last executing test programs: 3m8.509650728s ago: executing program 0 (id=2084): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 3m7.45531497s ago: executing program 0 (id=2088): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x802) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800) 3m7.078236856s ago: executing program 0 (id=2089): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, 0x0, 0x0, 0x0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x1d, 0x0, 0xee01}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 3m6.091297129s ago: executing program 0 (id=2102): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xc) 3m5.151204422s ago: executing program 0 (id=2120): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000010902240001000040000904000000092105000001220500090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) 3m4.763193925s ago: executing program 0 (id=2125): socket$can_bcm(0x1d, 0x2, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x47ff, 0x2, 0x0, 0x87d1513da606f9f3, 0x1, 0x1}, 0x20) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 3m4.318755705s ago: executing program 32 (id=2125): socket$can_bcm(0x1d, 0x2, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x47ff, 0x2, 0x0, 0x87d1513da606f9f3, 0x1, 0x1}, 0x20) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 1m21.261189516s ago: executing program 5 (id=3206): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r2, 0x2}, 0x8) 1m21.032160494s ago: executing program 5 (id=3207): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x2e000000, 0x2, 0x0, &(0x7f0000000000)="c118", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m20.867469434s ago: executing program 5 (id=3209): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@local, 0x4e22, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000004, 0x40000000007, 0x20000a0de, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5}, 0x1, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x3502, 0x3, 0x8, 0xa1, 0x9075, 0x800}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) 1m20.667287807s ago: executing program 5 (id=3210): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m19.728827635s ago: executing program 5 (id=3219): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f0000000040)={0x1}) 1m19.353871057s ago: executing program 5 (id=3221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000ec0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@noop]}}, "11f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da4eb57d56be4ee0efb45c215a64d718cb6f639e60026f3fcd218590d2fd47a1803f67d8c3c5ebe25ed9991203e04d3bdc1e70ef759d8f6ca8744bd9d672c1c9368faa9f538c1e6d3f741c022ddc02e6d3e1881c4ebf6d62df9fc11edf041909cea12539f7b05232c1cd9a748ff7e4a6b7ce7420bab33b3ce6da2742316d128730875e8c1d068a59aef9030e56546effdf83fe2b6fcadf2a73552e77d9cfdb452639cae6aa8f5c7aba74516be0a290f60c30c51e8de293376c07b999d87ac564e47f21f28fda4d277beb21a78ab228bfa2b84461fc73b9a82c9ac29bf066fa44f3f676ef64edab4c6dcaa57c48c0065817b0cbf3263361e93334a400fd74ae663ccc959da070390c833a3dc9381a771d719ae9417cd07b43c30e6a10ae8a59c4fd0a9004cc3f9cb772a64d240d7a0d0dac57f4d7978a304adf48f94ce0b7d6a2dff5d3ff8738a81daad9df5b8d6f361e7032c0d2cc84c73a7a2f07a35b1b26966bb08fe07ecb2438006de2d9ff9b9ca0b94bc44c858e785a261bbfbf5f6cfa78b017d671ee8180312522c8031744591711d0517fb8b120e27fb7752f0a0e85bbf1e7059aa2711bf2355fe98e3df0d7cece9741623e2fa492af8287e0fa75daea5725e0519e70aba398c00ae69c572e327755ba2fa81dc47bdcd4e5b722e0ecc8f92f4cd821d575f5f8421dc2e2994621d17da042fd59a2c3ee0ba998a771e066fcf3646007ef3c731edb9472baaa6a5722b09aa6a4da93d855fee7bc2a4db816880160449c576ed46b4ca1e299595f0116946b841308bbd9c2d8e82ce9bcd9173476523bfa8abb82cbd16ddf2efb4aeb5476ab0f5dadbe2528360195a317f3106d25b016901b65b6eed65062083234f205cf4fefe2ee0af15a86feb5d7473d1cdf202387127171d633c02dc39faca7d69721074c0e7eee28a671fb9e75d80d8fa6bc70a50bd71f60569cb9a30b0cf5599c790353590fd3fb91f77ec89257faa66ff3d13913906166604af616d8de1b92b9cc459a05daad927ebf023c53afdf5ebad5e1d73632777374dfe33b0b90e0cc4cf85bbba301ffe94b26b9f792bdde6d5a9c644bd15ad45c373f768a3a3868ed96c112f2429a27a97bd7756cec800e4ed644a22a81f1010ec376a5726e530d5bcecc635db756ff9a6e2ee89248949d52f88c84cf71be5428a4675430ecef15f1c8ff6a786e5b74eeb76fd26b53dd6287b8e9134b8096b9425f650039af1b3465ab57662ce70c5e29c559e6ffed62f731fd95d31c2f7fa57d98a8aa0b30e454ea73d4f8ba1242bb511e2d0d0e7a764f87cc6b208f85b79b980285cd890dacf77dc2668e3c2ad211998f5e3f15be32a3600a2c59821e7e48d46974d17d642ff7b3f1334057c88bea888120095582d257ccaa903d341c850bd2b446c31980acc6f02f0c559a895614f62aea0eee4a904bd1b35193fd2cbff4354834b5f7e8698bad049cfea27a76ec83dfbe2071ff1523bf127713b062ee3ebf6986bd12c31ab386a490734a47466cdde3a82dc7535b1b068a1aa585322c4bf8dd8cf0ca2b8eb56fcf98cf8129148142344d00fca2cd5611e42c607168abcf92c94be28c15be3485375290b825136e0f4047212a866831bc670b9b038355e0c976673b80584c640ec6681ae724ea58685581d493c809fc8861c60ff245cdc486228b0c3c0ac562a3fd777b7d3d43dcc4cf031b70a101bc64a3727d1f5890890070dfc14847f225a82f5a1b3c702970a25a672aa8c4a24bd7d414bb52c839611e48afe3a9022aa9eeedb2dc4cb20aaeb244b0e438f28d3c6cac9fb16171a8b66b93e48d1afb3feae84bb6a4ed0d00ba862dc6fd474fe210faa0d6d51132dcdc4dcdd5d4f94f1ba7dc8b5712188b0f80bd7f6cc211c1a2796d5c8568a97dbfb9e1bcc6e43858342767ffe5d648873215971e968382870afb0f0b33e3a0dbfe70b982abd73b340abaedd3f71ea30c90544b6a3fb8ce0c240d0bc9da7c12a927223185e5ba907d93c30089ca68525983f04ff85ef98314f69e5c9b4a388ca67813fcd0a9b2c083defac488cb3f7e4ebabc7bf6f4f7601a6c4c1a8d10c2fb13f6863c29cf3dcb8bd56768bb0a9e642bb6b94e5957deaeab3e24223e03764bbb16a7084a05735a8d188cbfabcccfce95848a804b56bd5e2051b1755a0e4262044ea2b037113af2e4e90bfed33bdcdc33824245cad3f94c4c9ea0f414a539c36b55d423fbfe4461774696012ee12e9d9c1d645d6dd72b57cca7e8526cc98b2f9e97e23503428642bd8793a87ab120f20092b6e4cbcbb52ec9a406dbb893e303077b675ecbd48e6bec13b700ab09d55e17c8815077a31cd75057c9cd65e7a881924a50bed228517be9c0abb19c3d24c458160405dab3ad0deb989a4e1b2e509b7fa57bcddbe8292512c9656df46acc62a028bb484ad0a6548ed9efdff0e83ca82a1d4c86c7d8810d1e4ff1846d1dc8e80f8206c6834bf9c433bc92ce73560d22ba0c8030b694d737fa0f4deb8b59ea9a35147efc891e993b6489a1ed86bbbf159c590bad0b5892c72383f5afedd58b7fa5e11271b35381dbf4a14daf70505b346cbd83b3258b1b413f7247d04e30e1a9eddbf82e8a25a70903c21e6a16ea34f6d7fe3cad0d51812e827596d50549153e394c4926e5e87b78d0faf440472c12929bb7fd49c959e5b06eb48c51915d80f003c2019525c91bdd4efc0e58d7811b083af3164f254c9c6cf3f8345525770033901308d02a9439131e632d073705e7a28312f8c1ccbeec064113009a34f177d7cd953c9a635f6bb12f0ed871a1d80ba86011e13df3220bda5e49c7c3d70f8c49397f69b7c57fa78d312c5abb5eea30720f31b38cac3ddc7758f7bd1c99dca967a5aa5c788faf18eb2d996be835c3e5901349104ea63bdf1c195f4d29b8c63a0dcf58d501a102b8ac34709e82c0b0d19f762b1d3c40f01e0cb05b0909b90fb587ea260cdc0a043ac67f649486d3c57b9dbf94e44334fd8034218f82c937e6b8c97b627e8803cab0a27f33ebf0e447ab198cdbfc81371fdb6061dcf8c87c24084614ddfdc71cc2a5324e0ea9a1f7cb21ec46d7e5fd936a2a9224e5fe3c39051eb7269f51832751a36814db4aa01eb1a79eca73480c12b1d7f79bb20ba7b957f7e8343af7c38c81edb6aa48eeb82e17f47f5335f4086ef2cb57c4e70e847a77362271e16158e010f95c3227162caa7f911e94893d3bdf17fb914dddddf7f982ae898914378e3f5a4bc810f246d84ae977290d20773761b8d52bb493076052022586b8ce915b1f4c8f6ef6093e3e12f56e642b1cde9dda220fd7fb26f40ba08899e0217cf2a0883ab552c9432a7d60c6316f936b57c271e13b35d5cc4f20dfbe5fb1b13e916e62cd39e5bec37d0885f6fb5523860f8ae09592d32574e3d9c570c651fa9f4db0d4b9fbd002af8b6919d7587504989123533804e4a496def7d1d9740ec83e0670233a732d55425014276efcf6b6634c5ed5a97f25deaab14fe934efe0eb13992ef48e29a7f190f253d3cce9929f3183c01c72315b6a36998016af08f84155ca1ad18acf1a54d23fe605957f7016873187a47d7ded54667d3ba4aab222319c5968d0192a1af47be415fce025329b81d5034d2c608ddb108d7acac2c145bf4abadb97cc6a05398c04a8385dab86979a0c857d2b27eeb7bdcd154e9f3ea7e394d3a41d81b0410356e252f5d0fba812d5099ede64b20d4a865fc359092ed619f0e3e6728acc69ce41b585e3c54f73fac28c38aa41ea53440cec35cebf03caaef987b18d9942c644c3f6a389970f3d7d18db8ea1f2c5ab2c0bb84478ce5e439c10749b278dfe8348391cb2bd4c7634a3ac813a6ea36f95bdd80c87fae037775834eb5029854cfe59c99a9597944e7cbce895d14ed0ee8b84ea586e77dc12fe709cf9a083c2a4806913d8914b379b4ecf27525e84fc1df3ff520f79ec244da60f680b59d848e591c89f069cec4b497d9579a86c19a710c5cc00239d6cf3c8596c924561843ae20ad5cac9bc92bf42157ab35329cd62242fec48117f1f6f801c68f9f3ec9677875916ceea7795dfbdd23121cfb3bb1813fe1ee14ddbd5a45985bc496449f82a2cc200905eaaadd1333bf79128459f47b580fdd5a10787094b08418c1dac843ab0e15d824aff2b3d242fe78d9762d39c713ded38cf972c227831ba6fb963c956458eef5689180baa3ef2aef3d3e57c63c2d4509759fb711dfe2772341ae308a7892e583be0917ef5355bfe68becce5bc5971733ca260055ee6481c0998698a49a1f03a0f537145d051179601c04cd887a64917480ba96ac046638dd6977599f72a7235506737e7e81a03095cc7e102586ec33b79eff0d1dc2b34912fa89dfb434f0256be53f6695685688af05361d3b6954d416f4be06b9ab7846a44ce25b39c7c79012b2f16159fdf96a3998098691364dbbf930a8e224701ee6f8b899fcde632077a03f649bcfad6f506924db17558b708d38d0b286d6f16f286b26cbf11094def0d017eda65328fe2a24d129bd7ac28679f2a98999e6ae508c3bb31b4e384de7593cf8ac46727cb8a07c30d97c87b638f154e1ae2223a8158e292d9467049cd9115051d3dc0c090f9e9ff6cc425f2fbcd3a4471af5182c0e45485194b6627839d356adf2cf7159b6360f7983a5c50f5cdfcf253cc40a413ed280b9ce7d9d70bef8233fbc8f6e0f5e9100f110519088ce84b41d861171f607338f5acf0664f56c88dd50e86851f59e81c2601f66ee9ced3ecae2dcbd37c55f6058390d6237837ff601900971806e987abbca25221d08f7ccb11a41b3a6246efffaff359e04fa52d7ac630f7d96bc5976817f8a347ddacfe079da0633d855343884bf4d2eb58638cd29d499de7af8490a6d9db3922363839371e819e49e54ef7dc953aa8125e053e3689a22d785c3c1729936eedccf682fd56e0aa6069c1ac88d46b0c06c1f43e631f74f9c8b4557678e90ad7788d25caca67b70da4470cc8d28606acf1fed5d4585085449ced76b1a871ebe8ede8d86570d505010c4f6f4656d2195b6190a1dfe423860b5f767f96c1e0fbf1194b9cab5c87dc2f6ce5f408681e2af319ada237e4232cd356574d7a5edbf7c292acc0c0ca04303614e46b6875f2b58f8b400fda08e24020739c2493ecf7c5d0695ecac14e486bc36a575e6a765d43313c4a4c43c5cc32488c045466504cc690f6b14f12e0a669b701d305a056c610b5f3e696e002bd5b940abac2edde34dbadc88881a5a5fc1d7db4389f33eed574ff8ed69eaf3a656635963e297cf2915c2da4bc7739c5d24017c4757a4aaca2b3323bd4fefefc004d2a675a40b7b31a221d825f79fc12f12b9d6637ca48fc2b55c9e982db14d8cce59172d7d7ee6a1f98a2839d263d7382e81ee306d27e7463a3a0cc71c74df84060ca69331afa4e19e0b124ddf430f4323e682d99f7d77854ba416162182dc161a41af02c75eef1688bef190ca86f712994db24d81831cfe4f54229ba2f5df634e45c2d2980cec96d8aefecdb35dcd7fb360c6117af12bcf894ada94069ba44814334ba4b4d487a866e484b45d7348e07a49460ab64c89f45f8b6f74507179fb6b5f03c202dedbc7cc70723ddb56accb1"}}, 0xfce) 1m18.945310261s ago: executing program 33 (id=3221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000ec0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@noop]}}, "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"}}, 0xfce) 3.112407682s ago: executing program 2 (id=4074): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x7f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff6, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) 2.906612736s ago: executing program 2 (id=4077): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x3000, 0x1000, &(0x7f000060b000/0x1000)=nil, 0x3}) 2.805704081s ago: executing program 4 (id=4079): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x800042}, 0x10) sendmsg$tipc(r0, &(0x7f0000001540)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x84c) 2.607299954s ago: executing program 4 (id=4082): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = syz_io_uring_setup(0xc56, &(0x7f0000003bc0)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x100, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 2.575590677s ago: executing program 2 (id=4083): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000100)=0xb1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x65a, @empty, 0xf7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x80, 0x0, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x100e2) 2.418846717s ago: executing program 2 (id=4084): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x544}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00003dc000/0x3000)=nil, 0x3000}, 0x3}) 2.350156156s ago: executing program 1 (id=4086): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$inet(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r0, 0x32d7, 0x2000000, 0x46, 0x0, 0x0) 2.286602922s ago: executing program 2 (id=4087): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0x108) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/186, 0xba) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc004) 2.171361188s ago: executing program 4 (id=4089): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/64, 0x40}], 0x1) 2.099300058s ago: executing program 2 (id=4090): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000780)={0x2, 0xffffffff, 0x8, 0x20000, 0x10000, 0x4}) 1.859792039s ago: executing program 4 (id=4092): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000200), 0x2, r2}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000380)={0x0, 0x0, r3}) 1.668959535s ago: executing program 4 (id=4095): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x458}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) 1.444866359s ago: executing program 3 (id=4098): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r1, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) 1.444399933s ago: executing program 1 (id=4099): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000240)=[r0], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x4000, @fd_index, 0xb132, 0x0, 0x0, 0x8, 0x1, {0x2}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.297311217s ago: executing program 6 (id=4100): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000201e010100000000000000a625000000ac1414aa0000000000000000800000004e230001000000000a0000002c00"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe88000000000000000000000000000100000000320000002001000000000000000000000000000100000000000000000000000000000000080000000000000001000000010000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fcffffffffff"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) 1.262130897s ago: executing program 3 (id=4101): timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@cgroup, 0xffffffffffffffff, 0x18}, 0x20) 1.207305988s ago: executing program 1 (id=4102): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0xfe, 0x4}, 0x2}, 0x18) connect$can_j1939(r0, &(0x7f0000000740)={0x1d, r1, 0x0, {0x0, 0xf0}}, 0x18) sendmmsg(r0, &(0x7f0000004580), 0x654, 0x0) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x2, 0xf0, 0x1}, 0xfd}, 0x18) 1.009462635s ago: executing program 6 (id=4103): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000840)={@broadcast, @random="0e9c6e4b6db5", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x7, 0x3, "ab"}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0xc, 0x100, @void}}}}}}}, 0x0) 982.140519ms ago: executing program 1 (id=4104): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x3}}, 0x2e) getsockopt(r2, 0x111, 0x7ffffffe, 0x0, &(0x7f0000000080)) 813.102376ms ago: executing program 1 (id=4105): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f0000340000/0x4000)=nil, 0x4017, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil) 765.985961ms ago: executing program 6 (id=4106): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0x400) unshare(0x2a020480) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, 0x0) 688.92687ms ago: executing program 4 (id=4107): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x5e}]}}}}}}}, 0x0) 607.51606ms ago: executing program 6 (id=4108): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, 'L\x00ZtC\x00', "3eda254a1c07cb407b4000", "29469d6b", "5350b7add205a3ec"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000c00)=@ccm_128={{0x304}, "e12dc20a892d7dde", "a52c04ebffff7ba94ab06f060000001c", "296258a3", "ebee76f27293fe23"}, 0x3a) 549.145146ms ago: executing program 3 (id=4109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x4, 0xf534, 0xffffffff, 0x0, 0x7, 0x8d}}, {0x4}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) 299.347777ms ago: executing program 3 (id=4110): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000072000040"]) 298.968841ms ago: executing program 6 (id=4111): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 141.912167ms ago: executing program 3 (id=4112): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x9, 0xe7) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty, 0x20000}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f00000000000000001ffffffffe7ee0000000000000000020000", 0x58}], 0x1) 112.303314ms ago: executing program 1 (id=4113): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000440)={0x0, 0x0, 0x1, 'I'}, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 38.565877ms ago: executing program 3 (id=4114): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x3, 0x40, 0x4}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a129221b9a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 0s ago: executing program 6 (id=4115): syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x80, &(0x7f00000001c0)=@string={0x80, 0x3, "255120b05a22beb99eeef6ebd65c9a16e1827ad2c38ac2f3b415647e3c722714952db2e3554fe8c555ccfba03c58d8ebbf84f04d17be5d87ee80081c5dc08cca7accb6fcd3e57bb65a1eec3b0c0198d1c1043d1663ad5fffc0b952b398ff2bab2380661e54dd085c847ae832ba666480cb697cf700394ae2e6404e43fe26"}}, {0x41, &(0x7f0000000340)=@string={0x41, 0x3, "dab3f1389bc660c57da79c152e1150cedaf574f8734b5828879c856719fea868bddaeb2c2ac47bddc32c14a0ee3d31fa9de65e934d01d171c99648bf0dbdac"}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) kernel