last executing test programs: 45.656523376s ago: executing program 0 (id=1785): r0 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc1485544, &(0x7f0000000140)=0x5) 45.465715409s ago: executing program 0 (id=1788): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000d8000001118006b05c6a8ce2", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x5, 0x802, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "cb7d302847bb1a28e8a4004b789607ed47df355645f2178a039ed508ff76df3536741848cc6cb65c6e77aad714472cb8856fcdd536f9d9655dcf800549436e96"}}, 0x80}}, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 45.253863498s ago: executing program 0 (id=1792): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000900)="5a7511133e3fcbca838b97832d3fdfdc0953cc0cf8b42eb401679ea24b72d5ff630d9c4a6a811c37fd42bf8589fe8588d4c56a8b68dc2dfb92dfaf997a9d5dbc3ca931223cadd006fa5b0a2153130143af0e", 0x52}, {&(0x7f0000000080)="3b6773add2485f53272c", 0xa}, {&(0x7f0000002f00)="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", 0x944}], 0x3) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) 45.13311998s ago: executing program 0 (id=1796): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x205) move_mount(r1, 0x0, r0, 0x0, 0x46) 45.006980854s ago: executing program 0 (id=1798): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000400)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000001c0)={r1}) 44.457874871s ago: executing program 0 (id=1804): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) 44.003131604s ago: executing program 32 (id=1804): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) 5.331372316s ago: executing program 5 (id=2151): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H'], 0x48}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) 5.121515362s ago: executing program 5 (id=2152): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="940000001d00000226bd7000fbdbdf258400050000000000000000000000000000000000000004d32b00000002000000ac14141f000000000000000000000000013500000201040006000000ff010000ff000000ac14142600000000000000fffffffffffffff7d53c0000000a000000ac14149b000000001b0000000000000000000000040002"], 0x94}, 0x1, 0x0, 0x0, 0x48014}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) 4.57245967s ago: executing program 5 (id=2156): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) 3.549296045s ago: executing program 3 (id=2163): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="4741aa2d2693d37b2a5600", 0xb}], 0x1, 0x0, 0x0, 0x11000000}, 0x81) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 3.21504008s ago: executing program 3 (id=2165): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x4000a042, 0x0) 3.095960113s ago: executing program 5 (id=2166): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000640)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) readv(r0, &(0x7f0000000200)=[{&(0x7f0000004580)=""/4105, 0x1009}, {0x0}], 0x2) 3.083499458s ago: executing program 3 (id=2168): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.79783715s ago: executing program 5 (id=2171): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="eca1c06a9b9c") readv(r1, &(0x7f0000000340)=[{0x0}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x2) 2.569915828s ago: executing program 1 (id=2174): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) 1.643973571s ago: executing program 3 (id=2183): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b4"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1, 0x1000}}}, 0x108) 1.574087339s ago: executing program 1 (id=2184): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x0) read$watch_queue(r1, &(0x7f0000000100)=""/222, 0x10) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x11) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xffffffffffffffff) 1.383270489s ago: executing program 1 (id=2187): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x1a0, 0xfffffffffffffffd}) 1.184891418s ago: executing program 1 (id=2189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5}, {0xe000, 0x5000, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x5}, {0x2000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x80af000, 0x100, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) 1.18359451s ago: executing program 4 (id=2190): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='yeah\x00', 0x5) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000000)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty, 0x10}, 0x1c) shutdown(r0, 0x1) 966.012962ms ago: executing program 4 (id=2192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000600)={0x4040100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000040)) 943.726179ms ago: executing program 1 (id=2193): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x3f, 0x1, 0x0, "d30580c9042b7275077bafe6412087850000000000000000000080001500", 0x20323159}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000540)={r2, 0x1}, 0x8) 784.989699ms ago: executing program 2 (id=2194): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffe3, 0x4004840, 0x0, 0xfffffffffffffe1b) 734.720365ms ago: executing program 4 (id=2195): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) sendto$inet6(r0, 0x0, 0x0, 0x80c0, 0x0, 0x4b) 644.163795ms ago: executing program 4 (id=2196): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 497.868763ms ago: executing program 2 (id=2197): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='bbr\x00', 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="94", 0x1}], 0x1}}], 0x1, 0x20040010) 492.063147ms ago: executing program 2 (id=2198): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 485.321449ms ago: executing program 4 (id=2199): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x10001, 0x0) 357.964651ms ago: executing program 4 (id=2200): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x5, @string={0x5, 0x3, "5cc46f"}}, 0x0, 0x0, 0x0}, 0x0) 322.815425ms ago: executing program 2 (id=2201): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/40, 0x28}], 0x1}, 0x2140) 275.033799ms ago: executing program 2 (id=2202): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x300000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x3, 0xffff, 0x46, 0x0, 0xe}) 222.583447ms ago: executing program 2 (id=2203): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002080)="6d797d42fb74562ec642068eb410c60f8cdc42cf09864b1dd1d244ec3ecfb9103306a02bd120cd2c684eee7cd734914ad7ec2bdd4402eeab7a2972f1672f126c4b5f6c5ff748548170bdf1020c2c3d09186940feb185436981cd578c3a2bdc19c16209468100cc1d67247885420cbc0ea004f07283bc4a5cf8499ad5ef4df93b2fa2eb26895ed9260cc61afbc766adadf7809b3a8f76d9f835acae2dac8abc42896374a6a82a8894552441bd0202daa10048b49d3bc74bba1e5258ab8ac5169facb96d9f68705a7709f6d9a66a9988c13d13a2b8b34d9f234e1c5fae79e4cb76ff3102184ed9032d2402087dcb3eff6bfac7bc4d2fdc9ea25f5289d52ed75ffcd83a2781eb4a23fdd078d1e53495305e3ed5bb4e060e89d6eb2b13586f7f5df32e34390d70f074b4f92c4624312698d86578f3d951021db151806fc314c98d819604d8d9572efc7dd71c0d1a9176ffbd48361908e927e03caa4c1ccc805fe755e616d983442660299e9dd34e5612eff964a45d613a832a0ef8e4410fcdb0313712795b369c08f907c91a4f20e5c18ff903e0ee410d77bc076f49debfd6e411104cace38e0318023527d1c54cec66790638c9ee70c29de0406b3483ca1663245edcda56dc9612e93f40f19cbde5cabb8816d7b75a266e404a8e5364d43c08cf5cc645b533c4b6fe349819c5374fac7a923a7a803ab138c873aee3718921043a60a0ce84df8b991dfa525f0955acbc866182f2409d032981ad824f037ef068501f955898c4500049f0b30014832e3b668f5873305ebd1e094f244caa90610be83a5f674decf451a82d9edca6664da89cad8dc212943828570fb365b41993f89c6d36c579157c4055a77eb1dad1dc466e743129e5e3098f4432fbe289111e102223ff04d02e8108b0925ce76118445efa09233e579f398ab373303c0bb64ff82ddb597040e58a61f82cc56161eaec13ed297a8daa9514468283037e5d0077c9803b69421070718fba4865e4b9c6d7d272c562cc4dd998e16fe288dac68b0bdf05eb2a02fd40b900944d10a94f2b3be9b6c6dc628044aa9eaf34e0474771c10bef03f6af2029643acc1e97efa0748cfca63aa9546bbfa6d7533c4dab0b931ac35b331aef91a80d5ea08ba35cf66e1779298d3338114c12f024970d12af8d67f9b165c15a8b7e37c14c2d512dca76cf6077e2011bb47cc993f3088027b2d53daca574e8b443fddf5c252788854be8aec357db43f2147f23061641d2910a4a503a3a9ca86b3656d37d443e5e4207bb38b6e8879bf3de21309eb90113ccaa75e1d1e0900efc17aecd35078b8f3d579d2d4fb576127278290d6a9ea379e22dcc4ad369d3405311efbc74702020d6cdb31267c2e4dfc6a34bf39c9db32da7f387760909843fbd02e9e291e838fcd8faac4c9ad909cc19440bb775070496ef69250f4cf90372c0f1835dacd4d605a69334d73b1228cce41fe3c6457a37531bbab6d8b15a8214ff3002d29016932de969f05ed64b720ad249b8164ea82fde08303277e7d5f0d3e86bd6021024bdb1d24afe3ae28cece041943db60034fa11c3b6ec7b09c117b086fa4016e68e46678a7c5e91c40d2866295247276109a8778b043b51ffe3ec33dbb665806cf6ca41e7143885b6ca920fd8caf475ddcc698a09d368c721f048efe9e0d372d9cc58deba32f81e7e7f6d53209050d72545bbf04356ea95c9bcec3b8b87f56963111c5454b30a12b8479afc26361a7e00a66c03aae8ebc3348ac2e9b0f52453a32efa9b8ec038e671122dc2965d3b7395051974088f4aa47a76327a0dffce6db0a2cd65e2da5539fd7673911d5605cadf30d85563a60afd58767b6adc549173818de01b0de192894a76bc4e62d8c9e341729e6ef37574cf63c27674081202b8ab9cb9d92d346b1c2dadb253532c1674b2440504f8430c0a2ae5829b016af877831ecce9b13743e821436a6c1c46a1176922dbf2721d9722edf72817f8d15fa5c7ecad046df91bb57b8d16244527c855a40403ddf1757c31361c8bec9b5701b5c10a1e96547fa2c93e03f264a366a96666e24d7f908f6fa4c3f26722961e70adfc4ccd413c2c05adeda400de500babfb80a4e4ae5e9e04444c55f006337c0a98c33f04ae0a6620a1acbc26b5c7d125c30ca542c64604a109c6022029da452a717b219456cca6bc9959f088a5f2360c390b531baf92ae2429a2d0b6c7a20c137a3a0050ae2216b871c03c56410d28472d1035bb870f94589b93ceb57a504bba5acb7a6f77699fc10ea96d8e8fb913ca78c0af33a8435344b71531207344d78ac349894aab972c1b471d52b266bbe4313ef2ba71e7a4680ff442a358699c1e18322dfd50c55b637b6e6d5f02fa61b0e8ae4ef7cbb6359f70028a6b60fe901b2ad97a62b5d527efaf5ebe23fccd80d80e02eabb1be14d40faac8a56b4785fe47c8ff4ac4ad7fcef2134b1ec599074dd45d2b7a5c45845787e0490d9d7db95b58b18f14ae6ccc39623ba0fdf64c8d027f1e7652cc90e82732d4292f4ab0f959a44ff906484fcf83e222088345541ba2b1c50b63711d8adb63c8556452c142de8a06f4b28a86f629cc1dc713dcddcfebc8b1420a603fb970ddaedfc82250637327beb5c0ad04947477bc9aec0914cd78cbf5060e4ef7806b3443c85dbe79b8e87807b1a8d141583998c412d89c23dca4aa16af321dead51a12a73be98bd8ebb4d58b3ccd2d67ec936f2596afff2ba4166015aa4cc6c433acf33df30e3d40a0d6468944a07d1f9eba1bb9eb03dbfb42ba790dc1e7f66ad1834fad94440bffe3879509120b6a5cd1890281bf0f4c2d1be00fbe6b2d09ebdf594110f2bda035262d4830dbe64aa3152612df991a6fe1d035e0b301cf527d74140c85ad79acc001fd2ddb3f283c21e8d253c6c4685584f753e01aae2dee4158c68e2e612f056eb602ad8199d84784e05b363292956247d1fd8e4201330d6060d66e10e316143015908554e5325550d61b8af87a92237edd75cf687919ed0164de95042cbcfe96b9102fe3b71f43bbb1fc24d9d2d0d81dad29ac18cce353ca7c4a7c32e12e451654addc5dc6a44d001c40913eaaf14dacab7037a68e9875ae51321d1852820794206fcc1cdd51443d5e3fcd1dc4dbf728d1ed8dc29437db0154c2f59d1d0d0b0048cb56ad965682afeda337b172cf6a77be36ab8424b919e493628846bbf485d5fefd73228e40295fa2070027f6f2ed565024b82d1058a1be0d0c364b765f2a58f382e378692d1ca4fc7f09f867ed4684dd82dd4c76e0e640f5f87d1c6c2fafdb733f1cef6572cb5e104ae9c94d26c81cbc9a5fd8fbe61ddbdc683b7f4030132b932abf0d66afafc9a9d3121f0ed962a14294bf0ba7b1d33d7808efa427b5531cd881b5c87ec159bc9557009d9762010a497ad52b57283cde9715b48a3e35a22aec3730a0cb476a59f438684346ce0c14f22d5f1e5826d3f670e9ef60f6dd51a11fd32eed673b9d0a12d8eeb8046b96c51cfc54c21b2c48c4a89273963b8345b01159f53f6b6589333afd871875b930d7a4e2e1f5dfb44157ca004a739b0e98562c83b1d8414220f677f2882ef6ab1039fc5f132d7f55046d0c9545033624338e2ca6bdfcdd9d78306818c6214f524a7d036c80b5506f97fe383c1cae3c73dd2a0c628bff47d13dc7d9f88a3c1bb84ccbcb82fd881c6f5e9aa7516bec86fd6bee49f4db3bbf468922f1ef37c499b011e36173edc0ccb92d13dda668cf88bb99649e606fee23d3d3bc1fcbdfb40c7d4a4a60b89c63e65d02a283137561ccacd0c71cf70c6f039ebd1d29cd58571fa07d74187a7931d3d8b7db3062594b696b0e11a587724440bd77aa01fbe26a031a4c3f16ef3ba7f7544d01e8b7dd0b74f3025fe54cd01be16ee80ab0cd7c56671390f2e9bd62b212cf3ff58da7207846bacf85858130a89a2cb45da85b3ee574e8bb43c6642a3060b6f07228951aeab0fe4f4099b86bf07ec39262acca7319df3d5d057baa794234b89eccf36da5d32e4a5283386a0a271be30f75917ffd9f6d96eb8b50a7f6a0b861c5d12a624f3630a18e3bc94eb58bc835cef0a1b77952df6443cc12f221fb8460f4862f382abe13b409056644ec46fde96e1992e79ec0acdf3066f77bbcd6cf1a24d9b49ce70bd3bc58cd898da801d6b1ab12fd7cecc29894b98d616ccff855116a8985653ca88722dc00aed777dfe1839251be42716824dc0c40b6548319f613faffb2f1900a1f563724b0dcb7aa694110d268e945747d860d4bcaba7837342e3d7f207547ba8c093e8d2a1a5e3e098d19343de5fa773642cfb1a2e49f98df7e13254787cc35b2d689db16e551917c0db1034b175d1f4647c35c4cfe8a871cc7983b052050be9d24ed6e6f70d9d4b7cdebc9ba7a761b8c5f2207761a6fe9db5d4ac975dbe398ae05ed180f028037f2d9684dd3b28135e150db8a8adc6c34d0cca2cb95e6babf8702f26062d0ff0f88fc915caee5597a006e211c61f6fa4ca685e79655af85cb3489f94cd9836af4b80cd20ed23ed8f3f4107814407715b471354c5274595963b00482f3723ca88f4eee346c78bd29d65899163d848c9844991e976ff817120a13ce40aab11632b6fdd9d00acb82a5ac7769a0a7ed5d30ae077bf393f5de5b12114e4d1a32c7297bc5e14b673c78cc675b097d56f7a35c3206b1584996972153e2446465492528e0565718252139e1cf500f05a0ca529d58f5b91fa9bb2822c21248a7a8a92d0a7be5f4d249087176c7c23e27d72bd232fca3f7b36970daf2ccd64be4a798a6c30a068fbae324b4c158715949b37c3942f0eee35b90d2fe9d322420917532f6dceaf8633f4f9618f099ece4186e1adc1323b827c984ba54c887b462e169867c2e063fb60b7906434ef362200559e4d02413667dde0c6111750995824c316305f2ddfa3035ee09fdbc28c7f3c095f5a4382ce033746394a37b4d8a61ae8c7270d3863df7382a4786d7bed9543538166dfd01d122a384a7a3de7958c0272a35856f175fa29ee100d2a0f3a6dacbbe8702cf7e8d307ac0cc7921539a371a1c2e7f834db5a903069c07ff562fee851ac9cc3f2f045146db26b13401258733c67d820d06aa068b789300ac90481f84725311544e9a2363f2ce502c02c100bb41e18a103c79bd2bf14f6b52290fa60d978c284f927829b5027ae0ea842efb3450a8ddcabf0eaff6a6a8300de389e78cee73bd8de9a2809e346ff6c79dceca4277eee4b0dae1a3e1740f306044d6e67a5783e665f9637a8f8154f9ebecf95f48146c750826fccebbb1bef247666a710cd71dcf3ac3aa9d0bccb4c4ad432bba642366e4a3b12981901358ee1d7babbb7e10737cbd8a1c159d8dd9dd521c48d2911ebb8162b51ea32185c37097c299c0e477914b49d04cabf5033a5a3660f829ce4dfb2f821e6cb19ce37df64f79eca0649ea8c6b41c6c5d08fb1dae021314609946310c833d08d46c026ddc5dbb7ac62f1123be2004729daa8156ee12bdde9529c7498c8d1a3fd59aa07b9ab7870c4e57b2f54dcc26edd206b28870cf346d741b46bcb508a5f9805ed63c6cb03a9334abfea33626b0681e59b1cecb02202c3190260b8e2963ee84d9a6b5e6be99cbf6a17e4a11e154c2a50d625ef1fd4690cb8e030e46e07c891e6db43626525d464302c44dbf65f71a485f9ea05c347b870bf63fddeaaa2336d9eca1d4c56e8a2734287f0f8a185bd8e3165a681175d1ee9d24f48c9182fd40179ea3d128c0b43c4e2c85eeefa4c932fcaf9297488a3d44e602477d94193410728a0ef0f6730e64b8cfb3e2235c6241d1252196f943d9eb9b2ce70f8c5cf21394875081f56ceb6749a8bfa43e0e545fbc6903b63c55b67ba1e064a682d58fb7117eab5407d1c998aa53a0ca190b0a4aaaa657299cee41be166a7622789b81cff0e892ba87c6ff22f29ed512ebe40cf7306b7597607de5c1c6fb2980a03cc0c6f396ecc27b6b5a3fb0a3f3375fccc397527797f6d1e98f9a873882f85a4e5b11eea65cddb12b0cec9e531a3b5de958963e20d8a520aa71588aa3ab92186e64a710ef07debe3fce6313ea69fd5bd45ca3d50e5c98ac632d5479bc0763b05509ffca67158ad8665cb858e4a8eae29ae667cfa8e39dbd15ca03846298faf7169187feae6e84deaee4ae51cd2016a867b3d11c4e6ec3ae39aeb8c8ec36a885e475f3e1e47e1fa464ef9569aba053cd066907a112612de411a5be0868543116f32d0781323c744dfeef87601981afe063122bac14b9059a68d9f356e85ec04c2767cbe79e245d791e8fb222b5134ce684f7dec8fc0630cc9aeb5fbc38dfd19628ece15342c941e52be8abf0d82ed7b0b4bf5e6184edcae53949ef5987fd7fc479fc9921f2f332ae68f5dde23a3dd0b4713c3d18913edd9ce59870f7d50fdf33f3d2e8e5045d35555b4db5f48946e1b8d8d682f0c2bdd2d0de6bfff349e5e826cfb2d18d7bb43347362f13f5e80619451527bf0d3cc617881ef718466bf2efcb5f1404c573df09e00a5c0d1648b04860ee20d9e79d4ebac94a35e0a4919b1ab0db9e9dbdce1324223850e2e137ebb0c0e1cd690a3c5c9f8576538cba5e3831e6ba56809644e389ee984df3ea8e4743d5d03619b713c984fe8b43c589b78715b9147384b5bb15af8898cd82b31aca722cbe7938f119251d9142f2661f09b49f99d8988c66198dfb9db7f225086bed1deffa78995a56f905a7ab978a9c557ea1ad306bc0cd1cd8e5acaec1e4430a42068adec4a73f891c8010f0271c38685ca66c36313d15ab5bb6948c089b1fccf7fbb340eb03446a9bcda34b2d14a11e09f71e799fda19dd85293e2b0e2ca3e68145b4ea5705592562962cc6c0b65c88d06067903716656a0a7e18ffb46162d6a0c1dac8b6c59541c8ef6bfcfa87ad59cb0e8ef6ef1d7f739c0a56cf975f9cca9ee89bac15cae197d02fc72505d23ebc6153491adccd22262979d2909fb8abd25683894e5a776824b81598a833e339a582b9ce3f8d7ce59fc3147eb3e92751867ee9c3506692b25b2d7f38d97280e85c01bf6d71a602d039aec747620d33660a9d5c9cf4010d01f9cb86db4704872307942df56f04cf6c17e57612635e769218cc91da9e2de29aac4563d695a6ebe249c14ba5332b54150a291bec28417febc4c3efae9e14a0323e561dbc80e98bf71deccff5babbcdc8015ef7a86a52781a67a4915645cfb18379084c58110f1294b2e08a6994d1a3dd4fb79437a75cdb05f36a7b3fdb449c0cea5682d37e5b0217676ff7a383a19d48860476b23ccb66779093b0f6b5b6a1ff0cef503dadf5b67382b2a501d0c13d89eec496374f43fcfa751864330479e0d1f7aa0883c2aafbb5c21b06cbea3c8b515fb1f6d061e269c3de372dc48f0b1c0a935de648a0fc4a1a32ce6aaa8432240bbc977a0ece5fd60d92ba49f1443bfc83668e8251260a5b275098e4a072d44726b91d850bd9c2485cacbf2b33be73785421c2fb259b0c1c0955339713f75ca72b9bc56a7167d8a942015385eb4f1bc3e07b23a71779d043a4f420b0fd9e889d398c955f13542c811683636b71a2fb178e951e37ed5519146c5d61e697d1148458c2f224dc6911363edd1b4d30c5cb12d0e2fb035adc33656615c05266f32c2faf5144e24086c97816c87569feb1fd41775263999ff057d9832b872506aba01db7482251f65a74c66cc01b83056970f843ef58df0d89c44f9265d5bfb50c287f330795b30848341dd26683e5df82bfc1cd1a3f2df3dae99fc38edcc614b39c8a8fa6ada4b5dff08914a92b6a16b05f13bbdbdc5e9f14808e827ee5f364ce115e12bce05122f0dea62d8dd41222fafa3c6bdecea63d3fbd0bfdef667d6ac12b6918273631bf0ec25da2783f06f77a9a0ef2490afe43f3e8b0f553c0c1078141ec0d8f426b1924bd464e4240cda50e9b8a97050360a617eb4f88baa158da8672572f641b20ab3bcbab3d38ff3c84c5c3bf309e26c8ba735503700028c0806c29e02d0a0ed73b9c5c2f2a39f57ee08b935e6e056f01733a12b08603987b14aa7fc542c65a0c03e278723127bced6ac65d2386cf847a73057d19795d5a7517e71d5e480b7380866a64da32fcd1158af9a82559898a7931535a4b75326e2769711ff857d180f16acf316130574fd37bdb658b877f06db42ab96641bc75e3d4ad7fdd9028072139dd3019b03aad32907debef345bcc57423ddfc94683884a00c5f864b8c2dd5af081fa970da251d3afc65dd360c661d8ee2ab58dc9060e2d98b39ae95bb89c319cc93c9e653bf9db205338dc5528c11a391137fe496d726f1407945b243a49a1f3a786047fc47d5e5074e0ec678f26f30cba747d50070c00323d16cff4b06089830931ca704d386140f9c201a5b50a116410be001135aeaf30d7918ccdaf35482659fbb2933e97f1a2e0fc20e6a610e37511d06d4cf931e54ce8f5ab5f688e460e3943bbbe6949a8b4ae309ee31330ece6cb9dfcae0035f3808b7295776ae7bdafffadb6113faac5cd966c2875abb7b20f1b298b48cb78c467f1be92cd3a9d0fd35b7720334274a53a6cbd041b85b6f8f9d622293f0e95a8835204de1faeb7fcdcc57fbdf0afc2e6422bc114355cb5bc979f1bf6d0fb6eb31ee98e06cdcaa1ac36ed3246d85cbdaf999da5d6a7187e8622e6d224c5549a2f2802691a08242ed44a47fc9ad627af949ec3ab5b191025ac75ee7746e2762b530a622a716edbf341e4f9e04fa5d3f77c78dcde06f3845f45c8c1954120ac5949da541882d99adbbca4b0e422e4364289ff1a903bfd1ee63faaa40ef43d3e54249909066e1727591a9632cc8440dcedf931a823e9b542d51aee43897bbbc1f652ae774c326e8400a3a6ab8d90a04e5724fb39c05875ce5afff0502bb6164bc65c107593c155da4b77f136a34c9ec39a4e70cdc4f7fec68245402b2c0fb508eac623ab41a184d3bebe5e9f24c6590c1fee571ed55a76b8554b12116a36101691397d532b46924e6ccb688ab52ffc44f8a670d542477ebd3756d6ef5373024d3f915c187a35feaf39b76453ff835f73862bad13f19e76d47c70122911431e5f71b05a9728631df66b162e708584e83349db1a68368a37cfb4e16c9987a956b3018f2f12c639bf90b5fb0f0560fa7c19887a9d12316dab9bb515cddbae2e9056a556919476b47546c0dae631a88eb8bb9da49879f56efd3d1b65d50bb01c8b4ddc20374877189915cc5824200dfac8f422364b7178f2e7799665b464ac9ec54ffd87fc8dc68