x7ffc0000 [ 420.818050][ T30] audit: type=1326 audit(1760463956.979:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15967 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63b18eec9 code=0x7ffc0000 [ 420.851087][ T30] audit: type=1326 audit(1760463956.979:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15967 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63b18eec9 code=0x7ffc0000 [ 420.885024][ T30] audit: type=1326 audit(1760463956.999:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15967 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63b18eec9 code=0x7ffc0000 [ 420.958995][ T30] audit: type=1326 audit(1760463956.999:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15967 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63b18eec9 code=0x7ffc0000 [ 421.046869][ T10] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 421.682558][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 421.878542][ T5883] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 421.958507][ T44] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 422.028982][ T5883] usb 7-1: Using ep0 maxpacket: 16 [ 422.046640][ T5883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.067474][ T5883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.077691][ T5883] usb 7-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 422.087332][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.105563][ T5883] usb 7-1: config 0 descriptor?? [ 422.138508][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 422.145734][ T44] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 422.154362][ T44] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 422.168819][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 422.176426][T16029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4014'. [ 422.188016][T16029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4014'. [ 422.217248][ T1103] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.238536][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 422.248783][ T1103] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.257888][ T1103] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.268953][ T44] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.293002][ T1103] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.312029][ T44] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 422.326407][ T1211] usb 4-1: USB disconnect, device number 56 [ 422.357808][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.363597][T16031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4015'. [ 422.440096][T16033] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 422.577921][ T5883] input: HID 0458:5012 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5012.003E/input/input93 [ 422.604668][ T44] usb 5-1: GET_CAPABILITIES returned 0 [ 422.621574][ T44] usbtmc 5-1:16.0: can't read capabilities [ 422.679462][ T5903] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 422.709156][ T5883] input: HID 0458:5012 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5012.003E/input/input94 [ 422.761293][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 422.773055][ T5883] kye 0003:0458:5012.003E: input,hiddev1,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.6-1/input0 [ 422.829739][T15317] usb 7-1: USB disconnect, device number 6 [ 422.838421][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 422.856072][ T5903] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 422.876337][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.897433][ T5903] usb 1-1: Product: syz [ 422.910667][ T5903] usb 1-1: Manufacturer: syz [ 422.915747][ T5903] usb 1-1: SerialNumber: syz [ 422.935578][ T5903] usb 1-1: config 0 descriptor?? [ 422.949577][ T5883] usb 5-1: USB disconnect, device number 44 [ 422.955791][T16007] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 422.957942][T16045] fido_id[16045]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 422.967981][ T5903] gspca_main: sq930x-2.14.0 probing 2770:930c [ 422.977351][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 423.015844][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 423.035292][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.055389][ T10] usb 2-1: Product: syz [ 423.063833][ T10] usb 2-1: Manufacturer: syz [ 423.077452][ T10] usb 2-1: SerialNumber: syz [ 423.089476][ T10] usb 2-1: config 0 descriptor?? [ 423.303858][T16037] netlink: 'syz.1.4018': attribute type 25 has an invalid length. [ 423.312384][T16037] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4018'. [ 423.326647][ T10] usb-storage 2-1:0.0: USB Mass Storage device detected [ 423.348132][ T10] usb-storage 2-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 423.363626][ T10] usb-storage 2-1:0.0: This device (054c,002e,0500 S 04 P ff) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 423.363626][ T10] Please send a copy of this message to and [ 423.388858][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.428685][ T10] usb 2-1: USB disconnect, device number 67 [ 424.238751][ T5903] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 424.458783][ T5903] gspca_sq930x: Sensor ov9630 not yet treated [ 424.469862][ T5903] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 424.516589][ T5903] usb 1-1: USB disconnect, device number 55 [ 424.872568][T16092] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4040'. [ 425.017402][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4044'. [ 425.027227][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4044'. [ 425.324730][ T1211] hid_parser_main: 7 callbacks suppressed [ 425.324749][ T1211] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 425.369347][ T1211] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 426.254174][T16142] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4060'. [ 426.288983][T16142] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4060'. [ 426.450879][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4064'. [ 426.748459][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 426.785061][T16164] [ 426.787424][T16164] ===================================================== [ 426.794354][T16164] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 426.801821][T16164] syzkaller #0 Not tainted [ 426.806234][T16164] ----------------------------------------------------- [ 426.813160][T16164] syz.1.4070/16164 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 426.820887][T16164] ffff888059bc0948 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 426.829611][T16164] [ 426.829611][T16164] and this task is already holding: [ 426.836973][T16164] ffff8880594d0028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 426.846739][T16164] which would create a new lock dependency: [ 426.852628][T16164] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 426.860751][T16164] [ 426.860751][T16164] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 426.870196][T16164] (&client->buffer_lock){..-.