last executing test programs: 40.680869613s ago: executing program 2 (id=12739): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb) syz_clone3(&(0x7f00000003c0)={0x101040000, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0}, 0x58) 40.291604035s ago: executing program 2 (id=12746): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa270005d70000fe08060001"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, 0x0) 39.609289443s ago: executing program 2 (id=12760): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_io_uring_setup(0x893, &(0x7f00000003c0)={0x0, 0xaee1, 0x0, 0x0, 0x1a3}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0, 0x40000000, 0x1}) io_uring_enter(r1, 0x5361, 0xfffffffd, 0x2, 0x0, 0x0) 39.280290174s ago: executing program 2 (id=12764): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 38.308124484s ago: executing program 2 (id=12777): syz_open_dev$hiddev(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_UNLINKAT={0x24, 0x44, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 37.755888764s ago: executing program 2 (id=12780): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002b80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000002c40)="f0", 0x1}], 0x1}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0xe84, @remote, 0x6}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000140)=@assoc_value, &(0x7f0000000300)=0x8) 37.325651884s ago: executing program 32 (id=12780): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002b80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000002c40)="f0", 0x1}], 0x1}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0xe84, @remote, 0x6}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000140)=@assoc_value, &(0x7f0000000300)=0x8) 7.619661121s ago: executing program 1 (id=13080): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000480)={0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0xc, &(0x7f0000000000)={0x40, 0xe, 0x2, {0x2, 0x3}}, 0x0}, 0x0) 4.799721173s ago: executing program 0 (id=13133): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d2d46f374a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 4.579786918s ago: executing program 1 (id=13138): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000022c0)='dctcp\x00', 0x51) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 3.9797534s ago: executing program 3 (id=13147): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80045b09, 0x0) 3.859660344s ago: executing program 0 (id=13148): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x8) 3.808712363s ago: executing program 0 (id=13149): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000680)={[0x3000, 0xd000, 0x2000, 0xeeee8000], 0xffffffffffffffff, 0x10, 0x3}) 3.664934109s ago: executing program 0 (id=13151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20a00, 0x40) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2, 0x10, 0x1, r2}) 3.619726461s ago: executing program 1 (id=13152): openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x2020, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x4c, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2040}, 0x1}) io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 3.559169252s ago: executing program 0 (id=13153): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.37983616s ago: executing program 1 (id=13155): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x2, @random="27eb266b830b", 'macvlan0\x00'}}) 3.264293177s ago: executing program 1 (id=13157): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x2, @mcast1={0xff, 0x7}, 0x3ff}}, {{0xa, 0x4e21, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) syz_usb_connect(0x0, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902"], 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 2.37108715s ago: executing program 5 (id=13160): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x5fa4, 0xfffff5a7, 0x1, 0x0, [{0x1, 0x81, 0x1, '\x00', 0x4}, {0xfe, 0x3, 0x0, '\x00', 0x6}, {0x7, 0xfc, 0x3, '\x00', 0x9}, {0x4e, 0xe, 0x1, '\x00', 0x86}, {0x9, 0x0, 0x6, '\x00', 0x2}, {0xf, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0x9, 0x50, '\x00', 0x6}, {0x8, 0x9, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0xff}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3, '\x00', 0x3}, {0x2, 0x9, 0xa, '\x00', 0x7f}, {0x45, 0x50, 0xa}, {0xe, 0xfb, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0x9}, {0x7, 0x4, 0xff, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x7f}, {0xa, 0x0, 0xc8, '\x00', 0x6}, {0x0, 0x60, 0x4, '\x00', 0x12}, {0xf, 0x8, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x17}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x7}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 2.299464489s ago: executing program 5 (id=13161): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb100c117080081004803", 0x10000, 0xffffffffffffc117, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 2.258552427s ago: executing program 5 (id=13162): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80140007"], 0x94}}, 0x20008841) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0xd) 1.987808999s ago: executing program 3 (id=13163): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES64=r0], 0x4c}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.987680789s ago: executing program 3 (id=13164): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f000075f000/0x2000)=nil, 0x930, 0x80000e, 0x12, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) 1.820458729s ago: executing program 3 (id=13165): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 1.367605902s ago: executing program 5 (id=13166): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="12040500d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x8864, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.231951742s ago: executing program 5 (id=13167): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r2, 0x0, 0x0, 0xa, 0x1ff, 0x1}) 1.051456674s ago: executing program 3 (id=13168): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0xd8a, &(0x7f0000240000/0x1000)=nil, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.011038748s ago: executing program 5 (id=13169): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000280)=""/239, 0xef) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="b6", 0x1}], 0x1) syz_usb_disconnect(r0) 939.030019ms ago: executing program 3 (id=13170): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x6, "cc17fc47a9ae"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000140)={0x0, 0x11, 0x2, "d05b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 634.042995ms ago: executing program 4 (id=13172): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 592.772406ms ago: executing program 4 (id=13173): unshare(0x2040600) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1}) 415.830205ms ago: executing program 4 (id=13174): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0x1}, {}, @result}], 0x1c) 398.555621ms ago: executing program 0 (id=13175): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008031, 0xffffffffffffffff, 0x30b8b000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) syz_pidfd_open(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10) 319.476775ms ago: executing program 4 (id=13176): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x0, 0x85, 0x5d}, 0x2c) 92.204152ms ago: executing program 1 (id=13177): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000007000000000001"], 0x50) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x800) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 91.385478ms ago: executing program 4 (id=13178): r0 = syz_io_uring_setup(0x7667, &(0x7f0000000100)={0x0, 0x0, 0x13580, 0x0, 0x184}, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r3}) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_uring_enter(r0, 0x6256, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=13179): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x8) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000001200)=""/4110, &(0x7f00000000c0)=0x100e) kernel console output (not intermixed with test programs): om: crng reseeded on system resumption [ 852.719264][T17487] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 852.908199][T17487] usb 3-1: Using ep0 maxpacket: 16 [ 852.921473][T17487] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.942081][T17487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 852.966567][T31092] netlink: 268 bytes leftover after parsing attributes in process `syz.1.11399'. [ 852.987213][T17487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 853.017812][T17487] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 853.048246][T17487] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 853.097188][T17487] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 853.111863][T17487] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 853.120430][T17487] usb 3-1: Manufacturer: syz [ 853.127628][T17487] usb 3-1: config 0 descriptor?? [ 853.396236][T31103] dlm: non-version read from control device 34 [ 853.446531][T17487] rc_core: IR keymap rc-hauppauge not found [ 853.469661][T17487] Registered IR keymap rc-empty [ 853.474715][T17487] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 853.536431][T17487] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 853.581251][T17487] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 853.633650][T17487] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input106 [ 853.679471][T17487] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 853.732545][T17487] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 853.772716][T17487] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 853.809206][T17487] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 853.839227][T17487] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 853.869337][T17487] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 853.911052][T17487] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 853.959590][T17487] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 853.991053][T17487] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 854.019181][T17487] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 854.051919][T17487] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 854.085365][T17487] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 854.097705][T31121] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 854.115587][T17487] usb 3-1: USB disconnect, device number 124 [ 854.396993][T31132] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_hsr, syncid = 0, id = 0 [ 854.567920][T31134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11416'. [ 854.808549][T31140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11418'. [ 855.498420][ T52] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 855.671956][ T52] usb 4-1: Using ep0 maxpacket: 8 [ 855.679331][ T52] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 855.689645][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.730492][ T52] pvrusb2: Hardware description: Terratec Grabster AV400 [ 855.737586][ T52] pvrusb2: ********** [ 855.758376][ T52] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 855.782167][ T52] pvrusb2: Important functionality might not be entirely working. [ 855.799385][ T52] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 855.837673][ T52] pvrusb2: ********** [ 855.936476][ T2341] pvrusb2: Invalid write control endpoint [ 856.094725][ T2341] pvrusb2: Invalid write control endpoint [ 856.123522][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 856.147478][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 856.163176][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 856.184092][ T2341] pvrusb2: Device being rendered inoperable [ 856.192504][ T5889] usb 4-1: USB disconnect, device number 3 [ 856.212335][ T2341] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 856.233559][ T2341] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 856.262145][ T2341] pvrusb2: Attached sub-driver cx25840 [ 856.267659][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 856.285575][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 856.521339][T17487] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 856.681214][T17487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.721751][T17487] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 856.742848][T17487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.766345][T17487] usb 3-1: config 0 descriptor?? [ 857.009289][T31202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.040762][T31202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.101183][T17487] usbhid 3-1:0.0: can't add hid device: -71 [ 857.107316][T17487] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 857.151286][T17487] usb 3-1: USB disconnect, device number 125 [ 857.649856][T17487] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 857.811756][T17487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 857.830505][T17487] usb 3-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 857.846680][T17487] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.865008][T17487] usb 3-1: Product: syz [ 857.875985][T17487] usb 3-1: Manufacturer: syz [ 857.886125][T17487] usb 3-1: SerialNumber: syz [ 857.904356][T17487] usb 3-1: config 0 descriptor?? [ 857.940826][T17487] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input107 [ 857.983795][T31245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11465'. [ 858.035295][T31245] vlan4: entered allmulticast mode [ 858.061384][T31245] vlan0: entered allmulticast mode [ 858.077773][T31245] veth0_vlan: entered allmulticast mode [ 858.231049][T17487] usb 3-1: USB disconnect, device number 126 [ 858.588273][ T976] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 858.758191][ T976] usb 4-1: Using ep0 maxpacket: 32 [ 858.775478][ T976] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 858.818302][ T976] usb 4-1: config 0 has no interface number 0 [ 858.833072][ T976] usb 4-1: config 0 interface 12 has no altsetting 0 [ 858.859549][ T976] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 858.899129][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.907158][ T976] usb 4-1: Product: syz [ 858.927465][ T976] usb 4-1: Manufacturer: syz [ 858.933873][ T976] usb 4-1: SerialNumber: syz [ 858.949382][ T976] usb 4-1: config 0 descriptor?? [ 858.970762][T31270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11477'. [ 859.640815][T31287] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 859.658485][T31287] syzkaller1: linktype set to 776 [ 859.771521][ T976] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 859.791087][ T976] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 859.822734][ T976] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 859.854410][ T976] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 859.886157][ T976] usb 4-1: USB disconnect, device number 4 [ 859.963930][T31298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11489'. [ 859.989323][T31298] netlink: 'syz.2.11489': attribute type 5 has an invalid length. [ 860.634106][T31318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11496'. [ 860.645997][T31318] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11496'. [ 860.674400][T31318] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11496'. [ 861.954593][T31356] pim6reg: entered allmulticast mode [ 861.986131][T31356] pim6reg: left allmulticast mode [ 862.108311][T25813] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 862.213511][T31364] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11517'. [ 862.261594][T31364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11517'. [ 862.262077][T25813] usb 5-1: Using ep0 maxpacket: 32 [ 862.303309][T25813] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 862.320536][T25813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.330049][T31368] netlink: 136 bytes leftover after parsing attributes in process `syz.0.11519'. [ 862.356725][T25813] usb 5-1: config 0 descriptor?? [ 862.383373][T25813] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 862.388156][T31368] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 862.579734][T31377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11523'. [ 863.093243][T31393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11529'. [ 863.189318][ T30] audit: type=1800 audit(1746091378.687:4718): pid=31397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.11530" name="bus" dev="tmpfs" ino=9508 