last executing test programs: 4.178121759s ago: executing program 4 (id=3422): openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) 4.054824048s ago: executing program 1 (id=3424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000580)) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000e96000/0x1000)=nil}) 4.047546665s ago: executing program 4 (id=3425): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) flock(r0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) flock(r1, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/4\x00') read$watch_queue(r2, &(0x7f0000000000)=""/196, 0xc4) 3.854843949s ago: executing program 1 (id=3427): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(r0, &(0x7f0000000180)='net/nf_conntrack\x00') 3.843419725s ago: executing program 4 (id=3428): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000006c0)="10", 0x1}], 0x1}, 0x24000900) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000640)='W', 0x1}], 0x1}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.692967138s ago: executing program 2 (id=3429): r0 = socket(0x1d, 0x2, 0x6) io_uring_setup(0x7d80, &(0x7f00000000c0)={0x0, 0x72f, 0x10000, 0x2, 0x2c0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x3, {0x1, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) 2.902750413s ago: executing program 1 (id=3431): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0xfffffffc, 0x0, 0x54}, 0x9c) 2.888290179s ago: executing program 4 (id=3432): userfaultfd(0x801) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 2.784916136s ago: executing program 1 (id=3433): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x64, 0x4, 0x358, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x9, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.765139717s ago: executing program 2 (id=3434): syz_open_dev$admmidi(&(0x7f0000000280), 0x2, 0x2001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x1000}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.474275663s ago: executing program 2 (id=3436): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 2.39890497s ago: executing program 1 (id=3437): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001f40)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.321632661s ago: executing program 4 (id=3438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xb) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000bc0)={"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"}) 2.027304318s ago: executing program 4 (id=3439): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000003c0)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0844123, &(0x7f0000000300)=0x9) 966.888778ms ago: executing program 0 (id=3450): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0xdb1846e8c973b355, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x800) 961.0438ms ago: executing program 3 (id=3451): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 923.051554ms ago: executing program 0 (id=3452): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fff, 0xf3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 718.830205ms ago: executing program 0 (id=3453): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x27, 0x1, 0x10045001}}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002140)={0x10, 0xffffffffffffffda, r2}, 0x10) 709.069479ms ago: executing program 3 (id=3454): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x40004}], 0x1, 0x4044840) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 653.092141ms ago: executing program 3 (id=3455): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4f23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 566.203541ms ago: executing program 0 (id=3456): r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) r2 = dup(r0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="2800000004"], 0x28) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(r3, r1, 0x0, 0x4000000053d2) 564.770537ms ago: executing program 2 (id=3457): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x1000, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000004d564b000000eccd"]) 482.857278ms ago: executing program 3 (id=3458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvfrom(r1, 0x0, 0x0, 0x40002062, 0x0, 0x0) 386.442911ms ago: executing program 0 (id=3459): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r3, 0xaece, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 321.081518ms ago: executing program 3 (id=3460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x2, 0x4, 0x9, 0x68, 0x3, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xa5, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa0100fe, @remote}, {0x4f20, 0x4e22, 0x91, 0x0, @gue={{0x2, 0x0, 0x3, 0x2, 0x0, @val=0x80}, "6279cb22459ff50866ff829694a603d3c443eead410baf7b35c112fa17932138ee8f6a6d2afdde33d5a4ff97f976b3ac6d8c10e10601d52cd3b5a4a38a054f2fba0b015c2eda7adba64f9cc4a250be4bc5185bd6691ecdac2d862bc9ca9725cfa1cba3babc13c16deb20c6c21024632724db85202581179fefc02f0f431933bd89"}}}}, 0xb3) 206.917197ms ago: executing program 2 (id=3461): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000030100000000000000000000000000000000000000760f00000000000000000000000000000000000007"]) 119.071174ms ago: executing program 0 (id=3462): syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}]}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 90.425398ms ago: executing program 2 (id=3463): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)="4a895703cd17bcedc1666306831c5c5864ffa418ac198f0265d77afca35e38f139b2cf0be1badc10d8cec9dd66449d939643effb514ece9c54c3a48cb71e9dacb4d9daf0705c904f94c08f6c446468930f4ca4313b2d50287be8b9ca790b1161d1131312cb2be667de8247d6f019f3f303c5d97f7e581a1bc5c1c5e16dba7bb3857c21d6de441f58c8548c1657cbab43f1d0535cdc45b1a4024dae285e8a9cc4548a40eaf9679353bf28382bd9a5c5e78ef8920da23b70977b487a0fcd11d9478dfd4d79be5eed791f01fa456cc8c08dbb35a090622d8369f5004bb9197ebc47ad0cb54d5c542242510f9d882928786a87b08daf2acb81b17ab509ec15c585d2006b36c21f6e81046ae16898ef797e0544581fcec801e889686f1b80fbd12a373099966e76f03d9b9e097806d23f8f7102282ad4f721ded9bfdbf406ffb3e6a6467dd909b66112e29d073a37fb6e077ad638cb8f28bfe888fe6c009ad37d368ad0c4a34a70c1a795110e63c41bdca93473f3b74127e35634cc05d5bdd55c5f5f658617d5dc911ef5d5b117d6dec9849636850ff9bf25ffd0fe09b81c653be1ce231c96dfd5514e7967c5ac79fedc4dae746bdb11725be5650a825c178356db68d31e155b20114105a3e902555f329448ca577a1a3be792d396e10c84fcc52c43f25efd40730b23db6f4cca8ab196b5a201184f4b7b4cec7ef64a325ff3fbcbc51dc46466209b4781ecbc943e33a20a9b2a290434279b09ee3911e2ce54ffbb634db216096f9b6d7cd1b093d05d0f03f7df64e2670c9336c7bf27d0d273d81498bf0572661225ab62f0f4b2bce327927c1d4b923cc3db422354e389c81749dd51042d3c98a7e5acaaef627283b630d59a8a75dc506400c40d6c8c0a062254cde2e643fe99fb03f42f0396e23b0273f0f5a354826824ab2d72b8793dcff47c75387011767f554f7594918d76fc80cecef01ac74dd10d257ac962209026850f3e1ec2877ea63c59c3c4e751594c31774ade2eac9e94b33b2d06c668cb700fdbe61ac4ec2d595f5a3f5b2722f7644fa8081d1445bada8624b025291d7528144d5a092d410249b20f9faba62f760c05b9e25abdafd107a29033c3ca67cb62500ce9979878a2c293151528ef33574e96148c7798ee427936f205627c1d6aad4e1956b10495b23ebb2fd687d75cb0f9faec439c494cb59c3293d62617f9e0c88168f993e8540db1ab44dfad05bd7c7841954f21a923fc049a8f6e141a0ae26e55e167063421e35340a19c6316e593dc46b2c5d00b1118f5badadcb30af89ce2efe81937727c5d38c9368ecb79f3b1393dfbf74b713ca09f3e3ed774019227497ab6599fb4be12be93b4ba8cd7c5e5ab022e43b11179c9a58a938e8fc9bd0f2ea990d6af6545827b25d23002b8de3faa3994711d9fd4e5ec7e5f2b3e64df3e5d9f31762c39aa25902bd49e17ebd597730461fbcf75095375a49775a92e0246f963e021b678d30bf218e495d6acccbc2b94e555b4ef1392dea925e9ab0afcb85314c3577fd5962fb6845ace74af46a71b4304bc58c953e02e8aa7adccd209bca4f5c6b16161aeb3d5377a15c3e2ac38136b8b0424bdec89354cb53319bee78cd078fcf99dd3c02d6b9f070c40c5adda3f7d58d8476b1688f0e776695b8ae6b807b55a4a84d67d772a1b663ccca7bdb47f098265378205b921140c5ae3ae03bbc8821a4cfb79add44884ebe9c7d67415de7a4f51e315910f77be57c12718e1cc0700d0112af51013c4a87ec39226abf811a19a857a04e7ada6265345e87bf5ad3327afcde22e16543b3cf4f4bdccdbdcbf2b6e2291f4877b32b5a69e00387bfb1c824380bd57f3af90cf685b5cfb874f7870adbf50621768bf2d45eb5c3f783dcc067b001aa01c6cf239e98010cd016108fb1de06cc59070b5db347ff892246fbb699e0ee999cc9c923e2a5354fb4816c15dd8206f1033b556666b3ddf2aae0e892055239d9c5faf1c4b61de224d153623e40574918b1639635ea46a895d2f5a2958d409dddc1e55441fbdfe40b83ae0b3f3f8f694d18b19a9bef18c54c6888636e803154d8c8fb66566f4ba5fa02a7bfd5ed23cf61f75b26fd7f3ff03d1b9e26ac0e2568604f9e550185abad80dacbe12bac5a01c3b0d06cd9f8532ce8ac28ee8fabbd1f8f6622077dcb41ebedc2c2eeb2e1efa3f1ecfb5937a1368f54ff4255676840dd65006460ee6703275c51d27fe4bc6f5923720983a235df824190ab6f908475d2496e5928e915d48a33a7e2277617898a0ee8609eb526528e5f00c5f003972491a16ea209c8a794b6acd2997731d656d83f2ec41412ab3d48256424279a27f8e99431c25ce3afb42eaace7daa26e760912b02f3e5842340ce81f05694ae63c854928bacdbdbe2d1919d0044b9e2d142cd330bc4cdfeccd89d14974ded579a559584384615123d3b56f00ff9bf1c2ec28d23a15c5031a990d79462cfbf4fa576f10b74ce05276e433c4b1acf95fc29929c29c8de9ccc781b644bec6b3736c054a7699b3372133dc52da8b3e42976a5ff354fdb08335843698cdc198f5b1067b1a73ecf317397e64db3f6965d29fa6c76822685f7e0566a8984b57912527ce5df0eaa24ae441b9e7f01ed0121c58938dc1620c448bb9e1d746c499e8b249262e5bc7b642c245e04623f4c0cccc8a6e5c043da2921cd642287984e6c94619b79d23c576a27d10a9850fcf09a6bab32761cff1b0abdb521426588162e9b4e11e6e90aa2e1d227842c245daea800e6567c6a94ada996fa8f23d25ab3d3fbfb53d3bfec69fcd4f8a0a3f21851960363bad9a156a8bf8dac7bc61b3df1e0f88bc46e589c432e9321165f8bc5a8e7c4fdff96ee9fa27f1b03ff6e16d90f40bd55234cc7606e0f2d10889c5c26e7f9e79a76c63991b02b35df613c030186211742a9b80ad7fe4b415e9293f9638f83d95548442723ae89f62ef2c7e68acf94ccf9281fc4d6d1b4db097602080a5f715a3dfec6f792cf7a81884c6ebb57ae05ffa16146586b8c42dbc686e009522f0c8d4e168206d79966bd53d59483c73e8e522420f7c325444e8a10346749e3fa20dc892e0ac305ae50fdca06ea1aa29dac09fc2fa848565d643396db05cca93008560155ab60e7f31380974dd6aa735e7498148d7b1e1bf35fa35fa213da8f3d4d4b3dc1aabbff1b2e00e793ddec178c85cd9d8ba3b335887b0c715c3fe4b5fc7f8b2f63250f73af47142744572e1db60f8c7361c7fb811b5f4af6e6c10fb3d9440aa0367609fa6c32dd1bdd613970be35d74f34cc5bbdc9f630480c9c82f3118fe033617c353e795a9b7308336b8dc65f3328fabf4532a87c9f1d9d35f431959f2ab922cabbfeafa051a771916653f6bab8910e437e613e02fca4c6019c640b822f6657607b983694862409f06ce57bae67ada5d83945a6caea554a13488a6d8bb85c80a779e9bb4c2ed07abdec0f6d0c83497efd096d3a5ca5095885ebf7b3cf7183350bce692aa62fc1b45f620647bb2cf8744b57dc5c1f47de9bb005e6802b3d3efa4dcee835252d178239bc28fbd1bee6a7a3d70359330f1b7ff4daecb1f820f00398a2ce4046202db3c1b80ae497bd9d065c2fb265716e984378b4ccb5b6f5d2ffcc5c992aa259ca1ac92bb387c53f5e73e65263e7312b7dbfdf799b06c1999218d613046d57a2bc1e27ca84d41a0bb4a1ba08786d0c8ba1c293f914659b5d32cfd95ef7a1b3709e8ba41f037242e44df5fa2b1a0dccb0ea43ddb85e5dde552f5747e52e8c73d25dd0c903229522c4d91e523879d377f318b7f353ec6954f3aff1dd0bd7cface9dd2d209e181f2a74e07c557e4bae9645a4d282c84b70c74a8210669fd8e7cbe4e17813dd8a0da360d2c99d675abbf66ca6a1cdb18112c509338a7b22e14309732d732f873474e25f5e36bd730336cf35517ecc2da649c85adce16aa98554470d16058aa77898bbe450a85bff003273ed0b23806af8034aa91348774412d5f608bc7efdec13414dcb735e0de85ff8de01fbedf5585900d2f301092fd57d91f828cf5babf70610d45f1545dc0bab7f69c90efbf2edc6f46f397ed9a13da7cf7123d008f0a1af23f20ebefabb5a7a46ecaa675f8b57e8478cf31ac40fe4874cdae89e4b8d4e7684252d89fbb2f5bf24bcbbeefa53cc24a2856636454390a1d47efafb4c23712a4b9c8dfe6f370fa4446eba7703215233a749e3a7ab28542dfbf03db73648e6bf06395858d59ec7dddbe460aae30487e91c2d19c8334525adef322a66a70ea32d2f8a72bf1bb3b0d9bc2d6ebd40bba9e4c02d3ee005a0a72e5f65afb01f6adb8ab2cd11d9c9fad7e3e1f950659bf1826b380a4f296c76c529a65235a15a9596a2a330431d5e905390321dc4a47c84e47c3e8e8cc5b11cf62d7515e584359a1e442abfc9aab4d0233eb0911398c43688a8fe41d462bde8aa4be1af978cc0b40dc25ea20c3fdb0953a3293e197748cdcd576619c4fe8b5754851c90b6b5207b3eefbd86eb67012663dbc87858a86dc51855381dc746501eb76316d778da06c4d8a03ebe3a07f05dcbfdbe6020bd8f4547e6b598cf4dc7be2ea167c4fd362b2224d4869b97d991c64251faacea7184ee97349d5b68af90bacd5441ae423173f6271d1be106381a7bcf0925d25ae26a0afb1c82232a648c178b8076a5fa8bedeec3c90f450dbb3573fc45c4950a7242d7b65c420d4f323069d3cfafc6dac879698b801ea8dd18b6d3c171200308e76f0c16a977bc73cd88818196a9b54b47c3f3c9595e8ddcb38334202cecba7764505340680c858cab156e658785bda719237baf1164e2927ccebcf8dccfcebacb0d3bac011cf7c544b71f1c399931ea886524d10e95319d12fc63b74d532e9c94aa78d43fc2b097e496e69405d3e147a45454cb292987330d126bba36dcefe664cce49bcd0f782d03a93e059b7ee23039ae30e47be8c457ca092238659e022c5cc1830a6c6179a65be9865d9f2ce34b25fed3551b69bae554528679e2110d9d4c85302ad99272174b8bbb2da37810cda715eb2536a91011999b9bbbdfff212d0dbd40126b12f2ecb8d389a1e845f25c30cb2986cc85aa5614c10837afa40061cddcf14297bd2861106dec71a0b34a79afe612394633ea6b8f71495b3db408728bf37de889768d6dd2642a627f928c6a86df2bedf3352e5f56a5ed424770d613331aa5d6e71bb40bfef383d69f3ef570156093ee4f31500513e50abf5e576dd6571d59910f8d21f75e2fe2913c6348a2c23ec8bcfeef8c5b4cb4ca254496e78a0beadcfdb96afdf9f0f5ccb7abe6746cb718dab6ea7f0ba8080d0ce12ec9985978f76b885a85adc2e3115db7450644c75cd80062c7f34cd0b7824d621607759ba8eb17289d3920f1356319e980c989d794016dd05987cc8a17a947a8dc0398de5cec6dd1eadf685de957ca4d1394fc67482fd22498f6aacc8e7f25ebac952073e12f526e1427ee49e6df9e5c895df631e5b4041e6e88b3508b8c3ce597830e2ce3aad12ecb696e5ef7970cd9c1e3be94506ac746f7ce8438a356507027149d0ebd6e95783ff084609fc079ace20e5bae9cac9625f58ff8ccb2c2b50506a237ecdf21774d560ba51d9d956691590392a5aa5ad6a2ff9d69d58a82401f7de6daacf3257f20c9847c3760ab1a41ab024df0ad8789fe629c0d7ab8adeea9777a914f79e2b4dbc3e234505f1729467a60b410ceadc87a2d8c12c0cf46c8ab0a7392e971d5ac3035788b2177ae165336074f29effda63042146c2e13a12d50b67", 0x1000}, {&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be3", 0xe}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x4000080) 62.836151ms ago: executing program 3 (id=3464): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 0s ago: executing program 1 (id=3465): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) kernel console output (not intermixed with test programs): rface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.594770][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.606426][T12443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.655321][ T44] appletouch 2-1:0.85: input: appletouch disconnected [ 351.749039][T12443] hsr_slave_0: entered promiscuous mode [ 351.763927][T12443] hsr_slave_1: entered promiscuous mode [ 351.779052][T12443] debugfs: 'hsr0' already exists in 'hsr' [ 351.792136][T12443] Cannot create hsr debugfs directory [ 351.870254][T12556] syzkaller1: entered promiscuous mode [ 351.875962][T12556] syzkaller1: entered allmulticast mode [ 353.219861][T12595] loop8: detected capacity change from 0 to 8 [ 353.238791][ T5974] Dev loop8: unable to read RDB block 8 [ 353.254225][ T5974] loop8: unable to read partition table [ 353.269408][ T5974] loop8: partition table beyond EOD, truncated [ 353.283892][T12595] Dev loop8: unable to read RDB block 8 [ 353.323504][T12595] loop8: unable to read partition table [ 353.345544][T12595] loop8: partition table beyond EOD, truncated [ 353.354874][T12595] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 353.578799][ T5875] Bluetooth: hci1: command tx timeout [ 353.601258][T12443] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 353.661245][T12443] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 353.724783][T12443] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 353.767877][T12443] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 353.819278][ T44] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 353.992072][T12623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2605'. [ 354.009341][ T5944] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 354.015046][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 354.045544][T12443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.063430][ T44] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 354.080989][ T44] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 354.118210][ T44] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 354.132178][T12443] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.149623][ T44] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 354.173431][ T9560] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.180655][ T9560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.189129][ T44] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.192659][ T5944] usb 4-1: Using ep0 maxpacket: 16 [ 354.225303][ T44] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 354.246211][ T5944] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 354.264833][ T9560] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.272161][ T9560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.289223][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.297311][ T5944] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 170, changing to 11 [ 354.333270][T12632] batadv_slave_1: entered promiscuous mode [ 354.338850][ T5944] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 34661, setting to 1024 [ 354.352221][T12632] batadv_slave_1: left promiscuous mode [ 354.389495][ T5944] usb 4-1: config 0 interface 0 has no altsetting 0 [ 354.426727][ T5944] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 354.466282][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.498436][ T5944] usb 4-1: Product: syz [ 354.502661][ T5944] usb 4-1: Manufacturer: syz [ 354.507647][ T5944] usb 4-1: SerialNumber: syz [ 354.523096][T12443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.551054][ T44] usb 1-1: usb_control_msg returned -32 [ 354.566395][ T44] usbtmc 1-1:16.0: can't read capabilities [ 354.577663][ T5944] usb 4-1: config 0 descriptor?? [ 354.595896][T12610] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 354.709787][T12443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.833052][T12610] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 354.875356][ T5944] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input76 [ 354.946246][T12443] veth0_vlan: entered promiscuous mode [ 354.991206][T12443] veth1_vlan: entered promiscuous mode [ 355.127994][T12443] veth0_macvtap: entered promiscuous mode [ 355.186456][T12443] veth1_macvtap: entered promiscuous mode [ 355.257271][T12443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.277085][ T5944] usb 4-1: USB disconnect, device number 49 [ 355.326095][T12443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.388884][ T177] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.407351][ T177] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.452797][ T177] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.475918][ T177] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.633574][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.655921][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.660635][ T5875] Bluetooth: hci1: command tx timeout [ 355.728710][ T5937] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 355.743406][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.757854][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.890733][ T5937] usb 2-1: Using ep0 maxpacket: 8 [ 355.914460][ T5937] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.967299][ T5937] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 355.996898][ T5937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 356.016300][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 356.016319][ T30] audit: type=1326 audit(1754853434.334:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.3.2619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 356.022491][ T5937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 356.048020][ T30] audit: type=1326 audit(1754853434.334:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.3.2619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 356.068263][ T5937] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 356.093342][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.100058][ T30] audit: type=1326 audit(1754853434.364:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.3.2619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 356.130247][ T30] audit: type=1326 audit(1754853434.364:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.3.2619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 356.147716][ T5937] hub 2-1:1.0: bad descriptor, ignoring hub [ 356.162087][ T5937] hub 2-1:1.0: probe with driver hub failed with error -5 [ 356.163701][ T30] audit: type=1326 audit(1754853434.364:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.3.2619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 356.188671][ T5937] cdc_wdm 2-1:1.0: skipping garbage [ 356.197363][ T30] audit: type=1326 audit(1754853434.364:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.3.2619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 356.207821][ T5937] cdc_wdm 2-1:1.0: skipping garbage [ 356.235235][ T30] audit: type=1326 audit(1754853434.364:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.3.2619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 356.258179][ T9242] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 356.262168][ T5937] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 356.274755][ T30] audit: type=1326 audit(1754853434.364:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.3.2619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 356.291213][ T5937] cdc_wdm 2-1:1.0: Unknown control protocol [ 356.317500][ T30] audit: type=1326 audit(1754853434.364:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.3.2619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=256 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 356.388130][ T30] audit: type=1326 audit(1754853434.624:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12674 comm="syz.3.2619" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 356.442804][ T9242] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 356.455931][ T9242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.510414][ T9242] usb 3-1: config 0 descriptor?? [ 356.610564][ T44] usb 1-1: USB disconnect, device number 35 [ 356.631966][ T5937] usb 2-1: reset high-speed USB device number 53 using dummy_hcd [ 356.819394][ T5937] usb 2-1: device firmware changed [ 356.841561][ T5937] usb 2-1: USB disconnect, device number 53 [ 357.199255][ T5937] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 357.438510][ T5937] usb 2-1: Using ep0 maxpacket: 8 [ 357.456093][ T5937] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 357.490865][ T5937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.533462][ T5937] usb 2-1: config 0 has no interfaces? [ 357.542726][ T9242] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 357.565884][ T9242] usb 3-1: USB disconnect, device number 48 [ 357.600014][ T5937] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 357.627961][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 357.647890][ T5937] usb 2-1: Product: syz [ 357.654777][ T5937] usb 2-1: config 0 descriptor?? [ 357.886712][ T5937] usb 2-1: USB disconnect, device number 54 [ 360.123528][T12822] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2659'. [ 360.144010][T12822] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2659'. [ 360.156078][T12822] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 360.200366][ T9241] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 360.359435][ T44] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 360.380860][ T9241] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.402791][ T9241] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 360.418455][ T9241] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 360.452085][ T9241] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 360.474237][ T9241] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 360.508548][ T9241] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 360.524893][T12833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2663'. [ 360.547746][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.568315][ T9241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.576999][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 360.601144][T12815] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 360.614122][ T9241] hub 4-1:1.0: bad descriptor, ignoring hub [ 360.624075][ T44] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 360.643940][ T9241] hub 4-1:1.0: probe with driver hub failed with error -5 [ 360.653021][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.662184][ T9241] cdc_wdm 4-1:1.0: skipping garbage [ 360.669260][ T9241] cdc_wdm 4-1:1.0: skipping garbage [ 360.683184][ T44] usb 1-1: config 0 descriptor?? [ 360.698667][ T9241] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 360.723008][ T9241] cdc_wdm 4-1:1.0: Unknown control protocol [ 360.836091][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2665'. [ 360.883629][T12841] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2665'. [ 360.933722][T12841] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2665'. [ 361.174296][ T44] kovaplus 0003:1E7D:2D50.003D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 361.341556][ T10] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 361.419846][T12815] usb 4-1: reset low-speed USB device number 50 using dummy_hcd [ 361.497607][T12860] syzkaller1: entered promiscuous mode [ 361.510061][T12860] syzkaller1: entered allmulticast mode [ 361.544633][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.555384][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.589557][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 361.606109][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.617889][ T10] usb 2-1: Product: syz [ 361.627868][ T10] usb 2-1: Manufacturer: syz [ 361.632931][ T10] usb 2-1: SerialNumber: syz [ 361.731110][T12815] usb 4-1: device firmware changed [ 361.739434][ T44] kovaplus 0003:1E7D:2D50.003D: couldn't init struct kovaplus_device [ 361.753370][ T5937] usb 4-1: USB disconnect, device number 50 [ 361.760235][T12815] cdc_wdm 4-1:1.0: Error autopm - -16 [ 361.766575][ T44] kovaplus 0003:1E7D:2D50.003D: couldn't install mouse [ 361.812363][ T44] kovaplus 0003:1E7D:2D50.003D: probe with driver kovaplus failed with error -71 [ 361.849548][ T44] usb 1-1: USB disconnect, device number 36 [ 361.861517][ T10] usb 2-1: 0:2 : does not exist [ 361.887432][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 361.938936][ T5937] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 361.999223][ T10] usb 2-1: USB disconnect, device number 55 [ 362.103369][ T5937] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.133398][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.158505][ T5937] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 362.178747][ T5937] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 362.209099][ T5937] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 362.229646][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.250882][T12844] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 362.261097][ T5937] hub 4-1:1.0: bad descriptor, ignoring hub [ 362.267164][ T5937] hub 4-1:1.0: probe with driver hub failed with error -5 [ 362.275524][ T5937] cdc_wdm 4-1:1.0: skipping garbage [ 362.281257][ T5937] cdc_wdm 4-1:1.0: skipping garbage [ 362.287538][ T5937] cdc_wdm 4-1:1.0: skipping garbage [ 362.293240][ T5937] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 362.408532][ T9245] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 362.478849][ T44] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 362.499200][T12878] input: syz1 as /devices/virtual/input/input78 [ 362.579310][ T9245] usb 3-1: Using ep0 maxpacket: 8 [ 362.588242][ T9245] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 362.600062][ T9245] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 362.612712][ T9245] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 362.628330][ T9245] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 362.640174][ T9241] usb 4-1: USB disconnect, device number 51 [ 362.649582][ T9245] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 362.663383][ T9245] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.676969][ T44] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 362.690194][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.698763][ T9245] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 362.713235][ T44] usb 5-1: Product: syz [ 362.718002][ T9245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.726820][ T44] usb 5-1: Manufacturer: syz [ 362.732366][ T44] usb 5-1: SerialNumber: syz [ 362.747254][ T44] usb 5-1: config 0 descriptor?? [ 362.955670][ T9245] usb 3-1: GET_CAPABILITIES returned 0 [ 362.978529][ T9245] usbtmc 3-1:16.0: can't read capabilities [ 363.028943][ T10] usb 5-1: USB disconnect, device number 39 [ 363.132448][T12894] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 363.183602][ T2155] usb 3-1: USB disconnect, device number 49 [ 363.278629][ T44] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 363.328887][ T5944] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 363.442795][ T44] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.454180][ T44] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 363.469722][ T44] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 363.480247][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.484601][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.488269][ T44] usb 1-1: Product: syz [ 363.488291][ T44] usb 1-1: Manufacturer: syz [ 363.488307][ T44] usb 1-1: SerialNumber: syz [ 363.514220][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.524955][ T5944] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 363.537968][ T5944] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 363.547101][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.557864][ T5944] usb 2-1: config 0 descriptor?? [ 363.717153][T12890] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 364.020128][ T5944] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 364.156791][ T44] cdc_ncm 1-1:1.0: bind() failure [ 364.187279][ T44] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 364.209386][ T44] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 364.228535][ T44] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 364.244463][ T44] usb 1-1: USB disconnect, device number 37 [ 364.291831][ T2155] usb 2-1: USB disconnect, device number 56 [ 364.685882][T12904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2688'. [ 364.705441][T12904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2688'. [ 365.026211][T12920] sctp: [Deprecated]: syz.1.2693 (pid 12920) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.026211][T12920] Use struct sctp_sack_info instead [ 365.623545][T12924] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2695'. [ 366.056716][T12946] netlink: 'syz.1.2703': attribute type 1 has an invalid length. [ 366.168939][ T9242] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 366.350406][ T9242] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.406749][ T9242] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 366.448055][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 366.448082][ T30] audit: type=1326 audit(1754853444.764:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.2.2709" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f26539 code=0x0 [ 366.493315][ T9242] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 366.533206][ T9242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.553135][ T9242] usb 5-1: Product: syz [ 366.563242][ T9242] usb 5-1: Manufacturer: syz [ 366.578093][ T9242] usb 5-1: SerialNumber: syz [ 366.808287][T12944] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 367.068576][ T2155] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 367.209129][ T9242] cdc_ncm 5-1:1.0: bind() failure [ 367.226301][ T9242] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 367.235944][ T9242] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 367.245914][ T9242] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 367.260685][ T2155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.262984][ T9242] usb 5-1: USB disconnect, device number 40 [ 367.298503][ T2155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.319764][ T2155] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 367.339094][ T2155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.350093][ T2155] usb 2-1: config 0 descriptor?? [ 367.805128][ T2155] cm6533_jd 0003:0D8C:0022.003F: unknown main item tag 0x0 [ 367.835908][ T2155] cm6533_jd 0003:0D8C:0022.003F: unknown main item tag 0x0 [ 367.854644][ T2155] cm6533_jd 0003:0D8C:0022.003F: unknown main item tag 0x0 [ 367.873142][ T2155] cm6533_jd 0003:0D8C:0022.003F: unknown main item tag 0x0 [ 367.888700][ T2155] cm6533_jd 0003:0D8C:0022.003F: unknown main item tag 0x0 [ 367.938861][ T2155] cm6533_jd 0003:0D8C:0022.003F: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 367.967063][T13000] netlink: 'syz.4.2729': attribute type 11 has an invalid length. [ 368.038711][ T44] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 368.092123][ T2155] usb 2-1: USB disconnect, device number 57 [ 368.230534][ T44] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 368.245877][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 368.257204][ T9242] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 368.269052][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 368.286110][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 368.303212][ T44] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 