}-{3:3} [ 426.870235][T16164] [ 426.870235][T16164] ... which became SOFTIRQ-irq-safe at: [ 426.883308][T16164] lock_acquire+0x120/0x360 [ 426.887922][T16164] _raw_spin_lock+0x2e/0x40 [ 426.892522][T16164] evdev_pass_values+0xb9/0xbd0 [ 426.897481][T16164] evdev_events+0x1e6/0x340 [ 426.902057][T16164] input_pass_values+0x288/0x890 [ 426.907061][T16164] input_event_dispose+0x3e5/0x6b0 [ 426.912275][T16164] input_event+0x89/0xe0 [ 426.916593][T16164] hidinput_hid_event+0x1362/0x1ca0 [ 426.921874][T16164] hid_process_event+0x4be/0x620 [ 426.926882][T16164] hid_report_raw_event+0xe91/0x16d0 [ 426.932409][T16164] hid_input_report+0x43e/0x520 [ 426.937399][T16164] hid_irq_in+0x47e/0x6d0 [ 426.941820][T16164] __usb_hcd_giveback_urb+0x376/0x540 [ 426.947281][T16164] dummy_timer+0x85f/0x44c0 [ 426.951860][T16164] __hrtimer_run_queues+0x52c/0xc60 [ 426.957152][T16164] hrtimer_run_softirq+0x187/0x2b0 [ 426.962344][T16164] handle_softirqs+0x286/0x870 [ 426.967179][T16164] __irq_exit_rcu+0xca/0x1f0 [ 426.971847][T16164] irq_exit_rcu+0x9/0x30 [ 426.976169][T16164] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 426.981884][T16164] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 426.987960][T16164] __sanitizer_cov_trace_pc+0x8/0x70 [ 426.993328][T16164] raw_process_ep_io+0x6c2/0xbc0 [ 426.998336][T16164] raw_ioctl+0x23d1/0x3c90 [ 427.002838][T16164] __se_sys_ioctl+0xfc/0x170 [ 427.007510][T16164] do_syscall_64+0xfa/0xfa0 [ 427.012094][T16164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.018067][T16164] [ 427.018067][T16164] to a SOFTIRQ-irq-unsafe lock: [ 427.025081][T16164] (tasklist_lock){.+.+}-{3:3} [ 427.025108][T16164] [ 427.025108][T16164] ... which became SOFTIRQ-irq-unsafe at: [ 427.037701][T16164] ... [ 427.037708][T16164] lock_acquire+0x120/0x360 [ 427.044850][T16164] _raw_read_lock+0x36/0x50 [ 427.049442][T16164] __do_wait+0xde/0x740 [ 427.053675][T16164] do_wait+0x1f8/0x510 [ 427.057816][T16164] kernel_wait+0xab/0x170 [ 427.062217][T16164] call_usermodehelper_exec_work+0xbe/0x230 [ 427.068190][T16164] process_scheduled_works+0xae1/0x17b0 [ 427.073810][T16164] worker_thread+0x8a0/0xda0 [ 427.078477][T16164] kthread+0x711/0x8a0 [ 427.082622][T16164] ret_from_fork+0x4bc/0x870 [ 427.087286][T16164] ret_from_fork_asm+0x1a/0x30 [ 427.092123][T16164] [ 427.092123][T16164] other info that might help us debug this: [ 427.092123][T16164] [ 427.102334][T16164] Chain exists of: [ 427.102334][T16164] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 427.102334][T16164] [ 427.115449][T16164] Possible interrupt unsafe locking scenario: [ 427.115449][T16164] [ 427.123753][T16164] CPU0 CPU1 [ 427.129103][T16164] ---- ---- [ 427.134449][T16164] lock(tasklist_lock); [ 427.138685][T16164] local_irq_disable(); [ 427.145427][T16164] lock(&client->buffer_lock); [ 427.152795][T16164] lock(&new->fa_lock); [ 427.159548][T16164] [ 427.162982][T16164] lock(&client->buffer_lock); [ 427.168080][T16164] [ 427.168080][T16164] *** DEADLOCK *** [ 427.168080][T16164] [ 427.176204][T16164] 7 locks held by syz.1.4070/16164: [ 427.181383][T16164] #0: ffff8880293af118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 427.190518][T16164] #1: ffff88801e3e5230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 427.200630][T16164] #2: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 427.210287][T16164] #3: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 427.219845][T16164] #4: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 427.228967][T16164] #5: ffff8880594d0028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 427.239135][T16164] #6: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 427.248441][T16164] [ 427.248441][T16164] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 427.258827][T16164] -> (&client->buffer_lock){..