res=0 errno=0 [ 863.215215][T25813] gspca_nw80x: reg_r err -71 [ 863.222805][T25813] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 863.262170][T25813] usb 5-1: USB disconnect, device number 116 [ 864.711576][ T30] audit: type=1326 audit(1746091380.207:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31460 comm="syz.1.11560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 864.761577][ T30] audit: type=1326 audit(1746091380.217:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31460 comm="syz.1.11560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 864.840240][ T30] audit: type=1326 audit(1746091380.237:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31460 comm="syz.1.11560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 864.896994][ T30] audit: type=1326 audit(1746091380.237:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31460 comm="syz.1.11560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 864.927385][T31466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11562'. [ 864.960042][ T30] audit: type=1326 audit(1746091380.237:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31460 comm="syz.1.11560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 865.013062][ T30] audit: type=1326 audit(1746091380.237:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31460 comm="syz.1.11560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 865.083316][ T30] audit: type=1326 audit(1746091380.257:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31460 comm="syz.1.11560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 865.169777][ T30] audit: type=1326 audit(1746091380.257:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31460 comm="syz.1.11560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 865.229787][ T30] audit: type=1326 audit(1746091380.257:4727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31460 comm="syz.1.11560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=378 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 865.761421][ T976] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 865.928138][ T976] usb 4-1: Using ep0 maxpacket: 16 [ 865.937440][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 865.980676][ T976] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 865.998612][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.006648][ T976] usb 4-1: Product: syz [ 866.024850][ T976] usb 4-1: Manufacturer: syz [ 866.031060][ T976] usb 4-1: SerialNumber: syz [ 866.042764][ T976] usb 4-1: config 0 descriptor?? [ 866.053424][ T976] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 866.068345][ T976] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 866.657026][ T976] em28xx 4-1:0.0: chip ID is em2800 [ 866.922867][ T976] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 866.934518][ T976] em28xx 4-1:0.0: board has no eeprom [ 866.999139][ T976] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 867.007041][ T976] em28xx 4-1:0.0: dvb set to bulk mode. [ 867.013039][T17487] em28xx 4-1:0.0: Binding DVB extension [ 867.032024][ T976] usb 4-1: USB disconnect, device number 5 [ 867.067641][ T976] em28xx 4-1:0.0: Disconnecting em28xx [ 867.100520][T31560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11603'. [ 867.105293][T17487] em28xx 4-1:0.0: Registering input extension [ 867.129214][ T976] em28xx 4-1:0.0: Closing input extension [ 867.153380][ T976] em28xx 4-1:0.0: Freeing device [ 867.517257][T31571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11608'. [ 867.530100][T31571] netlink: 452 bytes leftover after parsing attributes in process `syz.3.11608'. [ 867.539457][T31571] netlink: 452 bytes leftover after parsing attributes in process `syz.3.11608'. [ 868.195918][T31596] input: syz0 as /devices/virtual/input/input111 [ 868.463763][T31606] sctp: [Deprecated]: syz.3.11624 (pid 31606) Use of int in maxseg socket option. [ 868.463763][T31606] Use struct sctp_assoc_value instead [ 868.869026][T31619] batadv_slave_0: entered promiscuous mode [ 868.908527][T31619] batadv_slave_0: left promiscuous mode [ 870.022907][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.029401][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.471183][T31661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11648'. [ 871.298506][ T976] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 871.459314][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 871.479111][ T976] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 871.497419][ T976] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 871.534688][ T976] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 871.557813][ T976] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 871.573450][ T976] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 871.591944][ T976] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 871.619710][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.883502][ T976] usb 4-1: GET_CAPABILITIES returned 0 [ 871.893536][ T976] usbtmc 4-1:16.0: can't read capabilities [ 872.096420][T17487] usb 4-1: USB disconnect, device number 6 [ 872.368167][T11400] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 872.408273][T25813] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 872.519868][T11400] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 872.529245][T11400] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.541224][T11400] usb 3-1: config 0 descriptor?? [ 872.563367][T25813] usb 5-1: unable to get BOS descriptor or descriptor too short [ 872.573108][T25813] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 872.580967][T25813] usb 5-1: can't read configurations, error -71 [ 872.955014][T11400] [drm:udl_init] *ERROR* Selecting channel failed [ 872.980824][T11400] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 873.000710][T11400] [drm] Initialized udl on minor 2 [ 873.009020][T11400] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 873.017948][T11400] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 873.027338][ T5889] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 873.035777][ T5889] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 873.045322][T11400] usb 3-1: USB disconnect, device number 127 [ 876.700352][T31826] loop6: detected capacity change from 0 to 524287999 [ 877.574070][T31862] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 878.218537][T25813] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 878.364120][T31885] input: syz0 as /devices/virtual/input/input112 [ 878.419336][T25813] usb 5-1: Using ep0 maxpacket: 32 [ 878.431881][T25813] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 878.448436][T25813] usb 5-1: config 0 has no interface number 0 [ 878.458229][ T5889] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 878.476032][T25813] usb 5-1: config 0 interface 12 has no altsetting 0 [ 878.486843][T25813] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 878.496630][T25813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.505847][T25813] usb 5-1: Product: syz [ 878.510941][T25813] usb 5-1: Manufacturer: syz [ 878.515564][T25813] usb 5-1: SerialNumber: syz [ 878.524200][T25813] usb 5-1: config 0 descriptor?? [ 878.618595][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 878.633931][ T5889] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 878.654164][ T5889] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 878.675133][ T5889] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 878.686417][ T5889] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 878.703421][ T5889] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 878.712948][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.955721][ T5889] usb 4-1: GET_CAPABILITIES returned 0 [ 878.968804][ T5889] usbtmc 4-1:16.0: can't read capabilities [ 879.163282][T25813] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 879.180425][T25813] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 879.187776][T25813] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 879.210734][T25813] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 879.227072][ T5889] usb 4-1: USB disconnect, device number 7 [ 879.267928][T25813] usb 5-1: USB disconnect, device number 119 [ 879.705772][T31921] kvm: user requested TSC rate below hardware speed [ 879.990796][T31933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11769'. [ 881.348681][T31994] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 882.536401][T32058] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 882.786717][T32072] input: syz0 as /devices/virtual/input/input113 [ 882.834240][ T5885] udevd[5885]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 882.864887][ T5885] udevd[5885]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 882.907816][T32076] usb usb7: usbfs: process 32076 (syz.1.11834) did not claim interface 0 before use [ 883.354698][T17487] hid-generic C98F:0003:0000.00BD: unknown main item tag 0x0 [ 883.368782][T17487] hid-generic C98F:0003:0000.00BD: unknown main item tag 0x0 [ 883.399693][T17487] hid-generic C98F:0003:0000.00BD: hidraw0: HID v0.00 Device [syz0] on syz1 [ 883.856032][T32108] macvlan0: entered allmulticast mode [ 883.891736][T32108] veth1_to_team: entered allmulticast mode [ 883.902019][T32108] veth1_to_team: left allmulticast mode [ 884.398205][ T5889] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 884.548604][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 884.563016][ T5889] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 884.575965][ T5889] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 884.587511][ T5889] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 884.602604][ T5889] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 884.616232][ T5889] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 884.630298][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.851689][ T5889] usb 4-1: GET_CAPABILITIES returned 0 [ 884.867601][ T5889] usbtmc 4-1:16.0: can't read capabilities [ 885.057262][ T5889] usb 4-1: USB disconnect, device number 8 [ 885.758405][T32172] bridge0: entered promiscuous mode [ 885.772623][T32172] bridge0: port 3(macsec2) entered blocking state [ 885.788495][T32172] bridge0: port 3(macsec2) entered disabled state [ 885.795253][T32172] macsec2: entered allmulticast mode [ 885.805291][T32172] bridge0: entered allmulticast mode [ 885.832049][T32172] macsec2: left allmulticast mode [ 885.837636][T32172] bridge0: left allmulticast mode [ 885.859602][T32172] bridge0: left promiscuous mode [ 886.953871][T32217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11899'. [ 887.260622][T32231] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 887.270734][T32228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11903'. [ 887.624053][T25813] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 887.780980][T25813] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 887.806141][T25813] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 887.827743][T25813] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 887.841136][T25813] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 887.854751][T25813] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 887.878112][T25813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.893651][T25813] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 887.903382][T25813] usb 3-1: invalid MIDI out EP 0 [ 887.975686][ T5952] udevd[5952]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 888.006491][ T5952] udevd[5952]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 888.023730][T25813] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 888.039118][T17487] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 888.155515][ T52] usb 3-1: USB disconnect, device number 2 [ 888.200000][T17487] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 888.222987][T17487] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 888.232411][T17487] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.242536][T17487] usb 5-1: Product: syz [ 888.246730][T17487] usb 5-1: Manufacturer: syz [ 888.263297][T17487] usb 5-1: SerialNumber: syz [ 888.486404][T17487] usb 5-1: selecting invalid altsetting 1 [ 888.689078][T17487] LME2510(C): Firmware Status: 06 03 47 00 00 00 [ 888.689139][T17487] usb 5-1: dvb_usb_v2: found a 'DM04_LME2510C_DVB-S RS2000' in warm state [ 888.721691][T17487] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 888.740930][T17487] usb 5-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 15) [ 888.763684][T17487] dvbdev: DVB: registering new adapter (DM04_LME2510C_DVB-S RS2000) [ 888.778350][T17487] usb 5-1: media controller created [ 888.785991][T17487] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 888.834888][T17487] DVB: Unable to find symbol m88rs2000_attach() [ 888.842786][T17487] LME2510(C): DM04/QQBOX Not Powered up or not Supported [ 888.842815][T17487] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 888.912045][T17487] usb 5-1: USB disconnect, device number 120 [ 888.967468][T32298] kvm: kvm [32297]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 889.180606][T32305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11937'. [ 890.310738][T25813] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 890.480011][T25813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.499313][T25813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.518186][T25813] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 890.536517][T25813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.563911][T25813] usb 4-1: config 0 descriptor?? [ 890.602889][T32366] vivid-000: disconnect [ 890.635646][T32365] vivid-000: reconnect [ 891.038871][T25813] hid-steam 0003:28DE:1142.00BE: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 891.118306][T25813] hid-steam 0003:28DE:1142.00BE: Steam wireless receiver connected [ 891.178246][T25813] hid-steam 0003:28DE:1142.00BF: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 891.252396][T32393] kvm: kvm [32392]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x40000004) = 0x0 [ 891.282287][T17487] usb 4-1: USB disconnect, device number 9 [ 891.316058][T17487] hid-steam 0003:28DE:1142.00BE: Steam wireless receiver disconnected [ 891.656866][T32411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11986'. [ 891.904023][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 891.904041][ T30] audit: type=1326 audit(1746091407.407:4730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32421 comm="syz.3.11991" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x0 [ 892.016523][T17487] hid-generic 00A0:000B:0007.00C0: unknown main item tag 0x0 [ 892.049297][T17487] hid-generic 00A0:000B:0007.00C0: unknown main item tag 0x0 [ 892.061911][T17487] hid-generic 00A0:000B:0007.00C0: unknown main item tag 0x0 [ 892.079062][T17487] hid-generic 00A0:000B:0007.00C0: unknown main item tag 0x0 [ 892.098359][T17487] hid-generic 00A0:000B:0007.00C0: unknown main item tag 0x0 [ 892.105793][T17487] hid-generic 00A0:000B:0007.00C0: unknown main item tag 0x0 [ 892.138743][T17487] hid-generic 00A0:000B:0007.00C0: unknown main item tag 0x0 [ 892.146188][T17487] hid-generic 00A0:000B:0007.00C0: unknown main item tag 0x0 [ 892.168740][T17487] hid-generic 00A0:000B:0007.00C0: unknown main item tag 0x0 [ 892.176168][T17487] hid-generic 00A0:000B:0007.00C0: unknown main item tag 0x0 [ 892.195989][T17487] hid-generic 00A0:000B:0007.00C0: unknown main item tag 0x0 [ 892.218168][T17487] hid-generic 00A0:000B:0007.00C0: unknown main item tag 0x0 [ 892.225608][T17487] hid-generic 00A0:000B:0007.00C0: unknown main item tag 0x0 [ 892.243809][T17487] hid-generic 00A0:000B:0007.00C0: unknown main item tag 0x0 [ 892.258716][T17487] hid-generic 00A0:000B:0007.00C0: unknown main item tag 0x0 [ 892.285488][T32431] netlink: 6 bytes leftover after parsing attributes in process `syz.2.11995'. [ 892.296070][T17487] hid-generic 00A0:000B:0007.00C0: hidraw0: HID v0.05 Device [syz1] on syz0 [ 892.309647][T32431] netlink: 6 bytes leftover after parsing attributes in process `syz.2.11995'. [ 893.578184][T25813] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 893.692283][T32471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12012'. [ 893.740144][T25813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.763091][T25813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.782087][T25813] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 893.811234][T25813] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 893.823970][T25813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.835685][T25813] usb 