console output (not intermixed with test programs): ing to perfect channel medium [ 339.028921][ T24] usb 4-1: USB disconnect, device number 36 [ 339.431883][T13206] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2904'. [ 339.759028][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 339.783076][T13218] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe [ 339.931312][ T5969] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 339.958334][ T24] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 339.987556][ T5969] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 339.997455][ T24] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 340.018089][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 340.020513][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2913'. [ 340.046521][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 340.107280][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 340.134224][ T24] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 340.159651][ T24] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 340.186929][ T24] usb 6-1: Product: syz [ 340.191121][ T24] usb 6-1: Manufacturer: syz [ 340.225305][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 340.250974][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 340.275995][ T24] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 340.299407][ T24] cdc_wdm 6-1:1.0: Unknown control protocol [ 340.333312][T13233] kvm: kvm [13230]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 340.354139][T13233] kvm: kvm [13230]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 340.726336][T13243] syzkaller1: entered promiscuous mode [ 340.735242][T13243] syzkaller1: entered allmulticast mode [ 341.044692][ T24] usb 6-1: USB disconnect, device number 9 [ 342.467169][ T8973] psmouse serio5: Failed to reset mouse on : -5 [ 343.376034][T13318] input: syz0 as /devices/virtual/input/input54 [ 345.056837][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 345.064589][ T5969] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 345.221928][ T24] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 345.234563][ T5969] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 345.256161][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 345.276830][ T5969] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 345.291275][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 345.305061][ T5969] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 345.317787][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 345.329430][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.338198][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 345.354440][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 345.364991][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.382209][ T5969] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 345.406136][ T5969] usb 5-1: invalid MIDI out EP 0 [ 345.440478][ T24] usb 6-1: config 0 descriptor?? [ 345.459160][T13371] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 345.657858][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.744212][ T5969] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 345.785990][ T5969] usb 5-1: USB disconnect, device number 39 [ 345.923131][ T24] plantronics 0003:047F:FFFF.002B: reserved main item tag 0xd [ 345.962268][ T24] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 346.189391][ T5868] usb 6-1: USB disconnect, device number 10 [ 346.256897][ T8973] misc userio: Buffer overflowed, userio client isn't keeping up [ 347.106854][ T5868] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 347.276777][ T5868] usb 3-1: Using ep0 maxpacket: 8 [ 347.299472][ T5868] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 347.323815][ T5868] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 347.337732][ T8973] input: PS/2 Generic Mouse as /devices/serio5/input/input53 [ 347.359760][ T5868] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 347.392233][ T5868] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.430283][ T5868] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 347.447076][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.475794][T13438] netlink: 'syz.3.3002': attribute type 12 has an invalid length. [ 347.490202][T13438] netlink: 'syz.3.3002': attribute type 29 has an invalid length. [ 347.515688][T13438] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3002'. [ 347.529204][T13438] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3002'. [ 347.609879][ T8973] psmouse serio5: Failed to enable mouse on [ 347.719188][ T5868] usb 3-1: GET_CAPABILITIES returned 0 [ 347.746870][ T5868] usbtmc 3-1:16.0: can't read capabilities [ 348.000945][ T5868] usb 3-1: USB disconnect, device number 41 [ 348.989186][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3020'. [ 349.356934][ T5868] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 349.521461][ T5868] usb 6-1: Using ep0 maxpacket: 16 [ 349.543370][ T5868] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 349.554183][ T5868] usb 6-1: config 0 has no interface number 0 [ 349.568917][ T5868] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 349.610239][ T5868] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 349.632838][ T5868] usb 6-1: config 0 interface 41 has no altsetting 0 [ 349.653647][ T5868] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 349.663238][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.672390][ T5868] usb 6-1: Product: syz [ 349.676853][ T5868] usb 6-1: Manufacturer: syz [ 349.681491][ T5868] usb 6-1: SerialNumber: syz [ 349.693333][ T5868] usb 6-1: config 0 descriptor?? [ 349.705630][T13484] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 349.720064][T13484] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 349.741594][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 349.803866][T13507] ªªªªªª: renamed from wg2 (while UP) [ 349.930839][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.972320][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.998521][T13513] tunl0: Caught tx_queue_len zero misconfig [ 350.015125][T13484] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 350.026550][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 350.044652][T13484] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 350.053146][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 350.073707][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3036'. [ 350.076740][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.120263][ T24] usb 2-1: config 0 descriptor?? [ 350.427932][T13526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3040'. [ 350.438360][T13526] netlink: 'syz.4.3040': attribute type 18 has an invalid length. [ 350.456039][ T5868] Error reading MAC address [ 350.456096][T13526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3040'. [ 350.481827][T13484] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 350.490752][T13484] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 350.608471][ T24] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 350.706284][ T5868] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 350.716382][ T1227] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 350.762043][ T5868] usb 6-1: USB disconnect, device number 11 [ 350.869460][T13541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3047'. [ 350.900130][ T1227] usb 3-1: Using ep0 maxpacket: 8 [ 350.938536][ T1227] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 350.953025][ T1227] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 350.984920][ T1227] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 351.009905][ T1227] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 351.032277][ T1227] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 351.055254][ T1227] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 351.063105][ T1227] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 351.090359][ T1227] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 351.109199][ T1227] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 351.126408][ T1227] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 351.152471][ T1227] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 351.160273][T13549] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3051'. [ 351.173837][ T1227] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 351.187976][ T1227] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 351.211113][ T1227] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 351.250762][ T1227] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 351.295993][ T1227] usb 3-1: string descriptor 0 read error: -22 [ 351.343339][ T1227] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 351.357769][ T1227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.396538][ T1227] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 351.668496][ T5868] usb 3-1: USB disconnect, device number 42 [ 351.959866][ T1227] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 352.129260][ T1227] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 352.154132][ T1227] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 352.173151][ T1227] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 352.183240][ T1227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.211008][ T1227] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 352.222408][ T1227] usb 6-1: invalid MIDI out EP 0 [ 352.344466][ T1227] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 352.397086][ T5969] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 352.420709][ T5934] usb 6-1: USB disconnect, device number 12 [ 352.507771][ T8970] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 352.548761][ T5969] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.576943][ T5969] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 352.600825][ T5969] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 352.616970][ T5969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.635388][ T5969] usb 5-1: Product: syz [ 352.644956][ T5969] usb 5-1: Manufacturer: syz [ 352.655406][ T5969] usb 5-1: SerialNumber: syz [ 352.666120][T13587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3068'. [ 352.675547][ T8970] usb 4-1: Using ep0 maxpacket: 16 [ 352.686967][ T8970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.699748][ T5969] cdc_mbim 5-1:1.0: skipping garbage [ 352.705201][ T8970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.715984][ T8970] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 352.730022][ T8970] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 352.742091][ T24] usb 2-1: USB disconnect, device number 46 [ 352.751120][ T8970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.789894][ T8970] usb 4-1: config 0 descriptor?? [ 352.904157][T13578] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 352.952157][T13593] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3071'. [ 353.239212][ T8970] shield 0003:0955:7214.002D: unknown main item tag 0x0 [ 353.246385][ T8970] shield 0003:0955:7214.002D: unknown main item tag 0x0 [ 353.254082][ T8970] shield 0003:0955:7214.002D: unknown main item tag 0x0 [ 353.262461][ T8970] shield 0003:0955:7214.002D: unknown main item tag 0x0 [ 353.269833][ T8970] shield 0003:0955:7214.002D: unknown main item tag 0x0 [ 353.283171][ T8970] input: HID 0955:7214 Haptics as /devices/virtual/input/input56 [ 353.344921][ T8970] shield 0003:0955:7214.002D: Registered Thunderstrike controller [ 353.357140][ T8970] shield 0003:0955:7214.002D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 353.426072][T13582] random: crng reseeded on system resumption [ 353.503376][ T8973] shield 0003:0955:7214.002D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 353.503695][ T5868] usb 4-1: USB disconnect, device number 37 [ 353.545313][ T8973] shield 0003:0955:7214.002D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 353.557399][T13578] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 353.565769][ T5969] cdc_mbim 5-1:1.0: setting tx_max = 48 [ 353.590586][ T5969] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 353.607321][ T8973] shield 0003:0955:7214.002D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 353.634544][ T5969] wwan wwan0: port wwan0mbim0 attached [ 353.641680][ T8973] shield 0003:0955:7214.002D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 353.643621][T13606] syzkaller1: entered promiscuous mode [ 353.663605][T13606] syzkaller1: entered allmulticast mode [ 353.706586][ T5969] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 82:50:01:d2:12:a7 [ 353.813255][ T5969] usb 5-1: USB disconnect, device number 40 [ 353.833925][ T5969] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 353.960783][ T5969] wwan wwan0: port wwan0mbim0 disconnected [ 354.196941][ T5868] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 354.227087][ T8973] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 354.348637][ T5868] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 354.381952][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.408296][ T8973] usb 2-1: Using ep0 maxpacket: 16 [ 354.431974][ T8973] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 354.442359][ T5868] usb 3-1: config 0 descriptor?? [ 354.451509][ T8973] usb 2-1: config 0 has no interface number 0 [ 354.483791][ T8973] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 354.495155][ T5868] cp210x 3-1:0.0: cp210x converter detected [ 354.541761][ T8973] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 354.593411][ T8973] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 354.628354][ T8973] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 354.655862][ T8973] usb 2-1: Product: syz [ 354.671487][ T8973] usb 2-1: SerialNumber: syz [ 354.683467][T13630] syzkaller1: entered promiscuous mode [ 354.691395][ T8973] usb 2-1: config 0 descriptor?? [ 354.712473][ T8973] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 354.728576][T13630] syzkaller1: entered allmulticast mode [ 354.760220][ T8973] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input57 [ 354.884490][ T5868] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 355.171117][ T5868] usb 3-1: cp210x converter now attached to ttyUSB0 [ 355.376411][ T5868] usb 3-1: USB disconnect, device number 43 [ 355.428282][ C1] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 355.435724][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.442998][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.451788][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.459757][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.468194][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.477918][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.486461][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.494829][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.502002][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.509155][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.527411][ T8973] usb 2-1: USB disconnect, device number 47 [ 355.535001][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 355.579386][ T5868] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 355.604657][ T8973] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 355.681315][ T5868] cp210x 3-1:0.0: device disconnected [ 356.107216][ T5969] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 356.331764][ T5969] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.366757][ T5969] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 356.375690][ T5969] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 356.417748][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.454865][ T5969] usb 5-1: config 0 descriptor?? [ 356.488318][ T5969] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 356.505313][ T5969] dvb-usb: bulk message failed: -22 (3/0) [ 356.539432][ T5969] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 356.559779][ T5969] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 356.575342][ T5969] usb 5-1: media controller created [ 356.616245][ T5969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.750412][ T5969] dvb-usb: bulk message failed: -22 (6/0) [ 356.767289][ T5969] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 356.796672][ T5969] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input58 [ 356.839626][ T5969] dvb-usb: schedule remote query interval to 150 msecs. [ 356.854740][ T5969] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 357.007539][ T8973] dvb-usb: bulk message failed: -22 (1/0) [ 357.014139][ T8973] dvb-usb: error while querying for an remote control event. [ 357.186887][ T8973] dvb-usb: bulk message failed: -22 (1/0) [ 357.197141][ T8973] dvb-usb: error while querying for an remote control event. [ 357.206843][ T5868] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 357.216946][ T5969] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 357.322900][ T8973] usb 5-1: USB disconnect, device number 41 [ 357.358283][ T8973] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 357.377096][ T5969] usb 6-1: Using ep0 maxpacket: 32 [ 357.379914][ T5868] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 357.394317][ T5868] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 357.394496][ T5969] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 357.409300][ T5868] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 357.426179][ T5969] usb 6-1: config 0 has