-.}-{3:3} { [ 427.264551][T16164] IN-SOFTIRQ-W at: [ 427.268515][T16164] lock_acquire+0x120/0x360 [ 427.274659][T16164] _raw_spin_lock+0x2e/0x40 [ 427.280802][T16164] evdev_pass_values+0xb9/0xbd0 [ 427.287288][T16164] evdev_events+0x1e6/0x340 [ 427.293430][T16164] input_pass_values+0x288/0x890 [ 427.300008][T16164] input_event_dispose+0x3e5/0x6b0 [ 427.306763][T16164] input_event+0x89/0xe0 [ 427.312734][T16164] hidinput_hid_event+0x1362/0x1ca0 [ 427.319571][T16164] hid_process_event+0x4be/0x620 [ 427.326149][T16164] hid_report_raw_event+0xe91/0x16d0 [ 427.333070][T16164] hid_input_report+0x43e/0x520 [ 427.339558][T16164] hid_irq_in+0x47e/0x6d0 [ 427.345525][T16164] __usb_hcd_giveback_urb+0x376/0x540 [ 427.352539][T16164] dummy_timer+0x85f/0x44c0 [ 427.358681][T16164] __hrtimer_run_queues+0x52c/0xc60 [ 427.365520][T16164] hrtimer_run_softirq+0x187/0x2b0 [ 427.372268][T16164] handle_softirqs+0x286/0x870 [ 427.378675][T16164] __irq_exit_rcu+0xca/0x1f0 [ 427.384902][T16164] irq_exit_rcu+0x9/0x30 [ 427.390789][T16164] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 427.398061][T16164] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 427.405674][T16164] __sanitizer_cov_trace_pc+0x8/0x70 [ 427.412595][T16164] raw_process_ep_io+0x6c2/0xbc0 [ 427.419163][T16164] raw_ioctl+0x23d1/0x3c90 [ 427.425217][T16164] __se_sys_ioctl+0xfc/0x170 [ 427.431440][T16164] do_syscall_64+0xfa/0xfa0 [ 427.437571][T16164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.445096][T16164] INITIAL USE at: [ 427.448977][T16164] lock_acquire+0x120/0x360 [ 427.455028][T16164] _raw_spin_lock+0x2e/0x40 [ 427.461084][T16164] evdev_pass_values+0xb9/0xbd0 [ 427.467488][T16164] evdev_events+0x1e6/0x340 [ 427.473535][T16164] input_pass_values+0x288/0x890 [ 427.480021][T16164] input_event_dispose+0x3e5/0x6b0 [ 427.486683][T16164] input_event+0x89/0xe0 [ 427.492498][T16164] hidinput_hid_event+0x1362/0x1ca0 [ 427.499267][T16164] hid_process_event+0x4be/0x620 [ 427.505769][T16164] hid_report_raw_event+0xe91/0x16d0 [ 427.512607][T16164] hid_input_report+0x43e/0x520 [ 427.519016][T16164] hid_irq_in+0x47e/0x6d0 [ 427.524903][T16164] __usb_hcd_giveback_urb+0x376/0x540 [ 427.531829][T16164] dummy_timer+0x85f/0x44c0 [ 427.537883][T16164] __hrtimer_run_queues+0x52c/0xc60 [ 427.544636][T16164] hrtimer_run_softirq+0x187/0x2b0 [ 427.551392][T16164] handle_softirqs+0x286/0x870 [ 427.557715][T16164] __irq_exit_rcu+0xca/0x1f0 [ 427.563872][T16164] irq_exit_rcu+0x9/0x30 [ 427.569671][T16164] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 427.576855][T16164] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 427.584383][T16164] __sanitizer_cov_trace_pc+0x8/0x70 [ 427.591217][T16164] raw_process_ep_io+0x6c2/0xbc0 [ 427.597701][T16164] raw_ioctl+0x23d1/0x3c90 [ 427.603666][T16164] __se_sys_ioctl+0xfc/0x170 [ 427.609805][T16164] do_syscall_64+0xfa/0xfa0 [ 427.615858][T16164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.623312][T16164] } [ 427.625821][T16164] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 427.633962][T16164] [ 427.633962][T16164] the dependencies between the lock to be acquired [ 427.633971][T16164] and SOFTIRQ-irq-unsafe lock: [ 427.647451][T16164] -> (tasklist_lock){.+.