last executing test programs: 38.698887163s ago: executing program 4 (id=8789): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02004000000000010000000080218d09", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 38.571177884s ago: executing program 4 (id=8790): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x5b79, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) 38.502337527s ago: executing program 4 (id=8791): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x19) 38.191717823s ago: executing program 4 (id=8793): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x245) 38.087399559s ago: executing program 4 (id=8794): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4048081) 37.657035927s ago: executing program 4 (id=8798): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r2 = eventfd2(0x6, 0x800) io_getevents(r1, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0) io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 37.200829246s ago: executing program 32 (id=8798): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r2 = eventfd2(0x6, 0x800) io_getevents(r1, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0) io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 6.559019449s ago: executing program 2 (id=9046): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) 5.14122962s ago: executing program 2 (id=9058): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000200)="00a69c6c03", 0x5}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 4.988333458s ago: executing program 2 (id=9060): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000440)="66f30f11de660f20d364260f013525af72b80f01c5f0f61866baf80c0f38cc8500000000ef66bafc0c66edc4c279417306660fc7717bc4c1d9d5be6806bbfb", 0x3f}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.794848847s ago: executing program 2 (id=9061): r0 = syz_io_uring_setup(0x832, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r3 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x2020, 0x1}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 4.617893117s ago: executing program 2 (id=9065): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x12, 0x0, &(0x7f0000000080)=0x60) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x442, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000080)=0x2) 3.720170926s ago: executing program 1 (id=9079): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) 3.579614739s ago: executing program 2 (id=9080): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000002c0)=0x6, 0x4) 2.660501367s ago: executing program 0 (id=9086): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000001c0)=@req={0x3fe, 0x0, 0x20000000, 0x622}, 0x10) 2.175285549s ago: executing program 5 (id=9089): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x59c8, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x2, 0x0) 1.970973173s ago: executing program 5 (id=9091): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x10000008}) 1.818730944s ago: executing program 5 (id=9093): syz_open_dev$evdev(0x0, 0x0, 0x802) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 1.758992787s ago: executing program 1 (id=9094): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x52000775) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1.623881943s ago: executing program 0 (id=9095): r0 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.616076734s ago: executing program 1 (id=9096): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000002fc0)='dctcp\x00', 0x6) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 1.493246209s ago: executing program 3 (id=9097): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x40, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x2) 1.423753797s ago: executing program 0 (id=9098): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}]}, 0x38}}, 0x44850) 1.278898689s ago: executing program 1 (id=9099): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udplite\x00') mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) r0 = getpid() syz_open_procfs(r0, &(0x7f0000000080)='net/udplite6\x00') 1.27844344s ago: executing program 3 (id=9100): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) sendto$unix(r1, 0x0, 0x0, 0x40000, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 1.201531597s ago: executing program 3 (id=9101): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1c3, 0x0, 0x0, 0x42, 0x2e}) 1.099971881s ago: executing program 1 (id=9102): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x708}], 0x1, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f0000003200)=""/4096, 0x1000) write$dsp(r0, &(0x7f0000002200)="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", 0x1000) 805.545592ms ago: executing program 5 (id=9103): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000600)=ANY=[], 0x61) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x5}, 0x8) 786.969698ms ago: executing program 0 (id=9104): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 560.561955ms ago: executing program 3 (id=9105): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0800000011ff03000001"], 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000100), 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 520.398203ms ago: executing program 5 (id=9106): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 435.347708ms ago: executing program 0 (id=9107): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) write(r0, &(0x7f0000000440)="9641a3", 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(r0, r0, 0x0, 0x800000a1e) 335.446603ms ago: executing program 3 (id=9108): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r3, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) 274.025407ms ago: executing program 5 (id=9109): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)={0x120, r2, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x10c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x101, 0x4, "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"}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 38.388199ms ago: executing program 1 (id=9110): syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f0000000240)="b9") r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 28.39457ms ago: executing program 3 (id=9111): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r1, &(0x7f0000003780)={0x2020}, 0x2020) 0s ago: executing program 0 (id=9112): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = gettid() tkill(r1, 0x12) tkill(r0, 0x1) tkill(r1, 0x14) kernel console output (not intermixed with test programs): 4] Buffer I/O error on dev loop6, logical block 1, async page read [ 653.847716][ T5903] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 653.878709][ T5903] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 653.916183][ T5903] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 653.933999][ T5890] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 653.965749][ T5903] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 653.996402][ T5903] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 654.062647][ T5903] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 654.085921][ T5903] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 654.093700][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 654.113839][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 654.116197][ T5903] plantronics 0003:047F:FFFF.0090: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 654.158623][ T5890] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.181219][ T5890] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.194117][ T5890] usb 3-1: config 0 interface 0 has no altsetting 0 [ 654.200758][ T5890] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 654.212773][ T5903] usb 2-1: USB disconnect, device number 83 [ 654.222146][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.304704][ T5890] usb 3-1: config 0 descriptor?? [ 654.342448][T27206] fido_id[27206]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 654.543832][ T5921] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 654.563695][ T5920] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 654.705595][ T5921] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 654.724099][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 654.738987][ T5890] hid (null): bogus close delimiter [ 654.743693][ T5920] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.755980][ T5890] cougar 0003:060B:500A.0091: unexpected long global item [ 654.762371][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 654.774282][ T5920] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 654.775489][ T5890] cougar 0003:060B:500A.0091: parse failed [ 654.788622][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 654.790693][ T5890] cougar 0003:060B:500A.0091: probe with driver cougar failed with error -22 [ 654.822238][ T5920] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 654.835480][T27228] netlink: 'syz.1.8070': attribute type 13 has an invalid length. [ 654.843623][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.851646][ T5920] usb 1-1: Product: syz [ 654.856120][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 654.861206][T27228] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 654.869307][ T5920] usb 1-1: Manufacturer: syz [ 654.884553][ T5921] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 654.893717][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.893930][T27228] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 654.903160][ T5920] usb 1-1: SerialNumber: syz [ 654.910488][T27228] gretap1: entered promiscuous mode [ 654.919779][T27228] gretap1: entered allmulticast mode [ 654.920610][ T5921] usb 5-1: config 0 descriptor?? [ 654.944306][T27211] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 655.009561][ T5890] usb 3-1: USB disconnect, device number 98 [ 655.133652][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 655.145604][ T5920] usb 1-1: 0:2 : does not exist [ 655.159290][ T5920] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 655.192646][ T5920] usb 1-1: USB disconnect, device number 88 [ 655.303922][T25913] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 655.378617][ T5921] plantronics 0003:047F:FFFF.0092: unknown main item tag 0x0 [ 655.386970][ T5921] plantronics 0003:047F:FFFF.0092: unknown main item tag 0x0 [ 655.394592][ T5921] plantronics 0003:047F:FFFF.0092: unknown main item tag 0x0 [ 655.402082][ T5921] plantronics 0003:047F:FFFF.0092: unknown main item tag 0x0 [ 655.409641][ T5921] plantronics 0003:047F:FFFF.0092: unknown main item tag 0x0 [ 655.423705][ T5921] plantronics 0003:047F:FFFF.0092: unknown main item tag 0x0 [ 655.442426][ T5921] plantronics 0003:047F:FFFF.0092: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 655.477501][T25913] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 655.496037][T25913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 655.526352][T25913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 655.544484][T25913] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 655.592271][T25913] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 655.611956][T25913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.635633][T25913] usb 2-1: config 0 descriptor?? [ 655.647108][ T5890] usb 5-1: USB disconnect, device number 115 [ 656.076341][T25913] plantronics 0003:047F:FFFF.0093: ignoring exceeding usage max [ 656.136152][T25913] plantronics 0003:047F:FFFF.0093: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 656.173646][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 656.699071][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 656.699087][ T30] audit: type=1326 audit(1751460877.027:9529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27267 comm="syz.0.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd945b8e929 code=0x7ffc0000 [ 656.734151][ T30] audit: type=1326 audit(1751460877.057:9530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27267 comm="syz.0.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd945b8e929 code=0x7ffc0000 [ 656.757638][ T30] audit: type=1326 audit(1751460877.057:9531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27267 comm="syz.0.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd945b8e929 code=0x7ffc0000 [ 656.818210][ T30] audit: type=1326 audit(1751460877.057:9532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27267 comm="syz.0.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd945b8e929 code=0x7ffc0000 [ 656.937268][ T30] audit: type=1326 audit(1751460877.067:9533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27267 comm="syz.0.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd945b8e929 code=0x7ffc0000 [ 657.171134][ T30] audit: type=1326 audit(1751460877.067:9534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27267 comm="syz.0.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd945b8e929 code=0x7ffc0000 [ 657.213720][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 657.367691][ T30] audit: type=1326 audit(1751460877.067:9535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27267 comm="syz.0.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd945b8e929 code=0x7ffc0000 [ 657.485220][ T30] audit: type=1326 audit(1751460877.067:9536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27267 comm="syz.0.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd945b8e929 code=0x7ffc0000 [ 657.648314][ T30] audit: type=1326 audit(1751460877.067:9537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27267 comm="syz.0.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd945b2ab19 code=0x7ffc0000 [ 657.726139][ T30] audit: type=1326 audit(1751460877.067:9538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27267 comm="syz.0.8087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd945b2ab19 code=0x7ffc0000 [ 657.794110][T25913] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 657.882504][T27293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8099'. [ 657.946174][T25913] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 657.952846][T27297] input: syz0 as /devices/virtual/input/input120 [ 657.978715][T25913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 658.019825][T25913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 658.048280][T25913] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 658.068161][T25913] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 658.078388][T25913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.096958][T25913] usb 4-1: config 0 descriptor?? [ 658.110183][T27283] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 658.145312][ T9] usb 2-1: USB disconnect, device number 84 [ 658.253648][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 658.548134][T25913] plantronics 0003:047F:FFFF.0094: reserved main item tag 0xd [ 658.559878][T25913] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 658.567832][T25913] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 658.601303][T25913] plantronics 0003:047F:FFFF.0094: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 658.846181][ T9] usb 4-1: USB disconnect, device number 94 [ 658.990550][T27332] input: syz1 as /devices/virtual/input/input121 [ 659.293680][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 659.822355][T27369] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 659.824210][ T5832] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 660.003763][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 660.017634][ T5832] usb 5-1: config 8 has an invalid interface number: 75 but max is 0 [ 660.026762][ T5832] usb 5-1: config 8 has no interface number 0 [ 660.032984][ T5832] usb 5-1: config 8 interface 75 altsetting 1 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 660.046548][ T5832] usb 5-1: config 8 interface 75 altsetting 1 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 660.067018][ T5832] usb 5-1: config 8 interface 75 altsetting 1 endpoint 0xC has invalid maxpacket 2046, setting to 64 [ 660.086220][ T5832] usb 5-1: config 8 interface 75 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 660.111352][ T5832] usb 5-1: config 8 interface 75 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 660.173768][ T5832] usb 5-1: config 8 interface 75 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 660.219511][ T5832] usb 5-1: config 8 interface 75 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 660.261394][ T5832] usb 5-1: config 8 interface 75 has no altsetting 0 [ 660.281435][ T5832] usb 5-1: New USB device found, idVendor=045e, idProduct=07c6, bcdDevice=64.2b [ 660.327105][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.335934][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 