e08ab178059ec02bff4ae3c683d0c96796765bdc188c1a4ef46cfa9e6376678245f8d0c907e83e6eb78ffb19e75534925b5b5bfa489fb9cd2c68f00a079c9b34dc45e76044bbfc87c75bbdc5ed0ea7ca0f249007be79116fefa74085f982f670f821ccd0bb14e1086b677f379fd1a1c96bbb4a7338e867d3f91f41b0a7eb2f1104c2ed1593691e601f2e045b3db1cac5dc0d3b302b54967558057e767c4a96f0355d97beace9fe05f0513629b2dd4e86e523d16d7e2e129264e1749b07c062d3a92d96fff5cc976855540eb441a3cef8fc59bf236c85e778b04e30fa807c3ea634af17f005fb55b55f082ca54fc154e6b9df95b951ab9612da7223efc8b63f4528dc3353a15988790d507d9fda18dc8c4adefebc12567e040fd49d2d571437bada1c08054f45545e5cb33c8db8e5b4f2d6735a7fad407fea2ac6e516016c186b7a9b5586650178b3c201eb4fcda3a22291c1f5d66557675dfc73b17edd463abd17a3ec0f1b28adeb4c294c37900002665d504610d37de5dc68fa03e16243ebca169797205d2b24cd64cb1e37328530d68c9a279e36aa0c7f718831ac30607633eab2c9e1b8d6b78649a78fd573d07f0edc18d2f52da2213e2ad44a4bfb3a80ae71d8cf57a2ae2658999d542f7c46da5a30f0f4a82296d0c95e4c6f046db42a00d8631b120a64ee260bf4dbf29103d4e2233fed2ec9ae65fb109f212f967c34e0efb52f56a9a7ab4de472f9cdb0fbcd19fed42d80216c4c717e77a5e6a9118423e0a6dc9d2f3cef598fb9bed6b4e66b279ebbc265560a471d132a854ff230673e843338dcb1ae202c797cfa59dd18eb46e313f1b0dcafdb6518c1da6b08aa1c92bd433a0b65358356a8d03a454f96add1237380049b2567a24836b7bfbdfa58186f2e295e0911dcad6c5413fb36a6e637156291efc016e8513664d515d3ddba1d2c63fa6c5a3331c3cb2f5e2eaad83a75588aca785ada46973d8a2d89686a416720a8f98e1a1eaa8c95aa0bea1dad03ec69bc4bf8300a821f67db4e0c1aab57ef1d1e06880130f6ffe76297acc62879f60e03933666a0da462b7a6b584d28041a3fbafe9a08b7a4664c46b8d40ce4f31a14b122ad74cc4a003f591e019e23cf764795d4235cc8d491c58d3be78a781a708d9fda492306a5afa7c0a43f52f39cafc6a6abc850bbbfa6254fdfd5115727210e19ec8a8857c10a9e9d5cb3001c6e04132667a30a6528e8b59661b483e5365761ac0f5c61e339833b35fd8159875177ed2b78df49ef83b45584c4609562ed2e8bb9add69e88fc0774517a15575f0250d26ae8f6f138daba5311b492c986005bef123a6fc3c1912e378cae2b64e58542293489d5a0f8b582b089c1b05f3ad0aec776b9dcfc0feb1386a98b7e2e09671a73f0eca92364d7f6da861280815b71e48934bc3d321da07878290ec81d3c5c64b8d7f55c1d2e2713edbb5fef28bc36d02302b01c4c29e5df4a9692b41e8d9364e2e408c55b9b14d3ad93889a48787df0673c3df6ba3d9222ee348199aba478e2d398b1e4ae012ca19473b3454327e5bfefb3c56576b6a6c035466f7641464806e63d7086223395a58d886b0dbedd365ce840a6990f56d697605b7d0ac60809270e4e392e89413cc94cea1cb277c4aee023bf90ded9910c96eeead4c6a10ca17151c4966f84bea565746eab573e4295e564d41bc5a6cc9df38c3d7cbd4cd618bd9f292daf95472839fe71c1edc202b6b8b5b939250934ab0dc978397fbaa7533fcce0c4b2eed8ad47779aa4b21504307c7d15e0bcb01bb60e5bafabe66e4b689e4873a1067063e17ba7d647a9a047b1b4ef7350402653b564ae1b34b8597a2357891c90ca2af6b68b794680a0511279fd213eec48dfddba7cbeeb9f9335a0679b1e6db44f27b12d898575d157c2159a86f676df18858857582bffdc006d4732257ade5dde2d1b2cf316fe2a7c5b44505cc808eae5427c43d50e9b99f9317e437df2bc640351e3e8ac249c42f782d07886b6d8875c253ee0e489f1196fa604747586df87e18a893721e6cecfe61dd82daf9b3e4f1eb745c93402c121bb639c56b91bdc77262acfa55389ede1f092733d8a69ae759f82ceda537ffbf32b65138aa3e43e8883048eccf0929de8dee297c5eee97ac7633beae01198e1b00c11276502e7660cd1f59ac619200042656c6e9757b082d374c80182290845f1bc8f2589eaf96948f148ebe675ee7fdb83e32a18eade32f99cca160a4d3504c4bea9c82cfdfe1dd80fbda7c484f2c17c20eea00", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xfffffffffffffc25, {0x3, 0x0, 0x0, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x0, 0x4009, 0x7, 0x0, 0x0, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x1}) creat(&(0x7f00000002c0)='./file0/file0\x00', 0x0) 122.108486ms ago: executing program 5 (id=2204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000440)={{0x5, 0x0, 0x80, {0xeeee8000, 0xeeef0000}}, "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", "6f232738c60c56484b79ec3683964f0b7bef0845ba0b48e7a9d39963a7a23c73c040c9de35a9c06dfb9649b2901d0ca9d32a5a1d577aebc3db32e75cc88ffc8e16ccc8102dd12e27f5c2a8a733880603fc6a9a7ed2c1b517a2cdbd5289dff6be3d89ad71c58f75e8a8b05271b4640c50f2ad7fec716470aa1582439950c4c235a17311d8dd8b910c3649c1d5ee6ed19e78098bc72f5bcae93820da971fa78652563ec45884160cbfb2ba92da96b957c63c67937ea9757547ffd63271e229a6fd53979423f2ae14cf066a6d4962ae47fe1e91f7700b75399f16d6c27c14135951edee74a37eaa4bf40288055dcf377f4647bce137cd68e90ad5bd2c1323023758782b84f1bfc653346b8edf7685c57a0e20876875db4c3ea431bb9c8bdc2efce9555c1ba3f27e5fc2ec0f57bcc7298a222ee6ffa62f8ff6eb2c33692440c39cf55a9eeecb49f164925587354ef1abaa98da756e5a521b5bb454884f7483d4ba930d29f316d2aa59a43a4207dfecdef0039d47da418cdc9b874001c60aaf465b4c236ad2b55ab94ac3676f44e1706b8ea8e6780b0a80a3c5ce05d60b260b0c5c83492d34d3602031d6be63e6b4420a81ae1e14feb844a50a2c90dde4a9e96734b2a40c339955d8cc18544f1e547071966cff6859ec2f86422d87139b82bba93a4bf003df64f512f06a315f3c3b5ad0649f15e3aaf0bdc63deded837a023665da08757eac981dd553db810115c7ac17e6dbcda4ad07f429750ff2e703679fdb2d9339d224359b1203e9d209a082a02be1a210ee019b4de1025cd7a8251705abf93c18b01a1c8bc6e422ff14899ed14dcaf5646b53dda017829c117aa162ca36121abb01ad3467a863a62e40bfd30ad2e03682166eae211a910378d4a5af822852b14366260feb4d4a971d8ab45727bcef2e767e882930467d26f64ecc0c716dfaa574af8938dbafcbba90ae7e3eaf121059eee4ac07951637d3a47cb6709338c9bf37cb86c347b98db3dde34f980df6b8276024f9a5fec582e29a98e86f1933a638e011413778c192797749e88af08c48b3557bcb0fbfc0fc298a0bf75ce3e022bbdeda3c2e06ca86f0a87f5d11bb8d2b166f08fd560d931c52b1b473f8f15215397261c7a0b609f97b795f306516e7d94b24314230abd5b119c09585b495f97ccf918592804698d605e4dd05f44f84f140f9f9e8e78574d1b9e02b27aca108a54221e85d13a4f44bed2af1f12728444433a123768980a64d9462cacc9c0107bc35929eb9612d81dc7e13cf906cd80c4a8098430c559fe13976ca87aef41ac4b14acd6549d11a95d8d2ad2b9dbdb71b06d41be20adb5337631f43e023011369a61d82e1fa7eb2efba7216ac5ba24f843b6607120d13a0e341cdb4a4eeffde6942db9232da545f4989e951df7a59dba8db8db0ec1cc2db3d8f98508270f4974d1091e08a4f2c2ff196bb8c71c03967648e40d0dc9280d311f617ce8c294778f040d023a3a2522edaab71a1d009e46987bf15a2cc4df727f937818f15e1eb0f5033c94f049537429c3fe279fdd0df84fa9992b23b754f478486c3885fdf3c5a298c66bea59205bcd85052bbf6f3d4c487e472e7cef0513c19033dd42e58900255d77e05c659129b838f1f9e024d6cc7e2aacc24943a07422fddb42638e79618d1496331b260971c8403388b54267f41e5ba15b52143e9e99c31ea4d4f8e67f3ca35c1d5c9167184b6de915f03b32dd4f3a02834f18f1c9943f33246bb5bddcaa1367fcc2d22f861ea7a5e5768fb16bbce97b95a1a5b0a9adc6f7f381eebebc6d54d4f3d3924f871a6f81f46cec11f06a7a6fe758c91e44267c53b3742e153713024c60c57a0da3a61c5d4fa1d25373d3118a0f41c49a018b1bc46098a40221710c0a027e303c5b8b972aeca789fd178570388451b1455f83ec5caee7059b3c0a7b6776cee6a7c19cd742f43e6709bc98640fc6ebcfc9f98d82a01062eeee426dac057d4ae6fa65b36947d9c05936e78dca1fcaf48f605e84c9c4fb423b7e36644b13b51b615819f1934c1912c2d371a0a11425d1a99e60cee3ee363b300c788e728dbfd1334e7de348a5cdc3e76b6ac38fed7e54c529717d14b415c2c9fb435912833c7ee52bc9d76c20602d72833ea1522cec3d983c2da9a6144e6065d16da6c18641ea3ec769f73af1dabd6dba306cca9693247147830d4c53bff6ad0d489acc529e0700b43d4fdd9dbe792e430d8ad972bd8196a40bd7b2f7a78e81c03a07f0caad3cf71a8eaa29a0e2583e31bcaf29e708c43a6de034851c2313b6c361f89e9e412944743468ff9523baea9c1174fe88654ff6f3e8d10e442bb6d2de98c0a5664a0110f2b7a444accd21012576ce6ef622322a6969f92b724937ef1a3beaba5f101458039a2282f164c84033bdeffd66477c7055c0526ddbc2171688761a770d0e8ef1f56be5c41fada5787c54e6c5a0faaee657100e2725f8a34cf790b84b7039d3f5eee1aa7f0e944a9986797df5d4dc802f595ec7a2ae83eea6e4104337953802471a046ddd2ed980d859ffb9582ce86618dd513d15efd6c393ecf6e3c8e7e3249b9992e0e66253eb398a5c72ad5f91b708ca487c72f2097436fafd20e2d6358fb11cc2b37da86e373ffd8d1383967c52fd90b855a22d32c116eaaf11842dbaab03b1784fb679891f25b73dec5885e71a4798aab0bca30941d021bf23c15f4def5d9a99f53e5de60e0a56b1aa4ab4b80e9b127dc368a5356133229672c86164627e75f501241829c335069fac234eb0c159a787867f21e86a637c4e394774353e2431f297a5520a2920d320da2a4df8ce58fb82fe95e4828c83bae9f0fc32fbe1994c0a895600f641ea34856ad81674b9445473bb7f6a50dfb8cffab491baf03dd8395ae213cbc146c22884b1676d66e1a0a7d8e85c136a199d50d86237080e1ba496b0a9e2d3a3ce3efea086c1374ca85e0d16a7a4fc251de67cd36f05d9de86d2d291a4acd32f8c0765ac5f4dcf03cdcbdeb668d7cc18c4089da44ea9d570ab1a6797e3477cda908b575779a817422bf286bec4a37670262c6e420a3ef68cf7ce84e8785e6b2c3794edbc98967ee0d48359625cecd5ec77ce446eb274f7e1af1919cca7645afd73a2ffd1c059d125aec06eba7a2d572bd096a6ff3e4a646805459e10771b92ecd30674f13cb1bcc43c220d1300ebc118ed07c993c640645f09b1009fd79b531583b1fa8958f71e75164b034535fb9f38d56c162f4fc9e82accccde76f6bcd432a11376aff82ad9377093989bc8cdd5d2e7df38330bce65fc58e70c8d9cf7f9b8d295e247ae1321a6e462c494d7cfdb86f0b5dfb6fbf70b1b42974fb785b63946cea46ffac943d259fdd0319a445320c1d66017b8d3e485d14ae7c04c9397b14ce12e0846fc7b823b99886b94adc31e407e8d823b20619b3bedb58577a526f761b9a078e0ef69c0ad85b217015b7a57ef5332820e9f6edbfea1f1561ceff55b0d1c654b67e248e14aef4fd17f6ec4a71c045e420155ee147c396048ae60f3a6764187d48347b4317ebfade04ecd1a24e4bcf4b5a8b29bff9c11d6cbf2515ec1df2333c973ee7af872ea2c3ec4087cd0c448a6587d41ba6b70e39c3014794e25627ddc0bc2428e7aa984744454f618953e962d51aff76c60075ba29630311ac80f03baf0125d59b72445547a0b23817a864c9d7fe333e10f1340306d4dfad8b62d61254b3a8f027bc45fa71afb26f00718ff9e9f248c84341032373b23be00247783fef4c920414b6781e2b0a898b6f1caea42067a8df4799de0304905878176dc8f7d2e090c67be4399eacc2d1ca15c05582683e7e6c93857806853cbae2e99d3e6c8ded15c6e6299ca70b7bef4ac1e2f15ba099a01b7c99c6546d7b4b6ebaf47a75bb5cbb96d30306eb01f0d51e763dc92afd9eeb24e31294d3486689d38466c799ab14e3f318cd42f6b4918df274b49ad77927be8d66ca79c03f8d638537a4467387818d712e00a414246ba31c06a060914cb3a0cb6f67fff1284cb7098f568351b1e8e51a4209c3958c5971c0233b516cd4eb652b1a8c0e545e441968696fe384716d8ea5256155e5385a3499a119b8977448af4773d38813e1e01a80b22a82c663e875f65bbb4a3dac2f3e193e30c46cc220087863da44e9e705d90927fd450dc89a48dbf9b6e00a4c520d5530867925f242a000772f0ead99241d355e81aa9b8215d2bc9233627b202982ecef07043fe81b2b5d23fbd718abd5b56a5f90f4d2e00f61593f36324c0eb8587d53c1dc52996d62d44a91de5e437c43449491d8d1b90c94882ebc6eb6435d1d2f517999efba940bd0b302ed57588291e2a3457bee8df84c4da214be76d73579adf7f8ea2b949de06eb9f196a89f0b7ade836ab9deda812ee3e35a62def6151d5a57db26cfab3d12a51403272f54b16f5edd156f8d0312d315b2492fd1419fcce674adfa490b4689345d339a19e67fee16efc8f67854997096f20b1bcc593142a4d49b8c58e0635e3bf6d07673a0b041eb992e6b736de8f5a4eba82f8b899a3df0b18cc61d0bfbd959cc2eb9e7df2cff99b80798cdd99b32c7bcbd2a7f5d4c931ea7ed7a938dcadd16fd9556d62d5b0984346746f38c7a1f40149c1a0322356124860d34153989efa9f31d3936dd66316feb1bb9af322933ddb984308b2114465904e914400f3778280da6c3f3f2fd4007cd8fe527ddcf5bf2fa4faaf8d347cd53c495a11c882e14c8e768692cf223a434a2716ea5874f34b371bfdd98997429f01c4c95b67cc5a512f6782daa4480e8a2c11f74d1e48f312a7256fadbc1e2a4e31277ece8b5c2a039df2b0a6e5ea425038abb2181ca99b8b7340147bf84899bf4b65059432bf564dffef1fc4318113ad2fa58ed3e41c67ea145ba6502cd11716426eb9b405fd3131030f9fd8ed0a302a6609410388a9aa1feba2213f14113c5a1b2719e0c1688e3a59b44d10c5f77cc464929b4de7b02c038d148d203056c7448b4f8d3091394f3831a58850208fc3e8822cb1bfdaf8164e85fd3278689ebbc62f56541acf1d329ab0dc732cab03f4aa5daae849655e1f40a5b7022e31d74ea2f0fd1cfce42082d7fedd26755ce88b12ce3b967822cea8753fe1ab577e54aa1f8f57ec30712e9247f45501d2014dcb8bd82f41e4ec3104ed4cf642e710862af3a1b5a0f2f66ef60e42d60ad535d53c448298e667ae10110424e9da2e1a4d8521cfc74e6b51fab0771a8cba9e6caff681f5f6f2e34c45ad9483a60d0f358366c92ad2127997c536b92a56ce9bab43d704e7a95789f5233e9c65a60ca3e2d9c8976545ade1b7e13cefe31553cf9702f29b569a8e9f3a6861fd5b1b6112b3da21ca0e2d6819542da3eb70947bb72b346570e77206c41f10939de2b49e40f9c46ecef14e9e827f989da301718ba06b2898474698e331a47249ae66837478f16445df1935542126133f8f2a0b246503e27f91e9755c55b486249411b08d5898b2fad383a18cea00b1b937a70385192dd16ba8c13af2df63146c7dd0375dc3e345b35bca697352d863c385c7b9258216e486a7dca0182ecfec1e15a33d758809a2ba689decbaaefa8f5caf7aab7ca9405490cf48d6a1a6d05545f79308563425bf4f0846cf526aaf96a6dcfc0670b147341d82db222f30c28ae7edee89f47ab9c592083c6677e2d61f36cc8f264ce29e352a0143176dca8b436ca03ff7915c1830c24e005c3ec15e80b661dc7adf92a3c787417f8cf15c25bc07c83716e4a898424ab7df91261cc15041a6ad829"}) 98.172749ms ago: executing program 3 (id=2205): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) 18.412991ms ago: executing program 3 (id=2206): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 0s ago: executing program 1 (id=2207): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') syz_usb_connect(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r0], 0x0) kernel console output (not intermixed with test programs): usb 2-1: USB disconnect, device number 16 [ 184.655923][ T5865] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 184.666536][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 184.672906][ T5933] usb 4-1: Firmware version (0.0) predates our first public release. [ 184.685068][ T5865] cp210x 2-1:0.144: device disconnected [ 184.689220][ T5933] usb 4-1: Please update to version 0.2 or newer [ 184.714130][ T5933] usb 4-1: Firmware: build [ 184.801812][ T5994] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 184.813972][ T5994] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.834908][ T5994] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 184.843024][ T5994] usb 3-1: media controller created [ 184.855217][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.884626][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.895735][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 184.907184][ T5994] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.916430][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.939517][ T5933] usb 4-1: USB disconnect, device number 20 [ 184.948966][ T9] usb 5-1: config 0 descriptor?? [ 185.392335][ T9] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 185.401437][ T9] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 185.421491][ T9] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 185.431481][ T9] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 185.441313][ T9] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 185.465832][ T5994] zl10353_read_register: readreg error (reg=127, ret==0) [ 185.473539][ T9] cm6533_jd 0003:0D8C:0022.0017: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 185.502723][ T5994] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 185.513542][ T5994] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 185.571983][ T5994] usb 3-1: USB disconnect, device number 18 [ 185.664252][ T5994] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 185.711628][ T9] usb 5-1: USB disconnect, device number 20 [ 186.324677][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 186.388875][ T957] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 186.495207][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 186.513712][ T9] usb 1-1: config 0 has no interfaces? [ 186.522706][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 186.533410][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 186.541542][ T9] usb 1-1: Manufacturer: syz [ 186.553665][ T9] usb 1-1: config 0 descriptor?? [ 186.556337][ T957] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.583580][ T957] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.605037][ T957] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 186.638792][ T957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 186.654145][ T957] usb 3-1: SerialNumber: syz [ 186.833170][ T8486] lo: entered promiscuous mode [ 186.843107][ T8486] tunl0: entered promiscuous mode [ 186.852808][ T8486] gre0: entered promiscuous mode [ 186.864831][ T8486] gretap0: entered promiscuous mode [ 186.871613][ T8486] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 186.881480][ T957] usb 3-1: 0:2 : does not exist [ 186.908112][ T9] usb 1-1: USB disconnect, device number 21 [ 186.964956][ T957] usb 3-1: USB disconnect, device number 19 [ 187.055658][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.184153][ T8519] netlink: 'syz.3.1004': attribute type 12 has an invalid length. [ 187.192173][ T8519] netlink: 'syz.3.1004': attribute type 29 has an invalid length. [ 187.201469][ T8519] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1004'. [ 187.787539][ T8539] bridge_slave_0: left allmulticast mode [ 187.814238][ T8539] bridge_slave_0: left promiscuous mode [ 187.828667][ T8539] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.850192][ T8539] bridge_slave_1: left allmulticast mode [ 187.860316][ T8539] bridge_slave_1: left promiscuous mode [ 187.866282][ T8539] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.885146][ T8539] bond0: (slave bond_slave_0): Releasing backup interface [ 187.907434][ T8539] bond0: (slave bond_slave_1): Releasing backup interface [ 187.928794][ T8539] team0: Port device team_slave_0 removed [ 187.950689][ T8539] team0: Port device team_slave_1 removed [ 187.968194][ T8539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.981181][ T8539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.992540][ T8539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.025272][ T8539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.034451][ T5954] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 188.178480][ T8554] loop8: detected capacity change from 0 to 7 [ 188.197075][ T8554] Dev loop8: unable to read RDB block 7 [ 188.203029][ T5954] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 188.205076][ T8554] loop8: unable to read partition table [ 188.212205][ T5954] usb 3-1: config 1 has no interface number 0 [ 188.224236][ T5954] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.238409][ T8554] loop8: partition table beyond EOD, truncated [ 188.246833][ T5954] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 188.262673][ T8554] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 188.264708][ T5954] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 188.306791][ T979] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 188.353045][ T5954] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.368436][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.384122][ T5954] usb 3-1: Product: syz [ 188.388656][ T5954] usb 3-1: Manufacturer: syz [ 188.393259][ T5954] usb 3-1: SerialNumber: syz [ 188.489929][ T979] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.501144][ T979] usb 5-1: config 0 interface 0 has no altsetting 0 [ 188.512659][ T979] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 188.530231][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.548472][ T979] usb 5-1: config 0 descriptor?? [ 188.730152][ T8570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1024'. [ 188.754465][ T8570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1024'. [ 188.782671][ T8570] team0: entered promiscuous mode [ 188.800839][ T8570] gretap0: entered promiscuous mode [ 188.824525][ T8570] hsr2: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 188.903428][ T8574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1025'. [ 188.995180][ T979] magicmouse 0003:05AC:0269.0018: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.4-1/input0 [ 189.214836][ T9] usb 5-1: USB disconnect, device number 21 [ 189.251677][ T5954] cdc_ncm 3-1:1.1: bind() failure [ 189.374702][ T30] audit: type=1326 audit(1756233352.585:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8585 comm="syz.1.1030" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd22698ebe9 code=0x0 [ 189.526123][ T5954] usb 3-1: USB disconnect, device number 20 [ 189.817059][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 189.976005][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 189.987048][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.011332][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.027017][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 