+}-{3:3} { [ 427.652743][T16164] HARDIRQ-ON-R at: [ 427.656889][T16164] lock_acquire+0x120/0x360 [ 427.663381][T16164] _raw_read_lock+0x36/0x50 [ 427.669870][T16164] __do_wait+0xde/0x740 [ 427.676007][T16164] do_wait+0x1f8/0x510 [ 427.682054][T16164] kernel_wait+0xab/0x170 [ 427.688367][T16164] call_usermodehelper_exec_work+0xbe/0x230 [ 427.696249][T16164] process_scheduled_works+0xae1/0x17b0 [ 427.703779][T16164] worker_thread+0x8a0/0xda0 [ 427.710399][T16164] kthread+0x711/0x8a0 [ 427.716449][T16164] ret_from_fork+0x4bc/0x870 [ 427.723042][T16164] ret_from_fork_asm+0x1a/0x30 [ 427.729790][T16164] SOFTIRQ-ON-R at: [ 427.733928][T16164] lock_acquire+0x120/0x360 [ 427.740415][T16164] _raw_read_lock+0x36/0x50 [ 427.746906][T16164] __do_wait+0xde/0x740 [ 427.753042][T16164] do_wait+0x1f8/0x510 [ 427.759095][T16164] kernel_wait+0xab/0x170 [ 427.765420][T16164] call_usermodehelper_exec_work+0xbe/0x230 [ 427.773310][T16164] process_scheduled_works+0xae1/0x17b0 [ 427.780855][T16164] worker_thread+0x8a0/0xda0 [ 427.787450][T16164] kthread+0x711/0x8a0 [ 427.793506][T16164] ret_from_fork+0x4bc/0x870 [ 427.800088][T16164] ret_from_fork_asm+0x1a/0x30 [ 427.806842][T16164] INITIAL USE at: [ 427.810904][T16164] lock_acquire+0x120/0x360 [ 427.817305][T16164] _raw_write_lock_irq+0xa2/0xf0 [ 427.824137][T16164] copy_process+0x224f/0x3c00 [ 427.830716][T16164] kernel_clone+0x21e/0x840 [ 427.837119][T16164] user_mode_thread+0xdd/0x140 [ 427.843783][T16164] rest_init+0x23/0x300 [ 427.849843][T16164] start_kernel+0x3ae/0x410 [ 427.856243][T16164] x86_64_start_reservations+0x24/0x30 [ 427.863607][T16164] x86_64_start_kernel+0x143/0x1c0 [ 427.870644][T16164] common_startup_64+0x13e/0x147 [ 427.877485][T16164] INITIAL READ USE at: [ 427.881977][T16164] lock_acquire+0x120/0x360 [ 427.888813][T16164] _raw_read_lock+0x36/0x50 [ 427.895652][T16164] __do_wait+0xde/0x740 [ 427.902137][T16164] do_wait+0x1f8/0x510 [ 427.908531][T16164] kernel_wait+0xab/0x170 [ 427.915187][T16164] call_usermodehelper_exec_work+0xbe/0x230 [ 427.923495][T16164] process_scheduled_works+0xae1/0x17b0 [ 427.931373][T16164] worker_thread+0x8a0/0xda0 [ 427.938297][T16164] kthread+0x711/0x8a0 [ 427.944702][T16164] ret_from_fork+0x4bc/0x870 [ 427.951629][T16164] ret_from_fork_asm+0x1a/0x30 [ 427.958728][T16164] } [ 427.961508][T16164] ... key at: [] tasklist_lock+0x18/0x40 [ 427.969407][T16164] ... acquired at: [ 427.973373][T16164] lock_acquire+0x120/0x360 [ 427.978040][T16164] _raw_read_lock+0x36/0x50 [ 427.982792][T16164] send_sigurg+0x12b/0x420 [ 427.987369][T16164] sk_send_sigurg+0x6c/0x2e0 [ 427.992121][T16164] queue_oob+0x420/0x4f0 [ 427.996523][T16164] unix_stream_sendmsg+0xc3f/0xdf0 [ 428.001800][T16164] __sock_sendmsg+0x21c/0x270 [ 428.006636][T16164] ____sys_sendmsg+0x52d/0x830 [ 428.011561][T16164] ___sys_sendmsg+0x21f/0x2a0 [ 428.016390][T16164] __sys_sendmmsg+0x227/0x430 [ 428.021218][T16164] __x64_sys_sendmmsg+0xa0/0xc0 [ 428.026226][T16164] do_syscall_64+0xfa/0xfa0 [ 428.030884][T16164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.036941][T16164] [ 428.039247][T16164] -> (&f_owner->lock){....}-{3:3} { [ 428.044532][T16164] INITIAL USE at: [ 428.048492][T16164] lock_acquire+0x120/0x360 [ 428.054721][T16164] _raw_write_lock_irq+0xa2/0xf0 [ 428.061373][T16164] __f_setown+0x67/0x370 [ 428.067342][T16164] f_setown+0x23a/0x300 [ 428.073222][T16164] do_fcntl+0x11d/0x1910 [ 428.079189][T16164] __se_sys_fcntl+0xc8/0x150 [ 428.085502][T16164] do_syscall_64+0xfa/0xfa0 [ 428.091734][T16164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.099364][T16164] INITIAL READ USE at: [ 428.103771][T16164] lock_acquire+0x120/0x360 [ 428.110437][T16164] _raw_read_lock_irqsave+0xaf/0x100 [ 428.117883][T16164] send_sigio+0x38/0x370 [ 