660.344228][ T5832] usb 5-1: Product: syz [ 660.348416][ T5832] usb 5-1: Manufacturer: syz [ 660.353423][ T5832] usb 5-1: SerialNumber: syz [ 660.372127][ T5832] r8152-cfgselector 5-1: Unknown version 0x0000 [ 660.615039][ T5832] r8152-cfgselector 5-1: USB disconnect, device number 116 [ 660.763789][ T9] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 660.925523][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 660.932745][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 660.941427][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 660.951269][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 660.961121][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 660.972162][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 660.983746][T25913] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 660.986489][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 660.993063][ T5921] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 661.002165][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.183682][T25913] usb 2-1: Using ep0 maxpacket: 16 [ 661.193319][T25913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.230792][ T9] usb 3-1: usb_control_msg returned -32 [ 661.233797][ T5921] usb 4-1: config 0 has an invalid interface number: 104 but max is 0 [ 661.249328][T25913] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 661.259459][ T5921] usb 4-1: config 0 has no interface number 0 [ 661.266210][T25913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.267198][ T9] usbtmc 3-1:16.0: can't read capabilities [ 661.274668][ T5921] usb 4-1: config 0 interface 104 has no altsetting 0 [ 661.291602][ T5921] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 661.319930][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.341260][ T5921] usb 4-1: Product: syz [ 661.348848][T25913] usb 2-1: config 0 descriptor?? [ 661.371740][ T5921] usb 4-1: Manufacturer: syz [ 661.376535][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 661.419602][ T5921] usb 4-1: SerialNumber: syz [ 661.450678][ T5921] usb 4-1: config 0 descriptor?? [ 661.487524][ T5921] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 661.689786][ T5921] gspca_vc032x: reg_r err -71 [ 661.717435][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 661.722818][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 661.746552][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 661.752089][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 661.772400][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 661.831164][T25913] mcp2221 0003:04D8:00DD.0095: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 661.852549][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 661.862961][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 661.870357][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 661.933411][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 661.978132][ T9] usb 3-1: USB disconnect, device number 99 [ 661.981287][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 661.995703][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 662.001316][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 662.010995][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 662.019688][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 662.035122][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 662.041313][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 662.059455][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 662.073300][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 662.081006][ T5921] gspca_vc032x: Unknown sensor... [ 662.086976][ T5921] vc032x 4-1:0.104: probe with driver vc032x failed with error -22 [ 662.107632][ T5921] usb 4-1: USB disconnect, device number 95 [ 662.183638][ T5920] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 662.209318][T27433] IPVS: Scheduler module ip_vs_ not found [ 662.258154][T27436] input: syz0 as /devices/virtual/input/input122 [ 662.261923][T25913] usb 2-1: USB disconnect, device number 85 [ 662.364879][ T5920] usb 5-1: config 0 has an invalid interface number: 30 but max is 0 [ 662.373054][ T5920] usb 5-1: config 0 has no interface number 0 [ 662.394941][ T5920] usb 5-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 662.408829][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.417079][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 662.442707][ T5920] usb 5-1: config 0 descriptor?? [ 662.461724][ T5920] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 662.483409][ T5920] usb 5-1: setting power ON [ 662.493245][ T5920] dvb-usb: bulk message failed: -22 (2/0) [ 662.634223][ T5920] dvb-usb: bulk message failed: -22 (1/0) [ 662.758342][ T5920] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 662.799592][ T5920] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 662.827806][ T5920] dvb_usb_cxusb 5-1:0.30: probe with driver dvb_usb_cxusb failed with error -22 [ 662.853323][ T5920] usb 5-1: USB disconnect, device number 117 [ 663.133843][ T5921] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 663.229499][T27462] syzkaller1: entered promiscuous mode [ 663.236075][T27462] syzkaller1: entered allmulticast mode [ 663.294868][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 663.310600][ T5921] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 663.336315][ T5921] usb 2-1: config 0 has no interface number 0 [ 663.342491][ T5921] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 663.359539][ T5921] usb 2-1: config 0 interface 85 has no altsetting 0 [ 663.370288][ T5921] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 663.383549][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.391897][ T5921] usb 2-1: Product: syz [ 663.401977][ T5921] usb 2-1: Manufacturer: syz [ 663.413801][ T5921] usb 2-1: SerialNumber: syz [ 663.451297][ T5921] usb 2-1: config 0 descriptor?? [ 663.456435][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 663.516529][T27473] sctp: [Deprecated]: syz.2.8175 (pid 27473) Use of struct sctp_assoc_value in delayed_ack socket option. [ 663.516529][T27473] Use struct sctp_sack_info instead [ 664.134386][ T9] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 664.193685][ T5889] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 664.253775][ T5921] appletouch 2-1:0.85: Geyser mode initialized. [ 664.261498][ T5921] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input123 [ 664.272700][ C1] appletouch 2-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 664.307912][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 664.324899][ T9] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 664.343741][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.362253][ T9] usb 4-1: config 0 descriptor?? [ 664.374825][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.393946][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.414628][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 664.437408][ T5889] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 664.483096][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.493646][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 664.499718][ T5889] usb 5-1: config 0 descriptor?? [ 664.607632][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 664.793793][ T5921] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 664.925745][ T5889] plantronics 0003:047F:FFFF.0096: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 664.943890][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 664.955731][ T5921] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 664.973973][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.994697][ T5921] usb 3-1: config 0 descriptor?? [ 665.024048][ T5921] gspca_main: sq930x-2.14.0 probing 041e:403c [ 665.176595][ T5889] usb 5-1: USB disconnect, device number 118 [ 665.410737][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 665.432795][ T9] asix 4-1:0.0: probe with driver asix failed with error -71 [ 665.445703][ T9] usb 4-1: USB disconnect, device number 96 [ 665.509030][T27501] tmpfs: Unknown parameter '#! ./file0 [ 665.509030][T27501] :WJGPV9HN7&xۭo_ҙ/?KýI [ 665.509030][T27501] _XM2ov"~Xcēe8m' [ 665.533654][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 665.910108][ T9] usb 2-1: USB disconnect, device number 86 [ 665.962498][ T9] appletouch 2-1:0.85: input: appletouch disconnected [ 666.017903][ T5921] gspca_sq930x: ucbus_write failed -71 [ 666.042603][ T5921] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 666.056027][T27517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8195'. [ 666.065636][ T5921] usb 3-1: USB disconnect, device number 100 [ 666.079051][T27517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8195'. [ 666.113711][ T5890] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 666.135729][T27517] netlink: 'syz.3.8195': attribute type 19 has an invalid length. [ 666.293635][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 666.307790][ T5890] usb 5-1: unable to get BOS descriptor or descriptor too short [ 666.334659][ T5890] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 666.350103][ T5890] usb 5-1: can't read configurations, error -71 [ 666.558148][T27533] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 666.573680][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 666.909662][T27547] macvlan1: entered promiscuous mode [ 666.928027][T27547] bond0: entered promiscuous mode [ 666.933112][T27547] bond_slave_0: entered promiscuous mode [ 666.953653][ T5921] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 666.953800][T27547] bond_slave_1: entered promiscuous mode [ 666.975072][T27547] bond0: left promiscuous mode [ 666.979970][T27547] bond_slave_0: left promiscuous mode [ 666.993806][T27547] bond_slave_1: left promiscuous mode [ 666.999799][T27547] macvlan1: left promiscuous mode [ 667.101247][T27554] macsec3: entered promiscuous mode [ 667.110214][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 667.144093][ T5921] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 667.155349][T27554] dummy0: entered promiscuous mode [ 667.164435][ T5921] usb 1-1: config 0 has no interface number 0 [ 667.178866][T27554] macsec3: entered allmulticast mode [ 667.201495][T27554] dummy0: entered allmulticast mode [ 667.217891][ T5921] usb 1-1: config 0 interface 184 has no altsetting 0 [ 667.231874][T27554] dummy0: left allmulticast mode [ 667.237439][ T5921] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 667.247613][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.251022][T27554] dummy0: left promiscuous mode [ 667.256731][ T5921] usb 1-1: Product: syz [ 667.265878][ T5921] usb 1-1: Manufacturer: syz [ 667.270588][ T5921] usb 1-1: SerialNumber: syz [ 667.322197][ T5921] usb 1-1: config 0 descriptor?? [ 667.356610][ T5921] smsc75xx v1.0.0 [ 667.384420][T27563] syzkaller1: entered promiscuous mode [ 667.389943][T27563] syzkaller1: entered allmulticast mode [ 667.613837][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 667.882733][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 667.949779][ T5921] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 667.970308][ T5921] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 668.064181][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 668.082573][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 668.092189][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.109897][ T9] usb 2-1: config 0 descriptor?? [ 668.119928][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 668.196737][ T5921] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 668.230841][ T5921] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 668.241711][ T5921] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 668.264689][ T5921] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 668.278807][ T5921] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 668.342742][ T5921] usb 1-1: USB disconnect, device number 89 [ 668.653623][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 669.158358][ T9] gspca_sunplus: reg_w_riv err -71 [ 669.163715][ T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 669.207005][ T9] usb 2-1: USB disconnect, device number 87 [ 669.500014][T27624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8242'. [ 669.562551][T27627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8241'. [ 669.640401][T27633] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.8245'. [ 669.650018][T27627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8241'. [ 669.693715][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 670.733687][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 671.013985][ T5921] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 671.195341][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 671.202617][ T5921] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 671.211583][ T5921] usb 5-1: config 0 has no interface number 0 [ 671.223876][ T5921] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 671.247399][ T5921] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 671.280452][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.342555][ T5921] usb 5-1: config 0 descriptor?? [ 671.400260][ T5921] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 671.693741][T27679] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8265'. [ 671.714908][T27679] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8265'. [ 671.773646][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 672.324241][ T9] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 672.509483][ T9] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 672.529289][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.555699][ T9] usb 3-1: config 0 descriptor?? [ 672.656638][ T5921] usb 5-1: USB disconnect, device number 121 [ 672.733717][ T5920] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 672.813678][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 672.897045][ T5920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.922001][ T5920] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.33 [ 672.934017][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.962410][ T5920] usb 2-1: Product: syz [ 672.972537][ T5920] usb 2-1: Manufacturer: syz [ 672.986126][ T5920] usb 2-1: SerialNumber: syz [ 673.009131][T27716] loop2: detected capacity change from 0 to 7 [ 673.063982][T27716] Dev loop2: unable to read RDB block 7 [ 673.083746][T27716] loop2: AHDI p1 p2 p3 [ 673.096704][T27716] loop2: partition table partially beyond EOD, truncated [ 673.124019][T27716] loop2: p3 start 335544320 is beyond EOD, truncated [ 673.576713][ T9] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 673.606130][ T9] usb 3-1: USB disconnect, device number 101 [ 673.863646][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 673.893750][ T10] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 674.024355][ T5920] cdc_ncm 2-1:1.0: bind() failure [ 674.044735][ T5920] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 674.053692][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 674.057522][ T5920] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 674.061003][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 674.077009][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 674.084686][ T5920] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 674.087499][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 674.106908][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 674.116532][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.124923][ T5920] usb 2-1: USB disconnect, device number 88 [ 674.156299][ T10] usb 1-1: Product: syz [ 674.163433][ T10] usb 1-1: Manufacturer: syz [ 674.176803][ T10] usb 1-1: SerialNumber: syz [ 674.392393][T27742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8292'. [ 674.419262][T27742] openvswitch: netlink: nsh attr 8224 is out of range max 3 [ 674.426818][T27742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 674.633857][ T10] usb 1-1: 0:2 : does not exist [ 674.893626][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 675.054078][T27765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8303'. [ 675.063115][T27765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8303'. [ 675.265308][ T10] usb 1-1: USB disconnect, device number 90 [ 675.296193][ T5844] udevd[5844]: setting owner of /dev/bus/usb/001/090 to uid=0, gid=0 failed: No such file or directory [ 675.323112][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 675.347334][ T5890] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 675.526260][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 675.539790][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 