190.037164][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.051478][ T9] usb 4-1: config 0 descriptor?? [ 190.426812][ T8616] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 190.520222][ T9] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0019/input/input28 [ 190.655685][ T9] appleir 0003:05AC:8241.0019: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 190.795292][ T5954] usb 4-1: USB disconnect, device number 21 [ 190.912634][ T8626] fido_id[8626]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 191.084346][ T9] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 191.283895][ T8642] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 191.298653][ T9] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 191.314519][ T8642] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 191.352363][ T9] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 191.371383][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.423885][ T9] usb 1-1: Product: syz [ 191.442088][ T9] usb 1-1: Manufacturer: syz [ 191.462333][ T9] usb 1-1: SerialNumber: syz [ 191.507364][ T9] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 191.557931][ T8648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1057'. [ 192.102577][ T8672] tipc: Started in network mode [ 192.111875][ T8672] tipc: Node identity 7f000001, cluster identity 4711 [ 192.121729][ T8672] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.136854][ T8672] tipc: Enabled bearer , priority 10 [ 192.256032][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.353294][ T8682] sctp: [Deprecated]: syz.1.1070 (pid 8682) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.353294][ T8682] Use struct sctp_sack_info instead [ 192.394451][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.544520][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.569936][ T9] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 192.620699][ T9] usb 1-1: USB disconnect, device number 22 [ 192.684404][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.824442][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.964510][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.006602][ T8701] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101 [ 193.104530][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.259991][ T9] tipc: Node number set to 2130706433 [ 193.394517][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.664469][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.684372][ T979] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 193.857658][ T979] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.895491][ T979] usb 3-1: config 0 interface 0 has no altsetting 0 [ 193.910305][ T979] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 193.941554][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.970743][ T979] usb 3-1: Product: syz [ 193.984364][ T979] usb 3-1: Manufacturer: syz [ 193.989094][ T979] usb 3-1: SerialNumber: syz [ 194.024812][ T979] usb 3-1: config 0 descriptor?? [ 194.087046][ T979] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 194.118882][ T979] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 194.177503][ T979] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 194.203340][ T979] usb 3-1: media controller created [ 194.266103][ T979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.305414][ T957] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 194.397726][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.404055][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.444654][ T979] DVB: Unable to find symbol tda10046_attach() [ 194.450846][ T979] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 194.481421][ T979] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 194.487833][ T957] usb 2-1: config 0 has an invalid interface number: 204 but max is 0 [ 194.511540][ T957] usb 2-1: config 0 has no interface number 0 [ 194.521275][ T957] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 194.542332][ T957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.561513][ T957] usb 2-1: Product: syz [ 194.567533][ T957] usb 2-1: Manufacturer: syz [ 194.572287][ T957] usb 2-1: SerialNumber: syz [ 194.603282][ T957] usb 2-1: config 0 descriptor?? [ 194.611987][ T8751] binder: 8750:8751 ioctl 4c09 7ff returned -22 [ 194.620839][ T957] ems_usb 2-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 194.642504][ T8751] binder: 8750:8751 ioctl ae01 3c returned -22 [ 194.643170][ T957] ems_usb 2-1:0.204: probe with driver ems_usb failed with error -22 [ 194.704578][ T979] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 194.732501][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1102'. [ 194.742280][ T979] usb 3-1: USB disconnect, device number 21 [ 194.753096][ T8756] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.761388][ T8756] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.983872][ T5865] usb 2-1: USB disconnect, device number 17 [ 195.094501][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 195.255067][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 195.263960][ T9] usb 4-1: config 255 has an invalid interface number: 47 but max is 0 [ 195.287209][ T9] usb 4-1: config 255 has no interface number 0 [ 195.293495][ T9] usb 4-1: config 255 interface 47 has no altsetting 0 [ 195.304382][ T957] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 195.331161][ T9] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b1.fc [ 195.341312][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.353536][ T9] usb 4-1: Product: syz [ 195.358054][ T9] usb 4-1: Manufacturer: syz [ 195.362923][ T9] usb 4-1: SerialNumber: syz [ 195.476253][ T957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 195.489112][ T957] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 195.501116][ T957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 195.534766][ T957] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 195.565615][ T957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.578001][ T957] usb 1-1: Product: syz [ 195.582184][ T957] usb 1-1: Manufacturer: syz [ 195.595605][ T957] usb 1-1: SerialNumber: syz [ 195.595948][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1103'. [ 195.650544][ T957] usb 1-1: config 0 descriptor?? [ 195.670670][ T8771] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 195.692687][ T8771] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 195.732909][ T957] usb 1-1: ucan: probing device on interface #0 [ 195.828733][ T9] legousbtower 4-1:255.47: interrupt endpoints not found [ 195.872310][ T9] usb 4-1: USB disconnect, device number 22 [ 196.359296][ T957] ucan 1-1:0.0: probe with driver ucan failed with error -22 [ 197.142104][ T8818] cifs: Unknown parameter 'f,' [ 197.334462][ C0] net_ratelimit: 3 callbacks suppressed [ 197.334479][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 197.934338][ T8845] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1140'. [ 197.979912][ T8845] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 198.142427][ T9] usb 1-1: USB disconnect, device number 23 [ 198.374564][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 198.574413][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 198.764703][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 198.777578][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.788946][ T8863] input: syz1 as /devices/virtual/input/input29 [ 198.834551][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.845289][ T8863] input: failed to attach handler leds to device input29, error: -6 [ 198.869045][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 198.919393][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 198.942210][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.993887][ T9] usb 1-1: config 0 descriptor?? [ 199.414486][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.459527][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 199.489616][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001A/input/input30 [ 199.601630][ T9] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 199.684419][ T5933] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 199.735667][ T5954] usb 1-1: USB disconnect, device number 24 [ 199.897657][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.929214][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.955014][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 199.962885][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.012010][ T5933] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.032362][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.047222][ T5933] usb 5-1: config 0 descriptor?? [ 200.107535][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 200.130786][ T9] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 200.152478][ T9] usb 2-1: config 0 has no interface number 0 [ 200.181341][ T9] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 200.199471][ T9] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 200.238219][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 200.268820][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.294313][ T9] usb 2-1: Product: syz [ 200.298507][ T9] usb 2-1: Manufacturer: syz [ 200.320308][ T9] usb 2-1: SerialNumber: syz [ 200.343296][ T9] usb 2-1: config 0 descriptor?? [ 200.350716][ T8882] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 200.393931][ T8882] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 200.454487][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.498159][ T5933] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 200.621824][ T8882] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 200.648707][ T8882] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 200.775334][ T5933] usb 5-1: USB disconnect, device number 22 [ 201.292375][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 201.321805][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 201.381474][ T9] asix 2-1:0.251: probe with driver asix failed with error -71 [ 201.447331][ T9] usb 2-1: USB disconnect, device number 18 [ 201.494412][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 201.578011][ T5864] Bluetooth: hci0: command 0x0406 tx timeout [ 201.581593][ T5867] Bluetooth: hci2: command 0x0406 tx timeout [ 201.585083][ T5864] Bluetooth: hci1: command 0x0406 tx timeout [ 201.590817][ T5867] Bluetooth: hci3: command 0x0406 tx timeout [ 202.204973][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1179'. [ 202.224549][ T5954] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 202.387168][ T5954] usb 4-1: unable to get BOS descriptor or descriptor too short [ 202.396507][ T5954] usb 4-1: config 6 has an invalid interface number: 158 but max is 0 [ 202.416120][ T5954] usb 4-1: config 6 has no interface number 0 [ 202.427193][ T5954] usb 4-1: config 6 interface 158 has no altsetting 0 [ 202.449081][ T5954] usb 4-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 202.474458][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.503312][ T5954] usb 4-1: Product: syz [ 202.520469][ T5954] usb 4-1: Manufacturer: syz [ 202.534599][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.542286][ T5954] usb 4-1: SerialNumber: syz [ 203.043259][ T5865] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 203.214399][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 203.231361][ T5865] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 203.254348][ T5865] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.293975][ T5865] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 203.318530][ T5865] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 203.354390][ T5865] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.398316][ T5865] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 203.423498][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.533893][ T8968] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 203.533893][ T8968] The task syz.0.1190 (8968) triggered the difference, watch for misbehavior. [ 203.574570][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.663719][ T5865] usb 3-1: GET_CAPABILITIES returned 0 [ 203.670544][ T5865] usbtmc 3-1:16.0: can't read capabilities [ 203.883691][ T957] usb 3-1: USB disconnect, device number 22 [ 204.027390][ T5954] rtsx_usb 4-1:6.158: probe with driver rtsx_usb failed with error -110 [ 204.060128][ T5954] usb 4-1: USB disconnect, device number 23 [ 204.467587][ T8990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1202'. [ 204.619314][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.954471][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 205.054510][ T957] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 205.146525][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 205.174980][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.206771][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.233813][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 205.258566][ T957] usb 5-1: config index 0 descriptor too short (expected 539, got 27) [ 205.271154][ T957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 205.318663][ T957] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 205.337043][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 205.346502][ T957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.346661][ T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 205.373346][ T9] usb 4-1: Manufacturer: syz [ 205.386804][ T9] usb 4-1: config 0 descriptor?? [ 205.392909][ T957] usb 5-1: Product: syz [ 205.412468][ T957] usb 5-1: Manufacturer: syz [ 205.431360][ T957] usb 5-1: SerialNumber: syz [ 205.457134][ T957] usb 5-1: config 0 descriptor?? [ 205.466181][ T957] hub 5-1:0.0: bad descriptor, ignoring hub [ 205.482329][ T957] hub 5-1:0.0: probe with driver hub failed with error -5 [ 205.521443][ T957] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input31 [ 205.551454][ T957] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 205.565380][ T5865] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 205.590496][ T957] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 205.654437][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.744758][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 205.762361][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 205.781000][ T5865] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 205.793283][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.815025][ T9] appleir 0003:05AC:8243.001C: unknown main item tag 0x0 [ 205.830165][ T5865] usb 3-1: config 0 descriptor?? [ 205.845179][ T5940] usb 5-1: USB disconnect, device number 23 [ 205.865630][ T9] appleir 0003:05AC:8243.001C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 206.081521][ T5865] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 206.183029][ T957] usb 4-1: USB disconnect, device number 24 [ 206.496537][ T5933] usb 3-1: USB disconnect, device number 23 [ 206.694574][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.706436][ T957] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 206.869663][ T957] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 206.878953][ T957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.889051][ T957] usb 1-1: Product: syz [ 206.893225][ T957] usb 1-1: Manufacturer: syz [ 206.898248][ T957] usb 1-1: SerialNumber: syz [ 206.905727][ T957] usb 1-1: config 0 descriptor?? [ 206.913540][ T957] ch341 1-1:0.0: ch341-uart converter detected [ 207.734530][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 207.928839][ T957] ch341-uart ttyUSB0: failed to read break control: -71 [ 207.956794][ T957] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 207.973465][ T957] usb 1-1: USB disconnect, device number 25 [ 207.981899][ T957] ch341 1-1:0.0: device disconnected [ 208.104626][ T5954] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 208.196854][ T9098] netlink: 'syz.4.1247': attribute type 13 has an invalid length. [ 208.223138][ T9098] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 208.242329][ T9098] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 208.250277][ T9098] gretap1: entered promiscuous mode [ 208.263254][ T9098] gretap1: entered allmulticast mode [ 208.309481][ T5954] usb 4-1: Using ep0 maxpacket: 8 [ 208.338105][ T5954] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 208.352780][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.373973][ T5954] usb 4-1: Product: syz [ 208.380662][ T5954] usb 4-1: Manufacturer: syz [ 208.390526][ T5954] usb 4-1: SerialNumber: syz [ 208.436443][ T5954] usb 4-1: config 0 descriptor?? [ 208.469270][ T5954] gspca_main: sq905-2.14.0 probing 2770:9120 [ 208.775508][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.997162][ T9111] syzkaller1: entered promiscuous mode [ 209.005147][ T9111] syzkaller1: entered allmulticast mode [ 209.106877][ T9115] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1255'. [ 209.452807][ T5954] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 209.471536][ T5954] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 209.497138][ T5954] usb 4-1: USB disconnect, device number 25 [ 209.575398][ T5947] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 209.744705][ T5947] usb 1-1: Using ep0 maxpacket: 8 [ 209.759192][ T5947] usb 1-1: unable to get BOS descriptor or descriptor too short [ 209.780873][ T5947] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 209.801392][ T5947] usb 1-1: config 7 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 209.814514][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.824458][ T957] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 209.854973][ T5947] usb 1-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.893050][ T5947] usb 1-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 209.923993][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.932183][ T5947] usb 1-1: Product: syz [ 209.944924][ T5947] usb 1-1: Manufacturer: syz [ 209.950080][ T5947] usb 1-1: SerialNumber: syz [ 210.032723][ T957] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 210.048393][ T957] usb 2-1: config 0 has no interface number 0 [ 210.063504][ T957] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 210.085341][ T957] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 210.102620][ T957] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 210.121401][ T957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.133397][ T957] usb 2-1: config 0 descriptor?? [ 210.162763][ T9132] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 210.213831][ T5947] usb 1-1: USB disconnect, device number 26 [ 210.271125][ T957] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 210.440976][ T5933] usb 2-1: USB disconnect, device number 19 [ 210.585535][ T9] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 210.767323][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 210.785544][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.799143][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 210.808368][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.854495][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.032169][ T9] usb 4-1: usb_control_msg returned -32 [ 211.039019][ T9] usbtmc 4-1:16.0: can't read capabilities [ 211.338245][ T9185] syzkaller1: entered promiscuous mode [ 211.343752][ T9185] syzkaller1: entered allmulticast mode [ 211.387871][ T9187] usbtmc 