4-1: config 0 descriptor?? [ 894.252965][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.260882][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.269125][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.276634][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.284477][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.292013][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.299881][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.307279][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.315141][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.322581][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.330263][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.337672][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.345998][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.353505][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.358308][T17487] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 894.361279][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.378004][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.385597][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.393496][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.401320][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.409131][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.416653][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.424888][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.432745][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.440333][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.447768][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.455378][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.464899][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.472628][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.481360][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.489216][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.496636][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.505144][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.512656][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.528181][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.528813][T17487] usb 5-1: Using ep0 maxpacket: 16 [ 894.538122][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.548403][T17487] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 894.548430][T17487] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.548449][T17487] usb 5-1: Product: syz [ 894.548465][T17487] usb 5-1: Manufacturer: syz [ 894.548479][T17487] usb 5-1: SerialNumber: syz [ 894.581126][T17487] r8152-cfgselector 5-1: Unknown version 0x0000 [ 894.587749][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.595376][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.595942][T17487] r8152-cfgselector 5-1: config 0 descriptor?? [ 894.603223][T25813] plantronics 0003:047F:FFFF.00C1: unknown main item tag 0x0 [ 894.604163][T25813] plantronics 0003:047F:FFFF.00C1: No inputs registered, leaving [ 894.653474][T25813] plantronics 0003:047F:FFFF.00C1: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 894.700813][T25813] usb 4-1: USB disconnect, device number 10 [ 894.784030][T32489] input: syz1 as /devices/virtual/input/input114 [ 894.844845][T32485] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 894.860442][T17487] r8152-cfgselector 5-1: Unknown version 0x0000 [ 894.869948][T17487] r8152-cfgselector 5-1: bad CDC descriptors [ 894.882870][T17487] r8152-cfgselector 5-1: USB disconnect, device number 121 [ 895.058394][ T5889] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 895.215608][ T30] audit: type=1326 audit(1746091410.717:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32498 comm="syz.3.12026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7fc00000 [ 895.218342][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 895.259839][ T5889] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 895.271355][ T30] audit: type=1326 audit(1746091410.767:4732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32508 comm="syz.0.12030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 895.274549][ T5889] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 895.330775][ T30] audit: type=1326 audit(1746091410.767:4733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32508 comm="syz.0.12030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 895.332931][ T5889] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 895.395138][ T5889] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 895.398884][ T30] audit: type=1326 audit(1746091410.777:4734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32508 comm="syz.0.12030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 895.414520][ T5889] usb 3-1: config 1 has no interface number 0 [ 895.447546][ T30] audit: type=1326 audit(1746091410.777:4735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32508 comm="syz.0.12030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 895.470714][ T5889] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 895.477810][ T30] audit: type=1326 audit(1746091410.777:4736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32508 comm="syz.0.12030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 895.498130][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.505822][ T30] audit: type=1326 audit(1746091410.777:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32508 comm="syz.0.12030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 895.536529][ T30] audit: type=1326 audit(1746091410.777:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32508 comm="syz.0.12030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 895.582652][ T5889] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 895.613046][ T30] audit: type=1326 audit(1746091410.777:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32508 comm="syz.0.12030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 895.785143][ T5889] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 895.785508][ T5889] snd_usb_pod 3-1:1.1: invalid control EP [ 895.785525][ T5889] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 895.785712][ T5889] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 895.786299][ T5889] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 896.059876][ T5889] usb 3-1: USB disconnect, device number 3 [ 896.778775][T17487] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 896.938900][T17487] usb 5-1: Using ep0 maxpacket: 16 [ 896.959902][T17487] usb 5-1: config 0 has no interfaces? [ 896.971397][T17487] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 896.991108][T17487] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 897.039285][T17487] usb 5-1: Manufacturer: syz [ 897.055176][T17487] usb 5-1: config 0 descriptor?? [ 897.156563][T32564] syzkaller1: entered promiscuous mode [ 897.173781][T32564] syzkaller1: entered allmulticast mode [ 897.326956][T17487] usb 5-1: USB disconnect, device number 122 [ 897.466824][T32574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12060'. [ 898.334456][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 898.334472][ T30] audit: type=1326 audit(1746091413.837:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32609 comm="syz.0.12075" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f36539 code=0x0 [ 899.720851][T32656] ALSA: mixer_oss: invalid OSS volume '' [ 899.813675][T32659] netlink: 'syz.4.12096': attribute type 4 has an invalid length. [ 900.518207][T17487] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 900.558547][T25813] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 900.720186][T25813] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 900.733794][T25813] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 900.746667][T25813] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 900.756102][T25813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.764554][T25813] usb 5-1: Product: syz [ 900.768908][T25813] usb 5-1: Manufacturer: syz [ 900.773529][T25813] usb 5-1: SerialNumber: syz [ 900.789093][T25813] usb 5-1: config 0 descriptor?? [ 901.179182][T17487] usb 4-1: unable to get BOS descriptor or descriptor too short [ 901.198659][T17487] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 901.206296][T17487] usb 4-1: can't read configurations, error -71 [ 901.263640][T32698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12114'. [ 901.404506][T25813] mos7840 5-1:0.0: required endpoints missing [ 901.429869][T25813] usb 5-1: USB disconnect, device number 123 [ 902.088346][ T976] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 902.240575][ T976] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 902.261045][ T976] usb 3-1: config 0 has no interface number 0 [ 902.281212][ T976] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 902.304653][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.325877][ T976] usb 3-1: Product: syz [ 902.332687][ T976] usb 3-1: Manufacturer: syz [ 902.345653][ T976] usb 3-1: SerialNumber: syz [ 902.356374][ T976] usb 3-1: config 0 descriptor?? [ 902.369634][ T976] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 903.194373][ T976] gspca_spca1528: reg_w err -71 [ 903.231292][ T976] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 903.274136][ T976] usb 3-1: USB disconnect, device number 4 [ 903.553226][T32764] input: syz1 as /devices/virtual/input/input115 [ 903.631416][T32766] xfrm1: entered allmulticast mode [ 903.778606][ T300] syzkaller1: entered promiscuous mode [ 903.784440][ T300] syzkaller1: entered allmulticast mode [ 903.962401][ T307] Invalid logical block size (1) [ 904.043631][ T311] pim6reg: entered allmulticast mode [ 904.064596][ T311] pim6reg: left allmulticast mode [ 904.317435][ T322] kvm: kvm [319]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x23 [ 904.456084][ T327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12155'. [ 904.540402][ T329] netlink: 'syz.3.12156': attribute type 10 has an invalid length. [ 904.562201][ T329] : entered promiscuous mode [ 905.157301][ T345] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 906.998982][T17487] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 907.161190][T17487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 907.175146][T17487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 907.193613][T17487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 907.209424][T17487] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 907.219515][T17487] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.227586][T17487] usb 4-1: Product: syz [ 907.234379][T17487] usb 4-1: Manufacturer: syz [ 907.239361][T17487] usb 4-1: SerialNumber: syz [ 907.248505][T17487] usb 4-1: config 0 descriptor?? [ 907.465310][T17487] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 907.675904][T17487] usb 4-1: USB disconnect, device number 13 [ 907.810125][T25813] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 907.978130][T25813] usb 3-1: Using ep0 maxpacket: 16 [ 907.985198][T25813] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 908.006498][T25813] usb 3-1: config 0 has no interface number 0 [ 908.015470][T25813] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.026960][T25813] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.058505][T25813] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 908.067660][T25813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.090978][T25813] usb 3-1: config 0 descriptor?? [ 908.091683][ T425] openvswitch: netlink: IPv4 tun info is not correct [ 908.505309][ T30] audit: type=1326 audit(1746091424.007:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=438 comm="syz.3.12200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 908.564717][ T30] audit: type=1326 audit(1746091424.017:4748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=438 comm="syz.3.12200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 908.622466][ T30] audit: type=1326 audit(1746091424.037:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=438 comm="syz.3.12200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 908.657905][ T30] audit: type=1326 audit(1746091424.037:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=438 comm="syz.3.12200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 908.685029][ T30] audit: type=1326 audit(1746091424.037:4751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=438 comm="syz.3.12200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 908.711857][ T30] audit: type=1326 audit(1746091424.037:4752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=438 comm="syz.3.12200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=438 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 908.738511][T25813] uclogic 0003:28BD:0071.00C2: pen parameters not found [ 908.740501][ T30] audit: type=1326 audit(1746091424.037:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=438 comm="syz.3.12200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 908.749150][T25813] uclogic 0003:28BD:0071.00C2: interface is invalid, ignoring [ 908.777685][ T30] audit: type=1326 audit(1746091424.037:4754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=438 comm="syz.3.12200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 908.855355][ T30] audit: type=1326 audit(1746091424.037:4755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=438 comm="syz.3.12200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 909.003762][ T450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12205'. [ 909.024255][T25813] usb 3-1: USB disconnect, device number 5 [ 909.056391][ T450] netlink: 'syz.1.12205': attribute type 1 has an invalid length. [ 909.087536][ T450] netlink: 'syz.1.12205': attribute type 2 has an invalid length. [ 909.578276][T25813] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 909.689519][T17487] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 909.697523][ T468] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12214'. [ 909.759496][T25813] usb 5-1: Using ep0 maxpacket: 16 [ 909.773377][T25813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.808079][T25813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.817878][T25813] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 909.832271][T25813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.849484][T25813] usb 5-1: config 0 descriptor?? [ 909.856233][T17487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.883492][T17487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.901083][ T474] netlink: 'syz.1.12216': attribute type 10 has an invalid length. [ 909.916614][T17487] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 909.934530][T17487] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 909.934894][ T474] bond0: entered promiscuous mode [ 909.950516][T17487] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.966719][ T474] bond_slave_0: entered promiscuous mode [ 910.015418][T17487] usb 4-1: config 0 descriptor?? [ 910.025067][ T474] bond_slave_1: entered promiscuous mode [ 910.277055][ T490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12223'. [ 910.291696][ T490] netlink: 'syz.0.12223': attribute type 7 has an invalid length. [ 910.305123][ T490] netlink: 'syz.0.12223': attribute type 8 has an invalid length. [ 910.313880][ T490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12223'. [ 910.342905][T25813] aquacomputer_d5next 0003:0C70:F00A.00C3: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.4-1/input0 [ 910.461050][T17487] plantronics 0003:047F:FFFF.00C4: reserved main item tag 0xd [ 910.494733][T17487] plantronics 0003:047F:FFFF.00C4: No inputs registered, leaving [ 910.533986][T17487] plantronics 0003:047F:FFFF.00C4: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 910.790323][T17487] usb 4-1: USB disconnect, device number 14 [ 910.811371][ T30] audit: type=1326 audit(1746091426.317:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=505 comm="syz.1.12231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x7ffc0000 [ 912.198336][ T976] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 912.268312][ T5889] usb 5-1: USB disconnect, device number 124 [ 912.358685][ T552] loop2: detected capacity change from 0 to 7 [ 912.375654][ T976] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 912.399900][ T976] usb 3-1: config 179 has no interface number 0 [ 912.417541][ T976] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 912.434884][ T552] Dev loop2: unable to read RDB block 7 [ 912.448181][ T976] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 912.470777][ T552] loop2: AHDI p1 p2 p3 p4 [ 912.473950][ T976] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 912.475241][ T552] loop2: partition table partially beyond EOD, truncated [ 912.493295][ T976] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 912.508758][ T552] loop2: p1 start 1601398130 is beyond EOD, truncated [ 912.515572][ T552] loop2: p2 start 1702059890 is beyond EOD, truncated [ 912.539362][ T552] loop2: p3 size 150995200 extends beyond EOD, truncated [ 912.546546][ T976] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 912.570654][ T976] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 912.635419][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.674185][ T5885] udevd[5885]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 912.698536][ T539] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 912.710240][ T539] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 912.888282][T17487] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 913.058706][T17487] usb 5-1: Using ep0 maxpacket: 16 [ 913.094145][T17487] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 913.137496][T17487] usb 5-1: config 0 has no interface number 0 [ 913.160057][ T5889] usb 3-1: USB disconnect, device number 6 [ 913.160111][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 913.174300][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 913.186623][T17487] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 913.215951][T17487] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 913.229853][T17487] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 913.249540][T17487] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 913.263056][T17487] usb 5-1: Product: syz [ 913.269476][T17487] usb 5-1: SerialNumber: syz [ 913.285140][T17487] usb 5-1: config 0 descriptor?? [ 913.302892][T17487] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 913.334466][T17487] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input117 [ 913.421903][ T570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12260'. [ 913.439390][ T570] netlink: 'syz.1.12260': attribute type 7 has an invalid length. [ 913.449382][ T573] netlink: 88 bytes leftover after parsing attributes in process `syz.0.12262'. [ 913.460560][ T570] netlink: 'syz.1.12260': attribute type 8 has an invalid length. [ 913.469181][ T573] tipc: Enabling of bearer rejected, failed to enable media [ 913.477589][ T570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12260'. [ 913.516794][ T570] erspan0: entered promiscuous mode [ 913.553259][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 913.564334][ T570] erspan0: left promiscuous mode [ 913.885153][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 913.897139][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 913.899027][T25813] usb 5-1: USB disconnect, device number 125 [ 913.904119][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 913.963914][T25813] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 914.100373][ T30] kauditd_printk_skb: 331 callbacks suppressed [ 914.100392][ T30] audit: type=1326 audit(1746091429.607:5088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=585 comm="syz.3.12268" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x0 [ 914.128094][ C1] vkms_vblank_simulate: vblank timer overrun [ 914.193793][ T590] usb usb1: check_ctrlrecip: process 590 (syz.0.12270) requesting ep 01 but needs 81 [ 914.369177][ T30] audit: type=1326 audit(1746091429.867:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=596 comm="syz.0.12273" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f36539 code=0x0 [ 915.225255][ T628] loop2: detected capacity change from 0 to 7 [ 915.250605][ T628] Dev loop2: unable to read RDB block 7 [ 915.256298][ T628] loop2: unable to read partition table [ 915.257744][ T633] veth0_to_hsr: entered allmulticast mode [ 915.263559][ T628] loop2: partition table beyond EOD, truncated [ 915.287147][ T628] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 915.309442][ T632] veth0_to_hsr: left allmulticast mode [ 915.556046][ T648] macvlan0: entered promiscuous mode [ 915.562478][ T648] bridge0: entered promiscuous mode [ 915.607373][ T648] macvlan1: entered promiscuous mode [ 917.153360][ T713] loop8: detected capacity change from 0 to 8 [ 917.171239][ T713] Dev loop8: unable to read RDB block 8 [ 917.178370][ T713] loop8: unable to read partition table [ 917.184262][ T713] loop8: partition table beyond EOD, truncated [ 917.195033][ T713] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 917.388550][T25813] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 917.551025][T25813] usb 3-1: Using ep0 maxpacket: 8 [ 917.561981][T25813] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 917.578104][T25813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.588224][T25813] usb 3-1: Product: syz [ 917.592470][T25813] usb 3-1: Manufacturer: syz [ 917.597203][T25813] usb 3-1: SerialNumber: syz [ 917.607465][T25813] usb 3-1: config 0 descriptor?? [ 917.823237][T25813] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 917.938449][T17487] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 918.098677][T17487] usb 5-1: Using ep0 maxpacket: 16 [ 918.113992][T17487] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.138378][T17487] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.149670][T17487] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 918.159074][T17487] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.181591][T17487] usb 5-1: config 0 descriptor?? [ 918.465959][ T757] netlink: 'syz.3.12343': attribute type 10 has an invalid length. [ 918.504095][ T757] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12343'. [ 918.516933][ T757] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.533357][ T757] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.543602][ T757] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.560499][ T757] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.586712][ T761] input: syz0 as /devices/virtual/input/input118 [ 918.603236][ T757] team0: Port device geneve0 added [ 918.627136][T25813] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 918.690028][T25813] usb 3-1: USB disconnect, device number 7 [ 918.692929][T17487] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.00C5/input/input119 [ 918.815859][T17487] appleir 0003:05AC:8241.00C5: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 919.620579][ T787] ipvlan0: entered promiscuous mode [ 919.642104][ T787] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 919.658933][ T787] : (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 920.165674][ T801] loop6: detected capacity change from 0 to 63 [ 920.350640][ T805] loop1: detected capacity change from 0 to 7 [ 920.364034][ T5885] Dev loop1: unable to read RDB block 7 [ 920.370866][ T5885] loop1: AHDI p4 [ 920.374549][ T5885] loop1: partition table partially beyond EOD, truncated [ 920.391752][ T805] Dev loop1: unable to read RDB block 7 [ 920.401346][ T805] loop1: AHDI p4 [ 920.405504][ T805] loop1: partition table partially beyond EOD, truncated [ 920.647705][T25813] usb 5-1: USB disconnect, device number 126 [ 921.588871][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 921.703036][ T846] loop2: detected capacity change from 0 to 7 [ 921.712070][ T5885] Dev loop2: unable to read RDB block 7 [ 921.717682][ T5885] loop2: unable to read partition table [ 921.761349][ T5885] loop2: partition table beyond EOD, truncated [ 921.768230][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 921.777956][ T846] Dev loop2: unable to read RDB block 7 [ 921.785239][ T846] loop2: unable to read partition table [ 921.792779][ T846] loop2: partition table beyond EOD, truncated [ 921.800080][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 921.807265][ T846] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 921.836107][ T24] usb 3-1: config 0 has no interface number 0 [ 921.842854][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 921.858897][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 921.868806][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.894461][ T24] usb 3-1: config 0 descriptor?? [ 921.925538][ T24] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 922.498151][ T24] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 922.663848][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.687048][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.707888][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 922.724195][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 922.736326][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.750123][ T24] usb 5-1: config 0 descriptor?? [ 923.128777][ T888] netlink: 'syz.3.12401': attribute type 9 has an invalid length. [ 923.136705][ T888] netlink: 'syz.3.12401': attribute type 7 has an invalid length. [ 923.150054][ T888] netlink: 'syz.3.12401': attribute type 8 has an invalid length. [ 923.160185][T25813] usb 3-1: USB disconnect, device number 8 [ 923.193558][ T24] plantronics 0003:047F:FFFF.00C6: unknown main item tag 0x0 [ 923.206494][ T24] plantronics 0003:047F:FFFF.00C6: No inputs registered, leaving [ 923.240213][ T24] plantronics 0003:047F:FFFF.00C6: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 923.306777][ T892] input: syz0 as /devices/virtual/input/input120 [ 923.314034][ T892] input: failed to attach handler leds to device input120, error: -6 [ 923.440389][T25813] usb 5-1: USB disconnect, device number 127 [ 923.562493][ T903] overlayfs: missing 'lowerdir' [ 923.574629][ T30] audit: type=1326 audit(1746091439.077:5090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=902 comm="syz.3.12408" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x0 [ 924.290278][ T945] loop2: detected capacity change from 0 to 7 [ 924.298836][ T945] Dev loop2: unable to read RDB block 7 [ 924.304426][ T945] loop2: AHDI p2 p3 [ 924.308855][ T945] loop2: partition table partially beyond EOD, truncated [ 924.316082][ T945] loop2: p2 size 150995456 extends beyond EOD, truncated [ 924.367989][ T5885] udevd[5885]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 924.483496][ T953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12423'. [ 924.497592][ T953] netlink: 'syz.4.12423': attribute type 18 has an invalid length. [ 924.509467][ T953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12423'. [ 925.338494][T25813] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 925.518960][T25813] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 925.536958][T25813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 925.551703][T25813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 925.562437][T25813] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 925.595799][T25813] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 925.617001][T25813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.640415][T25813] usb 5-1: config 0 descriptor?? [ 925.888601][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 926.047285][ T1008] sctp: [Deprecated]: syz.3.12449 (pid 1008) Use of struct sctp_assoc_value in delayed_ack socket option. [ 926.047285][ T1008] Use struct sctp_sack_info instead [ 926.066815][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 926.077056][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.093451][ T24] usb 3-1: config 0 descriptor?? [ 926.102782][T25813] plantronics 0003:047F:FFFF.00C7: No inputs registered, leaving [ 926.136597][ T24] gspca_main: spca508-2.14.0 probing 8086:0110 [ 926.150684][T25813] plantronics 0003:047F:FFFF.00C7: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 926.341852][ T24] gspca_spca508: reg_read err -32 [ 926.347747][ T24] gspca_spca508: reg_read err -32 [ 926.354254][ T24] gspca_spca508: reg_read err -32 [ 926.385870][ T976] usb 5-1: USB disconnect, device number 2 [ 926.424621][ T1020] sctp: [Deprecated]: syz.0.12453 (pid 1020) Use of int in maxseg socket option. [ 926.424621][ T1020] Use struct sctp_assoc_value instead [ 926.567459][ T24] gspca_spca508: reg_read err -71 [ 926.577703][ T24] gspca_spca508: reg write: error -71 [ 926.606238][ T24] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 926.631278][ T24] usb 3-1: USB disconnect, device number 9 [ 927.438089][T17487] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 927.598177][T17487] usb 3-1: Using ep0 maxpacket: 16 [ 927.615445][T17487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.639893][T17487] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 927.675189][T17487] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 927.723589][T17487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.761973][T17487] usb 3-1: config 0 descriptor?? [ 927.768255][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 927.954816][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 927.962221][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 927.989909][ T24] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 928.011771][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.040670][ T24] usb 4-1: config 0 descriptor?? [ 928.225791][T17487] microsoft 0003:045E:07DA.00C8: unknown main item tag 0x0 [ 928.235817][T17487] microsoft 0003:045E:07DA.00C8: unknown main item tag 0x0 [ 928.244490][T17487] microsoft 0003:045E:07DA.00C8: unknown main item tag 0x0 [ 928.252787][T17487] microsoft 0003:045E:07DA.00C8: unknown main item tag 0x0 [ 928.266227][T17487] microsoft 0003:045E:07DA.00C8: unknown main item tag 0x0 [ 928.275040][T17487] microsoft 0003:045E:07DA.00C8: unknown main item tag 0x0 [ 928.283401][ T24] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 928.313368][T17487] microsoft 0003:045E:07DA.00C8: unknown main item tag 0x0 [ 928.341145][T17487] microsoft 0003:045E:07DA.00C8: unknown main item tag 0x0 [ 928.362574][T17487] microsoft 0003:045E:07DA.00C8: unknown main item tag 0x0 [ 928.380386][T17487] microsoft 0003:045E:07DA.00C8: unknown main item tag 0x0 [ 928.424020][T17487] HID 045e:07da: Invalid code 65791 type 1 [ 928.446185][T17487] HID 045e:07da: Invalid code 768 type 1 [ 928.470887][T17487] HID 045e:07da: Invalid code 769 type 1 [ 928.484343][T17487] HID 045e:07da: Invalid code 770 type 1 [ 928.495007][T17487] HID 045e:07da: Invalid code 771 type 1 [ 928.502912][T17487] HID 045e:07da: Invalid code 772 type 1 [ 928.513727][T17487] HID 045e:07da: Invalid code 773 type 1 [ 928.521343][T17487] HID 045e:07da: Invalid code 774 type 1 [ 928.527297][T17487] HID 045e:07da: Invalid code 775 type 1 [ 928.545201][T11400] usb 4-1: USB disconnect, device number 15 [ 928.563803][T17487] HID 045e:07da: Invalid code 776 type 1 [ 928.623458][T17487] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.00C8/input/input122 [ 928.738705][T17487] microsoft 0003:045E:07DA.00C8: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 929.002437][T11400] usb 3-1: USB disconnect, device number 10 [ 929.270526][T17487] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 929.429212][ T52] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 929.460232][T17487] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 929.475092][T17487] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 929.494123][T17487] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 929.505553][T17487] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 929.516779][T17487] usb 5-1: SerialNumber: syz [ 929.608211][ T52] usb 4-1: Using ep0 maxpacket: 8 [ 929.639125][ T52] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 929.647453][ T52] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 929.673800][ T52] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 929.703554][ T52] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 929.718233][ T52] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 929.732759][ T52] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 929.751452][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.762895][T17487] usb 5-1: 0:2 : does not exist [ 929.821644][T17487] usb 5-1: USB disconnect, device number 3 [ 929.900703][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 929.994324][ T52] usb 4-1: GET_CAPABILITIES returned 0 [ 930.009075][ T52] usbtmc 4-1:16.0: can't read capabilities [ 930.217964][T11400] usb 4-1: USB disconnect, device number 16 [ 931.345282][T11400] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 931.472950][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.480531][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.528214][T11400] usb 4-1: Using ep0 