675.547861][ T5890] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 675.563235][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.583906][ T5890] usb 4-1: config 0 descriptor?? [ 675.813691][ T10] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 675.901157][ T30] kauditd_printk_skb: 110 callbacks suppressed [ 675.901174][ T30] audit: type=1326 audit(1751460896.227:9649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27789 comm="syz.2.8313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772fd8e929 code=0x7ffc0000 [ 675.933826][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 675.991349][ T30] audit: type=1326 audit(1751460896.227:9650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27789 comm="syz.2.8313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772fd8e929 code=0x7ffc0000 [ 676.034087][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 676.079105][ T10] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 676.099333][ T5890] hid (null): bogus close delimiter [ 676.108224][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.135268][ T30] audit: type=1326 audit(1751460896.277:9651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27789 comm="syz.2.8313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f772fd8e929 code=0x7ffc0000 [ 676.161430][ T10] usb 2-1: config 0 has no interface number 0 [ 676.207096][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 676.226465][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.237330][ T30] audit: type=1326 audit(1751460896.347:9652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27789 comm="syz.2.8313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772fd8e929 code=0x7ffc0000 [ 676.260203][ T10] usb 2-1: Product: syz [ 676.281160][ T10] usb 2-1: Manufacturer: syz [ 676.296577][ T10] usb 2-1: SerialNumber: syz [ 676.303385][ T5890] usb 4-1: USB disconnect, device number 97 [ 676.317911][ T10] usb 2-1: config 0 descriptor?? [ 676.336466][ T30] audit: type=1326 audit(1751460896.347:9653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27789 comm="syz.2.8313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772fd8e929 code=0x7ffc0000 [ 676.371849][ T10] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 676.439864][ T10] usb 2-1: No valid video chain found. [ 676.560966][ T5890] usb 2-1: USB disconnect, device number 89 [ 676.773689][ T10] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 676.936330][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.947835][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 676.957116][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.969990][ T10] usb 1-1: config 0 descriptor?? [ 676.983662][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 677.074275][T25913] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 677.215272][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 677.221311][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 677.263849][T25913] usb 5-1: Using ep0 maxpacket: 8 [ 677.270158][ T10] usb 1-1: USB disconnect, device number 91 [ 677.277544][T25913] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 677.305529][T25913] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 677.338242][T25913] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 677.360905][T25913] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 677.383616][T25913] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 677.433980][T25913] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 677.443059][T25913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.700290][T25913] usb 5-1: usb_control_msg returned -32 [ 677.709539][T25913] usbtmc 5-1:16.0: can't read capabilities [ 677.713626][ T10] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 677.893744][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 677.917911][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.953682][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 677.964978][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.013840][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 678.014024][ T10] usb 1-1: config 0 descriptor?? [ 678.040389][ T10] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 678.063874][T27855] usbtmc 5-1:16.0: usb_bulk_msg returned -71 [ 678.085223][ T10] ldusb 1-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 678.133052][T27857] input: syz1 as /devices/virtual/input/input124 [ 678.266101][ T10] usb 5-1: USB disconnect, device number 122 [ 678.395377][T27861] sctp: [Deprecated]: syz.3.8341 (pid 27861) Use of struct sctp_assoc_value in delayed_ack socket option. [ 678.395377][T27861] Use struct sctp_sack_info instead [ 678.651591][T25913] usb 1-1: USB disconnect, device number 92 [ 678.670218][T25913] ldusb 1-1:0.0: LD USB Device #1 now disconnected [ 678.730306][T27867] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 678.730306][T27867] The task syz.3.8343 (27867) triggered the difference, watch for misbehavior. [ 678.825542][T27871] pim6reg1: entered promiscuous mode [ 678.831329][T27871] pim6reg1: entered allmulticast mode [ 679.053632][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 679.092078][ T30] audit: type=1326 audit(1751460899.407:9654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27853 comm="syz.2.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f772fd2ab19 code=0x7ffc0000 [ 679.127405][ T30] audit: type=1326 audit(1751460899.407:9655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27853 comm="syz.2.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772fd8e929 code=0x7ffc0000 [ 679.198243][ T30] audit: type=1326 audit(1751460899.407:9656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27853 comm="syz.2.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772fd8e929 code=0x7ffc0000 [ 679.274958][ T30] audit: type=1326 audit(1751460899.407:9657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27853 comm="syz.2.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f772fd2ab19 code=0x7ffc0000 [ 679.441889][ T30] audit: type=1326 audit(1751460899.407:9658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27853 comm="syz.2.8338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772fd8e929 code=0x7ffc0000 [ 679.813154][T27898] syzkaller1: entered promiscuous mode [ 679.828996][T27902] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 679.840527][T27898] syzkaller1: entered allmulticast mode [ 679.994077][ T9] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 680.093631][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 680.181760][ T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 680.201733][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.227343][ T9] usb 1-1: Product: syz [ 680.231546][ T9] usb 1-1: Manufacturer: syz [ 680.236910][ T9] usb 1-1: SerialNumber: syz [ 680.250224][ T9] usb 1-1: config 0 descriptor?? [ 680.386665][T27925] syzkaller1: entered promiscuous mode [ 680.392338][T27925] syzkaller1: entered allmulticast mode [ 680.517807][ T5890] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 680.649126][T27935] netlink: 566 bytes leftover after parsing attributes in process `syz.2.8373'. [ 680.695016][ T9] airspy 1-1:0.0: Board ID: 00 [ 680.699832][ T9] airspy 1-1:0.0: Firmware version: [ 680.741966][ T5890] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 680.754564][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=9, SerialNumber=3 [ 680.762644][ T5890] usb 4-1: Product: syz [ 680.768252][ T5890] usb 4-1: Manufacturer: syz [ 680.772900][ T5890] usb 4-1: SerialNumber: syz [ 680.805038][ T5890] usb 4-1: config 0 descriptor?? [ 680.852961][ T5890] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 680.894188][ T5889] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 681.094676][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 681.112673][ T5889] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 681.128127][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.138861][ T5889] usb 2-1: Product: syz [ 681.143126][ T5889] usb 2-1: Manufacturer: syz [ 681.143635][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 681.161718][ T5889] usb 2-1: SerialNumber: syz [ 681.172920][ T5889] usb 2-1: config 0 descriptor?? [ 681.187288][ T5889] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 681.201734][ T5889] usb 2-1: Detected FT232H [ 681.326107][ T9] airspy 1-1:0.0: usb_control_msg() failed -71 request 12 [ 681.350151][ T9] airspy 1-1:0.0: Registered as swradio24 [ 681.361828][ T9] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 681.396716][ T5889] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 681.403957][ T9] usb 1-1: USB disconnect, device number 93 [ 681.420982][ T5890] videodev: could not get a free minor [ 681.458631][ T5890] gspca_main: video_register_device err -23 [ 681.491566][ T5890] sunplus 4-1:0.0: probe with driver sunplus failed with error -23 [ 681.663809][ T9] usb 4-1: USB disconnect, device number 98 [ 681.854860][ T5889] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 682.043124][ T5889] usb 2-1: USB disconnect, device number 90 [ 682.087204][ T5889] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 682.110636][ T5889] ftdi_sio 2-1:0.0: device disconnected [ 682.173633][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 682.716228][T27984] input: syz1 as /devices/virtual/input/input125 [ 682.812187][T27988] openvswitch: netlink: IPv4 tun info is not correct [ 683.211785][T28000] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 683.218959][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 683.300875][T28004] netlink: 'syz.0.8407': attribute type 2 has an invalid length. [ 683.343322][T28004] netlink: 'syz.0.8407': attribute type 1 has an invalid length. [ 683.603645][T25913] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 683.774051][T25913] usb 5-1: Using ep0 maxpacket: 16 [ 683.787626][T25913] usb 5-1: config 0 has no interfaces? [ 683.798138][T25913] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 683.813572][T25913] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 683.842020][T25913] usb 5-1: Manufacturer: syz [ 683.883745][T25913] usb 5-1: config 0 descriptor?? [ 684.123093][T28008] lo: entered promiscuous mode [ 684.130740][T28008] tunl0: entered promiscuous mode [ 684.139012][T28008] gre0: entered promiscuous mode [ 684.146480][T28008] gretap0: entered promiscuous mode [ 684.158415][T28008] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 684.188436][ T5921] usb 5-1: USB disconnect, device number 123 [ 684.263742][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 684.323977][ T5889] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 684.413869][T25913] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 684.493754][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 684.500907][ T5889] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 684.530080][ T5889] usb 3-1: config 0 has no interface number 0 [ 684.549612][ T5889] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 684.580476][ T5889] usb 3-1: config 0 interface 85 has no altsetting 0 [ 684.610204][ T5889] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 684.623769][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.639582][ T5889] usb 3-1: Product: syz [ 684.659823][ T5889] usb 3-1: Manufacturer: syz [ 684.673782][ T5889] usb 3-1: SerialNumber: syz [ 684.692034][ T5889] usb 3-1: config 0 descriptor?? [ 684.956542][T28056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 685.143621][T25913] usb 1-1: unable to get BOS descriptor or descriptor too short [ 685.151392][T25913] usb 1-1: no configurations [ 685.184723][T25913] usb 1-1: can't read configurations, error -22 [ 685.293623][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 685.326658][ T5889] appletouch 3-1:0.85: Geyser mode initialized. [ 685.351548][ T5889] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input126 [ 685.543641][ T5889] usb 3-1: USB disconnect, device number 102 [ 685.544293][ C1] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 685.555029][ T9] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 685.647172][ T5889] appletouch 3-1:0.85: input: appletouch disconnected [ 685.697616][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.704216][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.773813][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 685.785930][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.800662][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 685.819851][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.848397][ T9] usb 5-1: config 0 descriptor?? [ 686.280337][ T9] appleir 0003:05AC:8241.0098: unknown main item tag 0x0 [ 686.291304][ T9] appleir 0003:05AC:8241.0098: unknown main item tag 0x0 [ 686.299621][ T9] appleir 0003:05AC:8241.0098: unknown main item tag 0x0 [ 686.311471][ T9] appleir 0003:05AC:8241.0098: unknown main item tag 0x0 [ 686.319151][ T9] appleir 0003:05AC:8241.0098: unknown main item tag 0x0 [ 686.333723][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 686.342415][ T5921] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 686.346064][ T9] appleir 0003:05AC:8241.0098: hiddev0,hidraw0: USB HID v0.05 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 686.463617][ T5890] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 686.523912][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 686.532663][ T5921] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 686.545612][ T5921] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 686.559536][T25913] usb 5-1: USB disconnect, device number 124 [ 686.569045][ T5921] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 686.590646][ T5921] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 686.614557][ T5921] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 686.615811][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.647015][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.663188][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.675454][ T5890] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 686.684881][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.714052][ T5890] usb 2-1: config 0 descriptor?? [ 686.896418][ T5921] usb 4-1: GET_CAPABILITIES returned 0 [ 686.901946][ T5921] usbtmc 4-1:16.0: can't read capabilities [ 687.127437][ T5921] usb 4-1: USB disconnect, device number 99 [ 687.176900][ T5890] aquacomputer_d5next 0003:0C70:F00D.0099: unknown main item tag 0x0 [ 687.221008][ T5890] aquacomputer_d5next 0003:0C70:F00D.0099: unknown main item tag 0x0 [ 687.257381][ T5890] aquacomputer_d5next 0003:0C70:F00D.0099: unknown main item tag 0x0 [ 687.283700][ T5890] aquacomputer_d5next 0003:0C70:F00D.0099: unknown main item tag 0x0 [ 687.292342][ T5890] aquacomputer_d5next 0003:0C70:F00D.0099: unknown main item tag 0x0 [ 687.311296][ T5890] aquacomputer_d5next 0003:0C70:F00D.0099: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.1-1/input0 [ 687.373775][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 687.660692][ T5890] usb 2-1: USB disconnect, device number 91 [ 687.683634][ T5921] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 687.855616][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 687.869823][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 687.881530][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 687.952300][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 687.982080][ T5921] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 688.001737][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.022566][ T5921] usb 5-1: config 0 descriptor?? [ 688.052380][T28128] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 688.413831][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 688.486195][ T5921] plantronics 0003:047F:FFFF.009A: reserved main item tag 0xd [ 688.549160][ T5921] plantronics 0003:047F:FFFF.009A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 688.745876][ T5890] usb 5-1: USB disconnect, device number 125 [ 689.047840][T28175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8479'. [ 689.078620][T28175] bond_slave_0: entered promiscuous mode [ 689.085190][T28175] bond_slave_1: entered promiscuous mode [ 689.095601][T28175] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 689.103025][T28177] netlink: 'syz.3.8478': attribute type 2 has an invalid length. [ 689.193835][ T5889] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 689.203773][ T9] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 689.343966][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 689.371628][ T5889] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 689.389479][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 