4-1:16.0: INDICATOR_PULSE returned 0 [ 211.589904][ T5940] usb 4-1: USB disconnect, device number 26 [ 211.894399][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.974701][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 212.164324][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 212.175853][ T9] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 212.184036][ T9] usb 2-1: config 0 has no interface number 0 [ 212.224706][ T9] usb 2-1: config 0 interface 230 has no altsetting 0 [ 212.257368][ T9] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 212.274731][ T5865] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 212.289854][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.317289][ T9] usb 2-1: Product: syz [ 212.328109][ T9] usb 2-1: Manufacturer: syz [ 212.346136][ T9] usb 2-1: SerialNumber: syz [ 212.375870][ T9] usb 2-1: config 0 descriptor?? [ 212.429351][ T9] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 212.497349][ T9] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 212.507552][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.530019][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.544608][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 212.558768][ T5865] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.568175][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.579757][ T5865] usb 5-1: config 0 descriptor?? [ 212.714390][ T5933] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 212.869785][ T5933] usb 1-1: Using ep0 maxpacket: 8 [ 212.878183][ T5933] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.890765][ T5933] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 212.902185][ T5933] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.922620][ T5933] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.934561][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.963062][ T5933] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.975169][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.007852][ T5865] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 213.019257][ T5865] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 213.027199][ T5865] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 213.038498][ T5865] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 213.046884][ T5865] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 213.054753][ T5865] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 213.062156][ T5865] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 213.070147][ T5865] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 213.079612][ T5865] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 213.090826][ T5865] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 213.115499][ T5865] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 213.203142][ T5933] usb 1-1: GET_CAPABILITIES returned 0 [ 213.215605][ T5933] usbtmc 1-1:16.0: can't read capabilities [ 213.268896][ T5947] usb 5-1: USB disconnect, device number 24 [ 213.435489][ T957] usb 1-1: USB disconnect, device number 27 [ 213.945320][ T9254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1313'. [ 213.974430][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.063896][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1315'. [ 214.673834][ T9] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 214.836610][ T5994] usb 2-1: USB disconnect, device number 20 [ 215.014417][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.024210][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1319'. [ 215.360246][ T9284] netlink: 'syz.4.1326': attribute type 10 has an invalid length. [ 215.523044][ T9294] netlink: 'syz.1.1330': attribute type 29 has an invalid length. [ 215.561673][ T9294] netlink: 'syz.1.1330': attribute type 29 has an invalid length. [ 215.585928][ T9294] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1330'. [ 216.054511][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.780890][ T9341] openvswitch: netlink: IPv4 tun info is not correct [ 216.975991][ T9352] netlink: 'syz.3.1355': attribute type 11 has an invalid length. [ 217.094394][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 217.175093][ T5933] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 217.334717][ T5933] usb 1-1: Using ep0 maxpacket: 16 [ 217.342811][ T5933] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 217.351997][ T5933] usb 1-1: config 0 has no interface number 0 [ 217.360563][ T5933] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 217.381931][ T5933] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 217.394482][ T5933] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 217.420711][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 217.422191][ T30] audit: type=1326 audit(1756233380.635:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.4.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c90d8ebe9 code=0x7fc00000 [ 217.429446][ T5933] usb 1-1: Product: syz [ 217.451537][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.462590][ T5933] usb 1-1: SerialNumber: syz [ 217.469906][ T5933] usb 1-1: config 0 descriptor?? [ 217.480266][ T5933] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 217.488578][ T5933] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input32 [ 217.624514][ T5865] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 217.734297][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 217.775245][ T5865] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 217.792447][ T5865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.801846][ T5865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.813741][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 217.826972][ T5865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.838235][ T5865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.854114][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 217.864010][ T5865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.873174][ T5865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.884312][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 217.892522][ T5865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.902538][ T5865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.913561][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 217.926196][ T5865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.938940][ T5865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.953485][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 217.955095][ T5865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.955141][ T5865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.955163][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 217.956436][ T5865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.956483][ T5865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.956507][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 217.957758][ T5865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.957804][ T5865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.957828][ T5865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 217.960819][ T5865] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 218.070498][ T30] audit: type=1326 audit(1756233381.285:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.4.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8c90d2ade9 code=0x7fc00000 [ 218.092982][ T5865] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 218.093009][ T5865] usb 2-1: Product: syz [ 218.093024][ T5865] usb 2-1: Manufacturer: syz [ 218.093037][ T5865] usb 2-1: SerialNumber: syz [ 218.096587][ T5865] usb 2-1: config 0 descriptor?? [ 218.102448][ T5865] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 218.134405][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.142341][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 218.151498][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 218.159533][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 218.166726][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 218.174482][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 218.181686][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 218.188876][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 218.195926][ T5933] usb 1-1: USB disconnect, device number 28 [ 218.201912][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 218.201934][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 218.263807][ T5933] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 218.334189][ T9371] syzkaller1: entered promiscuous mode [ 218.372214][ T9371] syzkaller1: entered allmulticast mode [ 218.481226][ T5865] usb 2-1: USB disconnect, device number 21 [ 218.503099][ T5865] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 218.748329][ T9383] block device autoloading is deprecated and will be removed. [ 219.074391][ T5933] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 219.174410][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 219.264828][ T5933] usb 1-1: Using ep0 maxpacket: 8 [ 219.297750][ T5933] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 219.308817][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.320017][ T5933] usb 1-1: Product: syz [ 219.327281][ T5933] usb 1-1: Manufacturer: syz [ 219.334455][ T5933] usb 1-1: SerialNumber: syz [ 219.385381][ T5933] usb 1-1: config 0 descriptor?? [ 220.144401][ T5933] usb read operation failed. (-71) [ 220.174510][ T5933] usb write operation failed. (-71) [ 220.184721][ T5933] usb write operation failed. (-71) [ 220.194380][ T5933] usb write operation failed. (-71) [ 220.200445][ T5933] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 220.214514][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.248151][ T5933] usb 1-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 220.354638][ T5933] usb 1-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 220.450406][ T9402] syz.3.1375 (9402): drop_caches: 2 [ 221.254478][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.374429][ T957] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 222.060184][ T957] usb 3-1: unable to get BOS descriptor or descriptor too short [ 222.070847][ T957] usb 3-1: no configurations [ 222.079288][ T957] usb 3-1: can't read configurations, error -22 [ 222.234751][ T9459] vxcan0: tx drop: invalid da for name 0x00000000000000f5 [ 222.294404][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.476674][ T9467] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.603477][ T9474] binder: 9473:9474 ioctl c0306201 2000000008c0 returned -14 [ 222.982912][ T9489] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.334475][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.860952][ T9521] syzkaller1: entered promiscuous mode [ 223.866557][ T9521] syzkaller1: entered allmulticast mode [ 224.132812][ T9533] syzkaller1: entered promiscuous mode [ 224.139694][ T9533] syzkaller1: entered allmulticast mode [ 224.374405][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.666107][ T9558] vlan2: entered promiscuous mode [ 224.678722][ T9558] erspan0: entered promiscuous mode [ 224.696606][ T9558] vlan2: entered allmulticast mode [ 224.718448][ T9558] erspan0: entered allmulticast mode [ 225.245230][ T5865] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 225.398975][ T5865] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.413772][ T5865] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.424847][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.439908][ T5865] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 225.450953][ T5865] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.474925][ T5865] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.485864][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.497545][ T5865] usb 5-1: Product: syz [ 225.501760][ T5865] usb 5-1: Manufacturer: syz [ 225.507165][ T5865] usb 5-1: SerialNumber: syz [ 225.520019][ T5865] cdc_mbim 5-1:1.0: skipping garbage [ 225.714453][ T957] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 225.726668][ T9569] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 225.864505][ T957] usb 2-1: Using ep0 maxpacket: 16 [ 225.876655][ T957] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 225.889265][ T957] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.900570][ T957] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.916593][ T957] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.929627][ T957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.939402][ T957] usb 2-1: Product: syz [ 225.943690][ T957] usb 2-1: Manufacturer: syz [ 225.948997][ T957] usb 2-1: SerialNumber: syz [ 226.204448][ T5994] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 226.346667][ T9569] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 226.356946][ T5994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.368010][ T5994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.378918][ T5994] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 226.382107][ T957] usb 2-1: 0:2 : does not exist [ 226.388353][ T5994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.408970][ T5994] usb 3-1: config 0 descriptor?? [ 226.454428][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.555134][ T5865] cdc_mbim 5-1:1.0: bind() failure [ 226.569907][ T5865] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 226.578493][ T5865] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 226.588848][ T5865] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 226.601108][ T5865] usb 5-1: USB disconnect, device number 25 [ 226.836570][ T5994] hid-steam 0003:28DE:1142.001E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 226.907486][ T5994] hid-steam 0003:28DE:1142.001E: Steam wireless receiver connected [ 226.944944][ T5994] hid-steam 0003:28DE:1142.001F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 227.001645][ T957] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 227.012483][ T9601] af_packet: tpacket_rcv: packet too big, clamped from 50 to 4294967286. macoff=82 [ 227.080664][ T5994] usb 3-1: USB disconnect, device number 26 [ 227.101618][ T957] usb 2-1: USB disconnect, device number 22 [ 227.107079][ T5994] hid-steam 0003:28DE:1142.001E: Steam wireless receiver disconnected [ 227.464380][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 227.504411][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.627585][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 227.647195][ T24] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 227.668512][ T24] usb 4-1: config 0 has no interface number 0 [ 227.687411][ T24] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 227.700706][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.718127][ T24] usb 4-1: Product: syz [ 227.722493][ T24] usb 4-1: Manufacturer: syz [ 227.727509][ T24] usb 4-1: SerialNumber: syz [ 227.745231][ T24] usb 4-1: config 0 descriptor?? [ 227.753095][ T24] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 227.968799][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 227.993396][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 228.088517][ T5954] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 228.259081][ T5954] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 228.280594][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.302908][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.313223][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 228.339390][ T5954] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 228.359515][ T5954] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 228.371555][ T5954] usb 2-1: Manufacturer: syz [ 228.390699][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 228.391996][ T5994] usb 4-1: USB disconnect, device number 27 [ 228.403526][ T5954] usb 2-1: config 0 descriptor?? [ 228.432115][ T5994] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 228.462592][ T5994] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 228.481617][ T5994] quatech2 4-1:0.51: device disconnected [ 228.534406][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.832958][ T5954] appleir 0003:05AC:8243.0020: unknown main item tag 0x0 [ 228.855249][ T5954] appleir 0003:05AC:8243.0020: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 229.186695][ T9654] netlink: 'syz.3.1483': attribute type 64 has an invalid length. [ 229.427608][ T9665] vivid-000: disconnect [ 229.438216][ T9664] vivid-000: reconnect [ 229.526697][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1490'. [ 229.528408][ T9670] netlink: 'syz.2.1491': attribute type 11 has an invalid length. [ 229.551215][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'. [ 229.574399][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.699430][ T9678] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 229.843414][ T9683] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1498'. [ 229.859699][ T9684] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 229.992100][ T9690] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1500'. [ 230.051756][ T9690] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1500'. [ 230.134817][ T5940] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 230.314415][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 230.324024][ T5940] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 230.343983][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.352535][ T5940] usb 5-1: Product: syz [ 230.364464][ T5940] usb 5-1: Manufacturer: syz [ 230.369086][ T5940] usb 5-1: SerialNumber: syz [ 230.388053][ T5940] usb 5-1: config 0 descriptor?? [ 230.414197][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1510'. [ 230.423558][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1510'. [ 230.447373][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1510'. [ 230.448448][ T1165] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.462521][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1510'. [ 230.471813][ T1165] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.483554][ T1165] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.493408][ T1165] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.524503][ T5865] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 230.600584][ T5940] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 230.614413][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.700035][ T5865] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 230.710228][ T5865] usb 3-1: config 0 interface 0 has no altsetting 0 [ 230.720273][ T5865] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 230.729599][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 230.737861][ T5865] usb 3-1: Product: syz [ 230.742148][ T5865] usb 3-1: Manufacturer: syz [ 230.749642][ T5865] usb 3-1: SerialNumber: syz [ 230.761541][ T5865] usb 3-1: config 0 descriptor?? [ 230.772788][ T5865] usb 3-1: selecting invalid altsetting 0 [ 230.814510][ T5994] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 230.991113][ T5954] usb 2-1: USB disconnect, device number 23 [ 230.996589][ T5994] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.014212][ T5994] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.044484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 231.053219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 231.054754][ T5994] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 231.062044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 231.077614][ T9] usb 