368.312493][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.345145][ T44] usb 3-1: config 0 descriptor?? [ 368.354254][T12994] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 368.432309][ T9242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.453875][ T9242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.471884][ T9242] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 368.482239][ T9242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.494707][ T9242] usb 1-1: config 0 descriptor?? [ 368.715212][T13021] netlink: 'syz.3.2738': attribute type 12 has an invalid length. [ 368.723333][T13021] netlink: 'syz.3.2738': attribute type 29 has an invalid length. [ 368.731874][T13021] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2738'. [ 368.741624][T13021] netlink: 'syz.3.2738': attribute type 2 has an invalid length. [ 368.750985][T13021] netlink: 'syz.3.2738': attribute type 3 has an invalid length. [ 368.759896][T13022] syzkaller1: entered promiscuous mode [ 368.765507][T13022] syzkaller1: entered allmulticast mode [ 368.819501][ T44] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 368.858816][ T9241] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 369.041239][ T9241] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.051821][ T9241] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.068263][ T9241] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 369.078051][ T9241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 369.087142][ T9241] usb 5-1: SerialNumber: syz [ 369.323376][ T9241] usb 5-1: 0:2 : does not exist [ 369.390763][ T30] audit: type=1326 audit(1754853447.714:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.3.2746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 369.417595][ T9241] usb 5-1: USB disconnect, device number 41 [ 369.432272][ T30] audit: type=1326 audit(1754853447.714:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.3.2746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 369.456523][ T30] audit: type=1326 audit(1754853447.714:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.3.2746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=290 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 369.484062][ T30] audit: type=1326 audit(1754853447.714:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.3.2746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 369.510265][ T30] audit: type=1326 audit(1754853447.724:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.3.2746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 369.546342][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.563463][ T10] usb 1-1: USB disconnect, device number 38 [ 369.572942][ T30] audit: type=1326 audit(1754853447.724:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.3.2746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 369.606040][ T30] audit: type=1326 audit(1754853447.724:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.3.2746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 369.634656][ T30] audit: type=1326 audit(1754853447.724:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.3.2746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 369.670500][ T30] audit: type=1326 audit(1754853447.724:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.3.2746" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 370.732708][T13068] tipc: Enabled bearer , priority 10 [ 371.138704][ T9241] usb 3-1: reset high-speed USB device number 50 using dummy_hcd [ 371.176229][T13080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2765'. [ 371.321486][ T9241] usb 3-1: device firmware changed [ 371.336439][ T9242] usb 3-1: USB disconnect, device number 50 [ 371.372778][T13085] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 371.518710][ T9242] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 371.700401][ T9242] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 371.713920][ T9242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.726837][ T9242] usb 3-1: config 0 descriptor?? [ 371.733734][ T9245] tipc: Node number set to 4285857792 [ 371.918717][ T44] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 371.987194][ T9242] kaweth 3-1:0.0: Firmware present in device. [ 372.108660][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 372.126235][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.145945][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 372.168560][ T9242] kaweth 3-1:0.0: Statistics collection: 0 [ 372.184717][ T44] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 372.194018][ T9242] kaweth 3-1:0.0: Multicast filter limit: 0 [ 372.203823][ T9242] kaweth 3-1:0.0: MTU: 0 [ 372.212926][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.221967][ T9242] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 372.244302][ T44] usb 2-1: config 0 descriptor?? [ 372.722264][ T44] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 372.738266][ T44] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 372.757061][ T44] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 372.781187][ T9242] kaweth 3-1:0.0: Error setting receive filter [ 372.787829][ T44] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 372.797237][ T9242] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 372.807111][ T44] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 372.835652][ T44] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 372.850246][ T9242] usb 3-1: USB disconnect, device number 51 [ 372.871518][ T44] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 372.897358][ T44] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 372.924523][ T44] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 372.938176][ T44] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 372.959485][ T44] hid_map_usage: 9351 callbacks suppressed [ 372.959503][ T44] HID 045e:07da: Invalid code 65791 type 1 [ 372.980150][ T44] HID 045e:07da: Invalid code 768 type 1 [ 372.985999][ T44] HID 045e:07da: Invalid code 769 type 1 [ 372.992388][ T44] HID 045e:07da: Invalid code 770 type 1 [ 372.998340][ T44] HID 045e:07da: Invalid code 771 type 1 [ 373.005215][ T44] HID 045e:07da: Invalid code 772 type 1 [ 373.015899][ T44] HID 045e:07da: Invalid code 773 type 1 [ 373.022720][ T44] HID 045e:07da: Invalid code 774 type 1 [ 373.034247][ T44] HID 045e:07da: Invalid code 775 type 1 [ 373.042140][ T44] HID 045e:07da: Invalid code 776 type 1 [ 373.104274][ T44] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0042/input/input80 [ 373.184145][ T44] microsoft 0003:045E:07DA.0042: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 373.209213][ T2155] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 373.398587][ T2155] usb 4-1: Using ep0 maxpacket: 32 [ 373.416126][ T2155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.445604][ T2155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.458733][ T9242] usb 2-1: USB disconnect, device number 58 [ 373.474381][ T2155] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 373.483864][ T2155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.520033][ T2155] usb 4-1: config 0 descriptor?? [ 373.561523][ T2155] hub 4-1:0.0: USB hub found [ 373.741046][ T2155] hub 4-1:0.0: 2 ports detected [ 373.828976][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 373.940812][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.991316][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 374.012132][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 374.038878][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 374.063854][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.078967][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 374.105122][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 374.138963][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.176159][ T10] usb 3-1: config 0 descriptor?? [ 374.231425][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.318648][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.664550][ T10] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 374.768583][ T9245] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 374.809069][ T2155] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 374.815775][ T2155] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 374.874260][ T2155] usbhid 4-1:0.0: can't add hid device: -32 [ 374.886965][ T2155] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 374.959561][ T9245] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 374.984567][ T9245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.029979][ T9245] usb 5-1: config 0 descriptor?? [ 375.060207][ T9245] cp210x 5-1:0.0: cp210x converter detected [ 375.089447][ T10] usb 4-1: USB disconnect, device number 52 [ 375.096289][ T5874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.127566][ T5874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.137682][ T5874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.160203][ T5874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.177031][ T5874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.469698][ T9245] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 375.715987][ T9245] usb 5-1: cp210x converter now attached to ttyUSB0 [ 375.916804][ T44] usb 5-1: USB disconnect, device number 42 [ 375.936806][ T44] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 375.961801][ T44] cp210x 5-1:0.0: device disconnected [ 376.707817][T13158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2796'. [ 376.783896][ T2155] usb 3-1: USB disconnect, device number 52 [ 376.947470][ T37] bridge_slave_1: left allmulticast mode [ 376.953466][ T37] bridge_slave_1: left promiscuous mode [ 376.959720][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.969370][ T37] bridge_slave_0: left allmulticast mode [ 376.975136][ T37] bridge_slave_0: left promiscuous mode [ 376.985928][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.011582][T13152] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2793'. [ 377.259115][ T5874] Bluetooth: hci2: command tx timeout [ 377.317889][ T37] team0: Port device bridge0 removed [ 377.386016][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.398632][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.409753][ T37] bond0 (unregistering): Released all slaves [ 377.474135][T13158] ipvlan2: entered promiscuous mode [ 377.574422][ T37] tipc: Left network mode [ 377.668489][ T9241] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 377.848579][ T9241] usb 2-1: Using ep0 maxpacket: 16 [ 377.857135][ T9241] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.903399][ T9241] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.925601][ T9241] usb 2-1: config 0 interface 0 has no altsetting 0 [ 377.940738][ T9241] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 377.977346][ T9241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.015633][ T9241] usb 2-1: config 0 descriptor?? [ 378.103413][ T37] hsr_slave_0: left promiscuous mode [ 378.146825][ T37] hsr_slave_1: left promiscuous mode [ 378.154020][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.178227][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.461398][ T9241] hid (null): report_id 11059 is invalid [ 378.467590][ T9241] hid (null): unknown global tag 0xfa [ 378.511052][ T9241] cougar 0003:060B:500A.0044: usage count exceeds max: fixing up report descriptor [ 378.532313][ T9241] cougar 0003:060B:500A.0044: unexpected long global item [ 378.540573][ T9241] cougar 0003:060B:500A.0044: parse failed [ 378.546513][ T9241] cougar 0003:060B:500A.0044: probe with driver cougar failed with error -22 [ 378.625400][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.634395][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.670838][ T2155] usb 2-1: USB disconnect, device number 59 [ 379.004777][ T37] team0 (unregistering): Port device team_slave_1 removed [ 379.051773][ T37] team0 (unregistering): Port device team_slave_0 removed [ 379.338653][ T5874] Bluetooth: hci2: command tx timeout [ 379.345520][ T37] team0 (unregistering): Port device dummy0 removed [ 379.488785][ T2155] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 379.658715][ T2155] usb 2-1: Using ep0 maxpacket: 32 [ 379.716043][ T2155] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 379.748125][T13207] loop8: detected capacity change from 0 to 8 [ 379.781213][ T2155] usb 2-1: config 0 interface 0 has no altsetting 0 [ 379.787917][ T2155] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 379.809321][T13207] Dev loop8: unable to read RDB block 8 [ 379.814968][T13207] loop8: unable to read partition table [ 379.843235][T13207] loop8: partition table beyond EOD, truncated [ 379.852227][ T2155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.880487][T13147] chnl_net:caif_netlink_parms(): no params data found [ 379.886305][T13207] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 379.889445][ T2155] usb 2-1: config 0 descriptor?? [ 380.155146][ T37] IPVS: stop unused estimator thread 0... [ 380.374728][T13147] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.398651][T13147] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.406356][T13147] bridge_slave_0: entered allmulticast mode [ 380.415745][T13147] bridge_slave_0: entered promiscuous mode [ 380.510903][T13147] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.540595][T13147] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.547885][T13147] bridge_slave_1: entered allmulticast mode [ 380.584502][T13147] bridge_slave_1: entered promiscuous mode [ 380.730127][ T2155] corsair-cpro 0003:1B1C:0C10.0045: unknown main item tag 0x0 [ 380.737673][ T2155] corsair-cpro 0003:1B1C:0C10.0045: unknown main item tag 0x0 [ 380.771538][ T2155] corsair-cpro 0003:1B1C:0C10.0045: unknown main item tag 0x0 [ 380.800596][ T2155] corsair-cpro 0003:1B1C:0C10.0045: unknown main item tag 0x0 [ 380.808143][ T2155] corsair-cpro 0003:1B1C:0C10.0045: unknown main item tag 0x0 [ 380.813632][T13147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.870375][ T2155] corsair-cpro 0003:1B1C:0C10.0045: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 380.968024][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.055406][T13147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.257174][ T5875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.266171][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.275250][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.282854][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2819'. [ 381.286744][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.301370][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.305956][ T2155] corsair-cpro 0003:1B1C:0C10.0045: probe with driver corsair-cpro failed with error -110 [ 381.311446][ T5875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.354270][T13147] team0: Port device team_slave_0 added [ 381.356136][ T2155] usb 2-1: USB disconnect, device number 60 [ 381.420873][ T5874] Bluetooth: hci2: command tx timeout [ 381.475443][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.514848][T13241] vlan2: entered allmulticast mode [ 381.522111][T13241] bridge0: port 3(vlan2) entered blocking state [ 381.536497][T13241] bridge0: port 3(vlan2) entered disabled state [ 381.547982][T13241] vlan2: entered promiscuous mode [ 381.560435][T13147] team0: Port device team_slave_1 added [ 381.700795][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.765196][T13147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.786286][T13147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.813154][T13147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.837327][T13147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.845442][T13147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.872981][T13147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.883927][ T44] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 381.922788][ T5944] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 382.048548][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 382.056266][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.068634][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.079119][ T44] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 382.088199][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.095448][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.106913][T13147] hsr_slave_0: entered promiscuous mode [ 382.112999][ T5944] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 382.115062][ T44] usb 2-1: config 0 descriptor?? [ 382.132100][T13147] hsr_slave_1: entered promiscuous mode [ 382.138693][T13147] debugfs: 'hsr0' already exists in 'hsr' [ 382.144466][T13147] Cannot create hsr debugfs directory [ 382.145856][ T5944] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 382.168529][ T9241] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 