no interface number 0 [ 357.435453][ T5969] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 357.452741][ T5969] usb 6-1: config 0 interface 85 has no altsetting 0 [ 357.455487][T13712] netlink: 'syz.3.3099': attribute type 21 has an invalid length. [ 357.468706][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.471598][T13712] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3099'. [ 357.487880][T13712] netlink: 'syz.3.3099': attribute type 4 has an invalid length. [ 357.495702][T13712] netlink: 'syz.3.3099': attribute type 3 has an invalid length. [ 357.505045][T13712] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3099'. [ 357.514203][ T5969] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 357.518310][ T5868] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 357.523597][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.539223][ T5969] usb 6-1: Product: syz [ 357.545651][ T5868] usb 3-1: invalid MIDI out EP 0 [ 357.548651][ T5969] usb 6-1: Manufacturer: syz [ 357.555255][ T5969] usb 6-1: SerialNumber: syz [ 357.571238][ T5969] usb 6-1: config 0 descriptor?? [ 357.704316][ T5868] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 357.756350][ T5868] usb 3-1: USB disconnect, device number 44 [ 358.186647][ T5969] appletouch 6-1:0.85: Geyser mode initialized. [ 358.202960][ T5969] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input59 [ 358.441293][ T5969] usb 6-1: USB disconnect, device number 13 [ 358.467824][ T5969] appletouch 6-1:0.85: input: appletouch disconnected [ 358.637897][T13736] vlan3: entered allmulticast mode [ 358.643194][T13736] erspan0: entered allmulticast mode [ 359.086897][ T1227] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 359.166943][ T5868] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 359.253259][ T1227] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 359.262571][ T1227] usb 2-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 359.271382][ T1227] usb 2-1: Product: syz [ 359.275646][ T1227] usb 2-1: Manufacturer: syz [ 359.280332][ T1227] usb 2-1: SerialNumber: syz [ 359.289359][ T1227] usb 2-1: config 0 descriptor?? [ 359.297123][ T1227] ch341 2-1:0.0: ch341-uart converter detected [ 359.338099][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 359.344822][ T5868] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 359.353139][ T5868] usb 5-1: config 0 has no interface number 0 [ 359.359337][ T5868] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 359.369461][ T5868] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 359.379439][ T5868] usb 5-1: config 0 interface 41 has no altsetting 0 [ 359.388947][ T5868] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 359.398341][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.406364][ T5868] usb 5-1: Product: syz [ 359.410635][ T5868] usb 5-1: Manufacturer: syz [ 359.415256][ T5868] usb 5-1: SerialNumber: syz [ 359.426801][ T5868] usb 5-1: config 0 descriptor?? [ 359.437157][T13747] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 359.444507][T13747] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 359.670867][T13747] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 359.678711][T13747] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 359.913796][ T5949] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 360.092259][ T5868] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 360.136843][ T5949] usb 4-1: Using ep0 maxpacket: 8 [ 360.152985][ T5949] usb 4-1: unable to get BOS descriptor or descriptor too short [ 360.168400][ T5949] usb 4-1: config 4 interface 0 has no altsetting 0 [ 360.190029][ T5949] usb 4-1: string descriptor 0 read error: -22 [ 360.198312][ T5949] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 360.237265][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.280157][ T5949] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 360.342918][ T1227] usb 2-1: failed to send control message: -71 [ 360.361045][ T1227] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 360.394563][ T1227] usb 2-1: USB disconnect, device number 48 [ 360.408901][ T1227] ch341 2-1:0.0: device disconnected [ 360.464485][ T5949] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 360.491126][ T5949] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 360.501504][ T5868] dm9601 5-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID [ 360.522068][ T5949] usb 4-1: media controller created [ 360.535202][T13756] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 360.551404][ T5868] sr9700 5-1:0.41: probe with driver sr9700 failed with error -71 [ 360.607568][ T5868] usb 5-1: USB disconnect, device number 42 [ 360.627952][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.757562][ T5949] zl10353_read_register: readreg error (reg=127, ret==0) [ 360.938508][ T5949] usb 4-1: USB disconnect, device number 38 [ 361.847413][ T5949] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 361.970122][T13816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3145'. [ 362.061823][ T5949] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 362.072692][ T5949] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.094793][ T5949] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.130826][ T5949] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.171302][ T5949] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.202389][ T5949] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.247057][ T5949] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.289261][ T5949] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.310659][ T5949] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.344939][ T5949] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.447159][ T5949] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.466494][ T5949] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.526820][ T5949] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.545118][ T5949] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.683027][ T5949] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.714402][ T5949] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.747050][ T5949] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.766376][ T5949] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.833696][ T5949] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.851743][ T5949] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.882204][ T5949] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.905988][ T5949] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.935138][ T5949] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.965086][ T5949] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.006990][ T5949] usb 3-1: config 0 interface 0 has no altsetting 0 [ 363.077683][ T5949] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 363.119929][ T5949] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 363.156818][ T5949] usb 3-1: Product: syz [ 363.161029][ T5949] usb 3-1: Manufacturer: syz [ 363.176444][ T5949] usb 3-1: SerialNumber: syz [ 363.192157][ T5949] usb 3-1: config 0 descriptor?? [ 363.225403][ T5949] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 363.597200][ C0] usb 3-1: yurex_control_callback - control failed: -2 [ 363.609513][ T5949] usb 3-1: USB disconnect, device number 45 [ 363.618482][ T5949] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 364.027305][ T5969] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 364.222893][ T5969] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 364.261168][ T5969] usb 6-1: config 0 interface 0 has no altsetting 0 [ 364.268234][ T30] audit: type=1326 audit(1758976841.084:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.4.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6d18eec9 code=0x7ffc0000 [ 364.290733][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.350533][ T5969] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 364.359679][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 364.386814][ T30] audit: type=1326 audit(1758976841.084:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.4.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6d18eec9 code=0x7ffc0000 [ 364.410653][ T5969] usb 6-1: Product: syz [ 364.414839][ T5969] usb 6-1: Manufacturer: syz [ 364.437011][ T5969] usb 6-1: SerialNumber: syz [ 364.446595][ T30] audit: type=1326 audit(1758976841.134:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.4.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0b6d18eec9 code=0x7ffc0000 [ 364.471976][ T5969] usb 6-1: config 0 descriptor?? [ 364.482877][ T5969] usb 6-1: selecting invalid altsetting 0 [ 364.489001][ T30] audit: type=1326 audit(1758976841.134:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.4.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0b6d18ef03 code=0x7ffc0000 [ 364.511594][ T30] audit: type=1326 audit(1758976841.134:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.4.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0b6d18ef03 code=0x7ffc0000 [ 364.542760][ T30] audit: type=1326 audit(1758976841.134:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.4.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6d18eec9 code=0x7ffc0000 [ 364.620425][ T30] audit: type=1326 audit(1758976841.134:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.4.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6d18eec9 code=0x7ffc0000 [ 364.653261][ T30] audit: type=1326 audit(1758976841.144:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.4.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6d18eec9 code=0x7ffc0000 [ 364.689268][ T30] audit: type=1326 audit(1758976841.144:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.4.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6d18eec9 code=0x7ffc0000 [ 364.755428][ T30] audit: type=1326 audit(1758976841.144:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.4.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6d18eec9 code=0x7ffc0000 [ 364.783177][ T5949] usb 6-1: USB disconnect, device number 14 [ 365.556905][ T5949] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 365.693897][T13925] dlm: non-version read from control device 4 [ 365.726939][ T5949] usb 4-1: Using ep0 maxpacket: 32 [ 365.737890][ T5949] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 365.756577][ T5949] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 365.766912][ T5969] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 365.781087][ T5949] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 365.801334][ T5949] usb 4-1: config 1 has no interface number 0 [ 365.816883][ T5949] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 365.837109][ T5949] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 10229, setting to 1024 [ 365.848698][ T5949] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 365.866886][ T5949] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 365.886237][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.905970][T13907] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 365.930523][ T5949] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 366.016786][ T5969] usb 6-1: Using ep0 maxpacket: 32 [ 366.023594][ T5969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.046787][ T5969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.056660][ T5969] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 366.066320][ T5969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.085527][ T5969] usb 6-1: config 0 descriptor?? [ 366.128969][T13907] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 366.150928][ T5949] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 366.395061][ T5868] usb 4-1: USB disconnect, device number 39 [ 366.410378][ T5868] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 366.482256][T13937] loop2: detected capacity change from 0 to 8 [ 366.499633][T13937] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 366.505257][T13937] loop2: partition table partially beyond EOD, truncated [ 366.522944][ T5969] ft260 0003:0403:6030.002E: unknown main item tag 0x0 [ 366.529516][T13937] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 366.595195][ T6225] udevd[6225]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 366.606835][ T5949] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 366.721491][ T5969] ft260 0003:0403:6030.002E: chip code: 0000 0000 [ 366.782517][ T5949] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 366.805768][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.833260][ T5949] usb 5-1: config 0 descriptor?? [ 366.847512][ T5949] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 366.944694][ T5969] ft260 0003:0403:6030.002E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 367.027184][T13954] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3196'. [ 367.052411][ T5949] gp8psk: usb in 128 operation failed. [ 367.143248][ T5969] ft260 0003:0403:6030.002E: failed to retrieve status: -71, no wakeup [ 367.172002][ T5969] ft260 0003:0403:6030.002E: failed to retrieve status: -71 [ 367.200479][ T5969] ft260 0003:0403:6030.002E: failed to reset I2C controller: -71 [ 367.265847][ T5969] usb 6-1: USB disconnect, device number 15 [ 367.279362][ T5949] gp8psk: usb in 146 operation failed. [ 367.289782][ T5949] gp8psk: failed to get FW version [ 367.297094][ T5949] gp8psk: FPGA Version = 173 [ 367.501964][ T5949] gp8psk: usb in 138 operation failed. [ 367.517753][ T5949] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 367.537457][ T5949] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 367.558943][ T5949] usb 5-1: USB disconnect, device number 43 [ 367.607003][ T8973] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 367.778537][ T8973] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.795600][ T8973] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 367.824995][ T8973] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 367.850615][ T8973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.890430][ T8973] usb 3-1: config 0 descriptor?? [ 367.913834][ T8973] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 367.951613][ T8973] dvb-usb: bulk message failed: -22 (3/0) [ 368.005589][ T8973] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 368.035560][T13972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3205'. [ 368.059914][ T8973] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 368.088776][ T8973] usb 3-1: media controller created [ 368.109489][ T8973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 368.207300][ T8973] dvb-usb: bulk message failed: -22 (6/0) [ 368.223350][ T8973] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 368.268515][ T8973] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input60 [ 368.378699][ T8973] dvb-usb: schedule remote query interval to 150 msecs. [ 368.385685][ T8973] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 368.537155][ T8973] dvb-usb: bulk message failed: -22 (1/0) [ 368.544016][ T8973] dvb-usb: error while querying for an remote control event. [ 368.598084][T13993] sctp: [Deprecated]: syz.3.3213 (pid 13993) Use of int in max_burst socket option. [ 368.598084][T13993] Use struct sctp_assoc_value instead [ 368.729537][ T5969] dvb-usb: bulk message failed: -22 (1/0) [ 368.737402][ T5969] dvb-usb: error while querying for an remote control event. [ 368.852806][T13964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.901576][T13964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.916839][ T5969] dvb-usb: bulk message failed: -22 (1/0) [ 368.926793][ T5969] dvb-usb: error while querying for an remote control event. [ 368.962687][ T5969] usb 3-1: USB disconnect, device number 46 [ 369.011707][ T5969] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 369.926419][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.017082][ T5949] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 370.118663][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.130342][T14024] use of bytesused == 0 is deprecated and will be removed in the future, [ 370.164304][T14024] use the actual size instead. [ 370.190522][ T5949] usb 3-1: config 0 has no interfaces? [ 370.236848][ T5949] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 370.245978][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.278272][ T5949] usb 3-1: Product: syz [ 370.284163][ T5949] usb 3-1: Manufacturer: syz [ 370.303781][ T5949] usb 3-1: SerialNumber: syz [ 370.325475][ T5949] usb 3-1: config 0 descriptor?? [ 370.389329][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.520044][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.582055][ T5949] usb 3-1: USB disconnect, device number 47 [ 370.624774][T14040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3230'. [ 370.698153][ T5879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 370.712137][ T5879] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 370.722242][ T5879] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 370.730892][ T5879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 370.739619][ T5879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 370.774640][ T5866] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 370.785954][ T5866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 370.810226][ T5866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 370.835283][ T5866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 370.853126][ T5866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.260119][ T59] bridge_slave_1: left allmulticast mode [ 371.280014][ T59] bridge_slave_1: left promiscuous mode [ 371.299351][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.351736][ T59] bridge_slave_0: left allmulticast mode [ 371.365892][ T59] bridge_slave_0: left promiscuous mode [ 371.402671][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.437882][T14064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3239'. [ 371.697074][ T5969] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 371.891713][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.958160][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.988574][ T5969] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 372.096812][ T5969] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 372.124207][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.183871][ T5969] usb 3-1: config 0 descriptor?? [ 372.596209][T14086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3251'. [ 372.636553][ T5969] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 372.847433][ T8973] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 372.915761][ T59] bond0 (unregistering): (slave 10û]þ5¯\P€): Releasing backup interface [ 372.924795][ T5969] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 372.937818][ T5866] Bluetooth: hci4: command tx timeout [ 372.953609][ T5949] usb 3-1: USB disconnect, device number 48 [ 372.972224][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.995609][ T59] bond0 (unregistering): Released all slaves [ 373.018968][ T8973] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.030390][ T8973] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.066516][ T8973] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 373.093134][ T8973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.103356][ T8973] usb 2-1: Product: syz [ 373.110140][ T8973] usb 2-1: Manufacturer: syz [ 373.115482][ T8973] usb 2-1: SerialNumber: syz [ 373.122116][ T5969] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 373.131397][ T5969] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 373.143150][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 373.164006][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 373.261843][ T5969] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 373.341334][ T5969] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.377516][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.405421][ T8973] usb 2-1: 0:2 : does not exist [ 373.422262][ T5969] usb 5-1: config 0 descriptor?? [ 373.436905][ T8973] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 373.444995][T14090] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 373.527344][ T8973] usb 2-1: USB disconnect, device number 49 [ 373.669528][ T6225] udevd[6225]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.874632][ T59] hsr_slave_0: left promiscuous mode [ 373.890623][ T59] hsr_slave_1: left promiscuous mode [ 373.902152][ T5969] plantronics 0003:047F:FFFF.0030: reserved main item tag 0xd [ 373.921456][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.936756][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.963707][ T5969] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 373.964112][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.046867][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.171156][ T5969] usb 5-1: USB disconnect, device number 44 [ 374.195736][ T59] veth1_macvtap: left promiscuous mode [ 374.220224][ T59] veth0_macvtap: left promiscuous mode [ 374.241988][ T59] veth1_vlan: left promiscuous mode [ 374.257833][ T59] veth0_vlan: left promiscuous mode [ 374.830493][T14142] ALSA: mixer_oss: invalid OSS volume '' [ 375.016859][ T5866] Bluetooth: hci4: command tx timeout [ 375.451891][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3271'. [ 375.610521][ T59] team0 (unregistering): Port device team_slave_1 removed [ 375.689024][ T59] team0 (unregistering): Port device team_slave_0 removed [ 375.918739][ T5949] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 376.080860][ T5949] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 376.090055][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.101186][ T5949] usb 5-1: config 0 descriptor?? [ 376.111515][ T5949] cp210x 5-1:0.0: cp210x converter detected [ 376.194087][T14049] chnl_net:caif_netlink_parms(): no params data found [ 376.528703][ T5949] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 376.542256][ T5949] cp210x 5-1:0.0: GPIO initialisation failed: -524 [ 376.557394][ T5949] usb 5-1: cp210x converter now attached to ttyUSB0 [ 376.705219][T14049] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.736960][T14049] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.744220][T14049] bridge_slave_0: entered allmulticast mode [ 376.757814][ T5969] usb 5-1: USB disconnect, device number 45 [ 376.781690][T14049] bridge_slave_0: entered promiscuous mode [ 376.783475][ T5969] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 376.827185][ T5969] cp210x 5-1:0.0: device disconnected [ 376.829165][T14049] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.857097][T14049] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.886927][T14049] bridge_slave_1: entered allmulticast mode [ 376.894825][T14049] bridge_slave_1: entered promiscuous mode [ 376.907011][T14186] input: syz0 as /devices/virtual/input/input62 [ 377.096987][ T5866] Bluetooth: hci4: command tx timeout [ 377.098062][T14188] dummy0: entered promiscuous mode [ 377.116158][T14188] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 377.153095][T14188] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 377.164051][T14188] hsr1: Slave B (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 377.174878][T14188] hsr1: entered allmulticast mode [ 377.181645][T14188] dummy0: entered allmulticast mode [ 377.189520][T14188] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 377.232360][T14049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.260931][T14049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.418967][T14204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 377.528378][T14049] team0: Port device team_slave_0 added [ 377.588347][T14049] team0: Port device team_slave_1 added [ 377.739850][T14049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.754149][T14049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.781796][T14049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.796123][T14049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.814080][T14049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.822486][ T5969] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 377.861134][T14049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.020262][T14049] hsr_slave_0: entered promiscuous mode [ 378.044147][ T5969] usb 2-1: config 0 has an invalid interface number: 129 but max is 0 [ 378.054110][T14049] hsr_slave_1: entered promiscuous mode [ 378.060651][ T5969] usb 2-1: config 0 has no interface number 0 [ 378.068361][T14049] debugfs: 'hsr0' already exists in 'hsr' [ 378.076380][ T5969] usb 2-1: config 0 interface 129 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 378.089783][T14049] Cannot create hsr debugfs directory [ 378.107057][ T8973] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 378.124233][ T5969] usb 2-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=80.8e [ 378.140256][ T5969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.148537][ T5969] usb 2-1: Product: syz [ 378.168960][ T5969] usb 2-1: Manufacturer: syz [ 378.173585][ T5969] usb 2-1: SerialNumber: syz [ 378.225953][ T5969] r8152-cfgselector 2-1: Unknown version 0x0000 [ 378.249032][ T5969] r8152-cfgselector 2-1: config 0 descriptor?? [ 378.281156][ T5969] r8152 2-1:0.129: Expected endpoints are not found [ 378.288621][ T8973] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 378.310773][ T8973] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 378.347202][ T8973] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 378.374857][ T8973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.413567][T14220] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 378.425924][ T8973] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.449420][ T8970] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 378.615012][ T8973] r8152-cfgselector 2-1: USB disconnect, device number 50 [ 378.627035][ T8970] usb 4-1: Using ep0 maxpacket: 16 [ 378.633443][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.638553][ T8970] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 378.646901][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.666356][ T8970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.734679][ T8970] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 378.761702][ T8970] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 378.780309][ T8970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.792545][ T5969] usb 3-1: USB disconnect, device number 49 [ 378.815710][ T8970] usb 4-1: config 0 descriptor?? [ 378.990126][T14049] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 379.002988][T14049] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 379.029863][T14049] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 379.048718][ T8970] usb 4-1: string descriptor 0 read error: -71 [ 379.062731][T14049] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 379.082450][ T8970] usbhid 4-1:0.0: can't add hid device: -71 [ 379.093039][ T8970] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 379.124985][ T8970] usb 4-1: USB disconnect, device number 40 [ 379.177111][ T5866] Bluetooth: hci4: command tx timeout [ 379.322051][T14049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.366566][T14049] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.401763][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.408941][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.497214][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.504400][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.653484][T14049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.827858][T14049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.020048][T14049] veth0_vlan: entered promiscuous mode [ 380.063579][T14049] veth1_vlan: entered promiscuous mode [ 380.173705][T14049] veth0_macvtap: entered promiscuous mode [ 380.204581][T14049] veth1_macvtap: entered promiscuous mode [ 380.227557][ T5949] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 380.283295][T14049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.309840][T14049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.386944][ T4519] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.401677][ T5868] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 380.414793][ T5949] usb 4-1: Using ep0 maxpacket: 32 [ 380.434554][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.452799][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.480161][ T4519] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.490547][ T5949] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 380.520846][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.548250][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.565839][ T5949] usb 4-1: config 0 descriptor?? [ 380.584487][ T5949] hub 4-1:0.0: USB hub found [ 380.589239][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 380.600168][ T5868] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 380.614447][ T4519] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.640050][ T5868] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 380.668497][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 380.711870][ T5868] usb 2-1: Product: syz [ 380.726176][ T5868] usb 2-1: Manufacturer: syz [ 380.753412][ T5868] usb 2-1: SerialNumber: syz [ 380.796820][ T5949] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 380.812264][T14293] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3311'. [ 380.827774][ T5868] usb 2-1: config 0 descriptor?? [ 380.843245][T14293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3311'. [ 380.877548][T14283] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 380.906422][ T5868] hub 2-1:0.0: bad descriptor, ignoring hub [ 380.931017][ T5868] hub 2-1:0.0: probe with driver hub failed with error -5 [ 380.931559][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.980589][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.285124][ T5949] hid-generic 0003:046D:C31C.0031: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 381.302448][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.353023][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.644547][ T10] usb 4-1: USB disconnect, device number 41 [ 381.922821][ T8970] IPVS: starting estimator thread 0... [ 381.928152][T14319] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 382.036932][T14324] IPVS: using max 26 ests per chain, 62400 per kthread [ 382.118799][ T1227] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 382.163137][T14329] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3320'. [ 382.213144][T14329] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3320'. [ 382.326915][ T1227] usb 5-1: Using ep0 maxpacket: 32 [ 382.370643][ T1227] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 382.416728][ T1227] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 382.459941][ T1227] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 382.521246][ T1227] usb 5-1: config 1 has no interface number 0 [ 382.541595][ T1227] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 382.586198][ T1227] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 382.586842][ T8970] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 382.624971][ T1227] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 382.689193][ T1227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.775767][ T1227] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 382.798486][ T8970] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 382.822262][ T8970] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 382.836080][ T8970] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 382.867380][ T8970] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 382.891509][ T8970] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 382.906820][ T8970] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 382.930512][ T8970] usb 4-1: Product: syz [ 382.934702][ T8970] usb 4-1: Manufacturer: syz [ 382.960179][ T1227] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 383.008324][ T8970] cdc_wdm 4-1:1.0: skipping garbage [ 383.051499][ T8970] cdc_wdm 4-1:1.0: skipping garbage [ 383.077171][ T5862] usb 2-1: USB disconnect, device number 51 [ 383.091126][ T8970] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 383.122377][ T8970] cdc_wdm 4-1:1.0: Unknown control protocol [ 383.270316][ T8970] usb 4-1: USB disconnect, device number 42 [ 383.484582][ T5969] usb 5-1: USB disconnect, device number 46 [ 383.508520][ T5969] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 384.301896][T14385] netlink: 'syz.3.3334': attribute type 29 has an invalid length. [ 384.333889][T14385] netlink: 'syz.3.3334': attribute type 29 has an invalid length. [ 384.344075][T14385] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3334'. [ 384.495500][T14390] netlink: 566 bytes leftover after parsing attributes in process `syz.3.3336'. [ 385.400306][T14431] veth0_to_bridge: entered promiscuous mode [ 385.421383][T14428] veth0_to_bridge: left promiscuous mode [ 385.884669][T14442] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3359'. [ 386.016830][ T8973] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 386.205195][ T8973] usb 3-1: Using ep0 maxpacket: 8 [ 386.212235][ T8973] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 386.222805][ T8973] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 386.233591][ T8973] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 386.243821][ T8973] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 386.267309][ T8973] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.318690][ T5969] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 386.337000][ T8973] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 386.372142][ T8973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.529828][ T5969] usb 2-1: Using ep0 maxpacket: 8 [ 386.547299][ T5969] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 386.566522][ T5969] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 386.586554][ T5969] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 386.613013][ T5969] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 386.623244][ T8973] usb 3-1: GET_CAPABILITIES returned 0 [ 386.637164][ T8973] usbtmc 3-1:16.0: can't read capabilities [ 386.647218][ T5969] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.678629][ T5969] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 386.697443][ T5862] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 386.711185][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.827973][ T1227] usb 3-1: USB disconnect, device number 50 [ 386.889419][ T5862] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.916783][ T5862] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.938655][ T5862] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 386.952197][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 386.960545][ T5969] usb 2-1: usb_control_msg returned -32 [ 386.966145][ T5969] usbtmc 2-1:16.0: can't read capabilities [ 386.972864][ T5862] usb 7-1: SerialNumber: syz [ 387.210874][ T5862] usb 7-1: 0:2 : does not exist [ 387.257696][ T5862] usb 