maxpacket: 8 [ 931.544082][T11400] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 931.576842][T11400] usb 4-1: config 0 has no interface number 0 [ 931.598979][T11400] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 931.651197][T11400] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 931.678949][T11400] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.716492][T11400] usb 4-1: config 0 descriptor?? [ 931.741699][ T1191] netlink: 'syz.4.12522': attribute type 11 has an invalid length. [ 931.759625][T11400] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 931.760116][ T1191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12522'. [ 931.957417][ T1198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12525'. [ 931.972941][ T1198] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12525'. [ 931.982187][ T1198] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12525'. [ 932.548115][T11400] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 932.711605][T11400] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 932.720615][T11400] usb 5-1: config 179 has no interface number 0 [ 932.726951][T11400] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 932.742281][T11400] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 932.758527][T11400] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 932.770015][T11400] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 932.781660][T11400] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 932.795093][T11400] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 932.816834][T11400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.834012][ T1208] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 932.858802][ T1208] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 932.984390][ T52] usb 4-1: USB disconnect, device number 17 [ 933.128798][T17487] usb 5-1: USB disconnect, device number 4 [ 933.128930][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 933.143665][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 933.294375][ T1233] input: syz1 as /devices/virtual/input/input123 [ 933.641511][ T1245] netlink: 'syz.3.12543': attribute type 11 has an invalid length. [ 933.958511][T17487] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 934.159231][T17487] usb 3-1: Using ep0 maxpacket: 32 [ 934.175788][T17487] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 934.195639][T17487] usb 3-1: config 0 has no interface number 0 [ 934.207858][T17487] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 934.245596][T17487] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.265795][T17487] usb 3-1: Product: syz [ 934.270942][T17487] usb 3-1: Manufacturer: syz [ 934.275863][T17487] usb 3-1: SerialNumber: syz [ 934.294121][T17487] usb 3-1: config 0 descriptor?? [ 934.306520][T17487] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 934.410226][ T1273] kvm_intel: kvm [1272]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x7e02 [ 934.548525][T17487] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 934.566772][T17487] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 934.798821][T11400] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 934.950060][T11400] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 934.962178][T11400] usb 4-1: config 179 has no interface number 0 [ 934.970618][T11400] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 934.985758][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 934.997398][T11400] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 935.003379][T17487] usb 3-1: USB disconnect, device number 11 [ 935.014499][T11400] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 935.026337][T11400] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 935.035312][T17487] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 935.041799][T11400] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 935.063651][T17487] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 935.079961][T11400] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 935.091606][T11400] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.097319][T17487] quatech2 3-1:0.51: device disconnected [ 935.106591][ T1278] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 935.117065][ T1278] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 935.414328][T17487] usb 4-1: USB disconnect, device number 18 [ 935.414328][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 935.414462][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 935.437167][ C0] vkms_vblank_simulate: vblank timer overrun [ 935.763210][ T1306] loop6: detected capacity change from 0 to 63 [ 935.801172][ T5885] buffer_io_error: 6 callbacks suppressed [ 935.801190][ T5885] Buffer I/O error on dev loop6, logical block 0, async page read [ 935.830033][ T5885] Buffer I/O error on dev loop6, logical block 0, async page read [ 935.839857][ T5885] Buffer I/O error on dev loop6, logical block 0, async page read [ 935.847805][ T5885] Buffer I/O error on dev loop6, logical block 0, async page read [ 935.857624][ T5885] Buffer I/O error on dev loop6, logical block 0, async page read [ 936.202585][ T1316] io-wq is not configured for unbound workers [ 936.495226][ T1329] sctp: [Deprecated]: syz.2.12579 (pid 1329) Use of struct sctp_assoc_value in delayed_ack socket option. [ 936.495226][ T1329] Use struct sctp_sack_info instead [ 937.130822][ T1353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12589'. [ 937.219817][ T1353] bond0: (slave bond_slave_0): Releasing backup interface [ 937.232959][ T1353] bond_slave_0 (unregistering): left promiscuous mode [ 937.248986][ T1353] bond_slave_0 (unregistering): left allmulticast mode [ 937.911827][ T24] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 937.952025][ T30] audit: type=1326 audit(1746091453.457:5091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1380 comm="syz.3.12602" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 938.004185][ T30] audit: type=1326 audit(1746091453.457:5092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1380 comm="syz.3.12602" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 938.031363][ T30] audit: type=1326 audit(1746091453.457:5093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1380 comm="syz.3.12602" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 938.054023][ T30] audit: type=1326 audit(1746091453.457:5094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1380 comm="syz.3.12602" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 938.077174][ T30] audit: type=1326 audit(1746091453.457:5095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1380 comm="syz.3.12602" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 938.126414][ T30] audit: type=1326 audit(1746091453.457:5096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1380 comm="syz.3.12602" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 938.151209][ T30] audit: type=1326 audit(1746091453.457:5097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1380 comm="syz.3.12602" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 938.158140][T11400] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 938.181583][ T24] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 938.181627][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 938.181665][ T24] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 938.181692][ T24] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 938.181719][ T24] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 938.181746][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 938.184419][ T30] audit: type=1326 audit(1746091453.457:5098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1380 comm="syz.3.12602" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 938.185427][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 938.213258][ T24] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 938.213286][ T24] usb 3-1: Product: syz [ 938.213302][ T24] usb 3-1: Manufacturer: syz [ 938.213318][ T24] usb 3-1: SerialNumber: syz [ 938.216362][ T24] usb 3-1: config 0 descriptor?? [ 938.277398][ T30] audit: type=1326 audit(1746091453.457:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1380 comm="syz.3.12602" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 938.277450][ T30] audit: type=1326 audit(1746091453.487:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1380 comm="syz.3.12602" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 938.350021][T11400] usb 5-1: Using ep0 maxpacket: 8 [ 938.352058][T11400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 938.359052][ T1367] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 938.374150][T11400] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 938.376409][ T24] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 938.395650][T11400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.395654][ T24] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 938.426079][T11400] usb 5-1: config 0 descriptor?? [ 938.661681][T28745] Bluetooth: hci2: command 0x0406 tx timeout [ 938.807705][ T5889] usb 3-1: USB disconnect, device number 12 [ 938.816423][ T5889] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 938.844003][T11400] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 939.067459][ T5889] usb 5-1: USB disconnect, device number 5 [ 940.226586][ T1421] input: syz1 as /devices/virtual/input/input124 [ 940.471049][ T1426] vxcan3: entered promiscuous mode [ 941.008131][ T5889] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 941.170198][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 941.179505][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.196605][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.208993][ T5889] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 941.218446][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.237730][ T5889] usb 3-1: config 0 descriptor?? [ 941.281385][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 941.453993][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.477893][ T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 941.497781][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.546367][ T24] usb 5-1: config 0 descriptor?? [ 941.683764][ T5889] ft260 0003:0403:6030.00C9: unknown main item tag 0x0 [ 941.842556][ T1465] tipc: Enabling of bearer rejected, failed to enable media [ 941.874867][ T5889] ft260 0003:0403:6030.00C9: chip code: 0000 0000 [ 941.984924][ T24] keytouch 0003:0926:3333.00CA: fixing up Keytouch IEC report descriptor [ 942.023051][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.00CA/input/input125 [ 942.075547][ T5889] ft260 0003:0403:6030.00C9: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 942.118730][T17487] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 942.201424][ T24] keytouch 0003:0926:3333.00CA: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 942.281983][ T5889] ft260 0003:0403:6030.00C9: failed to retrieve status: -71, no wakeup [ 942.301992][T17487] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 942.313262][T17487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.324496][ T5889] ft260 0003:0403:6030.00C9: failed to retrieve status: -71 [ 942.328413][ T5889] ft260 0003:0403:6030.00C9: failed to reset I2C controller: -71 [ 942.345973][T17487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 942.359266][T17487] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 942.374790][T17487] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 942.385523][T17487] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 942.416920][T17487] usb 4-1: Manufacturer: syz [ 942.427911][ T5889] usb 3-1: USB disconnect, device number 13 [ 942.443130][T17487] usb 4-1: config 0 descriptor?? [ 942.608412][T25813] usb 5-1: USB disconnect, device number 6 [ 942.870407][T17487] appleir 0003:05AC:8243.00CB: unknown main item tag 0x0 [ 942.898916][T17487] appleir 0003:05AC:8243.00CB: No inputs registered, leaving [ 942.920704][T17487] appleir 0003:05AC:8243.00CB: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 943.107244][ T1488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12652'. [ 943.165035][T17487] usb 4-1: USB disconnect, device number 19 [ 944.009313][ T1524] input: syz0 as /devices/virtual/input/input126 [ 944.064490][ T1524] input: failed to attach handler leds to device input126, error: -6 [ 945.770688][ T1586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12689'. [ 945.796616][ T1586] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12689'. [ 945.838827][ T1586] gtp0: entered promiscuous mode [ 945.844065][ T1586] gtp0: entered allmulticast mode [ 946.033315][ T1597] Context (ID=0x1) not attached to queue pair (handle=0x500:0x2) [ 946.261502][ T1605] input: syz1 as /devices/virtual/input/input127 [ 946.565672][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 946.566034][ T30] audit: type=1326 audit(1746091462.067:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1617 comm="syz.4.12703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ae558 code=0x7ffc0000 [ 946.665323][ T30] audit: type=1326 audit(1746091462.067:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1617 comm="syz.4.12703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ae558 code=0x7ffc0000 [ 946.732106][ T30] audit: type=1326 audit(1746091462.067:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1617 comm="syz.4.12703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 946.765428][ T30] audit: type=1326 audit(1746091462.067:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1617 comm="syz.4.12703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ae558 code=0x7ffc0000 [ 946.791524][ T30] audit: type=1326 audit(1746091462.067:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1617 comm="syz.4.12703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ae558 code=0x7ffc0000 [ 946.817448][ T30] audit: type=1326 audit(1746091462.067:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1617 comm="syz.4.12703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 946.851977][ T1626] netlink: 'syz.4.12707': attribute type 10 has an invalid length. [ 946.880935][ T1626] syz_tun: entered promiscuous mode [ 946.920121][ T30] audit: type=1326 audit(1746091462.067:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1617 comm="syz.4.12703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ae558 code=0x7ffc0000 [ 946.951706][ T30] audit: type=1326 audit(1746091462.067:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1617 comm="syz.4.12703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 946.977329][ T30] audit: type=1326 audit(1746091462.067:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1617 comm="syz.4.12703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ae558 code=0x7ffc0000 [ 947.002702][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 947.012884][ T30] audit: type=1326 audit(1746091462.067:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1617 comm="syz.4.12703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 947.179279][ T24] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 947.212375][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 947.228236][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 947.270910][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 947.287310][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 947.301733][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 947.314578][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 947.326983][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 947.336477][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 947.359173][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 947.369066][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 947.378589][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 947.398132][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 947.411339][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 947.423192][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 947.459973][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 947.471911][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 947.484441][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 947.503334][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 947.512152][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 947.522040][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 947.533195][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 947.542004][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 