382.188745][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.207203][ T5944] usb 4-1: config 0 descriptor?? [ 382.328630][ T9241] usb 5-1: Using ep0 maxpacket: 8 [ 382.337897][ T9241] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 382.345740][ T9241] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 382.365021][ T9241] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 382.367368][ T37] bridge_slave_1: left allmulticast mode [ 382.378177][ T9241] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 382.394007][ T9241] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 382.405678][ T37] bridge_slave_1: left promiscuous mode [ 382.412733][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.420960][ T9241] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 382.430156][ T9241] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 382.441566][ T9241] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 382.444123][ T37] bridge_slave_0: left allmulticast mode [ 382.453318][ T9241] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 382.453351][ T9241] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 382.466156][ T9241] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 382.472883][ T37] bridge_slave_0: left promiscuous mode [ 382.473180][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.491497][ T9241] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 382.515966][ T9241] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 382.527793][ T9241] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 382.539375][ T9241] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 382.554951][ T9241] usb 5-1: string descriptor 0 read error: -22 [ 382.561895][ T9241] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 382.571161][ T9241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.620508][ T9241] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 382.632355][ T44] savu 0003:1E7D:2D5A.0046: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 382.706258][ T5944] kovaplus 0003:1E7D:2D50.0047: hidraw1: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 382.896643][ T9241] usb 5-1: USB disconnect, device number 43 [ 382.922422][ T5937] usb 2-1: USB disconnect, device number 61 [ 383.034185][ T5944] kovaplus 0003:1E7D:2D50.0047: couldn't init struct kovaplus_device [ 383.047628][ T5944] kovaplus 0003:1E7D:2D50.0047: couldn't install mouse [ 383.058086][ T5944] kovaplus 0003:1E7D:2D50.0047: probe with driver kovaplus failed with error -71 [ 383.075117][ T5944] usb 4-1: USB disconnect, device number 53 [ 383.208314][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.220461][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.230777][ T37] bond0 (unregistering): Released all slaves [ 383.338657][ T5874] Bluetooth: hci1: command tx timeout [ 383.498772][ T5875] Bluetooth: hci2: command tx timeout [ 383.505785][T13242] chnl_net:caif_netlink_parms(): no params data found [ 383.941335][ T37] hsr_slave_0: left promiscuous mode [ 384.010538][ T37] hsr_slave_1: left promiscuous mode [ 384.016717][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.042601][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.065381][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.094034][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.177724][ T37] veth1_macvtap: left promiscuous mode [ 384.218510][ T37] veth0_macvtap: left promiscuous mode [ 384.224328][ T37] veth1_vlan: left promiscuous mode [ 384.266034][ T37] veth0_vlan: left promiscuous mode [ 384.468600][ T5937] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 384.632373][ T5937] usb 4-1: config 0 has an invalid interface number: 154 but max is 0 [ 384.644445][ T5937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.655625][ T5937] usb 4-1: config 0 has no interface number 0 [ 384.666589][ T5937] usb 4-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 384.676752][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.696342][ T5937] usb 4-1: config 0 descriptor?? [ 384.712765][ T5937] qmi_wwan 4-1:0.154: bogus CDC Union: master=0, slave=0 [ 384.724296][ T5937] qmi_wwan 4-1:0.154: probe with driver qmi_wwan failed with error -22 [ 384.886452][ T37] team0 (unregistering): Port device team_slave_1 removed [ 384.930849][ T37] team0 (unregistering): Port device team_slave_0 removed [ 384.949012][ T5937] usb 4-1: USB disconnect, device number 54 [ 385.428776][ T5875] Bluetooth: hci1: command tx timeout [ 385.515797][T13294] netlink: 'syz.4.2834': attribute type 25 has an invalid length. [ 385.526633][T13294] netlink: 'syz.4.2834': attribute type 1 has an invalid length. [ 385.553958][T13294] bridge0: port 1(bridge_slave_0) entered learning state [ 385.768919][ T5937] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 385.930542][T13242] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.931635][ T5937] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 385.943768][T13242] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.954079][T13242] bridge_slave_0: entered allmulticast mode [ 385.968738][ T5937] usb 4-1: config 0 has no interface number 0 [ 385.972573][T13242] bridge_slave_0: entered promiscuous mode [ 385.989376][ T5937] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 386.010589][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.046955][ T5937] usb 4-1: Product: syz [ 386.052036][ T5937] usb 4-1: Manufacturer: syz [ 386.056789][ T5937] usb 4-1: SerialNumber: syz [ 386.085170][ T5937] usb 4-1: config 0 descriptor?? [ 386.123873][T13242] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.133542][T13242] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.143293][T13242] bridge_slave_1: entered allmulticast mode [ 386.151820][T13242] bridge_slave_1: entered promiscuous mode [ 386.223665][T13242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.237247][T13242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.342264][T13242] team0: Port device team_slave_0 added [ 386.354080][T13242] team0: Port device team_slave_1 added [ 386.374624][T13327] binder: 13326:13327 ioctl c0306201 800003c0 returned -14 [ 386.447628][T13242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.455821][T13242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.486046][T13242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.514374][ T5937] usb 4-1: Firmware version (0.0) predates our first public release. [ 386.537288][ T5937] usb 4-1: Please update to version 0.2 or newer [ 386.537474][T13242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.552180][T13242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.580379][ T5937] usb 4-1: Firmware: build [ 386.587983][T13242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.775603][T13147] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 386.803662][ T5937] usb 4-1: USB disconnect, device number 55 [ 386.821397][T13242] hsr_slave_0: entered promiscuous mode [ 386.834830][T13242] hsr_slave_1: entered promiscuous mode [ 386.850139][T13242] debugfs: 'hsr0' already exists in 'hsr' [ 386.863454][T13242] Cannot create hsr debugfs directory [ 386.881247][T13147] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 387.024763][T13147] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 387.109304][T13147] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 387.508864][ T5875] Bluetooth: hci1: command tx timeout [ 387.705437][T13147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.811084][T13147] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.841225][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.848484][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.914493][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.921717][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.131325][T13147] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.269692][T13242] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 388.314387][T13147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.362694][T13242] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 388.391763][T13242] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 388.420126][T13242] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 388.535640][T13147] veth0_vlan: entered promiscuous mode [ 388.574390][T13147] veth1_vlan: entered promiscuous mode [ 388.670557][T13147] veth0_macvtap: entered promiscuous mode [ 388.696480][T13147] veth1_macvtap: entered promiscuous mode [ 388.791841][T13147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.823481][T13242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.841319][T13147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.881281][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.901346][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.933773][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.963910][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.040829][T13242] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.093021][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.100263][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.151069][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.158300][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.269640][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.277843][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.480631][T13242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.550207][ T9560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.558090][ T9560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.585045][ T5875] Bluetooth: hci1: command tx timeout [ 389.678285][T13242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.789586][ T10] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 389.852636][T13242] veth0_vlan: entered promiscuous mode [ 389.901047][T13242] veth1_vlan: entered promiscuous mode [ 389.953692][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.015544][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.026390][T13242] veth0_macvtap: entered promiscuous mode [ 390.052260][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 390.091855][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.109542][T13242] veth1_macvtap: entered promiscuous mode [ 390.117696][ T10] usb 2-1: config 0 descriptor?? [ 390.217833][T13242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.249983][T13242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.327524][ T73] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.357699][ T73] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.367600][ T73] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.392031][ T73] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.401175][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 390.421805][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 390.431305][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 390.491394][ T10] usb 2-1: USB disconnect, device number 62 [ 390.568594][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 390.597800][ T9] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 390.613792][ T9] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 390.654384][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 390.677494][ T9] usb 4-1: config 1 has no interface number 0 [ 390.694126][ T9] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 390.725312][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.747929][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.757402][ T9] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 390.815704][ T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 390.850216][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.918139][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 390.934279][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.977685][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.138039][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 391.453378][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 391.453399][ T30] audit: type=1326 audit(1754853469.774:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13467 comm="syz.2.2881" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70de539 code=0x0 [ 391.589926][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 391.655576][ T9241] usb 4-1: USB disconnect, device number 56 [ 391.671746][ T9241] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 391.768842][ T9242] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 391.771547][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.827360][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.851553][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 391.897382][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 391.918217][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.932650][ T9242] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 391.935289][ T9] usb 2-1: config 0 descriptor?? [ 391.946318][ T9242] usb 1-1: config 0 has no interface number 0 [ 391.964411][T13483] sctp: [Deprecated]: syz.4.2886 (pid 13483) Use of struct sctp_assoc_value in delayed_ack socket option. [ 391.964411][T13483] Use struct sctp_sack_info instead [ 391.978927][ T9242] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 392.002469][ T9242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.020701][ T9242] usb 1-1: Product: syz [ 392.029170][ T9242] usb 1-1: Manufacturer: syz [ 392.033891][ T9242] usb 1-1: SerialNumber: syz [ 392.047486][ T9242] usb 1-1: config 0 descriptor?? [ 392.376192][ T9] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 392.439350][ T9] plantronics 0003:047F:FFFF.0048: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 392.499100][ T9242] usb 1-1: Firmware version (0.0) predates our first public release. [ 392.522831][ T9242] usb 1-1: Please update to version 0.2 or newer [ 392.546959][ T9242] usb 1-1: Firmware: build [ 392.623747][T13503] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2890'. [ 392.664455][ T44] usb 2-1: USB disconnect, device number 63 [ 392.790238][ T9242] usb 1-1: USB disconnect, device number 39 [ 392.968895][T13508] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101 [ 393.498621][ T44] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 393.681483][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.705912][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.717259][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 393.745612][ T44] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 393.770903][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.812805][ T44] usb 2-1: config 0 descriptor?? [ 394.283899][ T44] acrux 0003:1A34:0802.0049: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 394.333698][ T44] acrux 0003:1A34:0802.0049: no inputs found [ 394.338696][ T5937] psmouse serio8: Failed to reset mouse on : -5 [ 394.359514][ T44] acrux 0003:1A34:0802.0049: Failed to enable force feedback support, error: -19 [ 394.428896][ T9242] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 394.518301][ T9241] usb 2-1: USB disconnect, device number 64 [ 394.534057][T13561] fido_id[13561]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 394.610275][ T9242] usb 1-1: Using ep0 maxpacket: 16 [ 394.618134][ T9242] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 394.674035][ T9242] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 394.708457][ T9242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.744572][ T9242] usb 1-1: config 0 descriptor?? [ 394.807227][ T9242] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input83 [ 395.034067][ T5218] bcm5974 1-1:0.0: could not read from device [ 395.083742][T13555] bcm5974 1-1:0.0: could not read from device [ 395.123438][ T5218] bcm5974 1-1:0.0: could not read from device [ 395.168469][ T9242] usb 1-1: USB disconnect, device number 40 [ 398.080237][ T5937] misc userio: Buffer overflowed, userio client isn't keeping up [ 398.237346][ T44] IPVS: starting estimator thread 0... [ 398.358218][T13668] tmpfs: Unknown parameter '‹˜žôø®¹çr%ÞÒ´\wÓ R(4æÀ;¯«a;‘ [ 398.358218][T13668] ž MU¶ÁgÊ6••&x@2<›5Ê„ëæ2TþóñÌ­Z5üÀwìšVý•þU„Í]©´±¡TΞ®m¼ÎùšÜçPåZ¼ª<M;€ëžxY9]gÅž‚‹ônñÛÆìæ;O‡‘Ûó훌u [ 398.358218][T13668] ~^à>Ƥùηr&­öœãàDòq.;ÙÂ쀯<2³A‡¦úU,1) r0 ' [ 398.385196][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.398971][T13664] IPVS: using max 26 ests per chain, 62400 per kthread [ 398.866034][T13683] syzkaller1: entered promiscuous mode [ 398.882510][T13683] syzkaller1: entered allmulticast mode [ 399.143045][ T5937] input: PS/2 Generic Mouse as /devices/serio8/input/input82 [ 399.388515][ T5937] psmouse serio8: Failed to enable mouse on [ 399.498820][ T9233] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 399.668488][ T9233] usb 2-1: Using ep0 maxpacket: 8 [ 399.704657][ T9233] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 399.718467][ T9233] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 399.758583][ T9233] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 399.786652][ T9233] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 399.808266][ T9233] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 399.821455][ T9233] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 399.837072][ T9233] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 399.867737][ T9233] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 399.913475][ T9233] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 399.958514][ T9233] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 400.009899][ T9233] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 400.027462][ T9233] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 400.082559][ T9233] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 400.103715][ T9233] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 400.115443][ T9233] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 400.119645][ T9] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 400.148755][ T9233] usb 2-1: string descriptor 0 read error: -22 [ 400.154233][ T9] hid-generic 0000:0000:0000.004A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 400.165067][ T9233] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 400.165099][ T9233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.182790][ T9233] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 400.416069][T13728] fido_id[13728]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 400.524198][ T9] usb 2-1: USB disconnect, device number 66 [ 401.374029][T13756] openvswitch: netlink: IPv4 tun info is not correct [ 401.909257][ T44] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 402.028735][ T9233] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 402.068506][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 402.076750][ T44] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 402.090830][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 402.118490][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 402.134110][ T44] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.183706][ T44] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 402.203186][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.213308][ T9233] usb 2-1: Using ep0 maxpacket: 32 [ 402.231695][ T9233] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 402.264186][ T9233] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 402.286092][ T9233] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 402.297178][ T9233] usb 2-1: config 1 has no interface number 0 [ 402.311591][ T9233] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 402.333248][ T9233] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 402.347016][ T9233] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 402.365272][ T9233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.405294][ T9233] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 402.472524][ T44] usb 4-1: GET_CAPABILITIES returned 0 [ 402.478154][ T44] usbtmc 4-1:16.0: can't read capabilities [ 402.548953][ T9] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 402.606631][ T9233] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 402.695864][ T10] usb 4-1: USB disconnect, device number 57 [ 402.712736][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.750442][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 402.777031][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 402.794519][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.814768][ T9] usb 1-1: Product: syz [ 402.828599][ T9] usb 1-1: Manufacturer: syz [ 402.837857][ T9] usb 1-1: SerialNumber: syz [ 403.055753][ T44] usb 2-1: USB disconnect, device number 67 [ 403.059374][ T9] usb 1-1: 0:2 : does not exist [ 403.075314][ T44] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 403.082420][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 403.157606][ T9] usb 1-1: USB disconnect, device number 41 [ 403.245130][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 403.428731][ T9233] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 403.608565][ T9233] usb 5-1: Using ep0 maxpacket: 8 [ 403.640467][ T9233] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 403.699344][ T9233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.715493][ T9233] usb 5-1: Product: syz [ 403.725789][ T9233] usb 5-1: Manufacturer: syz [ 403.737031][ T9233] usb 5-1: SerialNumber: syz [ 403.757269][ T9233] usb 5-1: config 0 descriptor?? [ 403.796145][ T9233] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 404.068277][T13806] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3001'. [ 404.599087][ T9249] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 404.778570][ T9249] usb 3-1: Using ep0 maxpacket: 8 [ 404.788058][ T9249] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 404.813521][ T9249] usb 3-1: config 0 has no interface number 0 [ 404.814485][ T9233] gspca_sonixj: reg_w1 err -71 [ 404.867941][ T9249] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 404.888398][ T9249] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 404.888755][ T9233] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 404.937988][ T9249] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 404.984262][ T9233] usb 5-1: USB disconnect, device number 44 [ 405.003553][ T9249] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.105379][ T9249] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 405.124974][ T9249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.177166][ T9249] usb 3-1: Product: syz [ 405.182270][ T9249] usb 3-1: Manufacturer: syz [ 405.197130][ T9249] usb 3-1: SerialNumber: syz [ 405.214113][ T9249] usb 3-1: config 0 descriptor?? [ 405.487159][ T9249] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 405.558166][T13835] netlink: 'syz.4.3016': attribute type 1 has an invalid length. [ 405.600688][T13835] (unnamed net_device) (uninitialized): option mode: invalid value (119) [ 405.740781][ T9] usb 3-1: USB disconnect, device number 53 [ 405.746834][ C0] iowarrior 3-1:0.186: iowarrior_callback - usb_submit_urb failed with result -19 [ 405.767844][T13840] pim6reg1: entered promiscuous mode [ 405.776172][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3019'. [ 405.796916][T13840] pim6reg1: entered allmulticast mode [ 405.872075][T13846] syzkaller1: entered promiscuous mode [ 405.877783][T13846] syzkaller1: entered allmulticast mode [ 406.038600][ T9249] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 406.085619][T13850] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3023'. [ 406.199032][ T9249] usb 1-1: Using ep0 maxpacket: 16 [ 406.217480][ T9249] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 406.229206][ T9249] usb 1-1: config 0 has no interface number 0 [ 406.255750][ T9249] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 406.275249][ T9249] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.281556][T13854] input: syz0 as /devices/virtual/input/input84 [ 406.294118][ T9249] usb 1-1: Product: syz [ 406.304053][ T9249] usb 1-1: Manufacturer: syz [ 406.313483][ T9249] usb 1-1: SerialNumber: syz [ 406.336818][ T9249] usb 1-1: config 0 descriptor?? [ 406.351542][ T9249] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 406.558583][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 406.728527][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 406.736303][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 406.747411][ T10] usb 4-1: config 0 has no interface number 0 [ 406.757631][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 406.767737][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.776347][ T10] usb 4-1: Product: syz [ 406.786998][ T10] usb 4-1: Manufacturer: syz [ 406.793094][ T10] usb 4-1: SerialNumber: syz [ 406.798613][ T9233] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 406.810467][ T10] usb 4-1: config 0 descriptor?? [ 406.826687][ T10] smsc95xx v2.0.0 [ 406.968468][ T9233] usb 3-1: Using ep0 maxpacket: 16 [ 406.982570][ T9233] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.999071][ T9233] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.009190][ T9233] usb 3-1: config 0 interface 0 has no altsetting 0 [ 407.015847][ T9233] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 407.028593][ T9233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.044944][ T9233] usb 3-1: config 0 descriptor?? [ 407.402732][ T9249] gspca_spca1528: reg_w err -71 [ 407.408769][ T9249] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 407.431326][ T9249] usb 1-1: USB disconnect, device number 42 [ 407.486661][ T9233] hid (null): nested delimiters [ 407.493519][ T9233] hid (null): nested delimiters [ 407.501724][ T9233] hid (null): nested delimiters [ 407.568544][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 407.690469][ T9233] usb 3-1: USB disconnect, device number 54 [ 407.718866][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 407.725916][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 407.736434][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.748181][ T9] usb 5-1: config 0 descriptor?? [ 407.768092][ T9] gspca_main: sq930x-2.14.0 probing 041e:403c [ 407.844522][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 407.856639][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 407.866536][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 407.878160][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 407.897350][ T10] usb 4-1: USB disconnect, device number 58 [ 408.635616][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3047'. [ 408.774336][ T9] gspca_sq930x: ucbus_write failed -71 [ 408.789876][ T9] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 408.815261][ T9] usb 5-1: USB disconnect, device number 45 [ 408.968566][ T9241] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 409.198403][ T9241] usb 3-1: Using ep0 maxpacket: 32 [ 409.219850][ T9241] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 409.228018][ T9241] usb 3-1: config 0 has no interface number 0 [ 409.264777][ T9241] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 123, changing to 10 [ 409.305429][ T9241] usb 3-1: config 0 interface 85 has no altsetting 0 [ 409.347599][ T9241] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 409.383221][ T9241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.418609][ T9241] usb 3-1: Product: syz [ 409.426251][ T9241] usb 3-1: Manufacturer: syz [ 409.448968][ T9241] usb 3-1: SerialNumber: syz [ 409.483113][ T9241] usb 3-1: config 0 descriptor?? [ 410.125694][ T9241] appletouch 3-1:0.85: Geyser mode initialized. [ 410.142948][ T9241] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input85 [ 410.336151][ T9241] usb 3-1: USB disconnect, device number 55 [ 410.488136][ T9241] appletouch 3-1:0.85: input: appletouch disconnected [ 410.918932][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 410.966118][T13965] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3073'. [ 410.988757][ T5937] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 411.088913][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 411.105982][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 411.124597][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 411.136926][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.149363][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 411.175506][ T5937] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 411.187029][ T9] usb 4-1: config 0 descriptor?? [ 411.193050][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.213850][ T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input86 [ 411.223406][ T5937] usb 5-1: Product: syz [ 411.227937][ T5937] usb 5-1: Manufacturer: syz [ 411.234028][ T5937] usb 5-1: SerialNumber: syz [ 411.265442][ T5937] usb 5-1: config 0 descriptor?? [ 411.286584][ T5937] gspca_main: sq930x-2.14.0 probing 2770:930c [ 411.491291][ T5218] bcm5974 4-1:0.0: could not read from device [ 411.531510][T13953] bcm5974 4-1:0.0: could not read from device [ 411.553846][ T5218] bcm5974 4-1:0.0: could not read from device [ 411.566784][ T9] usb 4-1: USB disconnect, device number 59 [ 411.579322][ T5218] bcm5974 4-1:0.0: could not read from device [ 411.607320][ T5974] bcm5974 4-1:0.0: could not read from device [ 412.114018][ T5937] gspca_sq930x: ucbus_write failed -71 [ 412.348506][ T5937] gspca_sq930x: Sensor ov9630 not yet treated [ 412.354955][ T5937] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 412.368818][ T5937] usb 5-1: USB disconnect, device number 46 [ 412.654321][T14008] netlink: 'syz.0.3092': attribute type 1 has an invalid length. [ 412.670337][T14008] netlink: 'syz.0.3092': attribute type 2 has an invalid length. [ 413.028468][ T5937] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 413.223464][ T5937] usb 5-1: Using ep0 maxpacket: 16 [ 413.242336][ T5937] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 413.260371][ T5937] usb 5-1: config 0 has no interface number 0 [ 413.266688][ T5937] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 413.305271][ T5937] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 413.325267][ T5937] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 413.341350][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 413.351427][ T5937] usb 5-1: Product: syz [ 413.355643][ T5937] usb 5-1: SerialNumber: syz [ 413.365876][ T5937] usb 5-1: config 0 descriptor?? [ 413.378148][ T5937] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 413.390687][ T5937] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input87 [ 413.600301][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 413.618454][ T9241] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 413.781840][ T9241] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 413.790313][ T9241] usb 4-1: config 0 has no interface number 0 [ 413.797239][ T9241] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 413.808852][ T9241] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 413.822956][ T9241] usb 4-1: config 0 interface 255 has no altsetting 0 [ 413.823005][ T9241] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 413.823031][ T9241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.826204][ T9241] usb 4-1: config 0 descriptor?? [ 413.867129][ T9241] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 413.904828][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 413.909030][ T5937] usb 5-1: USB disconnect, device number 47 [ 413.911833][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 413.947650][ T5937] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 414.085536][ T9] usb 4-1: USB disconnect, device number 60 [ 414.561169][T14056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3112'. [ 415.127223][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3123'. [ 415.256240][T14086] netlink: 'syz.4.3126': attribute type 30 has an invalid length. [ 415.388871][ T5937] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 415.548566][ T5937] usb 4-1: Using ep0 maxpacket: 16 [ 415.555970][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.587622][ T5937] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 415.616785][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.634746][ T5937] usb 4-1: config 0 descriptor?? [ 415.818449][ T9241] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 415.928625][ T30] audit: type=1326 audit(1754853494.244:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.2.3136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 415.958237][ T30] audit: type=1326 audit(1754853494.244:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.2.3136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 415.989726][ T30] audit: type=1326 audit(1754853494.274:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.2.3136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 416.016248][ T9241] usb 5-1: Using ep0 maxpacket: 16 [ 416.020767][ T30] audit: type=1326 audit(1754853494.284:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.2.3136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 416.044637][ T30] audit: type=1326 audit(1754853494.284:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.2.3136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 416.069567][ T30] audit: type=1326 audit(1754853494.314:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.2.3136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 416.073042][ T9241] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 416.095336][ T30] audit: type=1326 audit(1754853494.314:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.2.3136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 416.102674][ T5937] mcp2221 0003:04D8:00DD.004C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 416.135649][ T9241] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 416.160626][ T30] audit: type=1326 audit(1754853494.314:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.2.3136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 416.195116][ T9241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.204420][ T30] audit: type=1326 audit(1754853494.344:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.2.3136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 416.233583][ T9241] usb 5-1: config 0 descriptor?? [ 416.273366][ T9241] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input88 [ 416.325889][ T30] audit: type=1326 audit(1754853494.344:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14105 comm="syz.2.3136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 416.450315][ T5937] usb 4-1: USB disconnect, device number 61 [ 416.565310][ T9241] usb 5-1: USB disconnect, device number 48 [ 416.567097][ T5218] bcm5974 5-1:0.0: could not read from device [ 416.612434][T14098] bcm5974 5-1:0.0: could not read from device [ 416.661337][ T5967] bcm5974 5-1:0.0: could not read from device [ 417.169016][ T9241] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 417.334677][ T9241] usb 4-1: Using ep0 maxpacket: 8 [ 417.354117][ T9241] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 417.368707][ T9241] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 417.398510][ T9241] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.418976][ T9241] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 417.450524][ T9241] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 417.491714][ T9241] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 417.500025][ T9241] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 417.513056][ T9241] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.529787][ T9241] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 417.541215][ T9241] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 417.555274][ T9241] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 417.563244][ T9241] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 417.598614][ T9241] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.619935][ T9241] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 417.648415][ T9241] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 417.672316][ T9241] usb 4-1: string descriptor 0 read error: -22 [ 417.723247][ T9241] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 417.740998][ T9241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.801222][ T9241] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 418.188484][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 418.190964][ T9233] usb 4-1: USB disconnect, device number 62 [ 418.339144][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 418.352266][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.362632][ T5937] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 418.370302][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 418.380138][ T10] usb 1-1: config 1 has no interface number 0 [ 418.386848][ T10] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 418.404533][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 418.413779][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.422348][ T10] usb 1-1: Product: syz [ 418.426672][ T10] usb 1-1: Manufacturer: syz [ 418.432060][ T10] usb 1-1: SerialNumber: syz [ 418.444160][ T10] usb 1-1: selecting invalid altsetting 1 [ 418.528483][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 418.536134][ T5937] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 418.549477][ T5937] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 418.558817][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.573636][ T5937] usb 3-1: config 0 descriptor?? [ 418.586734][ T5937] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input89 [ 418.838993][ T5218] bcm5974 3-1:0.0: could not read from device [ 418.847143][ T5218] bcm5974 3-1:0.0: could not read from device [ 418.857029][ T10] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 418.867017][T14162] bcm5974 3-1:0.0: could not read from device [ 418.875665][ T10] cdc_ncm 1-1:1.1: bind() failure [ 418.881523][ T5937] usb 3-1: USB disconnect, device number 56 [ 418.897099][ T5218] bcm5974 3-1:0.0: could not read from device [ 418.899006][ T10] usb 1-1: USB disconnect, device number 43 [ 418.923821][ T5916] bcm5974 3-1:0.0: could not read from device [ 419.428790][ T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 419.588685][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 419.597520][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 419.620047][ T9] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 419.635757][ T9] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 419.651494][ T9] usb 5-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 419.664832][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 419.678581][ T9233] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 419.681874][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 419.702152][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.710927][ T9] usb 5-1: Product: syz [ 419.715264][ T9] usb 5-1: Manufacturer: syz [ 419.720647][ T9] usb 5-1: SerialNumber: syz [ 419.729920][T14176] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 419.844977][T14194] syzkaller1: entered promiscuous mode [ 419.851200][T14194] syzkaller1: entered allmulticast mode [ 419.862146][ T9233] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 419.870660][ T9233] usb 4-1: config 179 has no interface number 0 [ 419.877131][ T9233] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 419.888583][ T9233] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 419.900081][ T9233] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 419.911521][ T9233] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 419.922833][ T9233] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 419.944421][ T9233] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 419.957231][ T9233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.962225][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input90 [ 419.975206][T14185] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 419.985843][T14185] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 420.282933][ T9241] usb 4-1: USB disconnect, device number 63 [ 420.282997][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 420.297284][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 420.411618][ T9233] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 420.589081][ T9233] usb 3-1: Using ep0 maxpacket: 8 [ 420.614990][ T9233] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.653186][ T9233] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 420.678989][ C0] bcm5974 5-1:1.0: trackpad urb failed: -19 [ 420.684860][ T9233] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 420.684959][ T9] usb 5-1: USB disconnect, device number 49 [ 420.722436][ T9] bcm5974 5-1:1.0: could not read from device [ 420.738562][ T9233] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 420.751221][ T9233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.764695][ T9233] usb 3-1: Product: syz [ 420.774559][ T9233] usb 3-1: Manufacturer: syz [ 420.784349][ T9233] usb 3-1: SerialNumber: syz [ 420.827092][T14196] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 421.828524][ T9241] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 421.884090][ T9233] cdc_ncm 3-1:1.0: bind() failure [ 421.910985][ T9233] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 421.939222][ T9233] usb 3-1: USB disconnect, device number 57 [ 422.004410][ T9241] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 422.022814][ T9241] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.039408][ T9241] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.062620][ T9241] usb 5-1: config 0 interface 0 has no altsetting 0 [ 422.071909][ T9241] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.085914][ T9241] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.101374][ T9241] usb 5-1: config 0 interface 0 has no altsetting 0 [ 422.109688][ T9241] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.119211][ T9241] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.130857][ T9241] usb 5-1: config 0 interface 0 has no altsetting 0 [ 422.140965][ T9241] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.150765][ T9241] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.164473][ T9241] usb 5-1: config 0 interface 0 has no altsetting 0 [ 422.176637][ T9241] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.186402][ T9241] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.199313][ T9241] usb 5-1: config 0 interface 0 has no altsetting 0 [ 422.207394][ T9241] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.217491][ T9241] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.228720][ T9241] usb 5-1: config 0 interface 0 has no altsetting 0 [ 422.236491][ T9241] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.245906][ T9241] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.257000][ T9241] usb 5-1: config 0 interface 0 has no altsetting 0 [ 422.264788][ T9241] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.274251][ T9241] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 422.285435][ T9241] usb 5-1: config 0 interface 0 has no altsetting 0 [ 422.295732][ T9241] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 422.308559][ T9241] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 422.317611][ T9241] usb 5-1: Product: syz [ 422.322463][ T9241] usb 5-1: Manufacturer: syz [ 422.327370][ T9241] usb 5-1: SerialNumber: syz [ 422.361531][ T9241] usb 5-1: config 0 descriptor?? [ 422.384975][ T9241] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 422.694740][ T9241] usb 5-1: USB disconnect, device number 50 [ 422.712068][ T9241] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 423.027440][T14277] kvm: apic: phys broadcast and lowest prio [ 423.261535][T14288] netlink: 'syz.3.3217': attribute type 5 has an invalid length. [ 424.012073][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 424.012092][ T30] audit: type=1326 audit(1754853502.324:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.4.3225" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 424.080856][ T30] audit: type=1326 audit(1754853502.334:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.4.3225" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 424.133659][ T30] audit: type=1326 audit(1754853502.334:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.4.3225" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 424.197965][ T30] audit: type=1326 audit(1754853502.334:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.4.3225" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 424.346164][ T30] audit: type=1326 audit(1754853502.334:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.4.3225" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 424.392132][ T30] audit: type=1326 audit(1754853502.364:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.4.3225" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 424.415482][ T30] audit: type=1326 audit(1754853502.364:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.4.3225" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 424.473026][ T30] audit: type=1326 audit(1754853502.364:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.4.3225" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708e558 code=0x7ffc0000 [ 424.550618][ T30] audit: type=1326 audit(1754853502.364:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.4.3225" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 424.601889][ T30] audit: type=1326 audit(1754853502.364:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.4.3225" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 425.438307][T14356] loop4: detected capacity change from 0 to 7 [ 425.451761][T14356] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 425.457998][T14356] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 425.468703][ T9241] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 425.479296][T14356] loop4: p2 start 4294901760 is beyond EOD, truncated [ 425.486797][T14356] loop4: p3 start 4294836224 is beyond EOD, truncated [ 425.494797][T14356] loop4: p4 size 327680 extends beyond EOD, truncated [ 425.505814][T14356] loop4: p5 size 8323072 extends beyond EOD, truncated [ 425.515617][T14356] loop4: p6 start 8192 is beyond EOD, truncated [ 425.600028][ T5937] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 425.609518][ T5916] udevd[5916]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 425.611990][ T5967] udevd[5967]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 425.631064][ T9241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 425.638554][ T5974] udevd[5974]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 425.659627][ T9241] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 425.688530][ T9241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.723476][ T9241] usb 4-1: config 0 descriptor?? [ 425.743116][T14349] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 425.822070][ T5937] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 425.835287][ T5937] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 425.858132][ T5937] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 425.879302][ T5937] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 425.893876][ T5937] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 425.939941][ T5937] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 425.949591][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 425.957725][ T5937] usb 3-1: Product: syz [ 425.972269][ T5937] usb 3-1: Manufacturer: syz [ 425.999924][ T5937] cdc_wdm 3-1:1.0: skipping garbage [ 426.005190][ T5937] cdc_wdm 3-1:1.0: skipping garbage [ 426.043395][ T5937] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 426.059114][ T5937] cdc_wdm 3-1:1.0: Unknown control protocol [ 426.200960][T14376] netlink: 'syz.4.3254': attribute type 12 has an invalid length. [ 426.216603][ T9241] elan 0003:04F3:0755.004D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 426.393367][ T9233] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 426.440146][ T9241] usb 4-1: USB disconnect, device number 64 [ 426.563163][ T9233] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 426.585686][ T9233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 426.617878][ T9233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 426.630679][ T9233] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 426.682304][ T9233] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 426.693740][ T9233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.709409][ T9233] usb 1-1: config 0 descriptor?? [ 426.716792][T14374] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 426.837001][ T10] usb 3-1: USB disconnect, device number 58 [ 427.131778][T14374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.146230][T14374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.192171][ T9233] plantronics 0003:047F:FFFF.004E: reserved main item tag 0xd [ 427.239906][ T9233] plantronics 0003:047F:FFFF.004E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 427.452615][ T9233] usb 1-1: USB disconnect, device number 44 [ 427.704887][T14408] input: syz1 as /devices/virtual/input/input92 [ 428.138957][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 428.178620][ T9233] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 428.258610][ T9242] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 428.288848][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 428.302393][ T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 428.311145][ T10] usb 3-1: config 0 has no interface number 0 [ 428.317531][ T10] usb 3-1: config 0 interface 184 has no altsetting 0 [ 428.329826][ T9233] usb 5-1: Using ep0 maxpacket: 16 [ 428.336216][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 428.347508][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.351913][ T9233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.361551][ T10] usb 3-1: Product: syz [ 428.376760][ T9233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.383175][ T10] usb 3-1: Manufacturer: syz [ 428.387562][ T9233] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 428.401932][ T9233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.407692][ T10] usb 3-1: SerialNumber: syz [ 428.415024][ T9233] usb 5-1: config 0 descriptor?? [ 428.422784][ T9242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.435317][ T9242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.443906][ T10] usb 3-1: config 0 descriptor?? [ 428.456763][ T9242] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 428.468010][ T10] smsc75xx v1.0.0 [ 428.471729][ T9242] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 428.493592][ T9242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.513783][ T9242] usb 1-1: config 0 descriptor?? [ 428.916391][ T9233] input: HID 041e:3100 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:041E:3100.004F/input/input93 [ 429.004027][ T9242] plantronics 0003:047F:FFFF.0050: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 429.047937][ T9233] creative-sb0540 0003:041E:3100.004F: input,hidraw1: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.4-1/input0 [ 429.080822][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 429.121626][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 429.128930][ T9233] usb 5-1: USB disconnect, device number 51 [ 429.315419][T14450] fido_id[14450]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 429.333477][ T5937] usb 1-1: USB disconnect, device number 45 [ 429.565873][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 429.588520][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 429.598211][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 429.612898][ T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 429.617517][T14457] syzkaller1: entered promiscuous mode [ 429.631729][T14457] syzkaller1: entered allmulticast mode [ 429.635660][ T10] usb 3-1: USB disconnect, device number 59 [ 429.881542][T14465] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 429.888127][T14465] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 429.900895][T14465] vhci_hcd vhci_hcd.0: Device attached [ 429.910675][T14466] vhci_hcd: connection closed [ 429.911127][ T12] vhci_hcd: stop threads [ 429.921117][ T12] vhci_hcd: release socket [ 429.925663][ T12] vhci_hcd: disconnect device [ 429.989718][T14471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3293'. [ 430.002086][T14471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3293'. [ 430.038765][ T5937] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 430.195068][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.208638][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.219087][ T5937] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 430.248129][ T5937] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 430.260636][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.285321][ T5937] usb 5-1: config 0 descriptor?? [ 430.364982][ T9233] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 430.545453][ T9233] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 430.590820][ T9233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 430.607025][ T9233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 430.621726][ T9233] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 430.648120][ T9233] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 430.682258][ T9233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.705306][ T9233] usb 1-1: config 0 descriptor?? [ 430.785742][ T5937] plantronics 0003:047F:FFFF.0051: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 430.999651][ T10] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 431.021511][ T5937] usb 5-1: USB disconnect, device number 52 [ 431.158616][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 431.172389][ T9233] plantronics 0003:047F:FFFF.0052: ignoring exceeding usage max [ 431.172668][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 431.197930][ T10] usb 4-1: config 0 has no interface number 0 [ 431.209776][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 431.222064][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.228234][ T9233] plantronics 0003:047F:FFFF.0052: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 431.231745][ T10] usb 4-1: Product: syz [ 431.247295][ T10] usb 4-1: Manufacturer: syz [ 431.252424][ T10] usb 4-1: SerialNumber: syz [ 431.288224][ T10] usb 4-1: config 0 descriptor?? [ 431.309734][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 431.523661][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 431.550389][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 431.892557][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 91 [ 431.898781][ T5874] Bluetooth: hci4: command 0x0406 tx timeout [ 432.134902][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 432.135273][ T44] usb 4-1: USB disconnect, device number 65 [ 432.190471][ T44] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 432.241228][ T44] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 432.276302][ T44] quatech2 4-1:0.51: device disconnected [ 432.418868][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 432.619309][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 432.647756][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 432.659991][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 432.668034][ T10] usb 5-1: SerialNumber: syz [ 433.323372][ T5937] usb 1-1: USB disconnect, device number 46 [ 433.343696][ T10] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 433.743508][ T5937] usb 5-1: USB disconnect, device number 53 [ 433.781253][ T5937] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 434.148893][ T44] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 434.323756][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 434.353327][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.374859][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 434.405165][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 434.448454][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 434.493791][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.536535][ T44] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 434.557157][ T44] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 434.584451][ T44] usb 4-1: Manufacturer: syz [ 434.601906][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 434.635441][ T44] usb 4-1: config 0 descriptor?? [ 434.768471][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 434.781316][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.821438][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.842888][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 434.862380][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 434.917090][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.958291][ T10] usb 3-1: config 0 descriptor?? [ 435.032532][T14612] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.3348' sets config #-1 [ 435.078776][ T44] rc_core: IR keymap rc-hauppauge not found [ 435.091129][ T44] Registered IR keymap rc-empty [ 435.103944][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 435.132916][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 435.170327][ T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 435.217108][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input94 [ 435.253057][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 435.279435][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 435.331943][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 435.374182][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 435.409502][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 435.443154][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 435.485460][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0053/input/input95 [ 435.499119][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 435.538796][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 435.573059][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 435.619244][ T44] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 435.652738][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0053/input/input96 [ 435.675702][ T44] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 435.740429][ T44] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 435.862250][ T44] usb 4-1: USB disconnect, device number 66 [ 435.871974][T14633] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3355'. [ 435.889252][ T10] kye 0003:0458:5011.0053: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 435.940053][T14635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3355'. [ 435.977401][T14633] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3355'. [ 435.988030][T14633] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3355'. [ 436.048261][ T10] usb 3-1: USB disconnect, device number 60 [ 436.281088][T14636] fido_id[14636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 436.563251][T14650] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3361'. [ 436.622422][T14650] netlink: 'syz.4.3361': attribute type 7 has an invalid length. [ 436.695743][T14650] netlink: 'syz.4.3361': attribute type 8 has an invalid length. [ 436.730382][T14650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3361'. [ 437.181273][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3371'. [ 437.200915][T14673] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3371'. [ 437.218237][T14673] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3371'. [ 439.131734][T14716] input: syz1 as /devices/virtual/input/input97 [ 439.283897][T14721] pim6reg1: entered promiscuous mode [ 439.303611][T14721] pim6reg1: entered allmulticast mode [ 439.776253][ T30] kauditd_printk_skb: 209 callbacks suppressed [ 439.776273][ T30] audit: type=1326 audit(1754853518.094:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14734 comm="syz.1.3401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 439.805170][ C0] vkms_vblank_simulate: vblank timer overrun [ 439.858503][ T30] audit: type=1326 audit(1754853518.134:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14734 comm="syz.1.3401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 439.952851][ T30] audit: type=1326 audit(1754853518.144:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14734 comm="syz.1.3401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 439.974963][ C0] vkms_vblank_simulate: vblank timer overrun [ 439.987332][ T30] audit: type=1326 audit(1754853518.154:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14734 comm="syz.1.3401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 440.016718][ T30] audit: type=1326 audit(1754853518.154:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14734 comm="syz.1.3401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 440.065414][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.082617][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.154078][T14752] netlink: 'syz.2.3407': attribute type 4 has an invalid length. [ 440.190740][T14752] netlink: 'syz.2.3407': attribute type 4 has an invalid length. [ 441.371467][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3423'. [ 441.403890][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3423'. [ 441.444512][T14791] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3423'. [ 441.456152][T14791] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3423'. [ 441.697880][ T30] audit: type=1326 audit(1754853520.014:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14800 comm="syz.1.3427" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707e539 code=0x0 [ 442.148477][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 442.308452][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 442.315732][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 442.323537][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 442.335052][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.346850][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 442.358468][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 442.371673][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 442.379242][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 442.390840][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.402650][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 442.413836][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 442.427290][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 442.435917][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 442.447444][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.459430][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 442.471584][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 442.486455][ T10] usb 1-1: string descriptor 0 read error: -22 [ 442.492862][ T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 442.502063][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.523102][ T10] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 442.907957][ T44] usb 1-1: USB disconnect, device number 47 [ 443.243225][T14834] kvm: user requested TSC rate below hardware speed [ 443.258219][T14834] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 443.328494][ T9233] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 443.339141][ T44] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 443.515554][ T9233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.526688][ T9233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.536901][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 443.542246][ T9233] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 443.555390][ T9233] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 443.564908][ T9233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.584692][ T44] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 443.597285][ T9233] usb 3-1: config 0 descriptor?? [ 443.602402][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.610815][ T44] usb 2-1: Product: syz [ 443.620128][ T44] usb 2-1: Manufacturer: syz [ 443.624889][ T44] usb 2-1: SerialNumber: syz [ 443.632767][ T44] usb 2-1: config 0 descriptor?? [ 443.643174][ T44] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 443.784889][T14841] syzkaller1: entered promiscuous mode [ 443.790645][T14841] syzkaller1: entered allmulticast mode [ 444.040592][ T9233] plantronics 0003:047F:FFFF.0054: reserved main item tag 0xe [ 444.055222][ T9233] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 444.105518][ T9233] plantronics 0003:047F:FFFF.0054: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 444.306633][ T30] audit: type=1800 audit(1754853522.624:1119): pid=14857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3447" name="nullb0" dev="devtmpfs" ino=4221 res=0 errno=0 [ 444.563406][T14866] netlink: 'syz.3.3451': attribute type 1 has an invalid length. [ 444.632108][T14866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.652303][T14870] bond1: (slave ip6gretap1): making interface the new active one [ 444.662761][T14870] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 444.847416][ T9233] usb 3-1: USB disconnect, device number 61 [ 444.862561][ T44] gspca_topro: reg_w err -71 [ 444.909489][ T44] gspca_topro: Sensor soi763a [ 444.945429][ T44] usb 2-1: USB disconnect, device number 68 [ 445.224881][T14889] syzkaller1: entered promiscuous mode [ 445.244079][T14889] syzkaller1: entered allmulticast mode [ 445.462930][T14896] [ 445.465336][T14896] ===================================================== [ 445.472290][T14896] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 445.479880][T14896] 6.17.0-rc1-syzkaller #0 Not tainted [ 445.485278][T14896] ----------------------------------------------------- [ 445.492231][T14896] syz.0.3462/14896 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 445.499979][T14896] ffff8880589f4750 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 445.508715][T14896] [ 445.508715][T14896] and this task is already holding: [ 445.516096][T14896] ffff888027701028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 445.525871][T14896] which would create a new lock dependency: [ 445.531772][T14896] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 445.539892][T14896] [ 445.539892][T14896] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 445.549469][T14896] (&client->buffer_lock){..-.