7-1: USB disconnect, device number 2 [ 387.305817][ T6225] udevd[6225]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 387.471782][T14481] input: syz1 as /devices/virtual/input/input63 [ 387.785139][T14490] IPVS: sh: FWM 3 0x00000003 - no destination available [ 387.805443][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 388.004005][T14494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.123510][ T5862] usb 2-1: USB disconnect, device number 52 [ 389.653952][T14537] syzkaller1: entered promiscuous mode [ 389.672244][T14537] syzkaller1: entered allmulticast mode [ 389.962698][ T5862] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 390.126882][ T5862] usb 7-1: Using ep0 maxpacket: 8 [ 390.149632][ T5862] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 390.178394][ T5862] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 390.201419][ T5862] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 390.256132][ T5862] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 390.289947][ T5862] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 390.312827][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.580136][ T5862] usb 7-1: GET_CAPABILITIES returned 0 [ 390.620162][ T5862] usbtmc 7-1:16.0: can't read capabilities [ 390.804930][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 390.839930][ T5969] usb 7-1: USB disconnect, device number 3 [ 391.093762][ T5969] IPVS: starting estimator thread 0... [ 391.186936][T14587] IPVS: using max 30 ests per chain, 72000 per kthread [ 392.306820][ T5862] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 392.502807][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.558454][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.586178][ T5862] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 392.632455][ T5862] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 392.659840][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.706111][ T5862] usb 7-1: config 0 descriptor?? [ 393.132652][ T5862] plantronics 0003:047F:FFFF.0032: reserved main item tag 0xd [ 393.162668][ T5862] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 393.176912][ T8973] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 393.346971][ T8973] usb 5-1: Using ep0 maxpacket: 8 [ 393.364777][ T8973] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.385824][ T8973] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 393.404565][ T8973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.428207][ T8973] usb 5-1: config 0 descriptor?? [ 393.447556][ T5949] usb 7-1: USB disconnect, device number 4 [ 393.453540][ T8973] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 393.982402][T14697] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3456'. [ 394.448946][ T8973] gspca_vc032x: reg_r err -71 [ 394.472558][ T8973] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 394.506984][ T8973] usb 5-1: USB disconnect, device number 47 [ 395.737315][ T5862] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 395.776833][ T5949] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 395.909953][ T5862] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 395.948034][ T5862] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 395.959207][ T5949] usb 7-1: Using ep0 maxpacket: 32 [ 396.000102][ T5862] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 396.013358][ T5949] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 396.047672][ T5949] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 396.080993][ T5862] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 396.096426][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 396.096441][ T30] audit: type=1326 audit(1758976872.924:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14776 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8eec9 code=0x7ffc0000 [ 396.127765][ T5949] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 396.154035][ T5862] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 396.175972][ T5949] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 396.189657][ T5949] usb 7-1: config 0 interface 0 has no altsetting 0 [ 396.198683][ T30] audit: type=1326 audit(1758976872.924:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14776 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8eec9 code=0x7ffc0000 [ 396.221022][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.227675][ T5862] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 396.238717][ T5862] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 396.257066][ T5862] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 396.269928][ T30] audit: type=1326 audit(1758976872.934:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14776 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f8461d8eec9 code=0x7ffc0000 [ 396.292834][ T5949] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 396.302466][ T5862] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 396.313708][ T5949] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 396.332451][ T5949] usb 7-1: Product: syz [ 396.337015][ T5862] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 396.352384][ T5949] usb 7-1: Manufacturer: syz [ 396.365688][ T5949] usb 7-1: SerialNumber: syz [ 396.370853][ T30] audit: type=1326 audit(1758976872.934:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14776 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8eec9 code=0x7ffc0000 [ 396.415005][ T5949] usb 7-1: config 0 descriptor?? [ 396.423837][ T5862] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 396.436831][ T5862] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 396.457803][ T5949] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 396.477159][ T5862] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 396.490762][ T30] audit: type=1326 audit(1758976872.934:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14776 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8eec9 code=0x7ffc0000 [ 396.515992][ T5949] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 396.526121][ T5862] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 396.544640][ T5862] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 396.556846][ T30] audit: type=1326 audit(1758976872.954:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14776 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8461d8eec9 code=0x7ffc0000 [ 396.607213][ T5862] usb 3-1: string descriptor 0 read error: -22 [ 396.613635][ T5862] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 396.631291][ T30] audit: type=1326 audit(1758976872.954:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14776 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8eec9 code=0x7ffc0000 [ 396.653668][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.666796][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.704313][ T30] audit: type=1326 audit(1758976872.954:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14776 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f8461d8eec9 code=0x7ffc0000 [ 396.740406][ T5949] usb 7-1: USB disconnect, device number 5 [ 396.746311][ C0] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 396.767491][ T5862] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 396.795900][ T5949] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 396.846910][ T30] audit: type=1326 audit(1758976872.954:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14776 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8eec9 code=0x7ffc0000 [ 396.869274][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.921041][ T30] audit: type=1326 audit(1758976872.954:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14776 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8eec9 code=0x7ffc0000 [ 397.090916][ T5969] usb 3-1: USB disconnect, device number 51 [ 397.257376][ T5949] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 397.426801][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 397.450309][ T5949] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 397.477058][ T5949] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 397.496742][ T5949] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 397.527306][ T5949] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 397.593766][ T5949] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 397.623321][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.869911][ T5949] usb 2-1: GET_CAPABILITIES returned 0 [ 397.890176][ T5949] usbtmc 2-1:16.0: can't read capabilities [ 398.099329][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.108476][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.117587][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.126694][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.136216][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.145323][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.154419][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.163519][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.174550][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.183675][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.192768][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.201871][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.221237][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.230361][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.239477][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 398.342693][ T8973] usb 2-1: USB disconnect, device number 53 [ 398.517146][ T5949] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 398.707139][ T5949] usb 7-1: Using ep0 maxpacket: 16 [ 398.731937][ T5949] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 398.755073][ T5949] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.779344][ T5949] usb 7-1: Product: syz [ 398.792813][ T5949] usb 7-1: Manufacturer: syz [ 398.800134][ T5949] usb 7-1: SerialNumber: syz [ 398.811219][ T5949] usb 7-1: config 0 descriptor?? [ 399.014973][T14856] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 399.239207][ T5949] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 399.270387][ T5949] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 399.303604][T14867] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3518'. [ 399.306242][ T5949] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 399.327052][ T5949] usb 7-1: media controller created [ 399.390222][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 399.447832][T14835] dtv5100: wlen = 0, aborting. [ 399.511960][ T5949] zl10353_read_register: readreg error (reg=127, ret==0) [ 399.523730][ T5949] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 399.534853][T14875] syzkaller1: entered promiscuous mode [ 399.548861][ T5949] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 399.557768][T14875] syzkaller1: entered allmulticast mode [ 399.579145][ T5949] usb 7-1: USB disconnect, device number 6 [ 399.735861][ T5949] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 399.758827][T14883] bridge1: entered allmulticast mode [ 399.781639][T14883] team0: Port device bridge1 added [ 399.811537][T14884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3525'. [ 400.552246][T14915] openvswitch: netlink: IPv4 tun info is not correct [ 401.692299][T14949] netlink: 'syz.6.3552': attribute type 13 has an invalid length. [ 401.738774][T14949] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 401.779220][T14949] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 401.804323][T14949] gretap1: entered promiscuous mode [ 401.813122][T14949] gretap1: entered allmulticast mode [ 401.980510][T14957] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3555'. [ 402.496388][ T30] audit: type=1326 audit(1758976879.324:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.2.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5d38eec9 code=0x7fc00000 [ 403.364479][T15003] syzkaller1: entered promiscuous mode [ 403.378862][T15003] syzkaller1: entered allmulticast mode [ 404.336824][ T8973] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 404.377195][ T5949] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 404.487256][ T8973] usb 7-1: Using ep0 maxpacket: 8 [ 404.494143][ T8973] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 404.512581][ T8973] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 404.522928][ T8973] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 404.538502][ T8973] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 404.550089][ T8973] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.566397][ T5949] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 404.570279][ T8973] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 404.577665][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.603704][ T8973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.630257][ T5949] usb 3-1: config 0 descriptor?? [ 404.659194][ T5949] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 404.728814][ T1227] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 404.863966][ T8973] usb 7-1: usb_control_msg returned -32 [ 404.881595][ T8973] usbtmc 7-1:16.0: can't read capabilities [ 404.897049][ T1227] usb 5-1: Using ep0 maxpacket: 16 [ 404.906236][ T1227] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.933815][ T1227] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.958845][ T1227] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 404.970114][ T1227] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 404.998872][ T1227] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 405.017153][ T1227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 405.028633][ T1227] usb 5-1: SerialNumber: syz [ 405.052931][ T1227] hub 5-1:1.0: bad descriptor, ignoring hub [ 405.062862][ T1227] hub 5-1:1.0: probe with driver hub failed with error -5 [ 405.071948][ T1227] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 405.223633][T15043] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 405.233781][ T1227] usb 7-1: USB disconnect, device number 7 [ 405.337391][ T5862] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 405.471052][ T5949] gspca_stv06xx: I2C: Read error writing address: -71 [ 405.491916][ T5949] usb 3-1: USB disconnect, device number 52 [ 405.512287][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.529346][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.542622][ T5862] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 405.554534][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.568218][ T5862] usb 2-1: config 0 descriptor?? [ 406.433371][ T5862] hid-led 0003:27B8:01ED.0033: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 406.503798][ T5862] hid-led 0003:27B8:01ED.0033: ThingM blink(1) initialized [ 406.656654][ T5862] usb 2-1: USB disconnect, device number 54 [ 407.407097][ T5862] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 407.417455][ T8970] usb 5-1: USB disconnect, device number 48 [ 407.587894][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 407.604842][ T5862] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 407.620720][ T5862] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 407.631710][ T5862] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 407.646031][ T5862] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 407.670127][ T5862] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.696754][ T5862] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 407.706018][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.846938][ T8970] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 407.959903][ T5862] usb 3-1: usb_control_msg returned -32 [ 407.976956][ T5862] usbtmc 3-1:16.0: can't read capabilities [ 408.009938][ T8970] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.080159][ T8970] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 408.109539][ T8970] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 408.128897][ T8970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.150214][ T8970] usb 5-1: Product: syz [ 408.154419][ T8970] usb 5-1: Manufacturer: syz [ 408.167685][ T8970] usb 5-1: SerialNumber: syz [ 408.226355][T15102] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 408.290196][T15104] loop4: detected capacity change from 0 to 7 [ 408.303005][T15104] Dev loop4: unable to read RDB block 7 [ 408.309631][T15104] loop4: AHDI p1 p2 [ 408.313581][T15104] loop4: partition table partially beyond EOD, truncated [ 408.322857][T15104] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 408.333560][T15105] usbtmc 3-1:16.0: INITIATE_CLEAR returned 0 [ 408.366973][ T8973] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 408.381099][ T6253] udevd[6253]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 408.387342][T15089] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 408.417021][ T5969] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 408.524466][ T8973] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 408.534550][ T8973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.536574][ T5862] usb 3-1: USB disconnect, device number 53 [ 408.554068][ T8973] usb 7-1: config 0 descriptor?? [ 408.585959][ T8973] cp210x 7-1:0.0: cp210x converter detected [ 408.603300][ T5969] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.635292][ T5969] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.655194][ T5969] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 408.666239][ T5969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.674984][ T5969] usb 2-1: Product: syz [ 408.679417][ T5969] usb 2-1: Manufacturer: syz [ 408.686888][ T5969] usb 2-1: SerialNumber: syz [ 408.910122][ T5969] usb 2-1: 0:2 : does not exist [ 408.920680][ T5969] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 408.945107][ T5969] usb 2-1: USB disconnect, device number 55 [ 408.977305][ T6253] udevd[6253]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.995218][ T8973] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 409.035480][T15089] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 409.228122][ T8973] usb 7-1: cp210x converter now attached to ttyUSB0 [ 409.246609][ T8970] cdc_ncm 5-1:1.0: failed to get mac address [ 409.267324][ T8970] cdc_ncm 5-1:1.0: bind() failure [ 409.285737][ T8970] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 409.295054][ T8970] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 409.308123][ T8970] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 409.323502][ T8970] usb 5-1: USB disconnect, device number 49 [ 409.417538][ T5862] usb 7-1: USB disconnect, device number 8 [ 409.435280][ T5862] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 409.459803][ T5862] cp210x 7-1:0.0: device disconnected [ 409.816857][ T8970] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 409.989354][ T8970] usb 2-1: Using ep0 maxpacket: 32 [ 410.045575][ T8970] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 410.076267][ T8970] usb 2-1: config 0 has no interface number 0 [ 410.101294][T15151] sctp: [Deprecated]: syz.4.3641 (pid 15151) Use of struct sctp_assoc_value in delayed_ack socket option. [ 410.101294][T15151] Use struct sctp_sack_info instead [ 410.108499][ T8970] usb 2-1: config 0 interface 12 has no altsetting 0 [ 410.171185][ T8970] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 410.206361][ T8970] usb 2-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 410.219048][ T8970] usb 2-1: Product: syz [ 410.223251][ T8970] usb 2-1: Manufacturer: syz [ 410.231683][ T8970] usb 2-1: SerialNumber: syz [ 410.257362][ T8970] usb 2-1: config 0 descriptor?? [ 410.646615][T15171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3648'. [ 410.826795][ T5862] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 410.998812][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.058293][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.087078][ T5862] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 411.110554][ T5862] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 411.156977][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.189119][ T5862] usb 7-1: config 0 descriptor?? [ 411.337060][ T8970] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 411.344626][ T8970] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 411.384512][ T8970] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 411.409309][ T8970] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 411.457150][ T8970] usb 2-1: USB disconnect, device number 56 [ 411.653445][ T5862] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 411.909143][ T5862] usb 7-1: USB disconnect, device number 9 [ 411.984013][T15204] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 412.024718][T15206] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.146388][T15208] loop4: detected capacity change from 0 to 2560 [ 412.166274][ T6225] Buffer I/O error on dev loop4, logical block 0, async page read [ 412.190742][ T6225] Buffer I/O error on dev loop4, logical block 0, async page read [ 412.217930][ T6225] Buffer I/O error on dev loop4, logical block 0, async page read [ 412.232808][ T6225] Buffer I/O error on dev loop4, logical block 0, async page read [ 412.241479][ T6225] Buffer I/O error on dev loop4, logical block 0, async page read [ 412.404212][T15218] input: syz0 as /devices/virtual/input/input66 [ 412.432006][T15221] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3666'. [ 412.517068][ T8973] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 412.702829][ T8973] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 412.723067][ T8973] usb 2-1: config 0 has no interface number 0 [ 412.733846][ T8973] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 412.746061][ T8973] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 412.761103][ T8973] usb 2-1: config 0 interface 255 has no altsetting 0 [ 412.768208][ T8973] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 412.777835][ T8973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.788928][ T8973] usb 2-1: config 0 descriptor?? [ 412.798290][ T8973] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 412.933467][T15237] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.004901][ T1227] usb 2-1: USB disconnect, device number 57 [ 413.688575][ T8973] hid-generic 0003:0004:0000.0035: unknown main item tag 0x0 [ 413.720872][ T8973] hid-generic 0003:0004:0000.0035: unknown main item tag 0x0 [ 413.749854][ T8973] hid-generic 0003:0004:0000.0035: unknown main item tag 0x0 [ 413.773131][ T8973] hid-generic 0003:0004:0000.0035: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 413.890463][T15272] fido_id[15272]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 413.969664][ T1227] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 413.977525][ T5862] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 414.093318][T15280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3691'. [ 414.150497][ T1227] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 414.160664][ T1227] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.173324][ T5862] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 414.184277][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.194288][ T5862] usb 5-1: Product: syz [ 414.198877][ T5862] usb 5-1: Manufacturer: syz [ 414.204716][ T1227] usb 7-1: config 0 descriptor?? [ 414.214709][ T5862] usb 5-1: SerialNumber: syz [ 414.232725][ T1227] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 414.697189][ T1227] gspca_stv06xx: I2C: Read error writing address: -71 [ 414.723089][ T1227] usb 7-1: USB disconnect, device number 10 [ 414.787983][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 414.929800][ T8973] psmouse serio6: Failed to reset mouse on : -5 [ 414.948621][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 414.966041][ T10] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 414.984502][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.004656][ T10] usb 3-1: config 0 descriptor?? [ 415.156953][ T5969] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 415.234646][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 415.286838][ T5862] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 415.312277][ T5862] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 415.324451][ T5862] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 415.326859][ T5969] usb 2-1: Using ep0 maxpacket: 8 [ 415.341546][ T5862] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 415.362798][ T5862] usb 5-1: USB disconnect, device number 50 [ 415.402908][ T5969] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 415.412947][ T5969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.421479][ T5969] usb 2-1: Product: syz [ 415.425763][ T5969] usb 2-1: Manufacturer: syz [ 415.432440][ T5969] usb 2-1: SerialNumber: syz [ 415.441259][ T5969] usb 2-1: config 0 descriptor?? [ 415.453707][ T5969] gspca_main: se401-2.14.0 probing 047d:5003 [ 415.554525][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3702'. [ 415.976365][T15308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3705'. [ 415.994230][T15308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3705'. [ 416.018819][T15308] team0: entered promiscuous mode [ 416.023914][T15308] team_slave_0: entered promiscuous mode [ 416.036368][T15308] team_slave_1: entered promiscuous mode [ 416.045429][T15308] gretap0: entered promiscuous mode [ 416.052142][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 416.060357][T15308] debugfs: 'hsr1' already exists in 'hsr' [ 416.075779][T15308] Cannot create hsr debugfs directory [ 416.076396][ T10] asix 3-1:0.0: probe with driver asix failed with error -71 [ 416.097221][ T5969] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input68 [ 416.111157][ T10] usb 3-1: USB disconnect, device number 54 [ 416.283211][T15313] syzkaller1: entered promiscuous mode [ 416.289024][T15313] syzkaller1: entered allmulticast mode [ 416.343616][ T8970] usb 2-1: USB disconnect, device number 58 [ 416.388532][ T6225] udevd[6225]: setting mode of /dev/video103 to 020660 failed: No such file or directory [ 416.406057][ T6225] udevd[6225]: setting owner of /dev/video103 to uid=0, gid=28 failed: No such file or directory [ 416.911510][ T1227] IPVS: starting estimator thread 0... [ 417.016589][T15332] IPVS: using max 30 ests per chain, 72000 per kthread [ 417.066799][ T10] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 417.233963][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.265348][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 417.287142][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 417.305133][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.321330][ T10] usb 5-1: Product: syz [ 417.330159][ T10] usb 5-1: Manufacturer: syz [ 417.335374][ T10] usb 5-1: SerialNumber: syz [ 417.351030][T15350] input: syz1 as /devices/virtual/input/input69 [ 417.569068][ T10] usb 5-1: 0:2 : does not exist [ 417.602877][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 417.677182][ T10] usb 5-1: USB disconnect, device number 51 [ 417.745239][ T6225] udevd[6225]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 417.920938][T15373] netlink: 452 bytes leftover after parsing attributes in process `syz.1.3734'. [ 418.717112][ T8973] misc userio: Buffer overflowed, userio client isn't keeping up [ 418.976382][T15401] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 419.022184][T15404] input: syz1 as /devices/virtual/input/input70 [ 419.770618][ T8973] input: PS/2 Generic Mouse as /devices/serio6/input/input67 [ 420.016825][ T8973] psmouse serio6: Failed to enable mouse on [ 420.323969][T15435] netlink: 'syz.4.3761': attribute type 12 has an invalid length. [ 420.808353][T15445] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3765'. [ 421.872139][T15472] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3778'. [ 422.257036][ T5862] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 422.406822][ T10] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 422.425294][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.452683][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.472782][ T5862] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 422.506714][ T5862] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 422.526065][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.557797][ T5862] usb 7-1: config 0 descriptor?? [ 422.608808][ T10] usb 2-1: config 0 has an invalid interface number: 30 but max is 0 [ 422.624510][ T10] usb 2-1: config 0 has no interface number 0 [ 422.632033][ T10] usb 2-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 422.648562][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.696570][ T10] usb 2-1: config 0 descriptor?? [ 422.721356][ T10] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 422.737705][ T10] usb 2-1: setting power ON [ 422.747435][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 422.900345][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 422.994549][ T5862] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 423.038621][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 423.068122][ T10] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 423.086097][ T10] dvb_usb_cxusb 2-1:0.30: probe with driver dvb_usb_cxusb failed with error -22 [ 423.123720][ T10] usb 2-1: USB disconnect, device number 59 [ 423.273057][ T5862] usb 7-1: USB disconnect, device number 11 [ 423.403998][T15513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3796'. [ 423.959823][T15533] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3805'. [ 424.101232][T15539] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3808'. [ 424.449412][T15533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.471359][T15533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.509921][T15533] bond0 (unregistering): Released all slaves [ 424.603382][T15541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3809'. [ 424.657193][T15541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3809'. [ 425.444202][ T8973] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 425.494138][ T5934] hid-generic 0006:0004:0009.0037: unknown main item tag 0x0 [ 425.504767][ T5934] hid-generic 0006:0004:0009.0037: unknown main item tag 0x0 [ 425.515951][ T5934] hid-generic 0006:0004:0009.0037: unknown main item tag 0x0 [ 425.523911][ T5934] hid-generic 0006:0004:0009.0037: unknown main item tag 0x0 [ 425.533856][ T5934] hid-generic 0006:0004:0009.0037: unknown main item tag 0x0 [ 425.542183][ T5934] hid-generic 0006:0004:0009.0037: unknown main item tag 0x0 [ 425.549718][ T5934] hid-generic 0006:0004:0009.0037: unknown main item tag 0x0 [ 425.559800][ T5934] hid-generic 0006:0004:0009.0037: unknown main item tag 0x0 [ 425.567762][ T5934] hid-generic 0006:0004:0009.0037: unknown main item tag 0x0 [ 425.575202][ T5934] hid-generic 0006:0004:0009.0037: unknown main item tag 0x0 [ 425.590227][ T5934] hid-generic 0006:0004:0009.0037: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 425.617522][ T8973] usb 3-1: Using ep0 maxpacket: 32 [ 425.630137][ T8973] usb 3-1: config 0 has an invalid interface number: 136 but max is 0 [ 425.646904][ T8973] usb 3-1: config 0 has no interface number 0 [ 425.663348][ T8973] usb 3-1: config 0 interface 136 has no altsetting 0 [ 425.685847][ T8973] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0103, bcdDevice=ec.54 [ 425.715901][T15586] fido_id[15586]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 425.730735][ T8973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.746952][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 425.753217][ T8973] usb 3-1: Product: syz [ 425.759288][ T8973] usb 3-1: Manufacturer: syz [ 425.767231][ T5862] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 425.767649][ T8973] usb 3-1: SerialNumber: syz [ 425.791634][ T8973] usb 3-1: config 0 descriptor?? [ 425.805628][ T8973] ftdi_sio 3-1:0.136: FTDI USB Serial Device converter detected [ 425.816288][ T8973] ftdi_sio ttyUSB0: unknown device type: 0xec54 [ 425.871799][T15592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3833'. [ 425.947083][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 425.955367][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.968491][ T5862] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.987032][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.000743][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 426.009491][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 426.020090][ T5862] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.33 [ 426.030600][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.038751][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.048787][ T5862] usb 2-1: Product: syz [ 426.054016][ T10] usb 5-1: config 0 descriptor?? [ 426.059431][ T5862] usb 2-1: Manufacturer: syz [ 426.064040][ T5862] usb 2-1: SerialNumber: syz [ 426.476808][ T8973] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 426.492580][ T10] apple 0003:05AC:0247.0038: fixing up Magic Keyboard JIS report descriptor [ 426.510277][ T10] apple 0003:05AC:0247.0038: unexpected long global item [ 426.518651][ T10] apple 0003:05AC:0247.0038: parse failed [ 426.524516][ T10] apple 0003:05AC:0247.0038: probe with driver apple failed with error -22 [ 426.614970][ T10] usb 3-1: USB disconnect, device number 55 [ 426.626841][ T8973] usb 4-1: Using ep0 maxpacket: 32 [ 426.638976][ T8973] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11 [ 426.642226][ T10] ftdi_sio 3-1:0.136: device disconnected [ 426.660256][ T8973] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2047, setting to 1024 [ 426.682241][ T8973] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 426.703119][ T30] audit: type=1326 audit(1758976903.534:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.2.3838" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d5d38eec9 code=0x0 [ 426.733257][ T5934] usb 5-1: USB disconnect, device number 52 [ 426.742323][ T8973] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 426.754439][ T8973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.766021][ T8973] usb 4-1: Product: syz [ 426.770416][ T8973] usb 4-1: Manufacturer: syz [ 426.775228][ T8973] usb 4-1: SerialNumber: syz [ 427.097613][ T5862] cdc_ncm 2-1:1.0: bind() failure [ 427.112248][ T5862] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 427.120984][ T5862] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 427.130271][ T5862] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 427.147620][ T5862] usb 2-1: USB disconnect, device number 60 [ 427.193568][ T8973] cdc_ncm 4-1:1.0: bind() failure [ 427.219540][ T8973] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 427.235745][ T8973] cdc_ncm 4-1:1.1: bind() failure [ 427.276527][ T8973] usb 4-1: USB disconnect, device number 43 [ 427.369151][T15608] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.3840'. [ 427.576886][ T5862] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 427.626155][T15619] usb usb8: usbfs: process 15619 (syz.2.3845) did not claim interface 0 before use [ 427.739087][ T5862] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 427.757297][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.790932][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.830897][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 427.849151][ T5862] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 427.876774][ T5862] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 427.884893][ T5862] usb 5-1: Manufacturer: syz [ 427.943411][ T5862] usb 5-1: config 0 descriptor?? [ 428.312331][T15654] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3862'. [ 428.386928][ T8973] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 428.428887][ T5862] appleir 0003:05AC:8243.0039: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 428.548869][ T8973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.576972][ T8973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.608518][ T8973] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 428.640293][ T8973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.657728][ T8973] usb 2-1: config 0 descriptor?? [ 428.701249][ T5862] usb 5-1: USB disconnect, device number 53 [ 428.737330][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 428.906826][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 428.913952][ T10] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 428.923042][ T10] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 428.934027][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.945327][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 428.954475][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.962530][ T10] usb 7-1: Product: syz [ 428.966806][ T10] usb 7-1: Manufacturer: syz [ 428.971410][ T10] usb 7-1: SerialNumber: syz [ 429.037991][ T8970] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 429.080061][ T8973] logitech 0003:046D:C29C.003A: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 429.187457][ T8970] usb 3-1: Using ep0 maxpacket: 32 [ 429.195613][ T8970] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 429.206982][ T8970] usb 3-1: config 0 has no interface number 0 [ 429.213210][ T8970] usb 3-1: config 0 interface 230 has no altsetting 0 [ 429.223316][ T8970] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 429.246851][ T8970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.254911][ T8970] usb 3-1: Product: syz [ 429.271828][ T8970] usb 3-1: Manufacturer: syz [ 429.280125][ T8973] logitech 0003:046D:C29C.003A: no inputs found [ 429.290962][ T8970] usb 3-1: SerialNumber: syz [ 429.310062][ T8970] usb 3-1: config 0 descriptor?? [ 429.321041][ T8973] usb 2-1: USB disconnect, device number 61 [ 429.333506][ T8970] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 429.351715][ T8970] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 429.593562][ T10] usb 7-1: 0:2 : does not exist [ 429.794780][ T10] usb 7-1: USB disconnect, device number 12 [ 430.210998][T15709] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 430.912576][ T30] audit: type=1326 audit(1758976907.744:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabcc78eec9 code=0x7ffc0000 [ 431.033673][ T30] audit: type=1326 audit(1758976907.744:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabcc78eec9 code=0x7ffc0000 [ 431.068805][ T30] audit: type=1326 audit(1758976907.744:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fabcc78eec9 code=0x7ffc0000 [ 431.114827][ T30] audit: type=1326 audit(1758976907.744:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabcc78eec9 code=0x7ffc0000 [ 431.141384][ T30] audit: type=1326 audit(1758976907.744:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabcc78eec9 code=0x7ffc0000 [ 431.166457][ T30] audit: type=1326 audit(1758976907.784:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fabcc78eec9 code=0x7ffc0000 [ 431.192938][ T30] audit: type=1326 audit(1758976907.784:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabcc78eec9 code=0x7ffc0000 [ 431.276815][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 431.284636][ T5949] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 431.308489][ T30] audit: type=1326 audit(1758976907.784:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabcc78eec9 code=0x7ffc0000 [ 431.345455][ T30] audit: type=1326 audit(1758976907.784:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fabcc78eec9 code=0x7ffc0000 [ 431.466812][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 431.480988][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 431.494484][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 431.504735][ T5949] usb 5-1: Using ep0 maxpacket: 8 [ 431.517416][ T5949] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 431.528536][T15756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3904'. [ 431.536855][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 431.550031][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 431.565543][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.587362][ T5949] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 431.596949][ T5949] usb 5-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 431.606313][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 431.617562][ T5949] usb 5-1: Product: syz [ 431.621754][ T5949] usb 5-1: Manufacturer: syz [ 431.626490][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.637436][ T5949] usb 5-1: SerialNumber: syz [ 431.661029][ T5949] usb 5-1: config 0 descriptor?? [ 431.666295][ T8970] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 431.893233][ T10] usb 7-1: usb_control_msg returned -32 [ 431.903517][ T5949] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 431.917030][ T10] usbtmc 7-1:16.0: can't read capabilities [ 432.257400][T15775] usbtmc 7-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 432.466588][ T10] usb 7-1: USB disconnect, device number 13 [ 432.700596][ T5949] gspca_sunplus: reg_w_riv err -71 [ 432.712000][ T5949] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 432.725158][ T5949] usb 5-1: USB disconnect, device number 54 [ 432.884341][ T8970] usb 3-1: USB disconnect, device number 56 [ 433.353546][T15804] syzkaller1: entered promiscuous mode [ 433.359748][T15804] syzkaller1: entered allmulticast mode [ 433.496881][ T5949] psmouse serio8: Failed to reset mouse on : -5 [ 433.568768][T15814] input: syz1 as /devices/virtual/input/input73 [ 433.736649][T15823] loop3: detected capacity change from 0 to 1 [ 433.746861][T15823] Dev loop3: unable to read RDB block 1 [ 433.755741][T15823] loop3: unable to read partition table [ 433.764854][T15823] loop3: partition table beyond EOD, truncated [ 433.774575][T15823] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 433.818736][ T8970] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 433.829865][T15825] batadv_slave_1: entered promiscuous mode [ 433.838725][T15824] batadv_slave_1: left promiscuous mode [ 433.987093][ T8970] usb 4-1: Using ep0 maxpacket: 8 [ 433.995727][ T8970] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 434.010918][ T8970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.019995][ T8970] usb 4-1: Product: syz [ 434.024252][ T8970] usb 4-1: Manufacturer: syz [ 434.032050][ T8970] usb 4-1: SerialNumber: syz [ 434.080961][ T8970] usb 4-1: config 0 descriptor?? [ 434.300777][ T8970] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 435.376952][ T1227] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 435.517254][ T8970] usb write operation failed. (-71) [ 435.526480][ T8970] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 435.537510][ T8970] dvbdev: DVB: registering new adapter (Terratec H7) [ 435.543439][ T1227] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 435.544640][ T8970] usb 4-1: media controller created [ 435.563570][ T8970] usb read operation failed. (-71) [ 435.576038][ T8970] usb write operation failed. (-71) [ 435.576513][ T1227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 435.596031][ T8970] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 435.596587][ T1227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 435.619482][ T8970] usb 4-1: USB disconnect, device number 44 [ 435.625125][ T1227] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 435.642726][ T1227] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 435.652547][ T1227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.668765][ T1227] usb 5-1: config 0 descriptor?? [ 435.991085][T15879] netlink: 3893 bytes leftover after parsing attributes in process `syz.3.3960'. [ 436.094124][ T1227] plantronics 0003:047F:FFFF.003B: ignoring exceeding usage max [ 436.123486][ T1227] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 436.486848][ T5862] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 436.676829][ T5862] usb 7-1: Using ep0 maxpacket: 16 [ 436.687670][ T5862] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 436.704759][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.720330][ T5862] usb 7-1: Product: syz [ 436.724739][ T5862] usb 7-1: Manufacturer: syz [ 436.733184][ T5862] usb 7-1: SerialNumber: syz [ 436.744122][ T5862] usb 7-1: config 0 descriptor?? [ 436.754609][ T5862] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 436.764476][ T5862] usb 7-1: Detected FT-X [ 436.958379][ T5862] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 437.096917][ T5949] misc userio: Buffer overflowed, userio client isn't keeping up [ 437.374996][ T5862] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 437.584153][ T5934] usb 7-1: USB disconnect, device number 14 [ 437.599600][ T5934] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 437.609911][ T5934] ftdi_sio 7-1:0.0: device disconnected [ 438.180482][ T8973] usb 5-1: USB disconnect, device number 55 [ 438.236875][ T5934] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 438.358764][ T5949] input: PS/2 Generic Mouse as /devices/serio8/input/input72 [ 438.409335][ T5934] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.436184][ T5934] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.470058][ T5934] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 438.491579][ T5934] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 438.531142][ T5934] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 438.548628][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.565624][ T5934] usb 3-1: Product: syz [ 438.574696][ T5934] usb 3-1: Manufacturer: syz [ 438.597051][ T5934] usb 3-1: SerialNumber: syz [ 438.613416][ T5949] psmouse serio8: Failed to enable mouse on [ 438.618762][ T5934] cdc_mbim 3-1:1.0: skipping garbage [ 438.846648][T15935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 439.176917][ T5969] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 439.326891][ T5969] usb 2-1: Using ep0 maxpacket: 8 [ 439.340270][ T5969] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.350949][ T5969] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 439.360320][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.371481][ T5969] usb 2-1: config 0 descriptor?? [ 439.380374][ T5969] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 439.487331][T15935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 439.704830][ T5934] cdc_mbim 3-1:1.0: bind() failure [ 439.728067][ T5934] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 439.761299][ T5934] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 439.771458][ T5934] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 439.793960][ T5934] usb 3-1: USB disconnect, device number 57 [ 439.998775][T15990] netlink: 'syz.4.4005': attribute type 13 has an invalid length. [ 440.006623][T15990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4005'. [ 440.019364][T15988] openvswitch: netlink: IPv4 tun info is not correct [ 440.027617][T15990] netlink: 'syz.4.4005': attribute type 13 has an invalid length. [ 440.035914][T15990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4005'. [ 440.064529][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.076399][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.240385][T15994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 440.588831][ T5969] gspca_vc032x: reg_w err -71 [ 440.593629][ T5969] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 440.636826][ T5969] usb 2-1: USB disconnect, device number 62 [ 441.295726][T16018] syzkaller1: entered promiscuous mode [ 441.342761][T16018] syzkaller1: entered allmulticast mode [ 442.036980][ T5969] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 442.213414][ T5969] usb 4-1: Using ep0 maxpacket: 8 [ 442.234655][ T5969] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 442.272055][ T5969] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 442.333348][ T5969] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 442.400403][ T5969] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 442.452365][ T5969] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.452419][ T5969] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 442.452441][ T5969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.669825][ T5969] usb 4-1: GET_CAPABILITIES returned 0 [ 442.669871][ T5969] usbtmc 4-1:16.0: can't read capabilities [ 442.903673][ T5969] usb 4-1: USB disconnect, device number 45 [ 443.185892][T16065] syzkaller1: entered promiscuous mode [ 443.193263][T16065] syzkaller1: entered allmulticast mode [ 443.225831][ T5949] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 443.450227][ T5949] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 443.468782][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.487208][ T5949] usb 3-1: Product: syz [ 443.491429][ T5949] usb 3-1: Manufacturer: syz [ 443.496030][ T5949] usb 3-1: SerialNumber: syz [ 443.537729][ T5949] usb 3-1: config 0 descriptor?? [ 443.559370][ T5949] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 443.613321][ T5949] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 443.627402][ T5949] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 443.649241][ T5949] usb 3-1: media controller created [ 443.677397][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 443.759479][T16061] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 443.777167][T16061] dvb-usb: bulk message failed: -22 (7/0) [ 443.782979][ T5949] DVB: Unable to find symbol mt352_attach() [ 443.819725][ T5969] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 443.871180][ T5949] DVB: Unable to find symbol nxt6000_attach() [ 443.886829][ T5949] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 443.923064][ T5949] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input74 [ 443.945073][ T5949] dvb-usb: schedule remote query interval to 1000 msecs. [ 443.957201][ T5949] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 443.985980][ T5949] dvb-usb: bulk message failed: -22 (7/0) [ 443.991789][ T5969] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 443.991817][ T5969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.996110][ T5969] usb 4-1: config 0 descriptor?? [ 444.025273][ T5949] dvb-usb: bulk message failed: -22 (7/0) [ 444.034746][ T5949] usb 3-1: USB disconnect, device number 58 [ 444.091396][ T5969] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 444.147466][ T5949] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 444.266856][ T8973] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 444.429467][ T8973] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 444.441365][ T8973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 444.454397][ T8973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 444.476965][ T8973] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 444.490363][ T5969] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 444.501668][ T8973] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 444.516103][ T8973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.528177][ T8973] usb 5-1: config 0 descriptor?? [ 444.680327][T16113] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 444.891466][ T5969] cpia1 4-1:0.0: only firmware version 1 is supported (got: 32) [ 444.965386][ T8973] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 445.123500][ T1227] usb 4-1: USB disconnect, device number 46 [ 445.264054][ T8973] usb 5-1: USB disconnect, device number 56 [ 445.776927][T16146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4071'. [ 446.782533][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4087'. [ 447.166928][ T5949] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 447.342345][ T5949] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 447.377011][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 447.395937][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 447.427561][ T5949] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 447.453571][ T5949] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 447.464274][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.484256][ T5949] usb 3-1: config 0 descriptor?? [ 447.947449][ T5949] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 448.982649][T16253] [ 448.985021][T16253] ===================================================== [ 448.991953][T16253] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 448.999423][T16253] syzkaller #0 Not tainted [ 449.003839][T16253] ----------------------------------------------------- [ 449.010762][T16253] syz.1.4113/16253 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 449.018482][T16253] ffff88806d266558 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 449.027203][T16253] [ 449.027203][T16253] and this task is already holding: [ 449.034565][T16253] ffff88802ea19028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 449.044316][T16253] which would create a new lock dependency: [ 449.050190][T16253] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 449.058278][T16253] [ 449.058278][T16253] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 449.067711][T16253] (&dev->event_lock#2){..