689.401338][ T5889] usb 2-1: config 0 has no interface number 0 [ 689.415983][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 689.449944][ T5889] usb 2-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 689.460754][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.463630][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 689.469511][ T5889] usb 2-1: Product: syz [ 689.481423][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 689.490827][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 689.551913][ T5889] usb 2-1: Manufacturer: syz [ 689.561939][ T5889] usb 2-1: SerialNumber: syz [ 689.579176][ T9] usb 3-1: SerialNumber: syz [ 689.615073][ T5889] usb 2-1: config 0 descriptor?? [ 689.846126][ T9] usb 3-1: 0:2 : does not exist [ 689.888372][ T5889] kaweth 2-1:0.235: Firmware present in device. [ 689.938442][ T9] usb 3-1: USB disconnect, device number 103 [ 690.064031][ T5889] kaweth 2-1:0.235: Statistics collection: 0 [ 690.070082][ T5889] kaweth 2-1:0.235: Multicast filter limit: 0 [ 690.133610][ T5889] kaweth 2-1:0.235: MTU: 0 [ 690.138100][ T5889] kaweth 2-1:0.235: Read MAC address 00:00:00:00:00:00 [ 690.475005][ T5889] kaweth 2-1:0.235: Error setting SOFS wait [ 690.481180][ T5889] kaweth 2-1:0.235: probe with driver kaweth failed with error -5 [ 690.493877][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 690.570541][ T5889] usb 2-1: USB disconnect, device number 92 [ 690.845606][ T1209] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 691.074066][ T1209] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 691.116301][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.178112][ T1209] usb 1-1: config 0 descriptor?? [ 691.227942][ T1209] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 691.533624][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 691.663664][ T1209] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 692.068799][ T1209] gspca_cpia1: usb_control_msg 02, error -32 [ 692.143698][ T1209] gspca_cpia1: usb_control_msg 02, error -71 [ 692.170108][ T1209] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 692.184389][ T1209] usb 1-1: USB disconnect, device number 96 [ 692.573675][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 692.865893][T25913] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 693.045370][T25913] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 693.068822][T25913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.094017][T25913] usb 5-1: config 0 descriptor?? [ 693.117708][T25913] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 693.189688][T28277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8521'. [ 693.509408][T25913] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 693.584058][ T5832] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 693.613627][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 693.761585][ T5832] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 693.763864][ T9] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 693.771965][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.798812][ T5832] usb 1-1: config 0 descriptor?? [ 693.831899][ T5832] gspca_main: spca508-2.14.0 probing 8086:0110 [ 693.919251][T25913] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 693.945210][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 693.955392][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 693.968541][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 693.977658][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.037366][ T5832] gspca_spca508: reg_read err -32 [ 694.054218][ T5832] gspca_spca508: reg_read err -32 [ 694.061714][ T5832] gspca_spca508: reg_read err -32 [ 694.071302][ T5832] gspca_spca508: reg_read err -32 [ 694.153982][ T5889] usb 5-1: USB disconnect, device number 126 [ 694.214391][ T9] usb 2-1: usb_control_msg returned -32 [ 694.222211][ T9] usbtmc 2-1:16.0: can't read capabilities [ 694.301283][ T5832] gspca_spca508: reg write: error -71 [ 694.324204][ T5832] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 694.373098][ T5832] usb 1-1: USB disconnect, device number 97 [ 694.413260][T28307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8536'. [ 694.438597][T28307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8536'. [ 694.653614][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 694.943913][ T5889] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 695.131455][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.159908][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.190694][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 695.210717][ T5889] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 695.220805][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.246607][ T5889] usb 5-1: config 0 descriptor?? [ 695.251229][T28339] binder: 28337:28339 ioctl c0306201 2000000003c0 returned -14 [ 695.633684][T25913] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 695.681395][ T5889] plantronics 0003:047F:FFFF.009B: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 695.703661][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 695.784022][T25913] usb 3-1: Using ep0 maxpacket: 32 [ 695.795092][T25913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.806458][T25913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.816325][T25913] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 695.825743][T25913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.836799][T25913] usb 3-1: config 0 descriptor?? [ 695.850750][T25913] hub 3-1:0.0: USB hub found [ 695.855528][ T5832] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 695.873170][ T5921] usb 5-1: USB disconnect, device number 127 [ 696.025530][ T5832] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 696.034557][ T5832] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 696.047035][T25913] hub 3-1:0.0: 1 port detected [ 696.051927][ T5832] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 696.074509][ T5832] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 696.093530][ T5832] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 696.125546][ T5832] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 696.143519][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 696.151605][ T5832] usb 1-1: Product: syz [ 696.173684][ T5832] usb 1-1: Manufacturer: syz [ 696.187185][ T5832] cdc_wdm 1-1:1.0: skipping garbage [ 696.192437][ T5832] cdc_wdm 1-1:1.0: skipping garbage [ 696.215632][ T5832] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 696.221584][ T5832] cdc_wdm 1-1:1.0: Unknown control protocol [ 696.348526][T28355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8557'. [ 696.358088][T28355] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8557'. [ 696.370486][T28355] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8557'. [ 696.398650][ T5903] usb 1-1: USB disconnect, device number 98 [ 696.565390][ T5921] usb 2-1: USB disconnect, device number 93 [ 696.682000][T25913] hub 3-1:0.0: activate --> -90 [ 696.743643][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 696.893790][T28371] input: syz0 as /devices/virtual/input/input129 [ 697.083583][ T1209] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 697.109953][ T5889] usb 3-1: USB disconnect, device number 104 [ 697.274933][ T1209] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 697.302312][ T1209] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 697.325426][ T1209] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 697.334498][T25913] usb 3-1-port1: config error [ 697.384738][ T1209] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 697.410214][T28390] kernel read not supported for file /eth0 (pid: 28390 comm: syz.3.8572) [ 697.418930][ T1209] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 697.419874][ T30] kauditd_printk_skb: 179 callbacks suppressed [ 697.419887][ T30] audit: type=1800 audit(1751460917.747:9838): pid=28390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8572" name="eth0" dev="mqueue" ino=58323 res=0 errno=0 [ 697.449335][ T1209] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 697.490350][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 697.513846][ T1209] usb 1-1: Product: syz [ 697.533695][ T1209] usb 1-1: Manufacturer: syz [ 697.559162][ T1209] cdc_wdm 1-1:1.0: skipping garbage [ 697.574617][ T1209] cdc_wdm 1-1:1.0: skipping garbage [ 697.582192][ T1209] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 697.588746][ T1209] cdc_wdm 1-1:1.0: Unknown control protocol [ 697.758754][ T1209] usb 1-1: USB disconnect, device number 99 [ 697.773735][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 697.791295][T28397] ip6gre1: entered allmulticast mode [ 697.945312][T28401] input: syz0 as /devices/virtual/input/input130 [ 698.553803][ T5903] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 698.584169][T28432] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8589'. [ 698.622983][T28432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.634625][T28432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.647720][T28432] bond0 (unregistering): Released all slaves [ 698.744119][ T5903] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 698.792308][ T5903] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 698.813624][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 698.848874][ T5903] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 698.888757][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 698.897295][ T5903] usb 2-1: SerialNumber: syz [ 699.073366][T28443] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.8593'. [ 699.213622][ T30] audit: type=1326 audit(1751460919.527:9839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28418 comm="syz.2.8583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772fd8e929 code=0x7fc00000 [ 699.250038][ T5903] usb 2-1: 0:2 : does not exist [ 699.342410][ T5903] usb 2-1: USB disconnect, device number 94 [ 699.535290][T28456] netlink: 'syz.2.8598': attribute type 2 has an invalid length. [ 699.553843][T28456] netlink: 'syz.2.8598': attribute type 1 has an invalid length. [ 699.573705][T28456] netlink: 777 bytes leftover after parsing attributes in process `syz.2.8598'. [ 699.589711][T28456] netlink: 129904 bytes leftover after parsing attributes in process `syz.2.8598'. [ 699.627056][T28456] netlink: 'syz.2.8598': attribute type 2 has an invalid length. [ 699.658654][T28456] netlink: 'syz.2.8598': attribute type 1 has an invalid length. [ 699.673641][T28456] netlink: 777 bytes leftover after parsing attributes in process `syz.2.8598'. [ 699.853643][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 699.934024][ T5903] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 700.086272][ T5903] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 700.096804][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.163633][ T1209] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 700.170738][ T5903] usb 1-1: config 0 descriptor?? [ 700.305859][ T5921] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 700.349902][ T1209] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 700.380418][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.426367][ T1209] usb 3-1: Product: syz [ 700.444036][ T1209] usb 3-1: Manufacturer: syz [ 700.465774][ T1209] usb 3-1: SerialNumber: syz [ 700.473178][ T1209] usb 3-1: config 0 descriptor?? [ 700.486019][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 700.486725][ T1209] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 700.507387][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.533254][ T5921] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 700.551821][ T5921] usb 2-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 700.571942][ T5921] usb 2-1: Manufacturer: syz [ 700.604695][ T5921] usb 2-1: config 0 descriptor?? [ 700.635263][ T5921] hub 2-1:0.0: USB hub found [ 700.797450][T28496] loop2: detected capacity change from 0 to 7 [ 700.807812][ T5827] Dev loop2: unable to read RDB block 7 [ 700.814574][ T5827] loop2: unable to read partition table [ 700.820626][ T5827] loop2: partition table beyond EOD, truncated [ 700.831668][T28496] Dev loop2: unable to read RDB block 7 [ 700.842270][T28496] loop2: unable to read partition table [ 700.849683][T28496] loop2: partition table beyond EOD, truncated [ 700.856077][ T5921] hub 2-1:0.0: 1 port detected [ 700.861655][T28496] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 700.893634][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 701.453765][ T5903] pegasus 1-1:0.0: can't reset MAC [ 701.463551][ T5921] hub 2-1:0.0: activate --> -90 [ 701.470687][ T5903] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 701.502179][ T5903] usb 1-1: USB disconnect, device number 100 [ 701.710536][ T1209] gspca_sunplus: reg_r err -71 [ 701.727368][ T1209] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 701.737270][T28514] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 701.744941][ T1209] usb 3-1: USB disconnect, device number 105 [ 701.866186][ T5921] usb 2-1-port1: cannot reset (err = -71) [ 701.866470][ T9] usb 2-1: USB disconnect, device number 95 [ 701.873917][ T5921] usb 2-1-port1: attempt power cycle [ 701.933732][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 702.389214][T28528] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.8626'. [ 702.631050][T28536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 702.844016][ T9] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 702.973658][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 703.433597][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 703.450761][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 703.556345][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 703.622317][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.657664][ T9] usb 2-1: config 0 descriptor?? [ 703.954357][ T9] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 704.003541][ T5921] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 704.018281][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 704.059632][T28567] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8641'. [ 704.071140][T28567] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8641'. [ 704.213732][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 704.230520][ T5921] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 704.249024][ T5921] usb 1-1: config 0 has no interface number 0 [ 704.266040][ T5921] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 704.280161][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.303714][ T5921] usb 1-1: Product: syz [ 704.307927][ T5921] usb 1-1: Manufacturer: syz [ 704.320224][ T5921] usb 1-1: SerialNumber: syz [ 704.334626][ T5921] usb 1-1: config 0 descriptor?? [ 704.345022][ T5903] usb 2-1: USB disconnect, device number 100 [ 704.372864][ T5921] smsc95xx v2.0.0 [ 704.590250][T28579] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 704.788232][ T5921] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 704.820836][ T5921] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 705.023622][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 705.053751][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 705.435659][ T5921] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 705.468478][ T5921] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 705.514954][ T5921] usb 1-1: USB disconnect, device number 101 [ 705.555182][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 705.569434][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 705.585681][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 705.594966][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 705.602969][ T9] usb 5-1: SerialNumber: syz [ 705.623665][T25913] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 705.778119][T25913] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 705.786657][T25913] usb 4-1: config 0 has no interface number 0 [ 705.826049][T25913] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 705.847976][ T9] usb 5-1: 0:2 : does not exist [ 705.853520][T25913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.863618][T25913] usb 4-1: Product: syz [ 705.867802][T25913] usb 4-1: Manufacturer: syz [ 705.882725][T25913] usb 4-1: SerialNumber: syz [ 705.888217][ T9] usb 5-1: USB disconnect, device number 2 [ 705.906166][T25913] usb 4-1: config 0 descriptor?? [ 705.969788][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 706.093881][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 706.116358][T25913] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 706.164491][T25913] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 