}-{3:3} [ 445.549503][T14896] [ 445.549503][T14896] ... which became SOFTIRQ-irq-safe at: [ 445.562596][T14896] lock_acquire+0x120/0x360 [ 445.567214][T14896] _raw_spin_lock+0x2e/0x40 [ 445.571912][T14896] evdev_pass_values+0xb9/0xbd0 [ 445.576925][T14896] evdev_events+0x1e6/0x340 [ 445.581580][T14896] input_pass_values+0x285/0x890 [ 445.586643][T14896] input_event_dispose+0x3e5/0x6b0 [ 445.591958][T14896] input_event+0x89/0xe0 [ 445.596317][T14896] hidinput_hid_event+0x132c/0x1c90 [ 445.601623][T14896] hid_process_event+0x4be/0x620 [ 445.606668][T14896] hid_report_raw_event+0xe91/0x16d0 [ 445.612061][T14896] hid_input_report+0x43e/0x520 [ 445.617016][T14896] hid_irq_in+0x47e/0x6d0 [ 445.621453][T14896] __usb_hcd_giveback_urb+0x41a/0x690 [ 445.626939][T14896] dummy_timer+0x862/0x4550 [ 445.631571][T14896] __hrtimer_run_queues+0x52c/0xc60 [ 445.636868][T14896] hrtimer_run_softirq+0x187/0x2b0 [ 445.642079][T14896] handle_softirqs+0x283/0x870 [ 445.646943][T14896] __irq_exit_rcu+0xca/0x1f0 [ 445.651633][T14896] irq_exit_rcu+0x9/0x30 [ 445.655977][T14896] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 445.661716][T14896] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 445.667795][T14896] filter_irq_stacks+0x32/0xa0 [ 445.672662][T14896] stack_depot_save_flags+0x40/0x860 [ 445.678049][T14896] kasan_save_track+0x4f/0x80 [ 445.682837][T14896] kasan_save_free_info+0x46/0x50 [ 445.687959][T14896] __kasan_slab_free+0x5b/0x80 [ 445.692825][T14896] kfree+0x18e/0x440 [ 445.696823][T14896] tomoyo_check_open_permission+0x2c2/0x3b0 [ 445.702816][T14896] security_file_open+0xb1/0x270 [ 445.707855][T14896] do_dentry_open+0x384/0x13f0 [ 445.712712][T14896] vfs_open+0x3b/0x340 [ 445.716880][T14896] path_openat+0x2ee5/0x3830 [ 445.721568][T14896] do_filp_open+0x1fa/0x410 [ 445.726177][T14896] do_sys_openat2+0x121/0x1c0 [ 445.730973][T14896] __x64_sys_openat+0x138/0x170 [ 445.735924][T14896] do_syscall_64+0xfa/0x3b0 [ 445.740529][T14896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.746603][T14896] [ 445.746603][T14896] to a SOFTIRQ-irq-unsafe lock: [ 445.753631][T14896] (tasklist_lock){.+.+}-{3:3} [ 445.753665][T14896] [ 445.753665][T14896] ... which became SOFTIRQ-irq-unsafe at: [ 445.766313][T14896] ... [ 445.766322][T14896] lock_acquire+0x120/0x360 [ 445.773541][T14896] _raw_read_lock+0x36/0x50 [ 445.778147][T14896] __do_wait+0xde/0x740 [ 445.782664][T14896] do_wait+0x1f8/0x520 [ 445.786828][T14896] kernel_wait+0xab/0x170 [ 445.791257][T14896] call_usermodehelper_exec_work+0xbe/0x230 [ 445.797256][T14896] process_scheduled_works+0xade/0x17b0 [ 445.802905][T14896] worker_thread+0x8a0/0xda0 [ 445.807588][T14896] kthread+0x70e/0x8a0 [ 445.811754][T14896] ret_from_fork+0x3f9/0x770 [ 445.816436][T14896] ret_from_fork_asm+0x1a/0x30 [ 445.821395][T14896] [ 445.821395][T14896] other info that might help us debug this: [ 445.821395][T14896] [ 445.831718][T14896] Chain exists of: [ 445.831718][T14896] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 445.831718][T14896] [ 445.844874][T14896] Possible interrupt unsafe locking scenario: [ 445.844874][T14896] [ 445.853202][T14896] CPU0 CPU1 [ 445.858668][T14896] ---- ---- [ 445.864038][T14896] lock(tasklist_lock); [ 445.868289][T14896] local_irq_disable(); [ 445.875048][T14896] lock(&client->buffer_lock); [ 445.882429][T14896] lock(&new->fa_lock); [ 445.889203][T14896] [ 445.892666][T14896] lock(&client->buffer_lock); [ 445.897791][T14896] [ 445.897791][T14896] *** DEADLOCK *** [ 445.897791][T14896] [ 445.905946][T14896] 7 locks held by syz.0.3462/14896: [ 445.911149][T14896] #0: ffff888029602118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 445.920348][T14896] #1: ffff88801c71b230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 445.930467][T14896] #2: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 445.940145][T14896] #3: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 445.949748][T14896] #4: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 445.959006][T14896] #5: ffff888027701028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 445.969212][T14896] #6: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 445.978287][T14896] [ 445.978287][T14896] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 445.988712][T14896] -> (&client->buffer_lock){..-.}-{3:3} { [ 445.994459][T14896] IN-SOFTIRQ-W at: [ 445.998445][T14896] lock_acquire+0x120/0x360 [ 446.004615][T14896] _raw_spin_lock+0x2e/0x40 [ 446.010812][T14896] evdev_pass_values+0xb9/0xbd0 [ 446.017327][T14896] evdev_events+0x1e6/0x340 [ 446.023493][T14896] input_pass_values+0x285/0x890 [ 446.030096][T14896] input_event_dispose+0x3e5/0x6b0 [ 446.036887][T14896] input_event+0x89/0xe0 [ 446.042795][T14896] hidinput_hid_event+0x132c/0x1c90 [ 446.049647][T14896] hid_process_event+0x4be/0x620 [ 446.056244][T14896] hid_report_raw_event+0xe91/0x16d0 [ 446.063196][T14896] hid_input_report+0x43e/0x520 [ 446.069723][T14896] hid_irq_in+0x47e/0x6d0 [ 446.075884][T14896] __usb_hcd_giveback_urb+0x41a/0x690 [ 446.082931][T14896] dummy_timer+0x862/0x4550 [ 446.089101][T14896] __hrtimer_run_queues+0x52c/0xc60 [ 446.095955][T14896] hrtimer_run_softirq+0x187/0x2b0 [ 446.102726][T14896] handle_softirqs+0x283/0x870 [ 446.109162][T14896] __irq_exit_rcu+0xca/0x1f0 [ 446.115412][T14896] irq_exit_rcu+0x9/0x30 [ 446.121310][T14896] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 446.128614][T14896] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 446.136359][T14896] filter_irq_stacks+0x32/0xa0 [ 446.142782][T14896] stack_depot_save_flags+0x40/0x860 [ 446.149735][T14896] kasan_save_track+0x4f/0x80 [ 446.156082][T14896] kasan_save_free_info+0x46/0x50 [ 446.162777][T14896] __kasan_slab_free+0x5b/0x80 [ 446.169233][T14896] kfree+0x18e/0x440 [ 446.174878][T14896] tomoyo_check_open_permission+0x2c2/0x3b0 [ 446.182460][T14896] security_file_open+0xb1/0x270 [ 446.189080][T14896] do_dentry_open+0x384/0x13f0 [ 446.195534][T14896] vfs_open+0x3b/0x340 [ 446.201280][T14896] path_openat+0x2ee5/0x3830 [ 446.207556][T14896] do_filp_open+0x1fa/0x410 [ 446.213736][T14896] do_sys_openat2+0x121/0x1c0 [ 446.220076][T14896] __x64_sys_openat+0x138/0x170 [ 446.226597][T14896] do_syscall_64+0xfa/0x3b0 [ 446.232778][T14896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.240344][T14896] INITIAL USE at: [ 446.244246][T14896] lock_acquire+0x120/0x360 [ 446.250333][T14896] _raw_spin_lock+0x2e/0x40 [ 446.256421][T14896] evdev_pass_values+0xb9/0xbd0 [ 446.262967][T14896] evdev_events+0x1e6/0x340 [ 446.269069][T14896] input_pass_values+0x285/0x890 [ 446.275761][T14896] input_event_dispose+0x330/0x6b0 [ 446.282446][T14896] input_inject_event+0x1dd/0x340 [ 446.289124][T14896] evdev_write+0x2fc/0x480 [ 446.295210][T14896] vfs_write+0x27b/0xb30 [ 446.301029][T14896] ksys_write+0x145/0x250 [ 446.306934][T14896] __do_fast_syscall_32+0xb6/0x2b0 [ 446.313627][T14896] do_fast_syscall_32+0x34/0x80 [ 446.320056][T14896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 446.327969][T14896] } [ 446.330469][T14896] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 446.338632][T14896] [ 446.338632][T14896] the dependencies between the lock to be acquired [ 446.338642][T14896] and SOFTIRQ-irq-unsafe lock: [ 446.352176][T14896] -> (tasklist_lock){.+.+}-{3:3} { [ 446.357491][T14896] HARDIRQ-ON-R at: [ 446.361657][T14896] lock_acquire+0x120/0x360 [ 446.368188][T14896] _raw_read_lock+0x36/0x50 [ 446.374698][T14896] __do_wait+0xde/0x740 [ 446.380900][T14896] do_wait+0x1f8/0x520 [ 446.387007][T14896] kernel_wait+0xab/0x170 [ 446.393366][T14896] call_usermodehelper_exec_work+0xbe/0x230 [ 446.401360][T14896] process_scheduled_works+0xade/0x17b0 [ 446.408909][T14896] worker_thread+0x8a0/0xda0 [ 446.415518][T14896] kthread+0x70e/0x8a0 [ 446.421613][T14896] ret_from_fork+0x3f9/0x770 [ 446.428236][T14896] ret_from_fork_asm+0x1a/0x30 [ 446.435022][T14896] SOFTIRQ-ON-R at: [ 446.439191][T14896] lock_acquire+0x120/0x360 [ 446.445811][T14896] _raw_read_lock+0x36/0x50 [ 446.452330][T14896] __do_wait+0xde/0x740 [ 446.458583][T14896] do_wait+0x1f8/0x520 [ 446.464674][T14896] kernel_wait+0xab/0x170 [ 446.471042][T14896] call_usermodehelper_exec_work+0xbe/0x230 [ 446.478959][T14896] process_scheduled_works+0xade/0x17b0 [ 446.486515][T14896] worker_thread+0x8a0/0xda0 [ 446.493113][T14896] kthread+0x70e/0x8a0 [ 446.499194][T14896] ret_from_fork+0x3f9/0x770 [ 446.505785][T14896] ret_from_fork_asm+0x1a/0x30 [ 446.512624][T14896] INITIAL USE at: [ 446.516703][T14896] lock_acquire+0x120/0x360 [ 446.523132][T14896] _raw_write_lock_irq+0xa2/0xf0 [ 446.529990][T14896] copy_process+0x224f/0x3c00 [ 446.536589][T14896] kernel_clone+0x21e/0x840 [ 446.543020][T14896] user_mode_thread+0xdd/0x140 [ 446.549786][T14896] rest_init+0x23/0x300 [ 446.555870][T14896] start_kernel+0x3a9/0x410 [ 446.562301][T14896] x86_64_start_reservations+0x24/0x30 [ 446.569696][T14896] x86_64_start_kernel+0x143/0x1c0 [ 446.576769][T14896] common_startup_64+0x13e/0x147 [ 446.583643][T14896] INITIAL READ USE at: [ 446.588153][T14896] lock_acquire+0x120/0x360 [ 446.595018][T14896] _raw_read_lock+0x36/0x50 [ 446.601890][T14896] __do_wait+0xde/0x740 [ 446.608436][T14896] do_wait+0x1f8/0x520 [ 446.614880][T14896] kernel_wait+0xab/0x170 [ 446.621573][T14896] call_usermodehelper_exec_work+0xbe/0x230 [ 446.629839][T14896] process_scheduled_works+0xade/0x17b0 [ 446.637832][T14896] worker_thread+0x8a0/0xda0 [ 446.644832][T14896] kthread+0x70e/0x8a0 [ 446.651263][T14896] ret_from_fork+0x3f9/0x770 [ 446.658208][T14896] ret_from_fork_asm+0x1a/0x30 [ 446.665334][T14896] } [ 446.668012][T14896] ... key at: [] tasklist_lock+0x18/0x40 [ 446.675925][T14896] ... acquired at: [ 446.679906][T14896] lock_acquire+0x120/0x360 [ 446.684687][T14896] _raw_read_lock+0x36/0x50 [ 446.689373][T14896] send_sigurg+0x12b/0x420 [ 446.693996][T14896] sk_send_sigurg+0x6c/0x2e0 [ 446.698775][T14896] queue_oob+0x420/0x4f0 [ 446.703210][T14896] unix_stream_sendmsg+0xc3f/0xdf0 [ 446.708592][T14896] __sock_sendmsg+0x21c/0x270 [ 446.713563][T14896] ____sys_sendmsg+0x52d/0x830 [ 446.718519][T14896] ___sys_sendmsg+0x21f/0x2a0 [ 446.723400][T14896] __sys_sendmmsg+0x28e/0x430 [ 446.728259][T14896] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 446.733998][T14896] __do_fast_syscall_32+0xb6/0x2b0 [ 446.739303][T14896] do_fast_syscall_32+0x34/0x80 [ 446.744344][T14896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 446.750857][T14896] [ 446.753184][T14896] -> (&f_owner->lock){....}-{3:3} { [ 446.758497][T14896] INITIAL USE at: [ 446.762501][T14896] lock_acquire+0x120/0x360 [ 446.768760][T14896] _raw_write_lock_irq+0xa2/0xf0 [ 446.775469][T14896] __f_setown+0x67/0x370 [ 446.781453][T14896] fcntl_dirnotify+0x3fa/0x6a0 [ 446.787961][T14896] do_fcntl+0x6d0/0x1910 [ 446.793959][T14896] do_compat_fcntl64+0x477/0x720 [ 446.800652][T14896] __do_fast_syscall_32+0xb6/0x2b0 [ 446.807521][T14896] do_fast_syscall_32+0x34/0x80 [ 446.814124][T14896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 446.822200][T14896] INITIAL READ USE at: [ 446.826622][T14896] lock_acquire+0x120/0x360 [ 446.833314][T14896] _raw_read_lock_irqsave+0xaf/0x100 [ 446.840784][T14896] send_sigio+0x38/0x370 [ 446.847229][T14896] dnotify_handle_event+0x169/0x440 [ 446.854611][T14896] fsnotify+0x1814/0x1a80 [ 446.861127][T14896] path_openat+0x171e/0x3830 [ 446.867900][T14896] do_filp_open+0x1fa/0x410 [ 446.874585][T14896] do_sys_openat2+0x121/0x1c0 [ 446.881457][T14896] __ia32_compat_sys_open+0x117/0x140 [ 446.889034][T14896] __do_fast_syscall_32+0xb6/0x2b0 [ 446.896347][T14896] do_fast_syscall_32+0x34/0x80 [ 446.903395][T14896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 446.911916][T14896] } [ 446.914556][T14896] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 446.923516][T14896] ... acquired at: [ 446.927411][T14896] lock_acquire+0x120/0x360 [ 446.932148][T14896] _raw_read_lock_irqsave+0xaf/0x100 [ 446.937621][T14896] send_sigio+0x38/0x370 [ 446.942056][T14896] kill_fasync+0x24d/0x4d0 [ 446.946662][T14896] lease_break_callback+0x26/0x30 [ 446.951878][T14896] __break_lease+0x6a2/0x1620 [ 446.956746][T14896] do_dentry_open+0x8b7/0x13f0 [ 446.961693][T14896] vfs_open+0x3b/0x340 [ 446.965958][T14896] path_openat+0x2ee5/0x3830 [ 446.970744][T14896] do_filp_open+0x1fa/0x410 [ 446.975438][T14896] do_sys_openat2+0x121/0x1c0 [ 446.980302][T14896] __ia32_compat_sys_openat+0x131/0x160 [ 446.986036][T14896] __do_fast_syscall_32+0xb6/0x2b0 [ 446.991341][T14896] do_fast_syscall_32+0x34/0x80 [ 446.996381][T14896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 447.002944][T14896] [ 447.005358][T14896] -> (&new->fa_lock){....}-{3:3} { [ 447.010498][T14896] INITIAL USE at: [ 447.014395][T14896] lock_acquire+0x120/0x360 [ 447.020478][T14896] _raw_write_lock_irq+0xa2/0xf0 [ 447.027080][T14896] fasync_remove_entry+0xf1/0x1c0 [ 447.033696][T14896] __fput+0x8a2/0xa70 [ 447.039252][T14896] task_work_run+0x1d4/0x260 [ 447.045416][T14896] exit_to_user_mode_loop+0xec/0x110 [ 447.052278][T14896] __do_fast_syscall_32+0x1f4/0x2b0 [ 447.059059][T14896] do_fast_syscall_32+0x34/0x80 [ 447.065507][T14896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 447.073416][T14896] INITIAL READ USE at: [ 447.077756][T14896] lock_acquire+0x120/0x360 [ 447.084275][T14896] _raw_read_lock_irqsave+0xaf/0x100 [ 447.091574][T14896] kill_fasync+0x199/0x4d0 [ 447.097999][T14896] sock_wake_async+0x137/0x160 [ 447.104773][T14896] sock_def_error_report+0x332/0x390 [ 447.112162][T14896] sk_error_report+0x45/0x290 [ 447.118858][T14896] unix_dgram_connect+0x96b/0xc20 [ 447.125917][T14896] __sys_connect+0x316/0x440 [ 447.132528][T14896] __ia32_sys_connect+0x7a/0x90 [ 447.139395][T14896] __do_fast_syscall_32+0xb6/0x2b0 [ 447.146514][T14896] do_fast_syscall_32+0x34/0x80 [ 447.153377][T14896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 447.161710][T14896] } [ 447.164213][T14896] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 447.172902][T14896] ... acquired at: [ 447.176709][T14896] lock_acquire+0x120/0x360 [ 447.181403][T14896] _raw_read_lock_irqsave+0xaf/0x100 [ 447.186909][T14896] kill_fasync+0x199/0x4d0 [ 447.191512][T14896] evdev_pass_values+0x627/0xbd0 [ 447.196650][T14896] evdev_events+0x1e6/0x340 [ 447.201344][T14896] input_pass_values+0x285/0x890 [ 447.206466][T14896] input_event_dispose+0x330/0x6b0 [ 447.211809][T14896] input_inject_event+0x1dd/0x340 [ 447.217195][T14896] evdev_write+0x2fc/0x480 [ 447.221807][T14896] vfs_write+0x27b/0xb30 [ 447.226238][T14896] ksys_write+0x145/0x250 [ 447.230820][T14896] __do_fast_syscall_32+0xb6/0x2b0 [ 447.236140][T14896] do_fast_syscall_32+0x34/0x80 [ 447.241175][T14896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 447.247683][T14896] [ 447.250006][T14896] [ 447.250006][T14896] stack backtrace: [ 447.255933][T14896] CPU: 0 UID: 0 PID: 14896 Comm: syz.0.3462 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 447.255956][T14896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 447.255975][T14896] Call Trace: [ 447.255983][T14896] [ 447.255995][T14896] dump_stack_lvl+0x189/0x250 [ 447.256028][T14896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.256049][T14896] ? __pfx__printk+0x10/0x10 [ 447.256079][T14896] validate_chain+0x1f05/0x2140 [ 447.256107][T14896] __lock_acquire+0xab9/0xd20 [ 447.256136][T14896] ? kill_fasync+0x199/0x4d0 [ 447.256156][T14896] lock_acquire+0x120/0x360 [ 447.256181][T14896] ? kill_fasync+0x199/0x4d0 [ 447.256206][T14896] _raw_read_lock_irqsave+0xaf/0x100 [ 447.256229][T14896] ? kill_fasync+0x199/0x4d0 [ 447.256248][T14896] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 447.256269][T14896] ? do_raw_spin_lock+0x121/0x290 [ 447.256294][T14896] kill_fasync+0x199/0x4d0 [ 447.256314][T14896] ? kill_fasync+0x53/0x4d0 [ 447.256334][T14896] evdev_pass_values+0x627/0xbd0 [ 447.256364][T14896] ? evdev_pass_values+0x5e1/0xbd0 [ 447.256392][T14896] evdev_events+0x1e6/0x340 [ 447.256416][T14896] ? evdev_events+0x79/0x340 [ 447.256441][T14896] ? input_pass_values+0x8d/0x890 [ 447.256465][T14896] input_pass_values+0x285/0x890 [ 447.256492][T14896] ? input_handle_event+0x70c/0xf30 [ 447.256513][T14896] input_event_dispose+0x330/0x6b0 [ 447.256534][T14896] input_inject_event+0x1dd/0x340 [ 447.256555][T14896] ? input_inject_event+0xb6/0x340 [ 447.256575][T14896] evdev_write+0x2fc/0x480 [ 447.256603][T14896] ? __pfx_evdev_write+0x10/0x10 [ 447.256676][T14896] ? bpf_lsm_file_permission+0x9/0x20 [ 447.256698][T14896] ? security_file_permission+0x75/0x290 [ 447.256722][T14896] ? rw_verify_area+0x255/0x4d0 [ 447.256743][T14896] ? __lock_acquire+0xab9/0xd20 [ 447.256769][T14896] ? __pfx_evdev_write+0x10/0x10 [ 447.256796][T14896] vfs_write+0x27b/0xb30 [ 447.256823][T14896] ? __pfx_vfs_write+0x10/0x10 [ 447.256847][T14896] ? __fget_files+0x2a/0x420 [ 447.256863][T14896] ? __fget_files+0x2a/0x420 [ 447.256879][T14896] ? __fget_files+0x3a0/0x420 [ 447.256894][T14896] ? __fget_files+0x2a/0x420 [ 447.256912][T14896] ksys_write+0x145/0x250 [ 447.256937][T14896] ? __pfx_ksys_write+0x10/0x10 [ 447.256962][T14896] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.256988][T14896] __do_fast_syscall_32+0xb6/0x2b0 [ 447.257016][T14896] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.257041][T14896] do_fast_syscall_32+0x34/0x80 [ 447.257068][T14896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 447.257096][T14896] RIP: 0023:0xf70fe539 [ 447.257117][T14896] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 447.257135][T14896] RSP: 002b:00000000f54ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 447.257155][T14896] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 447.257168][T14896] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 447.257180][T14896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 447.257191][T14896] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 447.257202][T14896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 447.257220][T14896]