947.551340][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 947.563066][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 947.573639][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 947.582892][ T24] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 947.591492][ T24] usb 4-1: Product: syz [ 947.595707][ T24] usb 4-1: Manufacturer: syz [ 947.600875][ T24] usb 4-1: SerialNumber: syz [ 947.607651][ T24] usb 4-1: config 0 descriptor?? [ 947.617636][ T24] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 947.853512][ T24] usb 4-1: USB disconnect, device number 20 [ 947.870281][ T24] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 948.490985][T11400] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 948.651583][T11400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 948.674733][T11400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.710745][T11400] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 948.721481][T11400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.745775][T11400] usb 5-1: config 0 descriptor?? [ 949.391995][T11400] usb 5-1: string descriptor 0 read error: -22 [ 949.610225][T11400] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.00CC/input/input128 [ 949.725364][T11400] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.00CC/input/input129 [ 949.853982][T11400] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.00CC/input/input130 [ 949.980498][T11400] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.00CC/input/input131 [ 950.135222][T11400] uclogic 0003:256C:006D.00CC: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 950.229232][T11400] usb 5-1: USB disconnect, device number 7 [ 950.584953][ T1704] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 950.603124][ T1704] macvlan5: entered promiscuous mode [ 950.625850][ T1704] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 950.823301][ T1713] syzkaller1: entered promiscuous mode [ 950.862990][ T1713] syzkaller1: entered allmulticast mode [ 950.975458][ T1725] loop6: detected capacity change from 0 to 63 [ 950.989498][ T1725] Buffer I/O error on dev loop6, logical block 0, async page read [ 951.001519][ T1725] Buffer I/O error on dev loop6, logical block 1, async page read [ 951.010357][ T1725] Buffer I/O error on dev loop6, logical block 2, async page read [ 951.020975][ T1725] Buffer I/O error on dev loop6, logical block 3, async page read [ 951.031925][ T5885] Buffer I/O error on dev loop6, logical block 0, async page read [ 951.052624][ T5885] Buffer I/O error on dev loop6, logical block 1, async page read [ 951.065301][ T5885] Buffer I/O error on dev loop6, logical block 2, async page read [ 951.074714][ T5885] Buffer I/O error on dev loop6, logical block 3, async page read [ 951.086215][ T5885] Buffer I/O error on dev loop6, logical block 0, async page read [ 951.095286][ T5885] Buffer I/O error on dev loop6, logical block 1, async page read [ 951.234356][ T1734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12754'. [ 951.909315][ T1762] loop6: detected capacity change from 0 to 63 [ 953.815287][ T1797] syzkaller1: entered promiscuous mode [ 953.832856][ T1797] syzkaller1: entered allmulticast mode [ 953.942183][ T1801] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12785'. [ 954.087191][ T36] bridge_slave_1: left allmulticast mode [ 954.107114][ T36] bridge_slave_1: left promiscuous mode [ 954.132955][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.171328][ T36] bridge_slave_0: left allmulticast mode [ 954.197388][ T36] bridge_slave_0: left promiscuous mode [ 954.214330][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.289432][ T1810] kvm: kvm [1807]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x79a38c48ff000000 [ 954.477625][T28745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 954.491443][T28745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 954.509043][T28745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 954.553929][T28745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 954.579834][T28745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 954.689542][ T36] xfrm0 (unregistering): left allmulticast mode [ 955.348734][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.374895][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.393681][ T36] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 955.414216][ T36] bond0 (unregistering): (slave bond2): Releasing backup interface [ 955.427348][ T36] bond0 (unregistering): Released all slaves [ 955.450040][ T36] bond1 (unregistering): Released all slaves [ 955.633928][ T36] bond2 (unregistering): Released all slaves [ 955.773587][ T36] tipc: Disabling bearer [ 955.783992][ T36] tipc: Disabling bearer [ 955.796624][ T36] tipc: Left network mode [ 956.071204][ T36] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode [ 956.083191][ T36] mac80211_hwsim hwsim2 wlan0 (unregistering): left promiscuous mode [ 956.147415][ T1826] chnl_net:caif_netlink_parms(): no params data found [ 956.235121][ T36] hsr_slave_0: left promiscuous mode [ 956.245955][ T36] hsr_slave_1: left promiscuous mode [ 956.253353][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.264295][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.658464][ T5839] Bluetooth: hci3: command tx timeout [ 957.041846][T25813] hid-generic 0000:0000:0000.00CD: unknown main item tag 0x0 [ 957.063780][T25813] hid-generic 0000:0000:0000.00CD: hidraw0: HID v0.00 Device [syz1] on syz0 [ 957.238400][ T36] team0 (unregistering): Port device team_slave_1 removed [ 957.256243][ T1889] tmpfs: Unknown parameter 'fSagbd2z*a!Hd0]29,6' [ 957.352641][ T36] team0 (unregistering): Port device team_slave_0 removed [ 958.414906][ T1826] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.451199][ T1826] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.471547][ T1826] bridge_slave_0: entered allmulticast mode [ 958.483950][ T1826] bridge_slave_0: entered promiscuous mode [ 958.497929][ T1826] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.509931][ T1826] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.517322][ T1826] bridge_slave_1: entered allmulticast mode [ 958.525298][ T1826] bridge_slave_1: entered promiscuous mode [ 958.696555][ T1826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.726416][ T1826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.739111][ T5839] Bluetooth: hci3: command tx timeout [ 958.920387][ T1826] team0: Port device team_slave_0 added [ 958.940735][ T1826] team0: Port device team_slave_1 added [ 959.009488][ T1826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.016475][ T1826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.057244][ T1826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.077959][ T1947] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 959.084510][ T1947] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 959.097322][ T1947] vhci_hcd vhci_hcd.0: Device attached [ 959.102995][ T1826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.119312][ T1826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.124674][ T1947] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 959.151732][ T1947] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 959.160197][ T1826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.179783][ T1947] vhci_hcd vhci_hcd.0: Device attached [ 959.189279][ T1952] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8) [ 959.195861][ T1952] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 959.238128][ T1952] vhci_hcd vhci_hcd.0: Device attached [ 959.288844][ T24] vhci_hcd: vhci_device speed not set [ 959.321936][ T1826] hsr_slave_0: entered promiscuous mode [ 959.344376][ T1826] hsr_slave_1: entered promiscuous mode [ 959.358828][ T24] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 959.371254][ T1947] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(7) [ 959.377804][ T1947] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 959.388472][ T1826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 959.396054][ T1826] Cannot create hsr debugfs directory [ 959.420138][ T1947] vhci_hcd vhci_hcd.0: Device attached [ 959.436878][ T1952] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(12) [ 959.443520][ T1952] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 959.474557][ T1952] vhci_hcd vhci_hcd.0: Device attached [ 959.501882][ T1962] vhci_hcd: connection closed [ 959.502303][ T1956] vhci_hcd: connection closed [ 959.510466][ T1948] vhci_hcd: connection reset by peer [ 959.511018][ T13] vhci_hcd: stop threads [ 959.525556][ T1953] vhci_hcd: connection closed [ 959.525764][ T1950] vhci_hcd: connection closed [ 959.542219][ T13] vhci_hcd: release socket [ 959.561326][ T13] vhci_hcd: disconnect device [ 959.575362][ T13] vhci_hcd: stop threads [ 959.594467][ T13] vhci_hcd: release socket [ 959.608231][ T13] vhci_hcd: disconnect device [ 959.621104][ T1968] syzkaller1: entered promiscuous mode [ 959.626687][ T13] vhci_hcd: stop threads [ 959.638120][ T13] vhci_hcd: release socket [ 959.650179][ T1968] syzkaller1: entered allmulticast mode [ 959.657279][ T13] vhci_hcd: disconnect device [ 959.676155][ T13] vhci_hcd: stop threads [ 959.684429][ T13] vhci_hcd: release socket [ 959.701738][ T13] vhci_hcd: disconnect device [ 959.732713][ T13] vhci_hcd: stop threads [ 959.751309][ T13] vhci_hcd: release socket [ 959.778978][ T13] vhci_hcd: disconnect device [ 960.148158][ T1816] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 960.206370][ T1826] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 960.220554][ T1826] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 960.258866][ T1826] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 960.273396][ T1826] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 960.308548][T25813] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 960.331519][ T1816] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.356431][ T1816] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 960.386602][ T1816] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 960.404779][ T1816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.444670][ T1816] usb 5-1: config 0 descriptor?? [ 960.462643][ T1816] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 960.477362][ T1826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.484595][T25813] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.516628][T25813] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 960.529035][ T1826] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.537790][T25813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.558344][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.565534][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.587685][T25813] usb 4-1: config 0 descriptor?? [ 960.610372][T25813] pwc: Askey VC010 type 2 USB webcam detected. [ 960.626042][T20110] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.633305][T20110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.730880][ T1816] usb 5-1: USB disconnect, device number 8 [ 960.820878][ T5839] Bluetooth: hci3: command tx timeout [ 960.885862][ T1826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.954716][ T1826] veth0_vlan: entered promiscuous mode [ 960.991718][ T1826] veth1_vlan: entered promiscuous mode [ 961.027298][T25813] pwc: recv_control_msg error -32 req 02 val 2b00 [ 961.036382][T25813] pwc: recv_control_msg error -32 req 02 val 2700 [ 961.142406][ T1826] veth0_macvtap: entered promiscuous mode [ 961.190037][ T1826] veth1_macvtap: entered promiscuous mode [ 961.240473][ T1826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 961.256010][T25813] pwc: recv_control_msg error -71 req 04 val 1000 [ 961.283531][ T1826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 961.287846][T25813] pwc: recv_control_msg error -71 req 04 val 1300 [ 961.346442][T25813] pwc: recv_control_msg error -71 req 04 val 1400 [ 961.370613][ T1826] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.376147][T25813] pwc: recv_control_msg error -71 req 02 val 2000 [ 961.396859][T25813] pwc: recv_control_msg error -71 req 02 val 2100 [ 961.418697][T25813] pwc: recv_control_msg error -71 req 04 val 1500 [ 961.418861][ T1826] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.444069][T25813] pwc: recv_control_msg error -71 req 02 val 2500 [ 961.459232][T25813] pwc: recv_control_msg error -71 req 02 val 2400 [ 961.464713][ T1826] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.481529][T25813] pwc: recv_control_msg error -71 req 02 val 2600 [ 961.498641][T25813] pwc: recv_control_msg error -71 req 02 val 2900 [ 961.512460][T25813] pwc: recv_control_msg error -71 req 02 val 2800 [ 961.518075][ T1826] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.548241][T25813] pwc: recv_control_msg error -71 req 04 val 1100 [ 961.568838][T25813] pwc: recv_control_msg error -71 req 04 val 1200 [ 961.606050][T25813] pwc: Registered as video103. [ 961.677056][T25813] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input132 [ 961.720641][T25813] usb 4-1: USB disconnect, device number 21 [ 961.852177][ T2031] loop8: detected capacity change from 0 to 8 [ 961.878556][ T2031] Dev loop8: unable to read RDB block 8 [ 961.908751][ T2031] loop8: unable to read partition table [ 961.917105][ T2031] loop8: partition table beyond EOD, truncated [ 961.940236][ T2031] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 962.002407][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.022056][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.110427][T20110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.179242][T20110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.348663][T25813] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 962.407046][ T2049] syzkaller1: entered promiscuous mode [ 962.416678][ T2049] syzkaller1: entered allmulticast mode [ 962.537879][T25813] usb 4-1: Using ep0 maxpacket: 32 [ 962.554764][T25813] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 962.609897][T25813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.631322][T25813] usb 4-1: config 0 descriptor?? [ 962.852350][T25813] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 962.871418][T25813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 962.909918][T25813] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 962.911117][ T5839] Bluetooth: hci3: command tx timeout [ 962.917886][T25813] usb 4-1: media controller created [ 963.025570][T25813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 963.278459][ T1816] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 963.450360][ T1816] usb 5-1: Using ep0 maxpacket: 16 [ 963.486157][ T1816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.501277][ T1816] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 963.514081][ T1816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.533276][ T1816] usb 5-1: config 0 descriptor?? [ 963.730626][T25813] az6027: usb out operation failed. (-71) [ 963.765269][T25813] stb0899_attach: Driver disabled by Kconfig [ 963.774630][T25813] az6027: no front-end attached [ 963.774630][T25813] [ 963.797285][T25813] az6027: usb out operation failed. (-71) [ 963.804194][T25813] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 963.823308][T25813] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input133 [ 963.857616][T25813] dvb-usb: schedule remote query interval to 400 msecs. [ 963.875488][T25813] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 963.906500][T25813] usb 4-1: USB disconnect, device number 22 [ 963.964813][ T1816] mcp2221 0003:04D8:00DD.00CE: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 964.012499][T25813] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 964.383846][ T52] usb 5-1: USB disconnect, device number 9 [ 964.488186][ T24] vhci_hcd: vhci_device speed not set [ 964.952999][ T2124] binder: 2123:2124 ioctl c0306201 80000000 returned -14 [ 966.548430][T25813] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 966.711983][T25813] usb 4-1: Using ep0 maxpacket: 8 [ 966.733842][T25813] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 966.766106][T25813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.777521][T25813] usb 4-1: Product: syz [ 966.784062][T25813] usb 4-1: Manufacturer: syz [ 966.800292][T25813] usb 4-1: SerialNumber: syz [ 966.811269][T25813] usb 4-1: config 0 descriptor?? [ 966.821963][T25813] gspca_main: se401-2.14.0 probing 047d:5003 [ 967.233444][T25813] gspca_se401: Too many frame sizes [ 967.440373][T25813] usb 4-1: USB disconnect, device number 23 [ 969.468201][ T10] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 969.619983][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 969.628453][ T5889] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 969.636144][ T10] usb 4-1: config 179 has no interface number 0 [ 969.643787][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 969.655027][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 969.664999][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 969.677098][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 969.688590][ T10] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 969.702274][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 969.712112][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.724307][ T2246] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 969.734630][ T10] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 969.746041][ T10] xpad 4-1:179.65: probe with driver xpad failed with error -5 [ 969.788567][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 969.810398][ T5889] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 969.820611][ T5889] usb 5-1: config 0 has no interface number 0 [ 969.826741][ T5889] usb 5-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 6 [ 969.841604][ T5889] usb 5-1: config 0 interface 89 has no altsetting 0 [ 969.846835][ T2257] input: syz1 as /devices/virtual/input/input134 [ 969.859445][ T5889] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 969.869611][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.879077][ T5889] usb 5-1: Product: syz [ 969.883285][ T5889] usb 5-1: Manufacturer: syz [ 969.887976][ T5889] usb 5-1: SerialNumber: syz [ 969.903125][ T5889] usb 5-1: config 0 descriptor?? [ 969.911670][ T2254] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 969.920795][ T5889] hub 5-1:0.89: bad descriptor, ignoring hub [ 969.929304][ T5889] hub 5-1:0.89: probe with driver hub failed with error -5 [ 969.959183][ T5889] option 5-1:0.89: GSM modem (1-port) converter detected [ 969.978473][ T5889] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 970.002395][ T10] usb 4-1: USB disconnect, device number 24 [ 970.258831][ T52] usb 5-1: USB disconnect, device number 10 [ 970.271709][ T52] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 970.286629][ T52] option 5-1:0.89: device disconnected [ 970.445656][ T30] kauditd_printk_skb: 125 callbacks suppressed [ 970.445675][ T30] audit: type=1326 audit(1746091485.947:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2267 comm="syz.5.12919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ae558 code=0x7ffc0000 [ 970.503189][ T30] audit: type=1326 audit(1746091485.977:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2267 comm="syz.5.12919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ae558 code=0x7ffc0000 [ 970.553583][ T30] audit: type=1326 audit(1746091485.977:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2267 comm="syz.5.12919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 970.585464][ T30] audit: type=1326 audit(1746091485.977:5287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2267 comm="syz.5.12919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ae558 code=0x7ffc0000 [ 970.610056][ T30] audit: type=1326 audit(1746091485.977:5288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2267 comm="syz.5.12919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 970.633296][ T30] audit: type=1326 audit(1746091485.977:5289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2267 comm="syz.5.12919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ae558 code=0x7ffc0000 [ 970.695573][ T30] audit: type=1326 audit(1746091485.977:5290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2267 comm="syz.5.12919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ae558 code=0x7ffc0000 [ 970.725650][ T30] audit: type=1326 audit(1746091485.977:5291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2267 comm="syz.5.12919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 970.748994][ T30] audit: type=1326 audit(1746091485.977:5292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2267 comm="syz.5.12919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ae558 code=0x7ffc0000 [ 970.771773][ T30] audit: type=1326 audit(1746091485.977:5293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2267 comm="syz.5.12919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 971.173123][ T2295] input: syz1 as /devices/virtual/input/input135 [ 971.240440][ T5885] udevd[5885]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 972.278657][ T52] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 972.449979][ T52] usb 5-1: Using ep0 maxpacket: 32 [ 972.460629][ T52] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 972.488745][ T52] usb 5-1: config 0 has no interface number 0 [ 972.505431][ T52] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 972.535870][ T52] usb 5-1: config 0 interface 85 has no altsetting 0 [ 972.562552][ T52] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 972.577851][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.599950][ T52] usb 5-1: Product: syz [ 972.604150][ T52] usb 5-1: Manufacturer: syz [ 972.612991][ T52] usb 5-1: SerialNumber: syz [ 972.621763][ T52] usb 5-1: config 0 descriptor?? [ 973.283271][ T52] appletouch 5-1:0.85: Geyser mode initialized. [ 973.304539][ T52] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input136 [ 973.533269][T25813] usb 5-1: USB disconnect, device number 11 [ 973.569243][T25813] appletouch 5-1:0.85: input: appletouch disconnected [ 974.344072][ T2403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12970'. [ 974.409959][ T2403] netlink: 190 bytes leftover after parsing attributes in process `syz.5.12970'. [ 974.876103][ T2427] syzkaller1: entered promiscuous mode [ 974.890109][ T2427] syzkaller1: entered allmulticast mode [ 975.608194][ T2455] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 975.626950][ T2455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12978'. [ 975.707801][ T2455] net veth1_virt_wifi virt_wifi0 (unregistering): left promiscuous mode [ 977.068363][ T52] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 977.265837][ T52] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 977.302403][ T52] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 977.359397][ T52] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 977.402938][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.424467][ T52] usb 5-1: Product: syz [ 977.440246][ T52] usb 5-1: Manufacturer: syz [ 977.456525][ T52] usb 5-1: SerialNumber: syz [ 977.695380][ T52] usb 5-1: 0:2 : does not exist [ 977.716893][ T52] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 977.757947][ T52] usb 5-1: USB disconnect, device number 12 [ 978.613350][ T2608] ALSA: seq fatal error: cannot create timer (-19) [ 979.303396][ T2668] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 979.342312][ T2668] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 979.886505][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 979.886522][ T30] audit: type=1326 audit(1746091495.377:5334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2693 comm="syz.3.13039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 980.142181][ T30] audit: type=1326 audit(1746091495.427:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2693 comm="syz.3.13039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 980.238195][ T30] audit: type=1326 audit(1746091495.427:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2693 comm="syz.3.13039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 980.323513][ T30] audit: type=1326 audit(1746091495.477:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2693 comm="syz.3.13039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 980.428718][ T30] audit: type=1326 audit(1746091495.477:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2693 comm="syz.3.13039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 980.519388][ T30] audit: type=1326 audit(1746091495.477:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2693 comm="syz.3.13039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 980.629550][ T30] audit: type=1326 audit(1746091495.477:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2693 comm="syz.3.13039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 980.722388][ T30] audit: type=1326 audit(1746091495.477:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2693 comm="syz.3.13039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 980.798089][ T30] audit: type=1326 audit(1746091495.477:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2693 comm="syz.3.13039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 980.908666][ T30] audit: type=1326 audit(1746091495.477:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2693 comm="syz.3.13039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 981.059527][ T2758] sctp: [Deprecated]: syz.5.13053 (pid 2758) Use of struct sctp_assoc_value in delayed_ack socket option. [ 981.059527][ T2758] Use struct sctp_sack_info instead [ 981.335015][ T2773] loop8: detected capacity change from 0 to 8 [ 981.405870][ T2773] Dev loop8: unable to read RDB block 8 [ 981.448207][ T2773] loop8: unable to read partition table [ 981.454133][ T2773] loop8: partition table beyond EOD, truncated [ 981.482251][ T2779] sctp: [Deprecated]: syz.1.13059 (pid 2779) Use of int in maxseg socket option. [ 981.482251][ T2779] Use struct sctp_assoc_value instead [ 981.518077][ T2773] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 982.280198][ T2820] netlink: 'syz.3.13070': attribute type 29 has an invalid length. [ 982.290952][ T2820] netlink: 'syz.3.13070': attribute type 29 has an invalid length. [ 982.305203][ T2820] netlink: 600 bytes leftover after parsing attributes in process `syz.3.13070'. [ 982.618089][ T2032] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 982.806675][ T2032] usb 4-1: Using ep0 maxpacket: 16 [ 982.827148][ T2831] input: syz1 as /devices/virtual/input/input137 [ 982.843157][ T2032] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.858825][ T2032] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.873491][ T2032] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 982.883941][ T2032] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.895450][ T2032] usb 4-1: config 0 descriptor?? [ 983.343463][ T2032] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.00CF/input/input139 [ 983.440075][ T2032] appleir 0003:05AC:8241.00CF: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 983.916457][ T2879] netlink: 'syz.5.13088': attribute type 12 has an invalid length. [ 983.926884][ T2879] netlink: 'syz.5.13088': attribute type 29 has an invalid length. [ 983.934938][ T2879] netlink: 148 bytes leftover after parsing attributes in process `syz.5.13088'. [ 984.390561][ T24] usb 4-1: USB disconnect, device number 25 [ 984.721965][ T2908] futex_wake_op: syz.0.13102 tries to shift op by 32; fix this program [ 984.839415][ T2916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13105'. [ 986.393898][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 986.393915][ T30] audit: type=1326 audit(1746091501.897:5379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2980 comm="syz.5.13135" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x0 [ 986.422562][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.338528][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 987.490764][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 987.501113][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 987.521031][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 987.537592][ T2032] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 987.558200][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 987.581654][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 987.593356][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 987.619929][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 987.637616][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.742011][ T2032] usb 6-1: Using ep0 maxpacket: 16 [ 987.752725][ T2032] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 987.765886][ T2032] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 987.796032][ T2032] usb 6-1: Product: syz [ 987.803508][ T2032] usb 6-1: Manufacturer: syz [ 987.816509][ T2032] usb 6-1: SerialNumber: syz [ 987.842966][ T2032] usb 6-1: config 0 descriptor?? [ 987.880813][ T24] usb 4-1: usb_control_msg returned -32 [ 987.910397][ T24] usbtmc 4-1:16.0: can't read capabilities [ 988.135007][T25813] usb 6-1: USB disconnect, device number 2 [ 988.353366][T25813] usb 4-1: USB disconnect, device number 26 [ 988.718738][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 988.860830][ T3044] netlink: 60 bytes leftover after parsing attributes in process `syz.5.13162'. [ 988.870640][ T3044] netlink: 60 bytes leftover after parsing attributes in process `syz.5.13162'. [ 988.887806][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 988.899147][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 988.914194][ T24] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 988.925205][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.936169][ T24] usb 5-1: Product: syz [ 988.942972][ T24] usb 5-1: Manufacturer: syz [ 988.947674][ T24] usb 5-1: SerialNumber: syz [ 988.964157][ T24] usb 5-1: config 0 descriptor?? [ 988.976022][ T3037] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 988.984908][ T3037] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 989.199474][ T3037] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 989.206788][ T3037] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 989.818201][ T24] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 989.842179][ T24] usb 5-1: USB disconnect, device number 13 [ 990.298696][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 990.368189][T25813] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 990.458725][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 990.472321][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 990.481054][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 990.494720][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 990.506652][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 990.517905][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 990.533012][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 990.533158][T25813] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 990.541234][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 990.563351][T25813] usb 4-1: config 0 has no interface number 0 [ 990.570562][T25813] usb 4-1: config 0 interface 41 has no altsetting 0 [ 990.583118][T25813] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 990.594357][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 990.601820][T25813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.623476][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 990.634718][T25813] usb 4-1: Product: syz [ 990.634737][T25813] usb 4-1: Manufacturer: syz [ 990.634753][T25813] usb 4-1: SerialNumber: syz [ 990.637584][T25813] usb 4-1: config 0 descriptor?? [ 990.668196][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 990.698855][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 990.706681][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 990.728318][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 990.768038][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 990.788174][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 990.814323][ T24] usb 6-1: string descriptor 0 read error: -22 [ 990.820887][ T24] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 990.833637][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.834170][ T3074] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 990.866488][ T24] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 991.020681][ T3079] [ 991.023073][ T3079] ===================================================== [ 991.030020][ T3079] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 991.037497][ T3079] 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 Not tainted [ 991.044629][ T3079] ----------------------------------------------------- [ 991.051582][ T3079] syz.1.13177/3079 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 991.059324][ T3079] ffff88802828dde0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 991.068038][ T3079] [ 991.068038][ T3079] and this task is already holding: [ 991.075405][ T3079] ffff88805b731028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 991.085165][ T3079] which would create a new lock dependency: [ 991.091046][ T3079] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 991.099153][ T3079] [ 991.099153][ T3079] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 991.108597][ T3079] (&client->buffer_lock){..