428.124291][T16164] dnotify_handle_event+0x169/0x440 [ 428.131654][T16164] fsnotify+0x1671/0x1a80 [ 428.138149][T16164] __fsnotify_parent+0x3fe/0x540 [ 428.145244][T16164] vfs_copy_file_range+0xe1f/0x1370 [ 428.152601][T16164] __se_sys_copy_file_range+0x2fb/0x470 [ 428.160305][T16164] do_syscall_64+0xfa/0xfa0 [ 428.166966][T16164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.175021][T16164] } [ 428.177594][T16164] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 428.186521][T16164] ... acquired at: [ 428.190393][T16164] lock_acquire+0x120/0x360 [ 428.195059][T16164] _raw_read_lock_irqsave+0xaf/0x100 [ 428.200511][T16164] send_sigio+0x38/0x370 [ 428.204915][T16164] kill_fasync+0x24d/0x4d0 [ 428.209492][T16164] lease_break_callback+0x26/0x30 [ 428.214677][T16164] __break_lease+0x6a5/0x1620 [ 428.219506][T16164] do_dentry_open+0x8b7/0x13f0 [ 428.224428][T16164] vfs_open+0x3b/0x340 [ 428.228656][T16164] path_openat+0x2ee5/0x3830 [ 428.233398][T16164] do_filp_open+0x1fa/0x410 [ 428.238082][T16164] do_sys_openat2+0x121/0x1c0 [ 428.242920][T16164] __x64_sys_creat+0x8f/0xc0 [ 428.247760][T16164] do_syscall_64+0xfa/0xfa0 [ 428.252420][T16164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.258471][T16164] [ 428.260778][T16164] -> (&new->fa_lock){....}-{3:3} { [ 428.265886][T16164] INITIAL USE at: [ 428.269764][T16164] lock_acquire+0x120/0x360 [ 428.275820][T16164] _raw_write_lock_irq+0xa2/0xf0 [ 428.282306][T16164] fasync_remove_entry+0xf1/0x1c0 [ 428.288887][T16164] tty_fasync+0x13c/0x350 [ 428.294766][T16164] __fput+0x8a2/0xa70 [ 428.300297][T16164] task_work_run+0x1d4/0x260 [ 428.306440][T16164] exit_to_user_mode_loop+0xe9/0x130 [ 428.313274][T16164] do_syscall_64+0x2bd/0xfa0 [ 428.319413][T16164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.326856][T16164] INITIAL READ USE at: [ 428.331168][T16164] lock_acquire+0x120/0x360 [ 428.337655][T16164] _raw_read_lock_irqsave+0xaf/0x100 [ 428.344925][T16164] kill_fasync+0x199/0x4d0 [ 428.351332][T16164] splice_to_socket+0xe2a/0xf00 [ 428.358168][T16164] do_splice+0xc79/0x1660 [ 428.364485][T16164] __se_sys_splice+0x2e1/0x460 [ 428.371323][T16164] do_syscall_64+0xfa/0xfa0 [ 428.377817][T16164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.385692][T16164] } [ 428.388173][T16164] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 428.396840][T16164] ... acquired at: [ 428.400626][T16164] lock_acquire+0x120/0x360 [ 428.405292][T16164] _raw_read_lock_irqsave+0xaf/0x100 [ 428.410741][T16164] kill_fasync+0x199/0x4d0 [ 428.415318][T16164] evdev_pass_values+0x627/0xbd0 [ 428.420415][T16164] evdev_events+0x1e6/0x340 [ 428.425087][T16164] input_pass_values+0x288/0x890 [ 428.430178][T16164] input_event_dispose+0x330/0x6b0 [ 428.435450][T16164] input_inject_event+0x1dd/0x340 [ 428.440633][T16164] evdev_write+0x2fc/0x480 [ 428.445211][T16164] vfs_write+0x27e/0xb30 [ 428.449613][T16164] ksys_write+0x145/0x250 [ 428.454102][T16164] do_syscall_64+0xfa/0xfa0 [ 428.458769][T16164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.464817][T16164] [ 428.467124][T16164] [ 428.467124][T16164] stack backtrace: [ 428.473008][T16164] CPU: 1 UID: 0 PID: 16164 Comm: syz.1.4070 Not tainted syzkaller #0 PREEMPT(full) [ 428.473025][T16164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 428.473041][T16164] Call Trace: [ 428.473050][T16164] [ 428.473063][T16164] dump_stack_lvl+0x189/0x250 [ 428.473084][T16164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.473101][T16164] ? __pfx__printk+0x10/0x10 [ 428.473121][T16164] validate_chain+0x1f05/0x2140 [ 