706.184248][T25913] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 706.206282][T25913] usb 4-1: media controller created [ 706.249475][T25913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 706.337115][T25913] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 706.383994][ T9] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 706.485376][T25913] usb 4-1: USB disconnect, device number 100 [ 706.573603][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 706.588887][ T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 706.605936][T28617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 706.615862][ T9] usb 3-1: config 0 has no interface number 0 [ 706.641906][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 706.690965][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 706.703218][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 706.714500][ T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 706.739834][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 706.763962][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.788527][ T9] usb 3-1: config 0 descriptor?? [ 706.804554][ T9] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 707.133615][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 707.193743][ T5921] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 707.345296][ T5921] usb 2-1: config 0 has no interfaces? [ 707.353992][ T5921] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 707.374397][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.395700][ T5921] usb 2-1: Product: syz [ 707.407419][ T5921] usb 2-1: Manufacturer: syz [ 707.419560][ T5921] usb 2-1: SerialNumber: syz [ 707.439094][ T5921] usb 2-1: config 0 descriptor?? [ 707.704959][T28624] veth1_vlan: left promiscuous mode [ 707.839909][ T5921] usb 3-1: USB disconnect, device number 106 [ 707.840063][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 707.902291][ T5921] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 707.973847][T28624] veth1_vlan: entered promiscuous mode [ 708.013385][ T1209] usb 2-1: USB disconnect, device number 101 [ 708.173684][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 708.322893][T28652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8677'. [ 708.359114][T28654] input: syz0 as /devices/virtual/input/input131 [ 708.375258][T28652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.409066][T28658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.417816][T28658] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 708.445079][T28658] bond0: (slave vcan1): Error -95 calling set_mac_address [ 708.939862][T28679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8687'. [ 709.095972][ T36] veth1_vlan: left promiscuous mode [ 709.218093][T28685] syzkaller1: entered promiscuous mode [ 709.223648][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 709.233590][T28685] syzkaller1: entered allmulticast mode [ 709.393655][ T5921] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 709.573635][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 709.582883][ T5921] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 709.593367][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.613740][ T5921] usb 2-1: Product: syz [ 709.617953][ T5921] usb 2-1: Manufacturer: syz [ 709.622632][ T5921] usb 2-1: SerialNumber: syz [ 709.634732][ T5921] usb 2-1: config 0 descriptor?? [ 709.645576][ T5921] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 709.651968][T28702] netlink: 'syz.4.8695': attribute type 4 has an invalid length. [ 709.679101][T28702] netlink: 'syz.4.8695': attribute type 4 has an invalid length. [ 709.866410][ T5921] gp8psk: usb in 128 operation failed. [ 709.889126][ T5921] gp8psk: usb in 137 operation failed. [ 709.901368][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 709.913768][ T5921] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 709.964525][ T5921] usb 2-1: media controller created [ 710.008324][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 710.079998][ T5921] gp8psk_fe: Frontend revision 1 attached [ 710.094276][ T5921] usb 2-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 710.111592][ T5921] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 710.153640][T25913] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 710.257182][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 710.264528][ T5903] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 710.274639][T28720] syzkaller1: entered promiscuous mode [ 710.280162][T28720] syzkaller1: entered allmulticast mode [ 710.354310][T25913] usb 1-1: Using ep0 maxpacket: 8 [ 710.364279][T25913] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 710.382062][T25913] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 710.402306][T25913] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 710.414142][T25913] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 710.425100][T25913] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 710.438513][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 710.443991][T25913] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 710.454312][T25913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.462965][ T5921] gp8psk: usb in 137 operation failed. [ 710.470775][ T5903] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 710.485062][ T5921] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 710.500749][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.511331][ T5903] usb 5-1: Product: syz [ 710.516017][ T5921] gp8psk: found Genpix USB device pID = 201 (hex) [ 710.522806][ T5903] usb 5-1: Manufacturer: syz [ 710.534298][ T5903] usb 5-1: SerialNumber: syz [ 710.539380][ T5921] usb 2-1: USB disconnect, device number 102 [ 710.563288][ T5903] usb 5-1: config 0 descriptor?? [ 710.611219][ T5903] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 710.727333][T25913] usb 1-1: GET_CAPABILITIES returned 0 [ 710.732905][T25913] usbtmc 1-1:16.0: can't read capabilities [ 710.818110][ T5921] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 711.040338][T28738] netlink: 'syz.2.8711': attribute type 1 has an invalid length. [ 711.056750][T25913] usb 1-1: USB disconnect, device number 102 [ 711.065041][T28711] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 711.073374][T28735] usbtmc 1-1:16.0: usb_control_msg returned -19 [ 711.132813][T28738] bond0: entered promiscuous mode [ 711.139669][T28738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.162292][T28741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.169635][T28741] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 711.183913][T28741] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 711.193303][T28744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8712'. [ 711.197385][T28741] bond0: (slave ip6gre1): making interface the new active one [ 711.210515][T28741] ip6gre1: entered promiscuous mode [ 711.217932][T28741] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 711.235489][ T1209] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 711.241214][T28744] vxlan1: entered promiscuous mode [ 711.294324][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 711.405321][ T1209] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.417752][ T5903] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 711.424289][ T1209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 711.446711][ T5903] usb 5-1: USB disconnect, device number 3 [ 711.458122][ T1209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 711.483063][ T1209] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 711.510000][ T1209] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 711.532949][ T1209] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 711.541761][ T1209] usb 4-1: Manufacturer: syz [ 711.569941][ T1209] usb 4-1: config 0 descriptor?? [ 711.813617][ T5921] usb 3-1: new low-speed USB device number 107 using dummy_hcd [ 711.863720][ T1209] rc_core: IR keymap rc-hauppauge not found [ 711.869704][ T1209] Registered IR keymap rc-empty [ 711.875081][ T1209] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 711.894007][ T1209] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 711.914757][ T1209] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 711.929994][ T1209] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input132 [ 711.982454][ T1209] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 712.000882][ T5921] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 712.010213][ T1209] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 712.020328][ T5921] usb 3-1: config 0 has no interface number 0 [ 712.051995][ T5921] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 712.086219][ T5921] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 712.097248][ T1209] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 712.130367][ T5921] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 712.153664][ T1209] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 712.177267][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.226893][ T5921] usb 3-1: config 0 descriptor?? [ 712.233611][ T1209] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 712.252283][T28752] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 712.291433][ T5921] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 712.313603][ T1209] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 712.333640][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 712.371509][ T1209] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 712.394277][T28769] loop8: detected capacity change from 1 to 0 [ 712.414866][ T1209] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 712.478999][ T1209] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 712.543638][ T1209] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 712.603788][ T1209] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 712.656362][ T1209] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 712.698091][ T5921] usb 3-1: USB disconnect, device number 107 [ 712.724466][ T1209] usb 4-1: USB disconnect, device number 101 [ 712.903723][T25913] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 713.077125][T25913] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 713.105954][T25913] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.138687][T25913] usb 1-1: config 0 has no interface number 0 [ 713.151121][T25913] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 713.169386][T25913] usb 1-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 713.178728][T25913] usb 1-1: Product: syz [ 713.183020][T25913] usb 1-1: Manufacturer: syz [ 713.191827][T25913] usb 1-1: SerialNumber: syz [ 713.210021][T25913] usb 1-1: config 0 descriptor?? [ 713.237685][T25913] usb 1-1: Found UVC 0.00 device syz (046c:14e8) [ 713.258942][T25913] uvcvideo 1-1:0.105: Entity type for entity Output 1 was not initialized! [ 713.286324][T25913] usb 1-1: Failed to create links for entity 1 [ 713.317073][T25913] usb 1-1: Failed to register entities (-22). [ 713.373745][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 713.500951][T25913] usb 1-1: USB disconnect, device number 103 [ 713.923888][ T5921] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 713.945836][T28792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8733'. [ 714.087817][ T5921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.182123][ T5921] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 714.203596][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.226389][ T5921] usb 3-1: Product: syz [ 714.230615][ T5921] usb 3-1: Manufacturer: syz [ 714.247385][ T5921] usb 3-1: SerialNumber: syz [ 714.393585][ T1209] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 714.423617][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 714.493886][T25913] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 714.608692][ T1209] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 714.618025][ T1209] usb 2-1: config 8 has no interface number 0 [ 714.630528][ T1209] usb 2-1: config 8 interface 177 has no altsetting 0 [ 714.637740][ T1209] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 714.652036][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.685916][T25913] usb 1-1: config index 0 descriptor too short (expected 65183, got 72) [ 714.713095][T25913] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 714.733308][T25913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.745876][T25913] usb 1-1: Product: syz [ 714.750125][T25913] usb 1-1: Manufacturer: syz [ 714.766994][T25913] usb 1-1: SerialNumber: syz [ 714.788854][T25913] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 714.844849][T28724] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 714.864023][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 714.882140][ T1209] usb 2-1: string descriptor 0 read error: -71 [ 714.904349][ T1209] ir_toy 2-1:8.177: required endpoints not found [ 714.932725][ T1209] usb 2-1: USB disconnect, device number 103 [ 715.026985][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 715.034624][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 715.043092][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 715.061172][T28797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.070745][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 715.083568][T28797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.093740][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 715.105744][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 715.106586][T28797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.123181][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 715.158801][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.172066][T28797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.195719][T28797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.208120][T28797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.228173][ T1209] usb 1-1: USB disconnect, device number 104 [ 715.291136][ T30] audit: type=1326 audit(1751460935.617:9840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28819 comm="syz.3.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727838e929 code=0x7ffc0000 [ 715.319942][ T30] audit: type=1326 audit(1751460935.617:9841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28819 comm="syz.3.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727838e929 code=0x7ffc0000 [ 715.342421][ C0] vkms_vblank_simulate: vblank timer overrun [ 715.355669][ T30] audit: type=1326 audit(1751460935.617:9842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28819 comm="syz.3.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f727838e929 code=0x7ffc0000 [ 715.378019][ C0] vkms_vblank_simulate: vblank timer overrun [ 715.395816][ T30] audit: type=1326 audit(1751460935.617:9843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28819 comm="syz.3.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727838e929 code=0x7ffc0000 [ 715.424005][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 715.433665][ T9] usbtmc 5-1:16.0: can't read capabilities [ 715.453018][ T30] audit: type=1326 audit(1751460935.617:9844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28819 comm="syz.3.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f727838e929 code=0x7ffc0000 [ 715.475409][ C0] vkms_vblank_simulate: vblank timer overrun [ 715.483616][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 715.484592][ T30] audit: type=1326 audit(1751460935.617:9845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28819 comm="syz.3.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727838e929 code=0x7ffc0000 [ 715.512953][ C0] vkms_vblank_simulate: vblank timer overrun [ 715.542968][ T30] audit: type=1326 audit(1751460935.617:9846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28819 comm="syz.3.