3-1: USB disconnect, device number 27 [ 231.102361][ T5994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 231.131831][ T5994] usb 4-1: SerialNumber: syz [ 231.209420][ T5940] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 231.240297][ T5940] usb 5-1: USB disconnect, device number 26 [ 231.369293][ T5994] usb 4-1: 0:2 : does not exist [ 231.385864][ T5994] usb 4-1: USB disconnect, device number 28 [ 231.411625][ T6011] udevd[6011]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.585905][ T5954] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 231.654425][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.744358][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 231.761009][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.785822][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.804396][ T5954] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 231.816133][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.839965][ T5954] usb 2-1: config 0 descriptor?? [ 231.874230][ T9739] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1522'. [ 232.231258][ T30] audit: type=1326 audit(1756233395.445:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9752 comm="syz.3.1528" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf6e98ebe9 code=0x0 [ 232.266480][ T5954] gt683r_led 0003:1770:FF00.0021: ignoring exceeding usage max [ 232.284896][ T5954] gt683r_led 0003:1770:FF00.0021: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0 [ 232.297264][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 232.475185][ T5954] usb 2-1: USB disconnect, device number 24 [ 232.490328][ T957] gt683r_led 0003:1770:FF00.0021: failed to send set report request: -19 [ 232.500888][ T957] gt683r_led 0003:1770:FF00.0021: failed to send set report request: -19 [ 232.694412][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.174550][ T5940] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 233.235088][ T9771] input: syz0 as /devices/virtual/input/input34 [ 233.241387][ T9771] input: failed to attach handler leds to device input34, error: -6 [ 233.334701][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 233.359239][ T5940] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 233.385800][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.421446][ T5940] usb 3-1: Product: syz [ 233.429351][ T5940] usb 3-1: Manufacturer: syz [ 233.435416][ T5940] usb 3-1: SerialNumber: syz [ 233.445536][ T5940] usb 3-1: config 0 descriptor?? [ 233.452833][ T5940] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 233.692042][ T5940] usb 3-1: USB disconnect, device number 28 [ 233.734399][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.385117][ T5940] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 234.567202][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 234.586231][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 234.628128][ T5940] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 234.672292][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.723396][ T5940] usb 5-1: config 0 descriptor?? [ 234.774406][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.967420][ T5940] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 235.425070][ T5947] usb 5-1: USB disconnect, device number 27 [ 235.435546][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 235.618162][ T24] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 235.635142][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.668260][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 235.692688][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 235.718105][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 235.759597][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.790035][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.814400][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 235.815963][ T24] usb 2-1: config 0 descriptor?? [ 235.847682][ T9842] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 236.185087][ T5994] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 236.270170][ T24] plantronics 0003:047F:FFFF.0022: reserved main item tag 0xd [ 236.315251][ T24] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 236.356654][ T5994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.390356][ T5994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.413505][ T5994] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.444622][ T5994] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.457459][ T5994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.477303][ T5994] usb 3-1: config 0 descriptor?? [ 236.566665][ T9] usb 2-1: USB disconnect, device number 25 [ 236.644414][ T5940] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 236.796397][ T5940] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 236.806265][ T5940] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 236.816071][ T5940] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.831558][ T5940] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 236.840815][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 236.848944][ T5940] usb 4-1: Product: syz [ 236.853113][ T5940] usb 4-1: Manufacturer: syz [ 236.857852][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.865088][ T5940] usb 4-1: SerialNumber: syz [ 236.904496][ T5994] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 237.106429][ T5940] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 237.170060][ T24] usb 3-1: USB disconnect, device number 29 [ 237.312483][ T5994] usb 4-1: USB disconnect, device number 29 [ 237.339354][ T5994] usblp1: removed [ 237.448634][ T957] IPVS: starting estimator thread 0... [ 237.453983][ T9896] __nla_validate_parse: 2 callbacks suppressed [ 237.454001][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1586'. [ 237.561736][ T9898] IPVS: using max 30 ests per chain, 72000 per kthread [ 237.819372][ T9908] netlink: 'syz.4.1593': attribute type 4 has an invalid length. [ 237.837470][ T9908] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1593'. [ 237.894593][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 238.159094][ T9929] sock: sock_set_timeout: `syz.3.1602' (pid 9929) tries to set negative timeout [ 238.249772][ T9935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1605'. [ 238.307241][ T9935] netlink: 'syz.2.1605': attribute type 7 has an invalid length. [ 238.315981][ T9935] netlink: 'syz.2.1605': attribute type 8 has an invalid length. [ 238.344331][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'. [ 238.412554][ T9942] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.424859][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 238.594340][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 238.609055][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 238.629246][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.658116][ T24] usb 5-1: Product: syz [ 238.662476][ T24] usb 5-1: Manufacturer: syz [ 238.692887][ T24] usb 5-1: SerialNumber: syz [ 238.732533][ T24] usb 5-1: config 0 descriptor?? [ 238.934394][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 238.971793][ T24] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 239.772534][ T24] usb write operation failed. (-71) [ 239.787818][ T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 239.803270][ T24] dvbdev: DVB: registering new adapter (Terratec H7) [ 239.810709][ T24] usb 5-1: media controller created [ 239.814502][ T5940] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 239.820718][ T24] usb read operation failed. (-71) [ 239.850129][ T24] usb write operation failed. (-71) [ 239.869955][ T24] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 239.904543][ T24] usb 5-1: USB disconnect, device number 28 [ 239.974433][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 239.983220][ T5940] usb 4-1: Using ep0 maxpacket: 16 [ 239.994073][ T5940] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.014007][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 240.039198][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 240.059397][ T5940] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 240.092743][ T5940] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.122394][ T5940] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 240.140987][ T5940] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 240.160796][ T5940] usb 4-1: Manufacturer: syz [ 240.187174][ T5940] usb 4-1: config 0 descriptor?? [ 240.341214][ T9983] input: syz1 as /devices/virtual/input/input37 [ 240.357810][ T9983] input: failed to attach handler leds to device input37, error: -6 [ 240.564325][ T5940] rc_core: IR keymap rc-hauppauge not found [ 240.570338][ T5940] Registered IR keymap rc-empty [ 240.585764][ T5940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 240.614905][ T5940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 240.670526][ T5940] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 240.706020][ T5940] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input38 [ 240.737306][ T30] audit: type=1326 audit(1756233403.945:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9998 comm="syz.1.1633" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd22698ebe9 code=0x0 [ 240.764679][ T5940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 240.796369][ T5940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 240.814537][ T5940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 240.836689][ T5940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 240.874532][ T5940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 240.914519][ T5940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 240.936537][ T5940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 240.967005][ T5940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 241.014417][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.021845][ T5940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 241.044420][ T5940] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 241.077607][ T5940] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 241.099694][ T5940] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 241.132234][ T5940] usb 4-1: USB disconnect, device number 30 [ 241.592516][T10022] sctp: [Deprecated]: syz.2.1642 (pid 10022) Use of int in max_burst socket option. [ 241.592516][T10022] Use struct sctp_assoc_value instead [ 242.054381][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 242.231146][T10050] tipc: Started in network mode [ 242.237461][T10050] tipc: Node identity 4, cluster identity 4711 [ 242.243634][T10050] tipc: Node number set to 4 [ 242.534902][ T957] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 242.693792][T10063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.710066][ T957] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.723009][ T957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 242.741569][ T957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 242.759224][ T957] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.773086][ T957] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.787173][ T957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.800816][ T957] usb 3-1: config 0 descriptor?? [ 242.813146][T10065] loop2: detected capacity change from 0 to 7 [ 242.831241][ T5995] Dev loop2: unable to read RDB block 7 [ 242.838171][ T5995] loop2: AHDI p1 p2 p3 [ 242.842473][ T5995] loop2: partition table partially beyond EOD, truncated [ 242.850488][ T5995] loop2: p1 start 1601398130 is beyond EOD, truncated [ 242.857547][ T5995] loop2: p2 start 1702059890 is beyond EOD, truncated [ 242.874492][T10065] Dev loop2: unable to read RDB block 7 [ 242.883830][T10065] loop2: AHDI p1 p2 p3 [ 242.888132][T10065] loop2: partition table partially beyond EOD, truncated [ 242.899666][T10065] loop2: p1 start 1601398130 is beyond EOD, truncated [ 242.907243][T10065] loop2: p2 start 1702059890 is beyond EOD, truncated [ 243.094383][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 243.222928][ T957] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 243.251054][ T957] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 243.261128][ T957] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 243.274363][ T957] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 243.292019][ T957] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 243.321228][ T957] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 243.385845][T10083] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 243.519415][ T957] usb 3-1: USB disconnect, device number 30 [ 243.881198][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1673'. [ 243.928961][T10102] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1676'. [ 244.134431][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.263955][ T957] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 244.440545][ T957] usb 2-1: Using ep0 maxpacket: 8 [ 244.461891][ T957] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 244.482511][ T957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.500163][ T957] usb 2-1: Product: syz [ 244.506263][ T957] usb 2-1: Manufacturer: syz [ 244.520161][ T957] usb 2-1: SerialNumber: syz [ 244.528446][ T957] usb 2-1: config 0 descriptor?? [ 244.570179][ T957] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 245.050414][ T5947] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 245.089298][ T5947] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 245.174404][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.595938][ T957] gspca_sonixj: reg_w1 err -71 [ 245.694683][ T957] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 245.710223][ T957] usb 2-1: USB disconnect, device number 26 [ 245.746049][ T5940] delete_channel: no stack [ 245.772571][T10161] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1700'. [ 246.214472][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.198316][ T30] audit: type=1326 audit(1756233410.405:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.3.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6e98ebe9 code=0x50000 [ 247.254449][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.287760][ T30] audit: type=1326 audit(1756233410.405:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.3.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6e98ebe9 code=0x50000 [ 247.324722][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1707'. [ 247.375975][ T30] audit: type=1326 audit(1756233410.405:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.3.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6e98ebe9 code=0x50000 [ 247.399313][T10178] geneve0: entered promiscuous mode [ 247.427168][T10178] geneve0: entered allmulticast mode [ 247.463474][ T30] audit: type=1326 audit(1756233410.405:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.3.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6e98ebe9 code=0x50000 [ 247.576981][ T30] audit: type=1326 audit(1756233410.405:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.3.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6e98ebe9 code=0x50000 [ 247.634655][ T30] audit: type=1326 audit(1756233410.405:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.3.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6e98ebe9 code=0x50000 [ 247.658859][ T30] audit: type=1326 audit(1756233410.405:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.3.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6e98ebe9 code=0x50000 [ 247.685036][ T30] audit: type=1326 audit(1756233410.405:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.3.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6e98ebe9 code=0x50000 [ 247.712321][ T30] audit: type=1326 audit(1756233410.405:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.3.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6e98ebe9 code=0x50000 [ 247.759996][ T30] audit: type=1326 audit(1756233410.405:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.3.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6e98ebe9 code=0x50000 [ 248.007577][T10209] syzkaller1: entered promiscuous mode [ 248.032018][T10209] syzkaller1: entered allmulticast mode [ 248.294401][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.548218][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 248.583554][T10233] warning: `syz.4.1732' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 248.734657][ T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 248.758254][ T24] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 248.780358][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 248.809809][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 248.842146][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 248.875904][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 248.932099][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 248.961172][ T24] usb 3-1: Product: syz [ 248.981475][ T24] usb 3-1: Manufacturer: syz [ 249.020643][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 249.030138][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 249.158245][ T24] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 249.164187][ T24] cdc_wdm 3-1:1.0: Unknown control protocol [ 249.334401][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.830695][ T957] usb 3-1: USB disconnect, device number 31 [ 250.374396][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.144330][ T5994] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 251.313079][ T5994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.347879][ T5994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.370403][ T5994] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 251.380342][ T5994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.391718][ T5994] usb 4-1: config 0 descriptor?? [ 251.414423][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.820140][ T5994] cm6533_jd 0003:0D8C:0022.0026: unknown main item tag 0x0 [ 251.849173][ T5994] cm6533_jd 0003:0D8C:0022.0026: unknown main item tag 0x0 [ 251.876779][ T5994] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0026/input/input39 [ 252.023118][ T5994] cm6533_jd 0003:0D8C:0022.0026: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 252.112786][ T5994] usb 4-1: USB disconnect, device number 31 [ 252.271675][T10325] fido_id[10325]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 252.454460][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.133700][T10359] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 253.166888][T10359] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 253.494384][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.837102][T10390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1799'. [ 253.862111][T10390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1799'. [ 253.922930][T10390] netlink: 50 bytes leftover after parsing attributes in process `syz.4.1799'. [ 254.246480][ T1165] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.314433][ T979] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 254.428652][ T1165] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.502122][ T979] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 254.528766][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.539986][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 254.585168][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.614294][ T979] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 254.638594][ T979] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 254.658208][ T979] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 254.672338][ T1165] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.690922][ T979] usb 5-1: Manufacturer: syz [ 254.722022][ T979] usb 5-1: config 0 descriptor?? [ 255.076211][ T1165] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.187992][ T979] appleir 0003:05AC:8243.0027: unknown main item tag 0x0 [ 255.240972][ T979] appleir 0003:05AC:8243.0027: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 255.506956][ T5947] usb 5-1: USB disconnect, device number 29 [ 255.574404][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.622669][ T957] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 255.679087][ T1165] bridge_slave_1: left allmulticast mode [ 255.715216][T10417] fido_id[10417]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 255.717030][ T1165] bridge_slave_1: left promiscuous mode [ 255.804339][ T957] usb 2-1: Using ep0 maxpacket: 16 [ 255.829584][ T957] usb 2-1: unable to get BOS descriptor or descriptor too short [ 255.852542][ T957] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 255.863244][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.867617][ T957] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 255.874645][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.886703][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.890745][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.904560][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.921871][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.939664][ T957] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.950972][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.959164][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 255.996743][ T957] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 256.014325][ T957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.032556][ T957] usb 2-1: Product: syz [ 256.042671][ T957] usb 2-1: Manufacturer: syz [ 256.083222][ T957] usb 2-1: SerialNumber: syz [ 256.236615][ T1165] bridge_slave_0: left allmulticast mode [ 256.293228][ T1165] bridge_slave_0: left promiscuous mode [ 256.320834][ T957] usb 2-1: 0:2 : does not exist [ 256.404596][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.520871][ T957] usb 2-1: USB disconnect, device number 27 [ 256.614369][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.681837][ T6011] udevd[6011]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.315009][T10488] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.654401][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.779838][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.790498][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.801249][ T1165] bond0 (unregistering): Released all slaves [ 257.909774][ T1165] bond1 (unregistering): (slave bond2): Releasing backup interface [ 257.917858][ T1165] bond2 (unregistering): left promiscuous mode [ 257.924864][ T1165] bond1 (unregistering): Released all slaves [ 258.032656][ T1165] bond2 (unregistering): Released all slaves [ 258.053232][T10484] dummy0: Caught tx_queue_len zero misconfig [ 258.059811][ T51] Bluetooth: hci4: command tx timeout [ 258.354838][T10507] kernel read not supported for file /eth0 (pid: 10507 comm: syz.1.1828) [ 258.391963][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 258.391981][ T30] audit: type=1800 audit(1756233421.585:802): pid=10507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1828" name="eth0" dev="mqueue" ino=35041 res=0 errno=0 [ 258.694397][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.887170][ T1165] hsr_slave_0: left promiscuous mode [ 258.923113][ T1165] hsr_slave_1: left promiscuous mode [ 258.933898][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.949764][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.972344][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.984315][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.052146][ T1165] veth1_macvtap: left promiscuous mode [ 259.064483][ T1165] veth0_macvtap: left promiscuous mode [ 259.064562][ T957] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 259.078524][ T1165] veth1_vlan: left promiscuous mode [ 259.094064][ T1165] veth0_vlan: left promiscuous mode [ 259.320993][ T957] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 259.351615][ T957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.379993][ T957] usb 2-1: Product: syz [ 259.392077][ T957] usb 2-1: Manufacturer: syz [ 259.406229][ T957] usb 2-1: SerialNumber: syz [ 259.734382][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 259.944098][T10560] loop4: detected capacity change from 0 to 7 [ 259.996890][ T5995] Dev loop4: unable to read RDB block 7 [ 260.004494][ T5995] loop4: AHDI p3 p4 [ 260.013507][ T5995] loop4: partition table partially beyond EOD, truncated [ 260.037554][ T5995] loop4: p3 size 4227858431 extends beyond EOD, truncated [ 260.114515][T10560] Dev loop4: unable to read RDB block 7 [ 260.127542][T10560] loop4: AHDI p3 p4 [ 260.135335][ T51] Bluetooth: hci4: command tx timeout [ 260.153769][T10560] loop4: partition table partially beyond EOD, truncated [ 260.175888][T10560] loop4: p3 size 4227858431 extends beyond EOD, truncated [ 260.247756][ T5995] udevd[5995]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 260.339494][ T5995] udevd[5995]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 260.459616][ T957] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 260.493430][ T957] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 260.528882][ T957] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 260.583895][ T957] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 260.616146][ T957] usb 2-1: USB disconnect, device number 28 [ 260.774378][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 260.851048][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 260.940753][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 261.133616][ T30] audit: type=1326 audit(1756233424.345:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.2.1856" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7cd398ebe9 code=0x0 [ 261.345669][T10594] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 261.622718][T10599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.814444][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 262.214037][T10620] input: syz0 as /devices/virtual/input/input40 [ 262.220549][ T51] Bluetooth: hci4: command tx timeout [ 262.235517][T10441] chnl_net:caif_netlink_parms(): no params data found [ 262.664366][ T979] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 262.776283][T10441] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.783506][T10441] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.792711][T10441] bridge_slave_0: entered allmulticast mode [ 262.803711][T10441] bridge_slave_0: entered promiscuous mode [ 262.828550][T10441] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.843486][T10441] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.854525][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 262.862872][ T979] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 262.877653][T10441] bridge_slave_1: entered allmulticast mode [ 262.890957][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.907387][T10441] bridge_slave_1: entered promiscuous mode [ 262.933948][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.958109][ T979] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 263.005604][ T979] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 263.041886][ T979] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 263.064009][ T979] usb 2-1: Manufacturer: syz [ 263.087818][ T979] usb 2-1: config 0 descriptor?? [ 263.099703][T10441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.100336][ T1165] IPVS: stop unused estimator thread 0... [ 263.183354][T10441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.354034][T10441] team0: Port device team_slave_0 added [ 263.388551][T10441] team0: Port device team_slave_1 added [ 263.508837][ T979] appleir 0003:05AC:8243.0028: unknown main item tag 0x0 [ 263.591277][ T979] appleir 0003:05AC:8243.0028: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 263.616570][T10664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 263.646712][ T5994] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 263.667213][T10441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.690068][T10441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.715975][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.747739][T10441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.786436][T10441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.793483][T10441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.819366][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.837933][T10441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.844601][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 263.849161][ T5994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.873682][ T5994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.884144][ T5994] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.897347][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 263.905664][ T5994] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.914799][ T5994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.927679][ T5994] usb 3-1: config 0 descriptor?? [ 264.007653][T10441] hsr_slave_0: entered promiscuous mode [ 264.014580][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 264.027238][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.039102][T10441] hsr_slave_1: entered promiscuous mode [ 264.048857][T10441] debugfs: 'hsr0' already exists in 'hsr' [ 264.056985][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.071171][T10441] Cannot create hsr debugfs directory [ 264.082333][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 264.089406][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 264.098940][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.130015][ T24] usb 4-1: config 0 descriptor?? [ 264.294570][ T51] Bluetooth: hci4: command tx timeout [ 264.364491][ T5994] plantronics 0003:047F:FFFF.0029: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 264.531311][T10682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.585831][ T24] apple 0003:05AC:0247.002A: unexpected long global item [ 264.634870][ T24] apple 0003:05AC:0247.002A: parse failed [ 264.654850][ T24] apple 0003:05AC:0247.002A: probe with driver apple failed with error -22 [ 264.809026][ T5947] usb 4-1: USB disconnect, device number 32 [ 264.862613][T10441] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 264.885915][T10441] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 264.900417][T10441] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 264.911483][T10441] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 264.934385][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 264.984734][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 265.031933][T10441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.060387][T10441] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.095624][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.102815][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.124887][T10444] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.132144][T10444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.154646][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 265.169693][ T24] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 265.200698][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.217924][ T24] usb 5-1: Product: syz [ 265.222459][ T24] usb 5-1: Manufacturer: syz [ 265.238217][ T24] usb 5-1: SerialNumber: syz [ 265.248771][ T24] usb 5-1: config 0 descriptor?? [ 265.270669][ T24] gspca_main: sq930x-2.14.0 probing 2770:930c [ 265.292657][T10441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.367554][T10441] veth0_vlan: entered promiscuous mode [ 265.403314][T10441] veth1_vlan: entered promiscuous mode [ 265.563226][T10441] veth0_macvtap: entered promiscuous mode [ 265.580269][T10441] veth1_macvtap: entered promiscuous mode [ 265.627378][ T5954] usb 2-1: USB disconnect, device number 29 [ 265.651807][T10441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.711346][T10441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.741083][T10444] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.762823][T10444] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.803172][T10444] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.831057][T10444] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.943356][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.955384][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.974410][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 266.030500][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.041173][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.385477][ T5940] usb 3-1: USB disconnect, device number 32 [ 266.524316][ T24] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 266.585165][ T979] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 266.755402][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 266.755975][ T24] gspca_sq930x: Sensor ov9630 not yet treated [ 266.763661][ T979] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 266.795633][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.797333][ T24] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 266.825229][ T979] usb 4-1: config 0 descriptor?? [ 266.855521][ T979] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 266.864645][ T24] usb 5-1: USB disconnect, device number 30 [ 267.014561][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 267.094822][ T5947] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 267.295263][ T5947] usb 3-1: Using ep0 maxpacket: 32 [ 267.311969][ T5947] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 267.331518][ T5947] usb 3-1: config 0 has no interface number 0 [ 267.363502][ T5947] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.376158][ T5947] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.386539][ T5947] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 267.397918][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.442302][ T30] audit: type=1326 audit(1756233430.655:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.1.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd22692ade9 code=0x7ffc0000 [ 267.467837][ T5947] usb 3-1: config 0 descriptor?? [ 267.523974][ T30] audit: type=1326 audit(1756233430.655:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.1.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd22692ade9 code=0x7ffc0000 [ 267.547327][ T30] audit: type=1326 audit(1756233430.655:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.1.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd22692ade9 code=0x7ffc0000 [ 267.572210][ T30] audit: type=1326 audit(1756233430.655:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.1.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22698ebe9 code=0x7ffc0000 [ 267.604266][T10747] netlink: 'syz.4.1903': attribute type 4 has an invalid length. [ 267.724731][ T30] audit: type=1326 audit(1756233430.655:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.1.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd22692ade9 code=0x7ffc0000 [ 267.774297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 267.830554][ T30] audit: type=1326 audit(1756233430.655:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.1.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd22692ade9 code=0x7ffc0000 [ 267.877144][ T979] gspca_vc032x: reg_w err -71 [ 267.884739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 267.909057][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.939081][ T30] audit: type=1326 audit(1756233430.655:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.1.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22698ebe9 code=0x7ffc0000 [ 267.963096][ T30] audit: type=1326 audit(1756233430.655:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.1.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd22692ade9 code=0x7ffc0000 [ 267.986740][ T30] audit: type=1326 audit(1756233430.655:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.1.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22698ebe9 code=0x7ffc0000 [ 268.009314][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.015379][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.042420][ T30] audit: type=1326 audit(1756233430.655:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.1.