428.473154][T16164] __lock_acquire+0xab9/0xd20 [ 428.473177][T16164] ? kill_fasync+0x199/0x4d0 [ 428.473202][T16164] lock_acquire+0x120/0x360 [ 428.473223][T16164] ? kill_fasync+0x199/0x4d0 [ 428.473252][T16164] _raw_read_lock_irqsave+0xaf/0x100 [ 428.473277][T16164] ? kill_fasync+0x199/0x4d0 [ 428.473302][T16164] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 428.473327][T16164] ? do_raw_spin_lock+0x121/0x290 [ 428.473349][T16164] kill_fasync+0x199/0x4d0 [ 428.473373][T16164] ? kill_fasync+0x53/0x4d0 [ 428.473397][T16164] evdev_pass_values+0x627/0xbd0 [ 428.473421][T16164] ? evdev_pass_values+0x641/0xbd0 [ 428.473443][T16164] evdev_events+0x1e6/0x340 [ 428.473457][T16164] ? evdev_events+0x79/0x340 [ 428.473471][T16164] ? input_pass_values+0x8d/0x890 [ 428.473485][T16164] input_pass_values+0x288/0x890 [ 428.473501][T16164] ? input_handle_event+0x70c/0xf30 [ 428.473520][T16164] input_event_dispose+0x330/0x6b0 [ 428.473545][T16164] input_inject_event+0x1dd/0x340 [ 428.473565][T16164] ? input_inject_event+0xb6/0x340 [ 428.473584][T16164] evdev_write+0x2fc/0x480 [ 428.473599][T16164] ? futex_private_hash_put+0x245/0x280 [ 428.473614][T16164] ? __pfx_evdev_write+0x10/0x10 [ 428.473629][T16164] ? bpf_lsm_file_permission+0x9/0x20 [ 428.473648][T16164] ? security_file_permission+0x75/0x290 [ 428.473668][T16164] ? rw_verify_area+0x255/0x4d0 [ 428.473681][T16164] ? __lock_acquire+0xab9/0xd20 [ 428.473696][T16164] ? __pfx_evdev_write+0x10/0x10 [ 428.473712][T16164] vfs_write+0x27e/0xb30 [ 428.473728][T16164] ? __pfx_vfs_write+0x10/0x10 [ 428.473742][T16164] ? __fget_files+0x2a/0x420 [ 428.473758][T16164] ? __fget_files+0x2a/0x420 [ 428.473774][T16164] ? __fget_files+0x3a0/0x420 [ 428.473789][T16164] ? __fget_files+0x2a/0x420 [ 428.473807][T16164] ksys_write+0x145/0x250 [ 428.473821][T16164] ? __pfx_ksys_write+0x10/0x10 [ 428.473836][T16164] ? do_syscall_64+0xbe/0xfa0 [ 428.473850][T16164] do_syscall_64+0xfa/0xfa0 [ 428.473863][T16164] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.473876][T16164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.473890][T16164] ? clear_bhb_loop+0x60/0xb0 [ 428.473905][T16164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.473922][T16164] RIP: 0033:0x7fb63b18eec9 [ 428.473941][T16164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.473954][T16164] RSP: 002b:00007fb63c075038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 428.473970][T16164] RAX: ffffffffffffffda RBX: 00007fb63b3e5fa0 RCX: 00007fb63b18eec9 [ 428.473980][T16164] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 428.473990][T16164] RBP: 00007fb63b211f91 R08: 0000000000000000 R09: 0000000000000000 [ 428.473999][T16164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.474007][T16164] R13: 00007fb63b3e6038 R14: 00007fb63b3e5fa0 R15: 00007fb63b50fa28 [ 428.474022][T16164] [ 428.838157][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.865554][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.877868][ T10] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 428.887797][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.899661][ T10] usb 1-1: config 0 descriptor?? [ 429.311762][ T10] waterforce 0003:1044:7A4D.0040: unknown main item tag 0x0 [ 429.319164][ T10] waterforce 0003:1044:7A4D.0040: unknown main item tag 0x0 [ 429.327452][ T10] waterforce 0003:1044:7A4D.0040: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.0-1/input0 [ 429.399117][ T10] waterforce 0003:1044:7A4D.0040: fw version request failed with -38 [ 429.521776][ T10] usb 1-1: USB disconnect, device number 56