-.}-{3:3} [ 991.108624][ T3079] [ 991.108624][ T3079] ... which became SOFTIRQ-irq-safe at: [ 991.121686][ T3079] lock_acquire+0x120/0x360 [ 991.126288][ T3079] _raw_spin_lock+0x2e/0x40 [ 991.130878][ T3079] evdev_pass_values+0xb9/0xbd0 [ 991.135835][ T3079] evdev_events+0x1e6/0x340 [ 991.140432][ T3079] input_pass_values+0x285/0x890 [ 991.145466][ T3079] input_event_dispose+0x3e5/0x6b0 [ 991.150664][ T3079] input_inject_event+0x1fe/0x320 [ 991.155793][ T3079] kd_sound_helper+0x19f/0x210 [ 991.160637][ T3079] input_handler_for_each_handle+0xfe/0x1c0 [ 991.166617][ T3079] call_timer_fn+0x17b/0x5f0 [ 991.171297][ T3079] __run_timer_base+0x61a/0x860 [ 991.176260][ T3079] run_timer_softirq+0xb7/0x180 [ 991.181235][ T3079] handle_softirqs+0x283/0x870 [ 991.186110][ T3079] do_softirq+0xec/0x180 [ 991.190454][ T3079] __local_bh_enable_ip+0x17d/0x1c0 [ 991.195755][ T3079] fpu_clone+0x431/0xae0 [ 991.200096][ T3079] copy_thread+0x3e3/0x990 [ 991.204609][ T3079] copy_process+0x187b/0x3b80 [ 991.209377][ T3079] kernel_clone+0x21e/0x870 [ 991.213972][ T3079] __se_sys_clone3+0x256/0x2d0 [ 991.218831][ T3079] do_int80_emulation+0x11f/0x200 [ 991.223962][ T3079] asm_int80_emulation+0x1a/0x20 [ 991.228996][ T3079] [ 991.228996][ T3079] to a SOFTIRQ-irq-unsafe lock: [ 991.236010][ T3079] (tasklist_lock){.+.+}-{3:3} [ 991.236037][ T3079] [ 991.236037][ T3079] ... which became SOFTIRQ-irq-unsafe at: [ 991.248678][ T3079] ... [ 991.248688][ T3079] lock_acquire+0x120/0x360 [ 991.255886][ T3079] _raw_read_lock+0x36/0x50 [ 991.260471][ T3079] __do_wait+0xde/0x740 [ 991.264720][ T3079] do_wait+0x1f8/0x520 [ 991.268891][ T3079] kernel_wait+0xab/0x170 [ 991.273324][ T3079] call_usermodehelper_exec_work+0xbe/0x230 [ 991.279311][ T3079] process_scheduled_works+0xadb/0x17a0 [ 991.284952][ T3079] worker_thread+0x8a0/0xda0 [ 991.289634][ T3079] kthread+0x70e/0x8a0 [ 991.294072][ T3079] ret_from_fork+0x4b/0x80 [ 991.298668][ T3079] ret_from_fork_asm+0x1a/0x30 [ 991.303523][ T3079] [ 991.303523][ T3079] other info that might help us debug this: [ 991.303523][ T3079] [ 991.313754][ T3079] Chain exists of: [ 991.313754][ T3079] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 991.313754][ T3079] [ 991.326885][ T3079] Possible interrupt unsafe locking scenario: [ 991.326885][ T3079] [ 991.335289][ T3079] CPU0 CPU1 [ 991.340655][ T3079] ---- ---- [ 991.346044][ T3079] lock(tasklist_lock); [ 991.350297][ T3079] local_irq_disable(); [ 991.357054][ T3079] lock(&client->buffer_lock); [ 991.364433][ T3079] lock(&new->fa_lock); [ 991.371224][ T3079] [ 991.374687][ T3079] lock(&client->buffer_lock); [ 991.379715][ T3079] [ 991.379715][ T3079] *** DEADLOCK *** [ 991.379715][ T3079] [ 991.387857][ T3079] 7 locks held by syz.1.13177/3079: [ 991.393061][ T3079] #0: ffff888029629118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 991.402232][ T3079] #1: ffff888141b50230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 991.412363][ T3079] #2: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 991.422067][ T3079] #3: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 991.431669][ T3079] #4: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 991.440842][ T3079] #5: ffff88805b731028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 991.451052][ T3079] #6: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 991.460105][ T3079] [ 991.460105][ T3079] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 991.470519][ T3079] -> (&client->buffer_lock){..-.}-{3:3} { [ 991.476262][ T3079] IN-SOFTIRQ-W at: [ 991.480239][ T3079] lock_acquire+0x120/0x360 [ 991.486397][ T3079] _raw_spin_lock+0x2e/0x40 [ 991.492544][ T3079] evdev_pass_values+0xb9/0xbd0 [ 991.499071][ T3079] evdev_events+0x1e6/0x340 [ 991.505243][ T3079] input_pass_values+0x285/0x890 [ 991.511841][ T3079] input_event_dispose+0x3e5/0x6b0 [ 991.518615][ T3079] input_inject_event+0x1fe/0x320 [ 991.525294][ T3079] kd_sound_helper+0x19f/0x210 [ 991.531727][ T3079] input_handler_for_each_handle+0xfe/0x1c0 [ 991.539493][ T3079] call_timer_fn+0x17b/0x5f0 [ 991.545742][ T3079] __run_timer_base+0x61a/0x860 [ 991.552246][ T3079] run_timer_softirq+0xb7/0x180 [ 991.558753][ T3079] handle_softirqs+0x283/0x870 [ 991.565176][ T3079] do_softirq+0xec/0x180 [ 991.571077][ T3079] __local_bh_enable_ip+0x17d/0x1c0 [ 991.577934][ T3079] fpu_clone+0x431/0xae0 [ 991.583838][ T3079] copy_thread+0x3e3/0x990 [ 991.589906][ T3079] copy_process+0x187b/0x3b80 [ 991.596230][ T3079] kernel_clone+0x21e/0x870 [ 991.602385][ T3079] __se_sys_clone3+0x256/0x2d0 [ 991.608810][ T3079] do_int80_emulation+0x11f/0x200 [ 991.615497][ T3079] asm_int80_emulation+0x1a/0x20 [ 991.622089][ T3079] INITIAL USE at: [ 991.626035][ T3079] lock_acquire+0x120/0x360 [ 991.632115][ T3079] _raw_spin_lock_irqsave+0xa7/0xf0 [ 991.638881][ T3079] evdev_ioctl_handler+0x1969/0x1f10 [ 991.645739][ T3079] __ia32_compat_sys_ioctl+0x551/0x840 [ 991.652760][ T3079] __do_fast_syscall_32+0xb4/0x110 [ 991.659432][ T3079] do_fast_syscall_32+0x34/0x80 [ 991.665847][ T3079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 991.673751][ T3079] } [ 991.676258][ T3079] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 991.684420][ T3079] [ 991.684420][ T3079] the dependencies between the lock to be acquired [ 991.684431][ T3079] and SOFTIRQ-irq-unsafe lock: [ 991.697944][ T3079] -> (tasklist_lock){.+.+}-{3:3} { [ 991.703252][ T3079] HARDIRQ-ON-R at: [ 991.707405][ T3079] lock_acquire+0x120/0x360 [ 991.713914][ T3079] _raw_read_lock+0x36/0x50 [ 991.720418][ T3079] __do_wait+0xde/0x740 [ 991.726599][ T3079] do_wait+0x1f8/0x520 [ 991.732668][ T3079] kernel_wait+0xab/0x170 [ 991.739004][ T3079] call_usermodehelper_exec_work+0xbe/0x230 [ 991.746908][ T3079] process_scheduled_works+0xadb/0x17a0 [ 991.754464][ T3079] worker_thread+0x8a0/0xda0 [ 991.761051][ T3079] kthread+0x70e/0x8a0 [ 991.767119][ T3079] ret_from_fork+0x4b/0x80 [ 991.773537][ T3079] ret_from_fork_asm+0x1a/0x30 [ 991.780300][ T3079] SOFTIRQ-ON-R at: [ 991.784459][ T3079] lock_acquire+0x120/0x360 [ 991.791001][ T3079] _raw_read_lock+0x36/0x50 [ 991.797502][ T3079] __do_wait+0xde/0x740 [ 991.803663][ T3079] do_wait+0x1f8/0x520 [ 991.809746][ T3079] kernel_wait+0xab/0x170 [ 991.816076][ T3079] call_usermodehelper_exec_work+0xbe/0x230 [ 991.823981][ T3079] process_scheduled_works+0xadb/0x17a0 [ 991.831535][ T3079] worker_thread+0x8a0/0xda0 [ 991.838123][ T3079] kthread+0x70e/0x8a0 [ 991.844192][ T3079] ret_from_fork+0x4b/0x80 [ 991.850609][ T3079] ret_from_fork_asm+0x1a/0x30 [ 991.857371][ T3079] INITIAL USE at: [ 991.861614][ T3079] lock_acquire+0x120/0x360 [ 991.868038][ T3079] _raw_write_lock_irq+0xa2/0xf0 [ 991.874900][ T3079] copy_process+0x21d5/0x3b80 [ 991.881487][ T3079] kernel_clone+0x21e/0x870 [ 991.887901][ T3079] user_mode_thread+0xdd/0x140 [ 991.894578][ T3079] rest_init+0x23/0x300 [ 991.900669][ T3079] start_kernel+0x470/0x4f0 [ 991.907111][ T3079] x86_64_start_reservations+0x2a/0x30 [ 991.914480][ T3079] x86_64_start_kernel+0x66/0x70 [ 991.921330][ T3079] common_startup_64+0x13e/0x147 [ 991.928188][ T3079] INITIAL READ USE at: [ 991.932696][ T3079] lock_acquire+0x120/0x360 [ 991.939549][ T3079] _raw_read_lock+0x36/0x50 [ 991.946396][ T3079] __do_wait+0xde/0x740 [ 991.952906][ T3079] do_wait+0x1f8/0x520 [ 991.959340][ T3079] kernel_wait+0xab/0x170 [ 991.966018][ T3079] call_usermodehelper_exec_work+0xbe/0x230 [ 991.974262][ T3079] process_scheduled_works+0xadb/0x17a0 [ 991.982157][ T3079] worker_thread+0x8a0/0xda0 [ 991.989102][ T3079] kthread+0x70e/0x8a0 [ 991.995511][ T3079] ret_from_fork+0x4b/0x80 [ 992.002269][ T3079] ret_from_fork_asm+0x1a/0x30 [ 992.009388][ T3079] } [ 992.012061][ T3079] ... key at: [] tasklist_lock+0x18/0x40 [ 992.019962][ T3079] ... acquired at: [ 992.023939][ T3079] lock_acquire+0x120/0x360 [ 992.028625][ T3079] _raw_read_lock+0x36/0x50 [ 992.033298][ T3079] send_sigurg+0x12b/0x420 [ 992.037885][ T3079] sk_send_sigurg+0x6c/0x2e0 [ 992.042655][ T3079] queue_oob+0x3d9/0x4e0 [ 992.047098][ T3079] unix_stream_sendmsg+0xa41/0xb60 [ 992.052392][ T3079] __sock_sendmsg+0x219/0x270 [ 992.057259][ T3079] ____sys_sendmsg+0x52d/0x830 [ 992.062195][ T3079] ___sys_sendmsg+0x21f/0x2a0 [ 992.067050][ T3079] __sys_sendmmsg+0x28e/0x430 [ 992.071911][ T3079] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 992.077648][ T3079] __do_fast_syscall_32+0xb4/0x110 [ 992.082943][ T3079] do_fast_syscall_32+0x34/0x80 [ 992.087974][ T3079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 992.094482][ T3079] [ 992.096804][ T3079] -> (&f_owner->lock){....}-{3:3} { [ 992.102143][ T3079] INITIAL USE at: [ 992.106129][ T3079] lock_acquire+0x120/0x360 [ 992.112387][ T3079] _raw_write_lock_irq+0xa2/0xf0 [ 992.119061][ T3079] __f_setown+0x67/0x370 [ 992.125046][ T3079] fcntl_dirnotify+0x3d6/0x690 [ 992.131555][ T3079] do_fcntl+0x6c7/0x1910 [ 992.137540][ T3079] do_compat_fcntl64+0x484/0x720 [ 992.144216][ T3079] __do_fast_syscall_32+0xb4/0x110 [ 992.151092][ T3079] do_fast_syscall_32+0x34/0x80 [ 992.157680][ T3079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 992.165743][ T3079] INITIAL READ USE at: [ 992.170160][ T3079] lock_acquire+0x120/0x360 [ 992.176833][ T3079] _raw_read_lock_irq+0xaa/0xf0 [ 992.183849][ T3079] f_getown+0x54/0x2a0 [ 992.190091][ T3079] sock_ioctl+0x536/0x790 [ 992.196609][ T3079] compat_sock_ioctl+0x285/0xc80 [ 992.203729][ T3079] __ia32_compat_sys_ioctl+0x551/0x840 [ 992.211362][ T3079] __do_fast_syscall_32+0xb4/0x110 [ 992.218660][ T3079] do_fast_syscall_32+0x34/0x80 [ 992.225698][ T3079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 992.234204][ T3079] } [ 992.236791][ T3079] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 992.245731][ T3079] ... acquired at: [ 992.249618][ T3079] lock_acquire+0x120/0x360 [ 992.254309][ T3079] _raw_read_lock_irqsave+0xaf/0x100 [ 992.259766][ T3079] send_sigio+0x38/0x370 [ 992.264192][ T3079] kill_fasync+0x24d/0x4d0 [ 992.268785][ T3079] lease_break_callback+0x26/0x30 [ 992.273996][ T3079] __break_lease+0x6a2/0x1620 [ 992.278856][ T3079] do_dentry_open+0xd62/0x1970 [ 992.283821][ T3079] vfs_open+0x3b/0x340 [ 992.288067][ T3079] path_openat+0x2ee5/0x3830 [ 992.292826][ T3079] do_filp_open+0x1fa/0x410 [ 992.297505][ T3079] do_sys_openat2+0x121/0x1c0 [ 992.302376][ T3079] __ia32_compat_sys_open+0x117/0x140 [ 992.307928][ T3079] __do_fast_syscall_32+0xb4/0x110 [ 992.313210][ T3079] do_fast_syscall_32+0x34/0x80 [ 992.318237][ T3079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 992.324744][ T3079] [ 992.327066][ T3079] -> (&new->fa_lock){....}-{3:3} { [ 992.332211][ T3079] INITIAL USE at: [ 992.336101][ T3079] lock_acquire+0x120/0x360 [ 992.342175][ T3079] _raw_write_lock_irq+0xa2/0xf0 [ 992.348676][ T3079] fasync_remove_entry+0xf1/0x1c0 [ 992.355282][ T3079] __fput+0x89f/0xa70 [ 992.360830][ T3079] fput_close_sync+0x119/0x200 [ 992.367181][ T3079] __ia32_sys_close+0x7f/0x110 [ 992.373514][ T3079] __do_fast_syscall_32+0xb4/0x110 [ 992.380217][ T3079] do_fast_syscall_32+0x34/0x80 [ 992.386638][ T3079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 992.394532][ T3079] INITIAL READ USE at: [ 992.398860][ T3079] lock_acquire+0x120/0x360 [ 992.405363][ T3079] _raw_read_lock_irqsave+0xaf/0x100 [ 992.412644][ T3079] kill_fasync+0x199/0x4d0 [ 992.419054][ T3079] vcs_notifier+0x14b/0x1f0 [ 992.425561][ T3079] notifier_call_chain+0x1b3/0x3e0 [ 992.432690][ T3079] atomic_notifier_call_chain+0xda/0x180 [ 992.440321][ T3079] vcs_scr_updated+0x8c/0xd0 [ 992.446910][ T3079] vcs_write+0x105f/0x1260 [ 992.453321][ T3079] vfs_write+0x27b/0xa90 [ 992.459556][ T3079] ksys_write+0x145/0x250 [ 992.465886][ T3079] __do_fast_syscall_32+0xb4/0x110 [ 992.473002][ T3079] do_fast_syscall_32+0x34/0x80 [ 992.479871][ T3079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 992.488218][ T3079] } [ 992.490716][ T3079] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 992.499393][ T3079] ... acquired at: [ 992.503190][ T3079] lock_acquire+0x120/0x360 [ 992.507882][ T3079] _raw_read_lock_irqsave+0xaf/0x100 [ 992.513342][ T3079] kill_fasync+0x199/0x4d0 [ 992.517929][ T3079] evdev_pass_values+0x627/0xbd0 [ 992.523051][ T3079] evdev_events+0x1e6/0x340 [ 992.527735][ T3079] input_pass_values+0x285/0x890 [ 992.532856][ T3079] input_event_dispose+0x330/0x6b0 [ 992.538167][ T3079] input_inject_event+0x1fe/0x320 [ 992.543368][ T3079] evdev_write+0x2fc/0x480 [ 992.547962][ T3079] vfs_write+0x27b/0xa90 [ 992.552389][ T3079] ksys_write+0x145/0x250 [ 992.556898][ T3079] __do_fast_syscall_32+0xb4/0x110 [ 992.562187][ T3079] do_fast_syscall_32+0x34/0x80 [ 992.567214][ T3079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 992.573718][ T3079] [ 992.576035][ T3079] [ 992.576035][ T3079] stack backtrace: [ 992.581940][ T3079] CPU: 0 UID: 0 PID: 3079 Comm: syz.1.13177 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 992.581970][ T3079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 992.581989][ T3079] Call Trace: [ 992.582002][ T3079] [ 992.582010][ T3079] dump_stack_lvl+0x189/0x250 [ 992.582039][ T3079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 992.582064][ T3079] ? __pfx__printk+0x10/0x10 [ 992.582084][ T3079] validate_chain+0x1f05/0x2140 [ 992.582109][ T3079] __lock_acquire+0xaac/0xd20 [ 992.582134][ T3079] ? kill_fasync+0x199/0x4d0 [ 992.582148][ T3079] lock_acquire+0x120/0x360 [ 992.582170][ T3079] ? kill_fasync+0x199/0x4d0 [ 992.582185][ T3079] ? __lock_acquire+0xaac/0xd20 [ 992.582210][ T3079] _raw_read_lock_irqsave+0xaf/0x100 [ 992.582227][ T3079] ? kill_fasync+0x199/0x4d0 [ 992.582241][ T3079] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 992.582257][ T3079] ? do_raw_spin_lock+0x121/0x290 [ 992.582278][ T3079] kill_fasync+0x199/0x4d0 [ 992.582292][ T3079] ? kill_fasync+0x53/0x4d0 [ 992.582307][ T3079] evdev_pass_values+0x627/0xbd0 [ 992.582333][ T3079] ? evdev_pass_values+0x5a1/0xbd0 [ 992.582358][ T3079] evdev_events+0x1e6/0x340 [ 992.582391][ T3079] ? evdev_events+0x79/0x340 [ 992.582413][ T3079] ? input_pass_values+0x8d/0x890 [ 992.582433][ T3079] input_pass_values+0x285/0x890 [ 992.582457][ T3079] ? input_handle_event+0x70c/0xf30 [ 992.582476][ T3079] input_event_dispose+0x330/0x6b0 [ 992.582495][ T3079] input_inject_event+0x1fe/0x320 [ 992.582513][ T3079] ? input_inject_event+0xbc/0x320 [ 992.582532][ T3079] evdev_write+0x2fc/0x480 [ 992.582557][ T3079] ? __pfx_evdev_write+0x10/0x10 [ 992.582580][ T3079] ? bpf_lsm_file_permission+0x9/0x20 [ 992.582600][ T3079] ? security_file_permission+0x75/0x290 [ 992.582625][ T3079] ? rw_verify_area+0x258/0x650 [ 992.582642][ T3079] ? __pfx_evdev_write+0x10/0x10 [ 992.582665][ T3079] vfs_write+0x27b/0xa90 [ 992.582685][ T3079] ? __pfx_vfs_write+0x10/0x10 [ 992.582703][ T3079] ? __fget_files+0x2a/0x420 [ 992.582724][ T3079] ? __fget_files+0x2a/0x420 [ 992.582744][ T3079] ? __fget_files+0x3a0/0x420 [ 992.582763][ T3079] ? __fget_files+0x2a/0x420 [ 992.582786][ T3079] ksys_write+0x145/0x250 [ 992.582804][ T3079] ? __pfx_ksys_write+0x10/0x10 [ 992.582822][ T3079] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 992.582841][ T3079] ? lockdep_hardirqs_on+0x9c/0x150 [ 992.582859][ T3079] __do_fast_syscall_32+0xb4/0x110 [ 992.582886][ T3079] do_fast_syscall_32+0x34/0x80 [ 992.582905][ T3079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 992.582925][ T3079] RIP: 0023:0xf7f36539 [ 992.582944][ T3079] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 992.582958][ T3079] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 992.582976][ T3079] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 992.582988][ T3079] RDX: 0000000000002250 RSI: 0000000000000000 RDI: 0000000000000000 [ 992.582998][ T3079] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 992.583007][ T3079] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 992.583017][ T3079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 992.583033][ T3079] [ 992.916330][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.923259][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.129444][ T24] usb 6-1: USB disconnect, device number 3 [ 993.136486][ T3084] usb 6-1: Couldn't submit interrupt_out_urb -19 [ 993.454419][T25813] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 993.465681][T25813] usb 4-1: USB disconnect, device number 27