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727838e929 code=0x7ffc0000 [ 715.558269][ T5921] cdc_ncm 3-1:1.0: failed to get mac address [ 715.597591][ T5921] cdc_ncm 3-1:1.0: bind() failure [ 715.605711][ T5921] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 715.617414][ T5921] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 715.641114][ T5921] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 715.674057][ T5921] usb 3-1: USB disconnect, device number 108 [ 715.742554][T28808] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 715.742979][ T9] usb 5-1: USB disconnect, device number 4 [ 715.749109][T28829] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -19 [ 715.935139][T28724] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 715.955582][T28724] ath9k_htc: Failed to initialize the device [ 715.963129][ T1209] usb 1-1: ath9k_htc: USB layer deinitialized [ 716.273695][ T1209] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 716.453670][ T1209] usb 1-1: Using ep0 maxpacket: 32 [ 716.483657][ T1209] usb 1-1: config index 0 descriptor too short (expected 241, got 72) [ 716.491895][ T1209] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 716.493710][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 716.553166][ T1209] usb 1-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 716.593941][ T1209] usb 1-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 716.613645][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.665763][ T1209] usb 1-1: config 0 descriptor?? [ 716.681802][T28848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8758'. [ 716.719721][ T1209] mos7840 1-1:0.0: missing endpoints [ 716.742533][T28848] 8021q: adding VLAN 0 to HW filter on device team1 [ 716.877217][ T1209] usb 1-1: USB disconnect, device number 105 [ 717.533621][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 718.423652][ T9] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 718.558302][T28901] input: syz1 as /devices/virtual/input/input133 [ 718.573620][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 718.573882][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 718.591436][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 718.602192][ T9] usb 4-1: config 0 has no interface number 0 [ 718.613094][ T9] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 718.645925][ T9] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 718.663654][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.699030][ T9] usb 4-1: Product: syz [ 718.705723][ T9] usb 4-1: Manufacturer: syz [ 718.725783][ T9] usb 4-1: SerialNumber: syz [ 718.744234][ T9] usb 4-1: config 0 descriptor?? [ 718.761262][ T9] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 718.780122][ T9] em28xx 4-1:0.132: Video interface 132 found: [ 719.163406][ T9] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 719.201704][T28916] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 719.216243][T28916] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 719.247600][T28916] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 719.274027][T28916] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 719.317330][T28916] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 719.335009][T28916] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 719.359567][T28916] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 719.377921][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 719.400819][ T9] em28xx 4-1:0.132: board has no eeprom [ 719.407765][T28916] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 719.421028][T28916] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 719.435267][T28916] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 719.446231][T28916] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 719.483754][ T9] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 719.507744][ T9] em28xx 4-1:0.132: analog set to bulk mode. [ 719.564883][ T5889] em28xx 4-1:0.132: Registering V4L2 extension [ 719.608186][ T9] usb 4-1: USB disconnect, device number 102 [ 719.613766][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 719.624903][ T9] em28xx 4-1:0.132: Disconnecting em28xx [ 719.953016][ T5889] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 719.959974][T22842] syz_tun (unregistering): left allmulticast mode [ 719.968266][ T5889] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 719.969924][T22842] syz_tun (unregistering): left promiscuous mode [ 719.977570][T28939] loop4: detected capacity change from 0 to 7 [ 719.984468][T22842] bridge0: port 3(syz_tun) entered disabled state [ 720.000767][ T5889] em28xx 4-1:0.132: No AC97 audio processor [ 720.033901][T28939] Dev loop4: unable to read RDB block 7 [ 720.039535][T28939] loop4: unable to read partition table [ 720.055318][ T5889] usb 4-1: Decoder not found [ 720.062435][ T5889] em28xx 4-1:0.132: failed to create media graph [ 720.080876][T28939] loop4: partition table beyond EOD, truncated [ 720.090712][ T5889] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 720.131366][T28939] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 720.146656][ T5889] em28xx 4-1:0.132: Remote control support is not available for this card. [ 720.171203][ T9] em28xx 4-1:0.132: Closing input extension [ 720.202102][ T9] em28xx 4-1:0.132: Freeing device [ 720.230982][ T3005] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.345784][ T3005] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.471512][ T3005] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.560271][ T3005] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 720.571235][ T3005] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.653736][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 720.805019][T28956] loop2: detected capacity change from 0 to 7 [ 720.834773][T28956] Dev loop2: unable to read RDB block 7 [ 720.840410][T28956] loop2: unable to read partition table [ 720.878100][T28956] loop2: partition table beyond EOD, truncated [ 720.908255][T28956] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 720.918116][ T3005] bridge_slave_1: left allmulticast mode [ 720.953978][ T3005] bridge_slave_1: left promiscuous mode [ 720.961977][ T3005] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.028408][ T3005] bridge_slave_0: left allmulticast mode [ 721.046765][ T3005] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.134724][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 721.293766][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 721.453726][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 721.461669][T28919] Bluetooth: hci3: command 0x0406 tx timeout [ 721.564548][T28919] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 721.584637][T28919] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 721.607308][T28919] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 721.620672][T28919] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 721.633701][T28919] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 721.693633][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 722.543058][T29012] netlink: 'syz.1.8821': attribute type 1 has an invalid length. [ 722.654043][ T9] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 722.665671][ T3005] bond1 (unregistering): Released all slaves [ 722.733706][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 722.804450][ T3005] bond0 (unregistering): Released all slaves [ 722.843579][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 722.851984][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 722.873423][ T9] usb 4-1: config 179 has no interface number 0 [ 722.882132][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 722.903910][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 722.934969][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 722.942804][T29012] bond2: entered promiscuous mode [ 722.946484][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 722.952085][T29012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 722.964677][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 722.964706][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.989889][T29018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 723.011148][T29006] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 723.064042][T28724] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 723.157789][T29015] 8021q: adding VLAN 0 to HW filter on device bond3 [ 723.174696][T29015] bond2: (slave bond3): making interface the new active one [ 723.182071][T29015] bond3: entered promiscuous mode [ 723.194938][T29015] bond2: (slave bond3): Enslaving as an active interface with an up link [ 723.208920][ T3005] tipc: Disabling bearer [ 723.221723][ T3005] tipc: Disabling bearer [ 723.223775][T28919] Bluetooth: hci0: command 0x0406 tx timeout [ 723.227281][T28724] usb 1-1: Using ep0 maxpacket: 8 [ 723.286459][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input134 [ 723.352337][ T3005] tipc: Left network mode [ 723.373719][T28919] Bluetooth: hci1: command 0x0406 tx timeout [ 723.381269][T28724] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 723.433836][T28724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.464962][T28724] usb 1-1: Product: syz [ 723.469174][T28724] usb 1-1: Manufacturer: syz [ 723.489893][T28724] usb 1-1: SerialNumber: syz [ 723.535537][T28724] usb 1-1: config 0 descriptor?? [ 723.543635][T28919] Bluetooth: hci4: command 0x0406 tx timeout [ 723.549690][T28919] Bluetooth: hci3: command 0x0406 tx timeout [ 723.594235][T25913] usb 4-1: USB disconnect, device number 103 [ 723.595984][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 723.613536][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 723.614974][T25913] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 723.694871][ T5838] Bluetooth: hci2: command tx timeout [ 723.751113][T28724] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 723.773652][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 723.970694][T28724] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 724.035889][T28724] usb 1-1: USB disconnect, device number 106 [ 724.496626][ T3005] dummy0: left promiscuous mode [ 724.565823][T29064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8837'. [ 724.591790][T29066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8838'. [ 724.635568][T29066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8838'. [ 724.648610][ T3005] hsr_slave_0: left promiscuous mode [ 724.670571][ T3005] hsr_slave_1: left promiscuous mode [ 724.692055][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.758868][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.813624][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 725.183565][ T9] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 725.343571][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 725.363909][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 725.392124][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.421172][ T9] usb 1-1: config 0 descriptor?? [ 725.678469][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 725.735061][ T9] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 725.780582][ T5838] Bluetooth: hci2: command tx timeout [ 725.793585][ T9] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 725.853755][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 726.126530][T29095] Dead loop on virtual device ip6_vti0, fix it urgently! [ 726.417674][T29097] loop2: detected capacity change from 0 to 7 [ 726.471000][ T5844] Dev loop2: unable to read RDB block 7 [ 726.484385][ T5844] loop2: unable to read partition table [ 726.490269][ T5844] loop2: partition table beyond EOD, truncated [ 726.510541][T29097] Dev loop2: unable to read RDB block 7 [ 726.518260][T29097] loop2: unable to read partition table [ 726.539834][T29097] loop2: partition table beyond EOD, truncated [ 726.546468][T29097] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 726.830939][ T3005] team0 (unregistering): Port device team_slave_1 removed [ 726.880763][ T3005] team0 (unregistering): Port device team_slave_0 removed [ 726.899150][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 726.969812][T24916] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 727.136710][T24916] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 727.152735][T24916] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 727.163168][T24916] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 727.177604][T24916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.198258][T29101] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 727.238645][T24916] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 727.451010][T24916] usb 3-1: USB disconnect, device number 109 [ 727.762988][T28983] chnl_net:caif_netlink_parms(): no params data found [ 727.860619][ T5838] Bluetooth: hci2: command tx timeout [ 727.933618][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 728.114154][T29118] loop6: detected capacity change from 0 to 1 [ 728.139797][T29118] Dev loop6: unable to read RDB block 1 [ 728.168373][T29118] loop6: unable to read partition table [ 728.196286][T29118] loop6: partition table beyond EOD, truncated [ 728.228083][T29118] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 728.422903][ T3005] IPVS: stop unused estimator thread 0... [ 728.433208][T28983] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.456389][T28983] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.491937][T28983] bridge_slave_0: entered allmulticast mode [ 728.522284][T28983] bridge_slave_0: entered promiscuous mode [ 728.555970][T28983] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.563141][T28983] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.593695][T28983] bridge_slave_1: entered allmulticast mode [ 728.615455][T28983] bridge_slave_1: entered promiscuous mode [ 728.774206][T28724] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 728.799034][T28983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.835319][T28983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.945664][T29145] input: syz1 as /devices/virtual/input/input135 [ 728.958894][T28724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.973610][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 729.001435][T28724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.002787][T28983] team0: Port device team_slave_0 added [ 729.021958][T28724] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 729.055171][T28724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.081109][T28983] team0: Port device team_slave_1 added [ 729.104698][T28724] usb 3-1: config 0 descriptor?? [ 729.235454][T28983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.253287][T28983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.306453][T28983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.339845][T28983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.355754][T28983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.398088][T28983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.551337][T28983] hsr_slave_0: entered promiscuous mode [ 729.569964][T28983] hsr_slave_1: entered promiscuous mode [ 729.593236][T28983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 729.613398][T28983] Cannot create hsr debugfs directory [ 729.939341][ T5838] Bluetooth: hci2: command tx timeout [ 729.945872][T28983] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 729.959905][T28983] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 729.972267][T28983] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 730.013665][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 730.027736][T28983] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 730.200670][T28983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.208870][T28724] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.009C/input/input136 [ 730.285100][T28983] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.366570][T28724] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.009C/input/input137 [ 730.426368][T23522] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.427775][T28724] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.009C/input/input138 [ 730.433692][T23522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.688901][T28724] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.009C/input/input139 [ 730.846428][T28724] uclogic 0003:256C:006D.009C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 730.922866][T28724] usb 3-1: USB disconnect, device number 110 [ 730.941746][T23522] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.948970][T23522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.053653][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 731.263889][T29197] fido_id[29197]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 731.568319][T28983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.770759][T28983] veth0_vlan: entered promiscuous mode [ 731.865083][T28983] veth1_vlan: entered promiscuous mode [ 732.011547][T28983] veth0_macvtap: entered promiscuous mode [ 732.041929][T28983] veth1_macvtap: entered promiscuous mode [ 732.064094][T28724] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 732.093645][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 732.116775][T28983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.152943][T28983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.175772][T28983] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.185954][T28983] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.199512][T28983] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.209357][T28983] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.222416][T29225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8880'. [ 