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd22692ade9 code=0x7ffc0000 [ 268.059843][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.142164][ T5947] input: HID 28bd:0094 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0094.002B/input/input41 [ 268.143137][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.240776][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.257469][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.267587][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.277695][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.287268][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.290996][ T5947] uclogic 0003:28BD:0094.002B: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.2-1/input1 [ 268.318184][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.323505][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.370907][ T5947] usb 3-1: USB disconnect, device number 33 [ 268.382962][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.400668][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.418135][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.423459][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.477669][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.502692][ T979] gspca_vc032x: I2c Bus Busy Wait 00 [ 268.531625][ T979] gspca_vc032x: Unknown sensor... [ 268.553365][ T979] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 268.563674][T10758] fido_id[10758]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 268.607896][ T979] usb 4-1: USB disconnect, device number 33 [ 270.263817][T10783] capability: warning: `syz.4.1919' uses 32-bit capabilities (legacy support in use) [ 270.288775][ T24] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 270.476693][ T5994] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 270.486621][ T24] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 270.504323][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.530008][ T24] usb 4-1: config 0 descriptor?? [ 270.615670][ T5947] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 270.634385][ T5994] usb 2-1: Using ep0 maxpacket: 8 [ 270.646338][ T5994] usb 2-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 270.665030][ T5994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.687266][ T5994] usb 2-1: config 0 descriptor?? [ 270.704839][ T5994] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 270.825375][ T5947] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 270.833426][ T5947] usb 3-1: config 0 has no interface number 0 [ 270.845498][ T5947] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 270.859838][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.888953][ T5947] usb 3-1: config 0 descriptor?? [ 270.907383][ T5947] cp210x 3-1:0.1: cp210x converter detected [ 270.909607][ T5994] usb 2-1: qt2_attach - failed to power on unit: -71 [ 270.958354][ T5994] quatech2 2-1:0.0: probe with driver quatech2 failed with error -71 [ 270.976952][ T5994] usb 2-1: USB disconnect, device number 30 [ 271.303245][ T5947] cp210x 3-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 271.583841][ T5947] usb 3-1: cp210x converter now attached to ttyUSB0 [ 271.594797][T10835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.654770][ T5994] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 271.724211][ T5947] usb 3-1: USB disconnect, device number 34 [ 271.751569][ T5947] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 271.769719][ T24] pegasus 4-1:0.0: can't reset MAC [ 271.785601][ T24] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 271.826746][ T24] usb 4-1: USB disconnect, device number 34 [ 271.835067][ T5994] usb 6-1: Using ep0 maxpacket: 32 [ 271.858946][ T5947] cp210x 3-1:0.1: device disconnected [ 271.862755][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.904853][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.945777][ T5994] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 271.961924][ T5994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.991615][ T5994] usb 6-1: config 0 descriptor?? [ 272.009248][ T5994] hub 6-1:0.0: USB hub found [ 272.229632][ T5994] hub 6-1:0.0: 1 port detected [ 272.842967][ T5994] hub 6-1:0.0: activate --> -90 [ 272.989233][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880594ffc00: rx timeout, send abort [ 273.044484][ T5940] usb 6-1: USB disconnect, device number 2 [ 273.050455][ T5994] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 273.489823][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030caf400: rx timeout, send abort [ 273.498891][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880594ffc00: abort rx timeout. Force session deactivation [ 273.612516][T10873] ALSA: mixer_oss: invalid OSS volume ':' [ 273.618836][T10873] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 273.631571][T10873] ALSA: mixer_oss: invalid OSS volume '2' [ 273.637743][T10873] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 273.644083][T10873] ALSA: mixer_oss: invalid OSS volume '3' [ 273.658204][T10873] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 273.998070][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030caf400: abort rx timeout. Force session deactivation [ 274.064405][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 274.066705][T10839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 274.863218][T10839] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 274.873692][T10839] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 274.880571][T10839] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 274.890830][T10839] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 274.896909][T10839] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 274.904677][T10839] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 274.910652][T10839] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 274.918325][T10839] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 274.924415][T10839] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 274.935500][T10839] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 275.890629][T10919] input: syz0 as /devices/virtual/input/input42 [ 276.035290][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1978'. [ 276.135154][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 276.192067][ T5954] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 276.393747][ T5954] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 276.434262][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.452817][ T5954] usb 6-1: Product: syz [ 276.461887][ T5954] usb 6-1: Manufacturer: syz [ 276.466957][ T5954] usb 6-1: SerialNumber: syz [ 276.480650][ T5954] usb 6-1: config 0 descriptor?? [ 276.525370][ T5954] ch341 6-1:0.0: ch341-uart converter detected [ 276.725224][T10938] capability: warning: `syz.2.1983' uses deprecated v2 capabilities in a way that may be insecure [ 276.815227][T10942] netlink: 'syz.4.1984': attribute type 1 has an invalid length. [ 276.879117][T10942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.944410][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 276.944414][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 276.944473][ T5872] Bluetooth: hci2: command 0x0406 tx timeout [ 276.950584][ T5185] Bluetooth: hci1: command 0x0406 tx timeout [ 277.000593][T10942] bond1: (slave geneve2): making interface the new active one [ 277.102101][T10942] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 277.351368][T10960] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.577973][ T5954] usb 6-1: ch341-uart converter now attached to ttyUSB0 [ 277.586069][T10967] input: syz1 as /devices/virtual/input/input43 [ 277.793009][ T5954] usb 6-1: USB disconnect, device number 3 [ 277.852489][ T5954] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 277.874061][ T5954] ch341 6-1:0.0: device disconnected [ 277.944647][ T5994] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 278.114395][ T5994] usb 5-1: Using ep0 maxpacket: 16 [ 278.136881][ T5994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.172374][ T5994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.203334][ T5994] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 278.247132][ T5994] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 278.278347][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.317214][ T5994] usb 5-1: config 0 descriptor?? [ 278.440598][T10991] netlink: 'syz.3.1997': attribute type 10 has an invalid length. [ 278.506182][T10991] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 278.618128][T10995] netlink: 'syz.3.1997': attribute type 10 has an invalid length. [ 278.790272][T10971] random: crng reseeded on system resumption [ 278.884378][ T5954] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 278.897005][ T5994] input: HID 0955:7214 Haptics as /devices/virtual/input/input44 [ 279.013064][ T5994] shield 0003:0955:7214.002C: Registered Thunderstrike controller [ 279.021106][ T5185] Bluetooth: hci2: command 0x0406 tx timeout [ 279.021156][ T5185] Bluetooth: hci3: command 0x0406 tx timeout [ 279.027027][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 279.040874][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 279.074498][ T5954] usb 6-1: Using ep0 maxpacket: 32 [ 279.082671][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.104350][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.114120][ T5954] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 279.118634][ T5994] shield 0003:0955:7214.002C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 279.177829][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.210638][ T5954] usb 6-1: config 0 descriptor?? [ 279.234097][ T979] shield 0003:0955:7214.002C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 279.251591][ T5954] hub 6-1:0.0: USB hub found [ 279.263455][ T979] shield 0003:0955:7214.002C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 279.294857][ T5994] usb 5-1: USB disconnect, device number 31 [ 279.321526][ T979] shield 0003:0955:7214.002C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 279.410003][ T979] shield 0003:0955:7214.002C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 279.441992][ T5954] hub 6-1:0.0: 1 port detected [ 279.954907][T11016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.980022][T11016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.009926][T11016] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 280.043965][T11016] bond0 (unregistering): Released all slaves [ 280.069408][ T5954] hub 6-1:0.0: activate --> -90 [ 280.074372][ T5940] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 280.244608][ T5940] usb 5-1: Using ep0 maxpacket: 16 [ 280.258151][T11034] netlink: 'syz.1.2012': attribute type 10 has an invalid length. [ 280.268816][ T5940] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 280.288929][T11034] team0: Device netdevsim0 failed to register rx_handler [ 280.300503][ T5940] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 280.343519][ T5940] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 280.381403][ T5940] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 280.396123][T11040] netlink: 'syz.2.2014': attribute type 29 has an invalid length. [ 280.404069][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.422301][T11040] netlink: 'syz.2.2014': attribute type 29 has an invalid length. [ 280.430496][ T5940] usb 5-1: Product: syz [ 280.439448][ T5940] usb 5-1: Manufacturer: syz [ 280.474425][ T5940] usb 5-1: SerialNumber: syz [ 280.480656][ T5954] usb 6-1-port1: cannot disable (err = -71) [ 280.480901][ T5994] usb 6-1: USB disconnect, device number 4 [ 280.491817][T11040] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2014'. [ 280.713401][T11048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 280.961837][ T5940] usb 5-1: 0:2 : does not exist [ 281.032955][ T5940] usb 5-1: USB disconnect, device number 32 [ 281.105823][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 281.189199][ T6011] udevd[6011]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.419091][ T5933] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 281.496029][ T5933] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 281.539142][ T5994] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 281.680116][ T5933] usb 1-1: USB disconnect, device number 29 [ 281.743338][ T5994] usb 3-1: Using ep0 maxpacket: 16 [ 281.763949][T11089] batadv_slave_1: entered promiscuous mode [ 281.778441][ T5994] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 281.805479][T11088] batadv_slave_1: left promiscuous mode [ 281.809541][ T5994] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 281.869713][ T5994] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.891418][ T5994] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 0.40 [ 281.911616][ T5994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.940048][ T5994] usb 3-1: Product: syz [ 281.954285][ T5994] usb 3-1: Manufacturer: syz [ 281.969404][ T5994] usb 3-1: SerialNumber: syz [ 282.257418][ T5994] usb 3-1: 0:2 : does not exist [ 282.325324][ T5994] usb 3-1: USB disconnect, device number 35 [ 282.451990][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.584089][T11113] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2038'. [ 282.670222][ T66] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.680390][T11113] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2038'. [ 282.711057][ T66] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.738668][ T66] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.780122][ T66] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.490196][T11133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.339860][T11153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.378770][ T5933] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 285.451042][T11183] syzkaller1: entered promiscuous mode [ 285.477046][T11183] syzkaller1: entered allmulticast mode [ 285.562040][ T5933] usb 4-1: Using ep0 maxpacket: 8 [ 285.572544][ T5933] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 285.591239][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.608893][ T5933] usb 4-1: Product: syz [ 285.613159][ T5933] usb 4-1: Manufacturer: syz [ 285.638851][ T5933] usb 4-1: SerialNumber: syz [ 285.666708][ T5933] usb 4-1: config 0 descriptor?? [ 285.836005][ T979] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 285.893570][ T5933] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 286.004287][ T979] usb 5-1: Using ep0 maxpacket: 16 [ 286.026406][ T979] usb 5-1: config 252 has an invalid interface number: 231 but max is 0 [ 286.044983][ T979] usb 5-1: config 252 has no interface number 0 [ 286.074413][ T979] usb 5-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=83.eb [ 286.102238][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.338496][ T979] usb 5-1: string descriptor 0 read error: -71 [ 286.396228][ T979] usb 5-1: USB disconnect, device number 33 [ 286.708040][ T5933] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 286.725969][ T5933] usb 4-1: USB disconnect, device number 35 [ 286.915908][T11217] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 287.111668][T11221] netlink: 'syz.5.2082': attribute type 29 has an invalid length. [ 287.121948][T11221] netlink: 'syz.5.2082': attribute type 29 has an invalid length. [ 287.134037][T11221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.247769][ T5933] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 287.415783][ T5933] usb 5-1: Using ep0 maxpacket: 8 [ 287.436826][ T5933] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 287.463132][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.482481][ T5933] usb 5-1: config 0 descriptor?? [ 287.644106][T11233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2086'. [ 287.702602][ T5933] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 287.755333][T11234] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1113132006 (1113132006 ns) > initial count (497682314 ns). Using initial count to start timer. [ 288.335249][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 288.335267][ T30] audit: type=1326 audit(1756233451.545:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11251 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd398ebe9 code=0x7ffc0000 [ 288.340403][T11252] loop2: detected capacity change from 0 to 7 [ 288.354350][ T30] audit: type=1326 audit(1756233451.555:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11251 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7cd398ebe9 code=0x7ffc0000 [ 288.396235][T11252] Dev loop2: unable to read RDB block 7 [ 288.403765][ T30] audit: type=1326 audit(1756233451.555:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11251 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd398ebe9 code=0x7ffc0000 [ 288.427852][ T30] audit: type=1326 audit(1756233451.555:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11251 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7cd398ebe9 code=0x7ffc0000 [ 288.445205][T11252] loop2: unable to read partition table [ 288.451140][T11253] kvm: user requested TSC rate below hardware speed [ 288.459650][T11252] loop2: partition table beyond EOD, truncated [ 288.469190][ T30] audit: type=1326 audit(1756233451.555:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11251 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd398ebe9 code=0x7ffc0000 [ 288.503574][ T30] audit: type=1326 audit(1756233451.555:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11251 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7cd398ebe9 code=0x7ffc0000 [ 288.506080][T11252] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 288.542796][ T30] audit: type=1326 audit(1756233451.755:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11251 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd398ebe9 code=0x7ffc0000 [ 288.637834][ T30] audit: type=1326 audit(1756233451.755:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11251 comm="syz.2.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cd398ebe9 code=0x7ffc0000 [ 288.755226][ T5933] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 288.782078][ T5933] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 288.817015][ T5933] asix 5-1:0.0: probe with driver asix failed with error -71 [ 288.865662][ T5933] usb 5-1: USB disconnect, device number 34 [ 288.979357][T11263] ip6gre1: entered allmulticast mode [ 289.166478][ T30] audit: type=1326 audit(1756233452.385:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11268 comm="syz.2.2103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7cd398ebe9 code=0x0 [ 289.206880][ T30] audit: type=1326 audit(1756233452.425:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz.3.2106" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf6e98ebe9 code=0x0 [ 290.034843][T11304] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2115'. [ 293.018596][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2144'. [ 293.456320][T11386] loop2: detected capacity change from 0 to 7 [ 293.498046][T11386] Dev loop2: unable to read RDB block 7 [ 293.527003][T11386] loop2: unable to read partition table [ 293.545340][T11386] loop2: partition table beyond EOD, truncated [ 293.562344][T11386] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 293.634436][ T5940] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 293.838893][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.890140][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.921420][ T5940] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.957247][ T5940] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.961634][T11396] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.973541][T11396] bridge0: port 2(bridge_slave_1) entered listening state [ 293.979033][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.981869][T11396] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.995830][T11396] bridge0: port 1(bridge_slave_0) entered listening state [ 294.032622][ T5940] usb 3-1: config 0 descriptor?? [ 294.063988][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2154'. [ 294.104583][T11396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.484711][ T5940] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 294.883891][T11416] loop8: detected capacity change from 0 to 7 [ 294.917882][T11416] Dev loop8: unable to read RDB block 7 [ 294.939276][T11416] loop8: unable to read partition table [ 294.974985][T11416] loop8: partition table beyond EOD, truncated [ 295.005182][T11416] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 295.063965][ T6012] Dev loop8: unable to read RDB block 7 [ 295.089193][ T6012] loop8: unable to read partition table [ 295.108779][ T6012] loop8: partition table beyond EOD, truncated [ 295.148231][T11419] Dev loop8: unable to read RDB block 7 [ 295.164002][T11419] loop8: unable to read partition table [ 295.187280][T11419] loop8: partition table beyond EOD, truncated [ 295.193703][T11419] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 295.817398][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2169'. [ 295.862102][T11437] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 295.905350][T11437] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (133) [ 296.135452][ T979] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 296.253513][ T30] audit: type=1326 audit(1756233459.465:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11450 comm="syz.1.2174" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd22698ebe9 code=0x0 [ 296.366585][ T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.378032][ T979] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 296.421262][ T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.450075][ T979] usb 6-1: config 0 descriptor?? [ 296.493719][ T5933] usb 3-1: USB disconnect, device number 36 [ 296.701041][ T979] usbhid 6-1:0.0: can't add hid device: -71 [ 296.707108][ T979] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 296.730093][ T979] usb 6-1: USB disconnect, device number 5 [ 297.231433][ T979] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 297.329100][T11477] trusted_key: syz.2.2185 sent an empty control message without MSG_MORE. [ 297.407869][ T979] usb 6-1: Using ep0 maxpacket: 32 [ 297.437462][ T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.454370][ T5933] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 297.457703][ T979] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 297.490147][ T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.545132][ T979] usb 6-1: config 0 descriptor?? [ 297.561864][ T979] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 297.579636][ T979] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 297.614791][ T5933] usb 4-1: Using ep0 maxpacket: 32 [ 297.627029][ T5933] usb 4-1: unable to get BOS descriptor or descriptor too short [ 297.659814][ T5933] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.700513][ T5933] usb 4-1: config 0 has no interfaces? [ 297.736519][ T5933] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 297.754462][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.764602][ T5933] usb 4-1: Product: syz [ 297.768793][ T5933] usb 4-1: Manufacturer: syz [ 297.773671][ T5933] usb 4-1: SerialNumber: syz [ 297.794783][ T5933] usb 4-1: config 0 descriptor?? [ 298.029863][ T5947] usb 6-1: USB disconnect, device number 6 [ 298.051234][ T5947] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 298.059057][ T5933] usb 4-1: USB disconnect, device number 36 [ 298.574411][ T5933] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 298.709028][T11523] [ 298.711392][T11523] ===================================================== [ 298.718359][T11523] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 298.725808][T11523] syzkaller #0 Not tainted [ 298.730203][T11523] ----------------------------------------------------- [ 298.737114][T11523] syz.3.2206/11523 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 298.744823][T11523] ffff88805b7976a8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 298.753515][T11523] [ 298.753515][T11523] and this task is already holding: [ 298.760871][T11523] ffff8880243e6028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 298.770615][T11523] which would create a new lock dependency: [ 298.776486][T11523] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 298.784573][T11523] [ 298.784573][T11523] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 298.794356][T11523] (&client->buffer_lock){..