732.235806][T28724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.249388][T28724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.270474][T28724] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 732.283107][T28724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.357308][T28724] usb 3-1: config 0 descriptor?? [ 732.391839][ T4562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.410008][ T4562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.478843][T25109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.493029][T25109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.812130][T28724] hid-steam 0003:28DE:1142.009D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 732.897565][T28724] hid-steam 0003:28DE:1142.009D: Steam wireless receiver connected [ 732.936939][T29242] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 732.970286][T28724] hid-steam 0003:28DE:1142.009E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 733.133772][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 733.239582][T29252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 734.153720][ T10] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 734.182602][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 734.341013][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.365919][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 734.375452][T29284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8891'. [ 734.391254][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.409932][T29284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8891'. [ 734.413164][ T10] usb 2-1: config 0 descriptor?? [ 734.663939][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 734.683672][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 734.706306][T24916] usb 3-1: USB disconnect, device number 111 [ 734.731540][ T10] usb 2-1: USB disconnect, device number 104 [ 734.748800][T24916] hid-steam 0003:28DE:1142.009D: Steam wireless receiver disconnected [ 735.195473][ T10] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 735.213623][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 735.373619][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 735.396320][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.423566][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 735.453588][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.477201][ T10] usb 2-1: config 0 descriptor?? [ 735.537211][ T10] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 735.604743][ T10] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 735.744929][ C0] ldusb 2-1:0.0: Ring buffer overflow, 8 bytes dropped [ 735.758645][ T30] audit: type=1326 audit(1751460956.077:9847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.0.8904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd945b8e929 code=0x7ffc0000 [ 735.838911][ T30] audit: type=1326 audit(1751460956.077:9848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.0.8904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd945b2ab19 code=0x7ffc0000 [ 735.867588][ T30] audit: type=1326 audit(1751460956.077:9849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.0.8904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd945b8e929 code=0x7ffc0000 [ 735.941313][ T30] audit: type=1326 audit(1751460956.077:9850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.0.8904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd945b2ab19 code=0x7ffc0000 [ 736.039721][ T30] audit: type=1326 audit(1751460956.087:9851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.0.8904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd945b8e929 code=0x7ffc0000 [ 736.076693][ C0] ldusb 2-1:0.0: Ring buffer overflow, 8 bytes dropped [ 736.121908][ T30] audit: type=1326 audit(1751460956.087:9852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.0.8904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd945b8e929 code=0x7ffc0000 [ 736.209786][ T30] audit: type=1326 audit(1751460956.087:9853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.0.8904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd945b2ab19 code=0x7ffc0000 [ 736.253678][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 736.299389][ T30] audit: type=1326 audit(1751460956.087:9854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.0.8904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd945b2ab19 code=0x7ffc0000 [ 736.366931][ T30] audit: type=1326 audit(1751460956.087:9855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.0.8904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd945b8e929 code=0x7ffc0000 [ 736.439714][ T30] audit: type=1326 audit(1751460956.087:9856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.0.8904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd945b2ab19 code=0x7ffc0000 [ 737.068273][T29378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8921'. [ 737.111193][ T10] usb 2-1: USB disconnect, device number 105 [ 737.141722][ T10] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 737.293598][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 737.418615][T29378] hsr_slave_0 (unregistering): left promiscuous mode [ 738.333649][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 739.373616][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 740.037849][T29489] trusted_key: syz.1.8965 sent an empty control message without MSG_MORE. [ 740.413655][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 740.667475][T29495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.990205][T29506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 741.054296][ T5903] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 741.236582][ T5903] usb 6-1: config 0 has no interfaces? [ 741.244756][ T5903] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 741.263879][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.272966][ T5903] usb 6-1: Product: syz [ 741.290756][ T5903] usb 6-1: Manufacturer: syz [ 741.303594][ T5903] usb 6-1: SerialNumber: syz [ 741.319456][ T5903] usb 6-1: config 0 descriptor?? [ 741.453667][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 741.865425][T28724] usb 6-1: USB disconnect, device number 2 [ 742.493605][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 742.513622][T28724] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 742.671716][T28724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.693066][T28724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.714711][T28724] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 742.757464][T28724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.841984][T28724] usb 4-1: config 0 descriptor?? [ 743.284893][T28724] hid-steam 0003:28DE:1142.009F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 743.353677][T28724] hid-steam 0003:28DE:1142.009F: Steam wireless receiver connected [ 743.421898][T28724] hid-steam 0003:28DE:1142.00A0: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 743.533659][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 743.784944][T29553] netlink: 'syz.5.8987': attribute type 1 has an invalid length. [ 744.042560][ T5903] usb 4-1: USB disconnect, device number 104 [ 744.115367][ T5903] hid-steam 0003:28DE:1142.009F: Steam wireless receiver disconnected [ 744.584796][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 744.993982][T24916] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 745.183703][T24916] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 745.205202][T24916] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 745.251997][T24916] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 745.284484][ T5889] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 745.307438][T24916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.408727][T29561] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 745.481908][T24916] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 745.527452][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.608220][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.623706][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 745.658433][ T5889] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 745.678296][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.711668][ T5889] usb 2-1: config 0 descriptor?? [ 745.729977][T24916] usb 4-1: USB disconnect, device number 105 [ 746.047797][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 746.047814][ T30] audit: type=1326 audit(1751460966.377:9877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29574 comm="syz.5.8995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d77b2ab19 code=0x7ffc0000 [ 746.226888][ T30] audit: type=1326 audit(1751460966.377:9878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29574 comm="syz.5.8995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d77b8e929 code=0x7ffc0000 [ 746.260757][ T5889] cm6533_jd 0003:0D8C:0022.00A1: unknown main item tag 0x0 [ 746.292340][ T5889] cm6533_jd 0003:0D8C:0022.00A1: unknown main item tag 0x0 [ 746.334252][ T30] audit: type=1326 audit(1751460966.377:9879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29574 comm="syz.5.8995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d77b8e929 code=0x7ffc0000 [ 746.363773][ T5889] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.00A1/input/input140 [ 746.444098][ T5889] cm6533_jd 0003:0D8C:0022.00A1: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 746.483584][ T30] audit: type=1326 audit(1751460966.377:9880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29574 comm="syz.5.8995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d77b2ab19 code=0x7ffc0000 [ 746.583266][ T5889] usb 2-1: USB disconnect, device number 106 [ 746.653660][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 746.659164][ T30] audit: type=1326 audit(1751460966.377:9881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29574 comm="syz.5.8995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d77b8e929 code=0x7ffc0000 [ 746.713720][ T5844] udevd[5844]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 746.761093][ T5844] udevd[5844]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 746.775630][ T30] audit: type=1326 audit(1751460966.377:9882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29574 comm="syz.5.8995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d77b2ab19 code=0x7ffc0000 [ 746.826497][T29598] fido_id[29598]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 746.931621][ T30] audit: type=1326 audit(1751460966.377:9883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29574 comm="syz.5.8995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d77b2ab19 code=0x7ffc0000 [ 747.083896][ T30] audit: type=1326 audit(1751460966.377:9884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29574 comm="syz.5.8995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d77b2ab19 code=0x7ffc0000 [ 747.156337][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.162731][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.255510][ T30] audit: type=1326 audit(1751460966.377:9885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29574 comm="syz.5.8995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d77b2ab19 code=0x7ffc0000 [ 747.433993][ T30] audit: type=1326 audit(1751460966.377:9886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29574 comm="syz.5.8995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d77b2ab19 code=0x7ffc0000 [ 747.653721][ T5889] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 747.693592][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 747.828968][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 747.860614][ T5889] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 747.914596][ T5889] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 747.933737][ T5889] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 747.941872][ T5889] usb 2-1: Product: syz [ 747.973606][ T5889] usb 2-1: Manufacturer: syz [ 747.983805][ T5889] usb 2-1: SerialNumber: syz [ 748.222208][ T5889] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 748.279099][ T5889] usb 2-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 748.301085][ T5889] usb 2-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 748.326023][ T5889] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 748.424641][ T5889] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 748.457671][ T5889] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 748.484854][ T5889] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 748.669629][ T5889] usb 2-1: USB disconnect, device number 107 [ 748.706234][ T5889] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 748.743631][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 748.752735][ T5889] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 748.787898][ T5889] visor 2-1:1.0: device disconnected [ 749.390762][T29664] netlink: 248 bytes leftover after parsing attributes in process `syz.2.9023'. [ 749.773719][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 750.309372][T24916] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 750.467297][T24916] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 750.476583][T24916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.486705][T24916] usb 6-1: Product: syz [ 750.490905][T24916] usb 6-1: Manufacturer: syz [ 750.507375][T24916] usb 6-1: SerialNumber: syz [ 750.515354][T24916] usb 6-1: config 0 descriptor?? [ 750.559828][T29697] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 750.813592][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 750.931796][T29715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9042'. [ 751.759892][T24916] usb 6-1: f81604_read: reg: 100e failed: -EPROTO [ 751.863652][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 751.895762][T24916] usb 6-1: f81604_read: reg: 200f failed: -EPROTO [ 751.932127][T24916] usb 6-1: USB disconnect, device number 3 [ 751.974286][T24916] usb 6-1: f81604_read: reg: 100f failed: -ENODEV [ 752.060841][T29735] syzkaller1: entered promiscuous mode [ 752.079026][T29735] syzkaller1: entered allmulticast mode [ 752.109895][T24916] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 752.167403][T29747] input: syz0 as /devices/virtual/input/input141 [ 752.857027][ T30] kauditd_printk_skb: 102 callbacks suppressed [ 752.857046][ T30] audit: type=1326 audit(1751460973.187:9989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29761 comm="syz.1.9057" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc85f8e929 code=0x0 [ 752.893792][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 753.943592][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 754.973622][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 756.013588][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 756.085227][T29881] team0: entered promiscuous mode [ 756.102714][T29881] team_slave_0: entered promiscuous mode [ 756.135131][T29881] team_slave_1: entered promiscuous mode [ 756.164296][T29881] batadv_slave_0: entered promiscuous mode [ 756.170908][T29879] batadv_slave_0: left promiscuous mode [ 756.177410][T29879] team0: left promiscuous mode [ 756.182419][T29879] team_slave_0: left promiscuous mode [ 756.203921][T29879] team_slave_1: left promiscuous mode [ 757.053597][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 757.616488][T29933] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 757.866480][T29942] [ 757.868849][T29942] ===================================================== [ 757.875855][T29942] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 757.883301][T29942] 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 Not tainted [ 757.890395][T29942] ----------------------------------------------------- [ 757.897310][T29942] syz.1.9110/29942 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 757.905013][T29942] ffff888054bdf6a8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 757.913714][T29942] [ 757.913714][T29942] and this task is already holding: [ 757.921069][T29942] ffff88807720d028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 757.930800][T29942] which would create a new lock dependency: [ 757.936841][T29942] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 757.944929][T29942] [ 757.944929][T29942] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 757.954365][T29942] (&client->buffer_lock){..-.}-{3:3} [ 757.954389][T29942] [ 757.954389][T29942] ... which became SOFTIRQ-irq-safe at: [ 757.967427][T29942] lock_acquire+0x120/0x360 [ 757.972011][T29942] _raw_spin_lock+0x2e/0x40 [ 757.976590][T29942] evdev_pass_values+0xb9/0xbd0 [ 757.981511][T29942] evdev_events+0x1e6/0x340 [ 757.986089][T29942] input_pass_values+0x288/0x890 [ 757.991097][T29942] input_event_dispose+0x3e5/0x6b0 [ 757.996295][T29942] input_event+0x8c/0xc0 [ 758.000609][T29942] hidinput_hid_event+0x132c/0x1c90 [ 758.005881][T29942] hid_process_event+0x4be/0x620 [ 758.010903][T29942] hid_report_raw_event+0xe91/0x16d0 [ 758.016274][T29942] hid_input_report+0x43e/0x520 [ 758.021201][T29942] hid_irq_in+0x47e/0x6d0 [ 758.025613][T29942] __usb_hcd_giveback_urb+0x417/0x690 [ 758.031059][T29942] dummy_timer+0x862/0x4550 [ 758.035635][T29942] __hrtimer_run_queues+0x52c/0xc60 [ 758.040911][T29942] hrtimer_run_softirq+0x187/0x2b0 [ 758.046092][T29942] handle_softirqs+0x286/0x870 [ 758.050933][T29942] __irq_exit_rcu+0xca/0x1f0 [ 758.055601][T29942] irq_exit_rcu+0x9/0x30 [ 758.059919][T29942] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 758.065625][T29942] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 758.071680][T29942] lock_acquire+0x175/0x360 [ 758.076259][T29942] folio_try_get+0x38/0x340 [ 758.080845][T29942] next_uptodate_folio+0xcb/0x5d0 [ 758.085944][T29942] filemap_map_pages+0x1025/0x1740 [ 758.091138][T29942] __handle_mm_fault+0x368a/0x5620 [ 758.096331][T29942] handle_mm_fault+0x40a/0x8e0 [ 758.101180][T29942] do_user_addr_fault+0xa81/0x1390 [ 758.106378][T29942] exc_page_fault+0x76/0xf0 [ 758.110963][T29942] asm_exc_page_fault+0x26/0x30 [ 758.113717][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 758.115878][T29942] [ 758.115878][T29942] to a SOFTIRQ-irq-unsafe lock: [ 758.129817][T29942] (tasklist_lock){.+.+}-{3:3} [ 758.129843][T29942] [ 758.129843][T29942] ... which became SOFTIRQ-irq-unsafe at: [ 758.142449][T29942] ... [ 758.142456][T29942] lock_acquire+0x120/0x360 [ 758.149602][T29942] _raw_read_lock+0x36/0x50 [ 758.154182][T29942] __do_wait+0xde/0x740 [ 758.158414][T29942] do_wait+0x1f8/0x520 [ 758.162559][T29942] kernel_wait+0xab/0x170 [ 758.166964][T29942] call_usermodehelper_exec_work+0xbe/0x230 [ 758.172940][T29942] process_scheduled_works+0xade/0x17b0 [ 758.178579][T29942] worker_thread+0x8a0/0xda0 [ 758.183255][T29942] kthread+0x70e/0x8a0 [ 758.187404][T29942] ret_from_fork+0x3fc/0x770 [ 758.192074][T29942] ret_from_fork_asm+0x1a/0x30 [ 758.196919][T29942] [ 758.196919][T29942] other info that might help us debug this: [ 758.196919][T29942] [ 758.207136][T29942] Chain exists of: [ 758.207136][T29942] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 758.207136][T29942] [ 758.220249][T29942] Possible interrupt unsafe locking scenario: [ 758.220249][T29942] [ 758.228552][T29942] CPU0 CPU1 [ 758.233902][T29942] ---- ---- [ 758.239248][T29942] lock(tasklist_lock); [ 758.243482][T29942] local_irq_disable(); [ 758.250228][T29942] lock(&client->buffer_lock); [ 758.257587][T29942] lock(&new->fa_lock); [ 758.264337][T29942] [ 758.267775][T29942] lock(&client->buffer_lock); [ 758.272793][T29942] [ 758.272793][T29942] *** DEADLOCK *** [ 758.272793][T29942] [ 758.280917][T29942] 7 locks held by syz.1.9110/29942: [ 758.286097][T29942] #0: ffff888146f6b118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 758.295229][T29942] #1: ffff88801c7df230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 758.305317][T29942] #2: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 758.315051][T29942] #3: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 758.324606][T29942] #4: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 758.333731][T29942] #5: ffff88807720d028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 758.343897][T29942] #6: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 758.352938][T29942] [ 758.352938][T29942] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 758.363324][T29942] -> (&client->buffer_lock){..-.}-{3:3} { [ 758.369054][T29942] IN-SOFTIRQ-W at: [ 758.373020][T29942] lock_acquire+0x120/0x360 [ 758.379166][T29942] _raw_spin_lock+0x2e/0x40 [ 758.385307][T29942] evdev_pass_values+0xb9/0xbd0 [ 758.391793][T29942] evdev_events+0x1e6/0x340 [ 758.397927][T29942] input_pass_values+0x288/0x890 [ 758.404504][T29942] input_event_dispose+0x3e5/0x6b0 [ 758.411252][T29942] input_event+0x8c/0xc0 [ 758.417131][T29942] hidinput_hid_event+0x132c/0x1c90 [ 758.423963][T29942] hid_process_event+0x4be/0x620 [ 758.430534][T29942] hid_report_raw_event+0xe91/0x16d0 [ 758.437455][T29942] hid_input_report+0x43e/0x520 [ 758.443945][T29942] hid_irq_in+0x47e/0x6d0 [ 758.449911][T29942] __usb_hcd_giveback_urb+0x417/0x690 [ 758.456915][T29942] dummy_timer+0x862/0x4550 [ 758.463049][T29942] __hrtimer_run_queues+0x52c/0xc60 [ 758.469888][T29942] hrtimer_run_softirq+0x187/0x2b0 [ 758.476632][T29942] handle_softirqs+0x286/0x870 [ 758.483032][T29942] __irq_exit_rcu+0xca/0x1f0 [ 758.489263][T29942] irq_exit_rcu+0x9/0x30 [ 758.495142][T29942] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 758.502413][T29942] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 758.510025][T29942] lock_acquire+0x175/0x360 [ 758.516168][T29942] folio_try_get+0x38/0x340 [ 758.522308][T29942] next_uptodate_folio+0xcb/0x5d0 [ 758.528970][T29942] filemap_map_pages+0x1025/0x1740 [ 758.535718][T29942] __handle_mm_fault+0x368a/0x5620 [ 758.542468][T29942] handle_mm_fault+0x40a/0x8e0 [ 758.548869][T29942] do_user_addr_fault+0xa81/0x1390 [ 758.555627][T29942] exc_page_fault+0x76/0xf0 [ 758.561780][T29942] asm_exc_page_fault+0x26/0x30 [ 758.568369][T29942] INITIAL USE at: [ 758.572265][T29942] lock_acquire+0x120/0x360 [ 758.578333][T29942] _raw_spin_lock+0x2e/0x40 [ 758.584399][T29942] evdev_pass_values+0xb9/0xbd0 [ 758.590806][T29942] evdev_events+0x1e6/0x340 [ 758.596866][T29942] input_pass_values+0x288/0x890 [ 758.603368][T29942] input_event_dispose+0x330/0x6b0 [ 758.610048][T29942] input_inject_event+0x1fe/0x320 [ 758.616637][T29942] evdev_write+0x2fc/0x480 [ 758.622607][T29942] vfs_write+0x27e/0xa90 [ 758.628494][T29942] ksys_write+0x145/0x250 [ 758.634376][T29942] do_syscall_64+0xfa/0x3b0 [ 758.640430][T29942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.647885][T29942] } [ 758.650373][T29942] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 758.658525][T29942] [ 758.658525][T29942] the dependencies between the lock to be acquired [ 758.658536][T29942] and SOFTIRQ-irq-unsafe lock: [ 758.672028][T29942] -> (tasklist_lock){.+.+}-{3:3} { [ 758.677320][T29942] HARDIRQ-ON-R at: [ 758.681463][T29942] lock_acquire+0x120/0x360 [ 758.687956][T29942] _raw_read_lock+0x36/0x50 [ 758.694445][T29942] __do_wait+0xde/0x740 [ 758.700584][T29942] do_wait+0x1f8/0x520 [ 758.706635][T29942] kernel_wait+0xab/0x170 [ 758.712949][T29942] call_usermodehelper_exec_work+0xbe/0x230 [ 758.720829][T29942] process_scheduled_works+0xade/0x17b0 [ 758.728362][T29942] worker_thread+0x8a0/0xda0 [ 758.734937][T29942] kthread+0x70e/0x8a0 [ 758.740990][T29942] ret_from_fork+0x3fc/0x770 [ 758.747564][T29942] ret_from_fork_asm+0x1a/0x30 [ 758.754322][T29942] SOFTIRQ-ON-R at: [ 758.758467][T29942] lock_acquire+0x120/0x360 [ 758.764969][T29942] _raw_read_lock+0x36/0x50 [ 758.771469][T29942] __do_wait+0xde/0x740 [ 758.777613][T29942] do_wait+0x1f8/0x520 [ 758.783663][T29942] kernel_wait+0xab/0x170 [ 758.789982][T29942] call_usermodehelper_exec_work+0xbe/0x230 [ 758.798209][T29942] process_scheduled_works+0xade/0x17b0 [ 758.805741][T29942] worker_thread+0x8a0/0xda0 [ 758.812404][T29942] kthread+0x70e/0x8a0 [ 758.818458][T29942] ret_from_fork+0x3fc/0x770 [ 758.825033][T29942] ret_from_fork_asm+0x1a/0x30 [ 758.831780][T29942] INITIAL USE at: [ 758.835833][T29942] lock_acquire+0x120/0x360 [ 758.842234][T29942] _raw_write_lock_irq+0xa2/0xf0 [ 758.849068][T29942] copy_process+0x224f/0x3c00 [ 758.855639][T29942] kernel_clone+0x21e/0x870 [ 758.862033][T29942] user_mode_thread+0xdd/0x140 [ 758.868693][T29942] rest_init+0x23/0x300 [ 758.874748][T29942] start_kernel+0x47d/0x500 [ 758.881178][T29942] x86_64_start_reservations+0x24/0x30 [ 758.888532][T29942] x86_64_start_kernel+0x143/0x1c0 [ 758.895538][T29942] common_startup_64+0x13e/0x147 [ 758.902375][T29942] INITIAL READ USE at: [ 758.906882][T29942] lock_acquire+0x120/0x360 [ 758.913734][T29942] _raw_read_lock+0x36/0x50 [ 758.920584][T29942] __do_wait+0xde/0x740 [ 758.927075][T29942] do_wait+0x1f8/0x520 [ 758.933474][T29942] kernel_wait+0xab/0x170 [ 758.940137][T29942] call_usermodehelper_exec_work+0xbe/0x230 [ 758.948363][T29942] process_scheduled_works+0xade/0x17b0 [ 758.956244][T29942] worker_thread+0x8a0/0xda0 [ 758.963170][T29942] kthread+0x70e/0x8a0 [ 758.969569][T29942] ret_from_fork+0x3fc/0x770 [ 758.976496][T29942] ret_from_fork_asm+0x1a/0x30 [ 758.983590][T29942] } [ 758.986244][T29942] ... key at: [] tasklist_lock+0x18/0x40 [ 758.994123][T29942] ... acquired at: [ 758.998082][T29942] lock_acquire+0x120/0x360 [ 759.002743][T29942] _raw_read_lock+0x36/0x50 [ 759.007408][T29942] send_sigio+0x101/0x370 [ 759.011894][T29942] dnotify_handle_event+0x169/0x440 [ 759.017252][T29942] fsnotify+0x1814/0x1a80 [ 759.021744][T29942] vfs_mkdir+0x477/0x510 [ 759.026151][T29942] do_mkdirat+0x247/0x590 [ 759.030640][T29942] __x64_sys_mkdirat+0x87/0xa0 [ 759.035562][T29942] do_syscall_64+0xfa/0x3b0 [ 759.040226][T29942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.046276][T29942] [ 759.048587][T29942] -> (&f_owner->lock){....}-{3:3} { [ 759.053874][T29942] INITIAL USE at: [ 759.057835][T29942] lock_acquire+0x120/0x360 [ 759.064059][T29942] _raw_write_lock_irq+0xa2/0xf0 [ 759.070722][T29942] __f_setown+0x67/0x370 [ 759.076689][T29942] generic_setlease+0xd5d/0x1240 [ 759.083350][T29942] fcntl_setlease+0x3a2/0x4c0 [ 759.089750][T29942] do_fcntl+0x6a9/0x1910 [ 759.095715][T29942] __se_sys_fcntl+0xc8/0x150 [ 759.102026][T29942] do_syscall_64+0xfa/0x3b0 [ 759.108252][T29942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.115865][T29942] INITIAL READ USE at: [ 759.120265][T29942] lock_acquire+0x120/0x360 [ 759.126925][T29942] _raw_read_lock_irq+0xaa/0xf0 [ 759.133932][T29942] f_getown+0x54/0x2a0 [ 759.140160][T29942] do_fcntl+0x7ae/0x1910 [ 759.146564][T29942] __se_sys_fcntl+0xc8/0x150 [ 759.153310][T29942] do_syscall_64+0xfa/0x3b0 [ 759.159974][T29942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.163580][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 759.168015][T29942] } [ 759.168023][T29942] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 759.186416][T29942] ... acquired at: [ 759.190293][T29942] lock_acquire+0x120/0x360 [ 759.194959][T29942] _raw_read_lock_irqsave+0xaf/0x100 [ 759.200406][T29942] send_sigio+0x38/0x370 [ 759.204808][T29942] kill_fasync+0x24d/0x4d0 [ 759.209384][T29942] lease_break_callback+0x26/0x30 [ 759.214571][T29942] __break_lease+0x6a5/0x1620 [ 759.219414][T29942] vfs_truncate+0x428/0x520 [ 759.224074][T29942] do_sys_truncate+0xdb/0x190 [ 759.228910][T29942] __x64_sys_truncate+0x5b/0x70 [ 759.233916][T29942] do_syscall_64+0xfa/0x3b0 [ 759.238581][T29942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.244631][T29942] [ 759.246939][T29942] -> (&new->fa_lock){....}-{3:3} { [ 759.252051][T29942] INITIAL USE at: [ 759.255928][T29942] lock_acquire+0x120/0x360 [ 759.261981][T29942] _raw_write_lock_irq+0xa2/0xf0 [ 759.268470][T29942] fasync_remove_entry+0xf1/0x1c0 [ 759.275043][T29942] lease_modify+0x1ca/0x3c0 [ 759.281103][T29942] locks_remove_file+0x4bf/0xea0 [ 759.287599][T29942] __fput+0x3ab/0xa70 [ 759.293130][T29942] task_work_run+0x1d1/0x260 [ 759.299269][T29942] exit_to_user_mode_loop+0xec/0x110 [ 759.306109][T29942] do_syscall_64+0x2bd/0x3b0 [ 759.312248][T29942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.319698][T29942] INITIAL READ USE at: [ 759.324015][T29942] lock_acquire+0x120/0x360 [ 759.330507][T29942] _raw_read_lock_irqsave+0xaf/0x100 [ 759.337777][T29942] kill_fasync+0x199/0x4d0 [ 759.344182][T29942] lease_break_callback+0x26/0x30 [ 759.351192][T29942] __break_lease+0x6a5/0x1620 [ 759.357852][T29942] vfs_truncate+0x428/0x520 [ 759.364336][T29942] do_sys_truncate+0xdb/0x190 [ 759.370994][T29942] __x64_sys_truncate+0x5b/0x70 [ 759.377826][T29942] do_syscall_64+0xfa/0x3b0 [ 759.384318][T29942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.392193][T29942] } [ 759.394676][T29942] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 759.403334][T29942] ... acquired at: [ 759.407122][T29942] lock_acquire+0x120/0x360 [ 759.411787][T29942] _raw_read_lock_irqsave+0xaf/0x100 [ 759.417235][T29942] kill_fasync+0x199/0x4d0 [ 759.421813][T29942] evdev_pass_values+0x627/0xbd0 [ 759.426909][T29942] evdev_events+0x1e6/0x340 [ 759.431572][T29942] input_pass_values+0x288/0x890 [ 759.436670][T29942] input_event_dispose+0x330/0x6b0 [ 759.441943][T29942] input_inject_event+0x1fe/0x320 [ 759.447126][T29942] evdev_write+0x2fc/0x480 [ 759.451700][T29942] vfs_write+0x27e/0xa90 [ 759.456107][T29942] ksys_write+0x145/0x250 [ 759.460590][T29942] do_syscall_64+0xfa/0x3b0 [ 759.465254][T29942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.471304][T29942] [ 759.473609][T29942] [ 759.473609][T29942] stack backtrace: [ 759.479494][T29942] CPU: 0 UID: 0 PID: 29942 Comm: syz.1.9110 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 759.479511][T29942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 759.479522][T29942] Call Trace: [ 759.479529][T29942] [ 759.479535][T29942] dump_stack_lvl+0x189/0x250 [ 759.479556][T29942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 759.479574][T29942] ? __pfx__printk+0x10/0x10 [ 759.479591][T29942] validate_chain+0x1f05/0x2140 [ 759.479610][T29942] __lock_acquire+0xab9/0xd20 [ 759.479629][T29942] ? kill_fasync+0x199/0x4d0 [ 759.479644][T29942] lock_acquire+0x120/0x360 [ 759.479660][T29942] ? kill_fasync+0x199/0x4d0 [ 759.479679][T29942] _raw_read_lock_irqsave+0xaf/0x100 [ 759.479695][T29942] ? kill_fasync+0x199/0x4d0 [ 759.479710][T29942] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 759.479725][T29942] ? do_raw_spin_lock+0x121/0x290 [ 759.479741][T29942] kill_fasync+0x199/0x4d0 [ 759.479757][T29942] ? kill_fasync+0x53/0x4d0 [ 759.479773][T29942] evdev_pass_values+0x627/0xbd0 [ 759.479788][T29942] ? evdev_pass_values+0x641/0xbd0 [ 759.479803][T29942] evdev_events+0x1e6/0x340 [ 759.479815][T29942] ? evdev_events+0x79/0x340 [ 759.479827][T29942] ? input_pass_values+0x8d/0x890 [ 759.479839][T29942] input_pass_values+0x288/0x890 [ 759.479853][T29942] ? input_handle_event+0x70c/0xf30 [ 759.479871][T29942] input_event_dispose+0x330/0x6b0 [ 759.479888][T29942] input_inject_event+0x1fe/0x320 [ 759.479905][T29942] ? input_inject_event+0xbc/0x320 [ 759.479922][T29942] evdev_write+0x2fc/0x480 [ 759.479937][T29942] ? __pfx_evdev_write+0x10/0x10 [ 759.479950][T29942] ? bpf_lsm_file_permission+0x9/0x20 [ 759.479967][T29942] ? security_file_permission+0x75/0x290 [ 759.479981][T29942] ? rw_verify_area+0x258/0x650 [ 759.480001][T29942] ? __pfx_evdev_write+0x10/0x10 [ 759.480015][T29942] vfs_write+0x27e/0xa90 [ 759.480040][T29942] ? __pfx_vfs_write+0x10/0x10 [ 759.480059][T29942] ? __fget_files+0x2a/0x420 [ 759.480077][T29942] ? __fget_files+0x2a/0x420 [ 759.480099][T29942] ? __fget_files+0x3a0/0x420 [ 759.480115][T29942] ? __fget_files+0x2a/0x420 [ 759.480134][T29942] ksys_write+0x145/0x250 [ 759.480150][T29942] ? __pfx_ksys_write+0x10/0x10 [ 759.480164][T29942] ? rcu_is_watching+0x15/0xb0 [ 759.480190][T29942] ? do_syscall_64+0xbe/0x3b0 [ 759.480210][T29942] do_syscall_64+0xfa/0x3b0 [ 759.480227][T29942] ? lockdep_hardirqs_on+0x9c/0x150 [ 759.480243][T29942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.480255][T29942] ? clear_bhb_loop+0x60/0xb0 [ 759.480269][T29942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.480285][T29942] RIP: 0033:0x7fbc85f8e929 [ 759.480299][T29942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.480310][T29942] RSP: 002b:00007fbc86e85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 759.480324][T29942] RAX: ffffffffffffffda RBX: 00007fbc861b5fa0 RCX: 00007fbc85f8e929 [ 759.480335][T29942] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 759.480344][T29942] RBP: 00007fbc86010b39 R08: 0000000000000000 R09: 0000000000000000 [ 759.480352][T29942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.480361][T29942] R13: 0000000000000000 R14: 00007fbc861b5fa0 R15: 00007fbc862dfa28 [ 759.480374][T29942] [ 760.173559][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 761.223830][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 762.253561][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 763.293570][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 764.333613][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 765.373586][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 766.413603][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 767.453592][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available