-.}-{3:3} [ 298.794383][T11523] [ 298.794383][T11523] ... which became SOFTIRQ-irq-safe at: [ 298.807429][T11523] lock_acquire+0x120/0x360 [ 298.812016][T11523] _raw_spin_lock+0x2e/0x40 [ 298.816597][T11523] evdev_pass_values+0xb9/0xbd0 [ 298.821531][T11523] evdev_events+0x1e6/0x340 [ 298.826117][T11523] input_pass_values+0x288/0x890 [ 298.831128][T11523] input_event_dispose+0x3e5/0x6b0 [ 298.836315][T11523] input_inject_event+0x1dd/0x340 [ 298.841421][T11523] kd_sound_helper+0x101/0x210 [ 298.846291][T11523] input_handler_for_each_handle+0xfe/0x1c0 [ 298.852262][T11523] call_timer_fn+0x17e/0x5f0 [ 298.856928][T11523] __run_timer_base+0x61a/0x860 [ 298.861848][T11523] run_timer_softirq+0xb7/0x180 [ 298.866769][T11523] handle_softirqs+0x283/0x870 [ 298.871608][T11523] run_ksoftirqd+0x9b/0x100 [ 298.876183][T11523] smpboot_thread_fn+0x53f/0xa60 [ 298.881187][T11523] kthread+0x70e/0x8a0 [ 298.885323][T11523] ret_from_fork+0x3f9/0x770 [ 298.889980][T11523] ret_from_fork_asm+0x1a/0x30 [ 298.894819][T11523] [ 298.894819][T11523] to a SOFTIRQ-irq-unsafe lock: [ 298.901813][T11523] (tasklist_lock){.+.+}-{3:3} [ 298.901837][T11523] [ 298.901837][T11523] ... which became SOFTIRQ-irq-unsafe at: [ 298.914428][T11523] ... [ 298.914435][T11523] lock_acquire+0x120/0x360 [ 298.921570][T11523] _raw_read_lock+0x36/0x50 [ 298.926141][T11523] __do_wait+0xde/0x740 [ 298.930367][T11523] do_wait+0x1f8/0x520 [ 298.934506][T11523] kernel_wait+0xab/0x170 [ 298.938903][T11523] call_usermodehelper_exec_work+0xbe/0x230 [ 298.944869][T11523] process_scheduled_works+0xae1/0x17b0 [ 298.950487][T11523] worker_thread+0x8a0/0xda0 [ 298.955159][T11523] kthread+0x70e/0x8a0 [ 298.959297][T11523] ret_from_fork+0x3f9/0x770 [ 298.963951][T11523] ret_from_fork_asm+0x1a/0x30 [ 298.968788][T11523] [ 298.968788][T11523] other info that might help us debug this: [ 298.968788][T11523] [ 298.978998][T11523] Chain exists of: [ 298.978998][T11523] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 298.978998][T11523] [ 298.992106][T11523] Possible interrupt unsafe locking scenario: [ 298.992106][T11523] [ 299.000404][T11523] CPU0 CPU1 [ 299.005748][T11523] ---- ---- [ 299.011093][T11523] lock(tasklist_lock); [ 299.015321][T11523] local_irq_disable(); [ 299.022057][T11523] lock(&client->buffer_lock); [ 299.029410][T11523] lock(&new->fa_lock); [ 299.036160][T11523] [ 299.039600][T11523] lock(&client->buffer_lock); [ 299.044610][T11523] [ 299.044610][T11523] *** DEADLOCK *** [ 299.044610][T11523] [ 299.052733][T11523] 7 locks held by syz.3.2206/11523: [ 299.057911][T11523] #0: ffff88814677d118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 299.067045][T11523] #1: ffff88801e712230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 299.077134][T11523] #2: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 299.086777][T11523] #3: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 299.096335][T11523] #4: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 299.105458][T11523] #5: ffff8880243e6028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 299.115630][T11523] #6: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 299.124677][T11523] [ 299.124677][T11523] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 299.135071][T11523] -> (&client->buffer_lock){..-.}-{3:3} { [ 299.140803][T11523] IN-SOFTIRQ-W at: [ 299.144777][T11523] lock_acquire+0x120/0x360 [ 299.150931][T11523] _raw_spin_lock+0x2e/0x40 [ 299.157074][T11523] evdev_pass_values+0xb9/0xbd0 [ 299.163567][T11523] evdev_events+0x1e6/0x340 [ 299.169710][T11523] input_pass_values+0x288/0x890 [ 299.176289][T11523] input_event_dispose+0x3e5/0x6b0 [ 299.183036][T11523] input_inject_event+0x1dd/0x340 [ 299.189691][T11523] kd_sound_helper+0x101/0x210 [ 299.196089][T11523] input_handler_for_each_handle+0xfe/0x1c0 [ 299.203622][T11523] call_timer_fn+0x17e/0x5f0 [ 299.209849][T11523] __run_timer_base+0x61a/0x860 [ 299.216337][T11523] run_timer_softirq+0xb7/0x180 [ 299.222824][T11523] handle_softirqs+0x283/0x870 [ 299.229226][T11523] run_ksoftirqd+0x9b/0x100 [ 299.235377][T11523] smpboot_thread_fn+0x53f/0xa60 [ 299.241955][T11523] kthread+0x70e/0x8a0 [ 299.247662][T11523] ret_from_fork+0x3f9/0x770 [ 299.253894][T11523] ret_from_fork_asm+0x1a/0x30 [ 299.260308][T11523] INITIAL USE at: [ 299.264190][T11523] lock_acquire+0x120/0x360 [ 299.270249][T11523] _raw_spin_lock+0x2e/0x40 [ 299.276302][T11523] evdev_pass_values+0xb9/0xbd0 [ 299.282703][T11523] evdev_events+0x1aa/0x340 [ 299.288754][T11523] input_pass_values+0x1bf/0x890 [ 299.295242][T11523] input_event_dispose+0x330/0x6b0 [ 299.301906][T11523] input_inject_event+0x1dd/0x340 [ 299.308475][T11523] evdev_write+0x2fc/0x480 [ 299.314448][T11523] vfs_write+0x27e/0xb30 [ 299.320265][T11523] ksys_write+0x145/0x250 [ 299.326139][T11523] do_syscall_64+0xfa/0x3b0 [ 299.332193][T11523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.339629][T11523] } [ 299.342113][T11523] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 299.350247][T11523] [ 299.350247][T11523] the dependencies between the lock to be acquired [ 299.350256][T11523] and SOFTIRQ-irq-unsafe lock: [ 299.363739][T11523] -> (tasklist_lock){.+.+}-{3:3} { [ 299.369026][T11523] HARDIRQ-ON-R at: [ 299.373164][T11523] lock_acquire+0x120/0x360 [ 299.379664][T11523] _raw_read_lock+0x36/0x50 [ 299.386148][T11523] __do_wait+0xde/0x740 [ 299.392285][T11523] do_wait+0x1f8/0x520 [ 299.398336][T11523] kernel_wait+0xab/0x170 [ 299.404646][T11523] call_usermodehelper_exec_work+0xbe/0x230 [ 299.412523][T11523] process_scheduled_works+0xae1/0x17b0 [ 299.420048][T11523] worker_thread+0x8a0/0xda0 [ 299.426621][T11523] kthread+0x70e/0x8a0 [ 299.432694][T11523] ret_from_fork+0x3f9/0x770 [ 299.439263][T11523] ret_from_fork_asm+0x1a/0x30 [ 299.446009][T11523] SOFTIRQ-ON-R at: [ 299.450147][T11523] lock_acquire+0x120/0x360 [ 299.456635][T11523] _raw_read_lock+0x36/0x50 [ 299.463125][T11523] __do_wait+0xde/0x740 [ 299.469264][T11523] do_wait+0x1f8/0x520 [ 299.475317][T11523] kernel_wait+0xab/0x170 [ 299.481629][T11523] call_usermodehelper_exec_work+0xbe/0x230 [ 299.489509][T11523] process_scheduled_works+0xae1/0x17b0 [ 299.497033][T11523] worker_thread+0x8a0/0xda0 [ 299.503609][T11523] kthread+0x70e/0x8a0 [ 299.509659][T11523] ret_from_fork+0x3f9/0x770 [ 299.516231][T11523] ret_from_fork_asm+0x1a/0x30 [ 299.523003][T11523] INITIAL USE at: [ 299.527055][T11523] lock_acquire+0x120/0x360 [ 299.533456][T11523] _raw_write_lock_irq+0xa2/0xf0 [ 299.540293][T11523] copy_process+0x224f/0x3c00 [ 299.546863][T11523] kernel_clone+0x21e/0x840 [ 299.553259][T11523] user_mode_thread+0xdd/0x140 [ 299.559916][T11523] rest_init+0x23/0x300 [ 299.565969][T11523] start_kernel+0x3a9/0x410 [ 299.572371][T11523] x86_64_start_reservations+0x24/0x30 [ 299.579728][T11523] x86_64_start_kernel+0x143/0x1c0 [ 299.586739][T11523] common_startup_64+0x13e/0x147 [ 299.593572][T11523] INITIAL READ USE at: [ 299.598063][T11523] lock_acquire+0x120/0x360 [ 299.604902][T11523] _raw_read_lock+0x36/0x50 [ 299.611731][T11523] __do_wait+0xde/0x740 [ 299.618217][T11523] do_wait+0x1f8/0x520 [ 299.624614][T11523] kernel_wait+0xab/0x170 [ 299.631273][T11523] call_usermodehelper_exec_work+0xbe/0x230 [ 299.639500][T11523] process_scheduled_works+0xae1/0x17b0 [ 299.647372][T11523] worker_thread+0x8a0/0xda0 [ 299.654287][T11523] kthread+0x70e/0x8a0 [ 299.660683][T11523] ret_from_fork+0x3f9/0x770 [ 299.667606][T11523] ret_from_fork_asm+0x1a/0x30 [ 299.674702][T11523] } [ 299.677357][T11523] ... key at: [] tasklist_lock+0x18/0x40 [ 299.685233][T11523] ... acquired at: [ 299.689188][T11523] lock_acquire+0x120/0x360 [ 299.693852][T11523] _raw_read_lock+0x36/0x50 [ 299.698513][T11523] send_sigurg+0x12b/0x420 [ 299.703086][T11523] sk_send_sigurg+0x6c/0x2e0 [ 299.707837][T11523] queue_oob+0x420/0x4f0 [ 299.712233][T11523] unix_stream_sendmsg+0xc3f/0xdf0 [ 299.717521][T11523] __sock_sendmsg+0x219/0x270 [ 299.722355][T11523] ____sys_sendmsg+0x52d/0x830 [ 299.727271][T11523] ___sys_sendmsg+0x21f/0x2a0 [ 299.732102][T11523] __sys_sendmmsg+0x227/0x430 [ 299.737025][T11523] __x64_sys_sendmmsg+0xa0/0xc0 [ 299.742042][T11523] do_syscall_64+0xfa/0x3b0 [ 299.746721][T11523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.752773][T11523] [ 299.755085][T11523] -> (&f_owner->lock){....}-{3:3} { [ 299.760373][T11523] INITIAL USE at: [ 299.764345][T11523] lock_acquire+0x120/0x360 [ 299.770585][T11523] _raw_write_lock_irq+0xa2/0xf0 [ 299.777256][T11523] __f_setown+0x67/0x370 [ 299.783245][T11523] fcntl_dirnotify+0x3fa/0x6a0 [ 299.789815][T11523] do_fcntl+0x6d0/0x1910 [ 299.795776][T11523] __se_sys_fcntl+0xc8/0x150 [ 299.802083][T11523] do_syscall_64+0xfa/0x3b0 [ 299.808309][T11523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.815925][T11523] INITIAL READ USE at: [ 299.820323][T11523] lock_acquire+0x120/0x360 [ 299.826980][T11523] _raw_read_lock_irqsave+0xaf/0x100 [ 299.834420][T11523] send_sigio+0x38/0x370 [ 299.840820][T11523] dnotify_handle_event+0x169/0x440 [ 299.848174][T11523] fsnotify+0x1814/0x1a80 [ 299.854660][T11523] fsnotify_create+0x122/0x180 [ 299.861696][T11523] vfs_mknod+0x3ae/0x3c0 [ 299.868091][T11523] unix_bind+0x4eb/0xd90 [ 299.874494][T11523] __sys_bind+0x2c6/0x3e0 [ 299.880978][T11523] __x64_sys_bind+0x7a/0x90 [ 299.887640][T11523] do_syscall_64+0xfa/0x3b0 [ 299.894306][T11523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.902383][T11523] } [ 299.904951][T11523] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 299.913869][T11523] ... acquired at: [ 299.917742][T11523] lock_acquire+0x120/0x360 [ 299.922493][T11523] _raw_read_lock_irqsave+0xaf/0x100 [ 299.927937][T11523] send_sigio+0x38/0x370 [ 299.932360][T11523] kill_fasync+0x24d/0x4d0 [ 299.936931][T11523] sock_wake_async+0x137/0x160 [ 299.941854][T11523] sock_def_readable+0x3bb/0x550 [ 299.946946][T11523] queue_oob+0x44f/0x4f0 [ 299.951343][T11523] unix_stream_sendmsg+0xc3f/0xdf0 [ 299.956645][T11523] __sock_sendmsg+0x219/0x270 [ 299.961491][T11523] ____sys_sendmsg+0x52d/0x830 [ 299.966408][T11523] ___sys_sendmsg+0x21f/0x2a0 [ 299.971247][T11523] __sys_sendmmsg+0x227/0x430 [ 299.976086][T11523] __x64_sys_sendmmsg+0xa0/0xc0 [ 299.981093][T11523] do_syscall_64+0xfa/0x3b0 [ 299.985758][T11523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.991827][T11523] [ 299.994133][T11523] -> (&new->fa_lock){....}-{3:3} { [ 299.999243][T11523] INITIAL USE at: [ 300.003130][T11523] lock_acquire+0x120/0x360 [ 300.009183][T11523] _raw_write_lock_irq+0xa2/0xf0 [ 300.015669][T11523] fasync_remove_entry+0xf1/0x1c0 [ 300.022244][T11523] sock_fasync+0x85/0xf0 [ 300.028033][T11523] __fput+0x89f/0xa70 [ 300.033563][T11523] task_work_run+0x1d4/0x260 [ 300.039704][T11523] exit_to_user_mode_loop+0xec/0x110 [ 300.046538][T11523] do_syscall_64+0x2bd/0x3b0 [ 300.052676][T11523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.060112][T11523] INITIAL READ USE at: [ 300.064423][T11523] lock_acquire+0x120/0x360 [ 300.070909][T11523] _raw_read_lock_irqsave+0xaf/0x100 [ 300.078179][T11523] kill_fasync+0x199/0x4d0 [ 300.084580][T11523] sock_wake_async+0x137/0x160 [ 300.091332][T11523] sock_def_readable+0x3bb/0x550 [ 300.098258][T11523] unix_stream_sendmsg+0x860/0xdf0 [ 300.105367][T11523] __sock_sendmsg+0x219/0x270 [ 300.112034][T11523] ____sys_sendmsg+0x505/0x830 [ 300.118788][T11523] ___sys_sendmsg+0x21f/0x2a0 [ 300.125487][T11523] __x64_sys_sendmsg+0x19b/0x260 [ 300.132408][T11523] do_syscall_64+0xfa/0x3b0 [ 300.138896][T11523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.146768][T11523] } [ 300.149250][T11523] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 300.157909][T11523] ... acquired at: [ 300.161694][T11523] lock_acquire+0x120/0x360 [ 300.166356][T11523] _raw_read_lock_irqsave+0xaf/0x100 [ 300.171800][T11523] kill_fasync+0x199/0x4d0 [ 300.176379][T11523] evdev_pass_values+0x627/0xbd0 [ 300.181481][T11523] evdev_events+0x1e6/0x340 [ 300.186153][T11523] input_pass_values+0x288/0x890 [ 300.191267][T11523] input_event_dispose+0x330/0x6b0 [ 300.196561][T11523] input_inject_event+0x1dd/0x340 [ 300.201761][T11523] evdev_write+0x2fc/0x480 [ 300.206343][T11523] vfs_write+0x27e/0xb30 [ 300.210753][T11523] ksys_write+0x145/0x250 [ 300.215245][T11523] do_syscall_64+0xfa/0x3b0 [ 300.219915][T11523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.225965][T11523] [ 300.228273][T11523] [ 300.228273][T11523] stack backtrace: [ 300.234164][T11523] CPU: 0 UID: 0 PID: 11523 Comm: syz.3.2206 Not tainted syzkaller #0 PREEMPT(full) [ 300.234181][T11523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.234196][T11523] Call Trace: [ 300.234205][T11523] [ 300.234213][T11523] dump_stack_lvl+0x189/0x250 [ 300.234235][T11523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.234251][T11523] ? __pfx__printk+0x10/0x10 [ 300.234270][T11523] validate_chain+0x1f05/0x2140 [ 300.234292][T11523] __lock_acquire+0xab9/0xd20 [ 300.234311][T11523] ? kill_fasync+0x199/0x4d0 [ 300.234325][T11523] lock_acquire+0x120/0x360 [ 300.234341][T11523] ? kill_fasync+0x199/0x4d0 [ 300.234359][T11523] _raw_read_lock_irqsave+0xaf/0x100 [ 300.234376][T11523] ? kill_fasync+0x199/0x4d0 [ 300.234389][T11523] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 300.234405][T11523] ? do_raw_spin_lock+0x121/0x290 [ 300.234423][T11523] kill_fasync+0x199/0x4d0 [ 300.234436][T11523] ? kill_fasync+0x53/0x4d0 [ 300.234450][T11523] evdev_pass_values+0x627/0xbd0 [ 300.234471][T11523] ? evdev_pass_values+0x651/0xbd0 [ 300.234491][T11523] evdev_events+0x1e6/0x340 [ 300.234507][T11523] ? evdev_events+0x79/0x340 [ 300.234525][T11523] ? input_pass_values+0x8d/0x890 [ 300.234542][T11523] input_pass_values+0x288/0x890 [ 300.234560][T11523] ? input_handle_event+0x70c/0xf30 [ 300.234577][T11523] input_event_dispose+0x330/0x6b0 [ 300.234593][T11523] input_inject_event+0x1dd/0x340 [ 300.234608][T11523] ? input_inject_event+0xb6/0x340 [ 300.234623][T11523] evdev_write+0x2fc/0x480 [ 300.234643][T11523] ? __pfx_evdev_write+0x10/0x10 [ 300.234660][T11523] ? bpf_lsm_file_permission+0x9/0x20 [ 300.234676][T11523] ? security_file_permission+0x75/0x290 [ 300.234692][T11523] ? rw_verify_area+0x255/0x4d0 [ 300.234708][T11523] ? __lock_acquire+0xab9/0xd20 [ 300.234723][T11523] ? __pfx_evdev_write+0x10/0x10 [ 300.234741][T11523] vfs_write+0x27e/0xb30 [ 300.234758][T11523] ? __pfx_vfs_write+0x10/0x10 [ 300.234774][T11523] ? __fget_files+0x2a/0x420 [ 300.234793][T11523] ? __fget_files+0x2a/0x420 [ 300.234814][T11523] ? __fget_files+0x3a0/0x420 [ 300.234831][T11523] ? __fget_files+0x2a/0x420 [ 300.234851][T11523] ksys_write+0x145/0x250 [ 300.234867][T11523] ? __pfx_ksys_write+0x10/0x10 [ 300.234882][T11523] ? rcu_is_watching+0x15/0xb0 [ 300.234897][T11523] ? do_syscall_64+0xbe/0x3b0 [ 300.234916][T11523] do_syscall_64+0xfa/0x3b0 [ 300.234933][T11523] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.234950][T11523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.234963][T11523] ? clear_bhb_loop+0x60/0xb0 [ 300.234977][T11523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.234991][T11523] RIP: 0033:0x7faf6e98ebe9 [ 300.235008][T11523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.235019][T11523] RSP: 002b:00007faf6f792038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 300.235035][T11523] RAX: ffffffffffffffda RBX: 00007faf6ebb5fa0 RCX: 00007faf6e98ebe9 [ 300.235045][T11523] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 300.235055][T11523] RBP: 00007faf6ea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 300.235064][T11523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.235073][T11523] R13: 00007faf6ebb6038 R14: 00007faf6ebb5fa0 R15: 00007faf6ecdfa28 [ 300.235088][T11523] [ 300.559056][ T5933] usb 5-1: Using ep0 maxpacket: 16 [ 300.570991][ T5933] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 300.584103][ T5933] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.613944][ T5933] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.643155][ T5933] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 300.652802][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.661079][ T5933] usb 5-1: Product: syz [ 300.666103][ T5933] usb 5-1: Manufacturer: syz [ 300.670686][ T5933] usb 5-1: SerialNumber: syz [ 300.824292][ T979] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 300.974310][ T979] usb 2-1: Using ep0 maxpacket: 16 [ 300.980791][ T979] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 300.989007][ T979] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.000057][ T979] usb 2-1: config 0 has no interface number 0 [ 301.009685][ T979] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 301.018789][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.026855][ T979] usb 2-1: Product: syz [ 301.031010][ T979] usb 2-1: Manufacturer: syz [ 301.035652][ T979] usb 2-1: SerialNumber: syz [ 301.041440][ T979] usb 2-1: config 0 descriptor?? [ 301.048467][ T979] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 301.054856][ T979] usb 2-1: No valid video chain found. [ 301.082353][ T5933] usb 5-1: 0:2 : does not exist [ 301.251501][ T979] usb 2-1: USB disconnect, device number 31 [ 301.888801][ T5947] usb 5-1: USB disconnect, device number 35