-.}-{3:3} [ 449.067742][T16253] [ 449.067742][T16253] ... which became SOFTIRQ-irq-safe at: [ 449.080595][T16253] lock_acquire+0x120/0x360 [ 449.085179][T16253] _raw_spin_lock_irqsave+0xa7/0xf0 [ 449.090457][T16253] input_event+0x76/0xe0 [ 449.094780][T16253] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 449.100490][T16253] __usb_hcd_giveback_urb+0x376/0x540 [ 449.105935][T16253] dummy_timer+0x862/0x4550 [ 449.110514][T16253] __hrtimer_run_queues+0x52c/0xc60 [ 449.115779][T16253] hrtimer_run_softirq+0x187/0x2b0 [ 449.120961][T16253] handle_softirqs+0x286/0x870 [ 449.125790][T16253] __irq_exit_rcu+0xca/0x1f0 [ 449.130446][T16253] irq_exit_rcu+0x9/0x30 [ 449.134759][T16253] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 449.140467][T16253] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 449.146518][T16253] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 449.152307][T16253] dummy_urb_enqueue+0x58a/0x780 [ 449.157315][T16253] usb_hcd_submit_urb+0x322/0x1aa0 [ 449.162494][T16253] atp_open+0x63/0xc0 [ 449.166554][T16253] input_open_device+0x1d0/0x390 [ 449.171565][T16253] mousedev_open_device+0xcc/0x150 [ 449.176751][T16253] mousedev_open+0x2ef/0x4a0 [ 449.181441][T16253] chrdev_open+0x4c9/0x5e0 [ 449.185929][T16253] do_dentry_open+0x950/0x13f0 [ 449.190766][T16253] vfs_open+0x3b/0x340 [ 449.194912][T16253] path_openat+0x2ee5/0x3830 [ 449.199575][T16253] do_filp_open+0x1fa/0x410 [ 449.204153][T16253] do_sys_openat2+0x121/0x1c0 [ 449.208899][T16253] __x64_sys_openat+0x138/0x170 [ 449.213820][T16253] do_syscall_64+0xfa/0x3b0 [ 449.218394][T16253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.224364][T16253] [ 449.224364][T16253] to a SOFTIRQ-irq-unsafe lock: [ 449.231362][T16253] (tasklist_lock){.+.+}-{3:3} [ 449.231390][T16253] [ 449.231390][T16253] ... which became SOFTIRQ-irq-unsafe at: [ 449.243985][T16253] ... [ 449.243992][T16253] lock_acquire+0x120/0x360 [ 449.251130][T16253] _raw_read_lock+0x36/0x50 [ 449.255702][T16253] __do_wait+0xde/0x740 [ 449.259933][T16253] do_wait+0x1f8/0x520 [ 449.264084][T16253] kernel_wait+0xab/0x170 [ 449.268486][T16253] call_usermodehelper_exec_work+0xbe/0x230 [ 449.274458][T16253] process_scheduled_works+0xade/0x17b0 [ 449.280069][T16253] worker_thread+0x8a0/0xda0 [ 449.284727][T16253] kthread+0x711/0x8a0 [ 449.288868][T16253] ret_from_fork+0x439/0x7d0 [ 449.293526][T16253] ret_from_fork_asm+0x1a/0x30 [ 449.298365][T16253] [ 449.298365][T16253] other info that might help us debug this: [ 449.298365][T16253] [ 449.308575][T16253] Chain exists of: [ 449.308575][T16253] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 449.308575][T16253] [ 449.322129][T16253] Possible interrupt unsafe locking scenario: [ 449.322129][T16253] [ 449.330433][T16253] CPU0 CPU1 [ 449.335775][T16253] ---- ---- [ 449.341122][T16253] lock(tasklist_lock); [ 449.345348][T16253] local_irq_disable(); [ 449.352080][T16253] lock(&dev->event_lock#2); [ 449.359266][T16253] lock(&client->buffer_lock); [ 449.366628][T16253] [ 449.370069][T16253] lock(&dev->event_lock#2); [ 449.374909][T16253] [ 449.374909][T16253] *** DEADLOCK *** [ 449.374909][T16253] [ 449.383033][T16253] 7 locks held by syz.1.4113/16253: [ 449.388209][T16253] #0: ffff888029364118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 449.397345][T16253] #1: ffff888147a97230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 449.407444][T16253] #2: ffffffff8e13a120 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 449.417098][T16253] #3: ffffffff8e13a120 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 449.426656][T16253] #4: ffffffff8e13a120 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 449.435779][T16253] #5: ffff88802ea19028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 449.445945][T16253] #6: ffffffff8e13a120 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 449.454998][T16253] [ 449.454998][T16253] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 449.465382][T16253] -> (&dev->event_lock#2){..-.}-{3:3} { [ 449.471023][T16253] IN-SOFTIRQ-W at: [ 449.475074][T16253] lock_acquire+0x120/0x360 [ 449.481391][T16253] _raw_spin_lock_irqsave+0xa7/0xf0 [ 449.488412][T16253] input_event+0x76/0xe0 [ 449.494463][T16253] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 449.501904][T16253] __usb_hcd_giveback_urb+0x376/0x540 [ 449.509084][T16253] dummy_timer+0x862/0x4550 [ 449.515412][T16253] __hrtimer_run_queues+0x52c/0xc60 [ 449.522415][T16253] hrtimer_run_softirq+0x187/0x2b0 [ 449.529329][T16253] handle_softirqs+0x286/0x870 [ 449.535897][T16253] __irq_exit_rcu+0xca/0x1f0 [ 449.542294][T16253] irq_exit_rcu+0x9/0x30 [ 449.548342][T16253] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 449.555781][T16253] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 449.563566][T16253] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 449.571087][T16253] dummy_urb_enqueue+0x58a/0x780 [ 449.577830][T16253] usb_hcd_submit_urb+0x322/0x1aa0 [ 449.584747][T16253] atp_open+0x63/0xc0 [ 449.590538][T16253] input_open_device+0x1d0/0x390 [ 449.597292][T16253] mousedev_open_device+0xcc/0x150 [ 449.604209][T16253] mousedev_open+0x2ef/0x4a0 [ 449.610615][T16253] chrdev_open+0x4c9/0x5e0 [ 449.616837][T16253] do_dentry_open+0x950/0x13f0 [ 449.623504][T16253] vfs_open+0x3b/0x340 [ 449.629379][T16253] path_openat+0x2ee5/0x3830 [ 449.635782][T16253] do_filp_open+0x1fa/0x410 [ 449.642095][T16253] do_sys_openat2+0x121/0x1c0 [ 449.648579][T16253] __x64_sys_openat+0x138/0x170 [ 449.655239][T16253] do_syscall_64+0xfa/0x3b0 [ 449.661548][T16253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.669246][T16253] INITIAL USE at: [ 449.673211][T16253] lock_acquire+0x120/0x360 [ 449.679440][T16253] _raw_spin_lock_irqsave+0xa7/0xf0 [ 449.686365][T16253] input_inject_event+0xa5/0x340 [ 449.693042][T16253] kbd_led_trigger_activate+0xbc/0x100 [ 449.700229][T16253] led_trigger_set+0x52a/0x950 [ 449.706712][T16253] led_trigger_set_default+0x260/0x2a0 [ 449.713902][T16253] led_classdev_register_ext+0x73d/0x930 [ 449.721267][T16253] input_leds_connect+0x517/0x790 [ 449.728035][T16253] input_register_device+0xcfd/0x1140 [ 449.735153][T16253] atkbd_connect+0x72e/0xa00 [ 449.741482][T16253] serio_driver_probe+0x82/0xd0 [ 449.748058][T16253] really_probe+0x26d/0x9e0 [ 449.754288][T16253] __driver_probe_device+0x18c/0x2f0 [ 449.761295][T16253] driver_probe_device+0x4f/0x430 [ 449.768045][T16253] __driver_attach+0x452/0x700 [ 449.774533][T16253] bus_for_each_dev+0x233/0x2b0 [ 449.781110][T16253] serio_handle_event+0x1f9/0x8d0 [ 449.787868][T16253] process_scheduled_works+0xade/0x17b0 [ 449.795160][T16253] worker_thread+0x8a0/0xda0 [ 449.801471][T16253] kthread+0x711/0x8a0 [ 449.807262][T16253] ret_from_fork+0x439/0x7d0 [ 449.813573][T16253] ret_from_fork_asm+0x1a/0x30 [ 449.820063][T16253] } [ 449.822629][T16253] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 449.831732][T16253] -> (&client->buffer_lock){....}-{3:3} { [ 449.837460][T16253] INITIAL USE at: [ 449.841341][T16253] lock_acquire+0x120/0x360 [ 449.847404][T16253] _raw_spin_lock+0x2e/0x40 [ 449.853487][T16253] evdev_pass_values+0xb9/0xbd0 [ 449.859890][T16253] evdev_events+0x1e6/0x340 [ 449.865939][T16253] input_pass_values+0x288/0x890 [ 449.872446][T16253] input_event_dispose+0x330/0x6b0 [ 449.879105][T16253] input_inject_event+0x1dd/0x340 [ 449.885678][T16253] evdev_write+0x2fc/0x480 [ 449.891639][T16253] vfs_write+0x27b/0xb30 [ 449.897437][T16253] ksys_write+0x145/0x250 [ 449.903313][T16253] do_syscall_64+0xfa/0x3b0 [ 449.909368][T16253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.916804][T16253] } [ 449.919284][T16253] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 449.927418][T16253] ... acquired at: [ 449.931200][T16253] lock_acquire+0x120/0x360 [ 449.935871][T16253] _raw_spin_lock+0x2e/0x40 [ 449.940534][T16253] evdev_pass_values+0xb9/0xbd0 [ 449.945542][T16253] evdev_events+0x1e6/0x340 [ 449.950210][T16253] input_pass_values+0x288/0x890 [ 449.955300][T16253] input_event_dispose+0x330/0x6b0 [ 449.960576][T16253] input_inject_event+0x1dd/0x340 [ 449.965772][T16253] evdev_write+0x2fc/0x480 [ 449.970356][T16253] vfs_write+0x27b/0xb30 [ 449.974763][T16253] ksys_write+0x145/0x250 [ 449.979254][T16253] do_syscall_64+0xfa/0x3b0 [ 449.983922][T16253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.989975][T16253] [ 449.992280][T16253] [ 449.992280][T16253] the dependencies between the lock to be acquired [ 449.992288][T16253] and SOFTIRQ-irq-unsafe lock: [ 450.005769][T16253] -> (tasklist_lock){.+.+}-{3:3} { [ 450.011066][T16253] HARDIRQ-ON-R at: [ 450.015245][T16253] lock_acquire+0x120/0x360 [ 450.021747][T16253] _raw_read_lock+0x36/0x50 [ 450.028245][T16253] __do_wait+0xde/0x740 [ 450.034397][T16253] do_wait+0x1f8/0x520 [ 450.040449][T16253] kernel_wait+0xab/0x170 [ 450.046766][T16253] call_usermodehelper_exec_work+0xbe/0x230 [ 450.054666][T16253] process_scheduled_works+0xade/0x17b0 [ 450.062203][T16253] worker_thread+0x8a0/0xda0 [ 450.068780][T16253] kthread+0x711/0x8a0 [ 450.074845][T16253] ret_from_fork+0x439/0x7d0 [ 450.081426][T16253] ret_from_fork_asm+0x1a/0x30 [ 450.088186][T16253] SOFTIRQ-ON-R at: [ 450.092337][T16253] lock_acquire+0x120/0x360 [ 450.098833][T16253] _raw_read_lock+0x36/0x50 [ 450.105329][T16253] __do_wait+0xde/0x740 [ 450.111475][T16253] do_wait+0x1f8/0x520 [ 450.117535][T16253] kernel_wait+0xab/0x170 [ 450.123854][T16253] call_usermodehelper_exec_work+0xbe/0x230 [ 450.131737][T16253] process_scheduled_works+0xade/0x17b0 [ 450.139263][T16253] worker_thread+0x8a0/0xda0 [ 450.145842][T16253] kthread+0x711/0x8a0 [ 450.151896][T16253] ret_from_fork+0x439/0x7d0 [ 450.158466][T16253] ret_from_fork_asm+0x1a/0x30 [ 450.165216][T16253] INITIAL USE at: [ 450.169266][T16253] lock_acquire+0x120/0x360 [ 450.175678][T16253] _raw_write_lock_irq+0xa2/0xf0 [ 450.182514][T16253] copy_process+0x224f/0x3c00 [ 450.189089][T16253] kernel_clone+0x21e/0x840 [ 450.195492][T16253] user_mode_thread+0xdd/0x140 [ 450.202287][T16253] rest_init+0x23/0x300 [ 450.208355][T16253] start_kernel+0x3a9/0x410 [ 450.214763][T16253] x86_64_start_reservations+0x24/0x30 [ 450.222126][T16253] x86_64_start_kernel+0x143/0x1c0 [ 450.229142][T16253] common_startup_64+0x13e/0x147 [ 450.235984][T16253] INITIAL READ USE at: [ 450.240473][T16253] lock_acquire+0x120/0x360 [ 450.247312][T16253] _raw_read_lock+0x36/0x50 [ 450.254153][T16253] __do_wait+0xde/0x740 [ 450.260644][T16253] do_wait+0x1f8/0x520 [ 450.267048][T16253] kernel_wait+0xab/0x170 [ 450.273710][T16253] call_usermodehelper_exec_work+0xbe/0x230 [ 450.281938][T16253] process_scheduled_works+0xade/0x17b0 [ 450.289812][T16253] worker_thread+0x8a0/0xda0 [ 450.296735][T16253] kthread+0x711/0x8a0 [ 450.303134][T16253] ret_from_fork+0x439/0x7d0 [ 450.310051][T16253] ret_from_fork_asm+0x1a/0x30 [ 450.317151][T16253] } [ 450.319805][T16253] ... key at: [] tasklist_lock+0x18/0x40 [ 450.327685][T16253] ... acquired at: [ 450.331639][T16253] lock_acquire+0x120/0x360 [ 450.336307][T16253] _raw_read_lock+0x36/0x50 [ 450.340972][T16253] send_sigurg+0x12b/0x420 [ 450.345556][T16253] sk_send_sigurg+0x6c/0x2e0 [ 450.350308][T16253] queue_oob+0x420/0x4f0 [ 450.354717][T16253] unix_stream_sendmsg+0xc3f/0xdf0 [ 450.359988][T16253] __sock_sendmsg+0x219/0x270 [ 450.364838][T16253] ____sys_sendmsg+0x52d/0x830 [ 450.369757][T16253] ___sys_sendmsg+0x21f/0x2a0 [ 450.374592][T16253] __sys_sendmmsg+0x227/0x430 [ 450.379427][T16253] __x64_sys_sendmmsg+0xa0/0xc0 [ 450.384437][T16253] do_syscall_64+0xfa/0x3b0 [ 450.389102][T16253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.395152][T16253] [ 450.397456][T16253] -> (&f_owner->lock){....}-{3:3} { [ 450.402742][T16253] INITIAL USE at: [ 450.406706][T16253] lock_acquire+0x120/0x360 [ 450.412934][T16253] _raw_write_lock_irq+0xa2/0xf0 [ 450.419598][T16253] __f_setown+0x67/0x370 [ 450.425561][T16253] fcntl_dirnotify+0x3fa/0x6a0 [ 450.432042][T16253] do_fcntl+0x6d0/0x1910 [ 450.438009][T16253] __se_sys_fcntl+0xc8/0x150 [ 450.444327][T16253] do_syscall_64+0xfa/0x3b0 [ 450.450552][T16253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.458169][T16253] INITIAL READ USE at: [ 450.462568][T16253] lock_acquire+0x120/0x360 [ 450.469317][T16253] _raw_read_lock_irqsave+0xaf/0x100 [ 450.476770][T16253] send_sigio+0x38/0x370 [ 450.483253][T16253] dnotify_handle_event+0x169/0x440 [ 450.490607][T16253] fsnotify+0x1814/0x1a80 [ 450.497101][T16253] vfs_readv+0x703/0x850 [ 450.503509][T16253] __x64_sys_preadv+0x197/0x2a0 [ 450.510522][T16253] do_syscall_64+0xfa/0x3b0 [ 450.517186][T16253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.525233][T16253] } [ 450.527806][T16253] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 450.536729][T16253] ... acquired at: [ 450.540624][T16253] lock_acquire+0x120/0x360 [ 450.545295][T16253] _raw_read_lock_irqsave+0xaf/0x100 [ 450.550757][T16253] send_sigio+0x38/0x370 [ 450.555161][T16253] kill_fasync+0x24d/0x4d0 [ 450.559770][T16253] lease_break_callback+0x26/0x30 [ 450.564979][T16253] __break_lease+0x6a2/0x1620 [ 450.569816][T16253] vfs_truncate+0x428/0x520 [ 450.574491][T16253] do_sys_truncate+0xdb/0x190 [ 450.579331][T16253] __x64_sys_truncate+0x5b/0x70 [ 450.584345][T16253] do_syscall_64+0xfa/0x3b0 [ 450.589011][T16253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.595063][T16253] [ 450.597376][T16253] -> (&new->fa_lock){....}-{3:3} { [ 450.602489][T16253] INITIAL USE at: [ 450.606364][T16253] lock_acquire+0x120/0x360 [ 450.612422][T16253] _raw_write_lock_irq+0xa2/0xf0 [ 450.618904][T16253] fasync_remove_entry+0xf1/0x1c0 [ 450.625477][T16253] sock_fasync+0x85/0xf0 [ 450.631269][T16253] __fput+0x8a2/0xa70 [ 450.636807][T16253] task_work_run+0x1d4/0x260 [ 450.642947][T16253] exit_to_user_mode_loop+0xec/0x110 [ 450.649786][T16253] do_syscall_64+0x2bd/0x3b0 [ 450.655922][T16253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.663365][T16253] INITIAL READ USE at: [ 450.667707][T16253] lock_acquire+0x120/0x360 [ 450.674200][T16253] _raw_read_lock_irqsave+0xaf/0x100 [ 450.681467][T16253] kill_fasync+0x199/0x4d0 [ 450.687866][T16253] sock_wake_async+0x137/0x160 [ 450.694632][T16253] sk_wake_async+0x184/0x280 [ 450.701202][T16253] mptcp_destroy_common+0x152/0x320 [ 450.708401][T16253] mptcp_disconnect+0x23d/0x700 [ 450.715233][T16253] inet_shutdown+0x1c1/0x390 [ 450.721810][T16253] __x64_sys_shutdown+0x13f/0x1a0 [ 450.728820][T16253] do_syscall_64+0xfa/0x3b0 [ 450.735310][T16253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.743182][T16253] } [ 450.745663][T16253] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 450.754326][T16253] ... acquired at: [ 450.758115][T16253] lock_acquire+0x120/0x360 [ 450.762781][T16253] _raw_read_lock_irqsave+0xaf/0x100 [ 450.768219][T16253] kill_fasync+0x199/0x4d0 [ 450.772801][T16253] evdev_pass_values+0x627/0xbd0 [ 450.777946][T16253] evdev_events+0x1e6/0x340 [ 450.782614][T16253] input_pass_values+0x288/0x890 [ 450.787714][T16253] input_event_dispose+0x330/0x6b0 [ 450.793001][T16253] input_inject_event+0x1dd/0x340 [ 450.798209][T16253] evdev_write+0x2fc/0x480 [ 450.802810][T16253] vfs_write+0x27b/0xb30 [ 450.807230][T16253] ksys_write+0x145/0x250 [ 450.811754][T16253] do_syscall_64+0xfa/0x3b0 [ 450.816431][T16253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.822491][T16253] [ 450.824806][T16253] [ 450.824806][T16253] stack backtrace: [ 450.830700][T16253] CPU: 1 UID: 0 PID: 16253 Comm: syz.1.4113 Not tainted syzkaller #0 PREEMPT(full) [ 450.830720][T16253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 450.830732][T16253] Call Trace: [ 450.830742][T16253] [ 450.830750][T16253] dump_stack_lvl+0x189/0x250 [ 450.830773][T16253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.830789][T16253] ? __pfx__printk+0x10/0x10 [ 450.830812][T16253] validate_chain+0x1f05/0x2140 [ 450.830835][T16253] __lock_acquire+0xab9/0xd20 [ 450.830858][T16253] ? kill_fasync+0x199/0x4d0 [ 450.830873][T16253] lock_acquire+0x120/0x360 [ 450.830895][T16253] ? kill_fasync+0x199/0x4d0 [ 450.830915][T16253] _raw_read_lock_irqsave+0xaf/0x100 [ 450.830929][T16253] ? kill_fasync+0x199/0x4d0 [ 450.830944][T16253] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 450.830957][T16253] ? do_raw_spin_lock+0x121/0x290 [ 450.830976][T16253] kill_fasync+0x199/0x4d0 [ 450.830991][T16253] ? kill_fasync+0x53/0x4d0 [ 450.831007][T16253] evdev_pass_values+0x627/0xbd0 [ 450.831028][T16253] ? evdev_pass_values+0x601/0xbd0 [ 450.831051][T16253] evdev_events+0x1e6/0x340 [ 450.831065][T16253] ? evdev_events+0x79/0x340 [ 450.831078][T16253] ? input_pass_values+0x8d/0x890 [ 450.831090][T16253] input_pass_values+0x288/0x890 [ 450.831106][T16253] ? input_handle_event+0x70c/0xf30 [ 450.831125][T16253] input_event_dispose+0x330/0x6b0 [ 450.831145][T16253] input_inject_event+0x1dd/0x340 [ 450.831168][T16253] ? input_inject_event+0xb6/0x340 [ 450.831187][T16253] evdev_write+0x2fc/0x480 [ 450.831203][T16253] ? __pfx_evdev_write+0x10/0x10 [ 450.831218][T16253] ? bpf_lsm_file_permission+0x9/0x20 [ 450.831235][T16253] ? security_file_permission+0x75/0x290 [ 450.831255][T16253] ? rw_verify_area+0x255/0x4d0 [ 450.831272][T16253] ? __lock_acquire+0xab9/0xd20 [ 450.831292][T16253] ? __pfx_evdev_write+0x10/0x10 [ 450.831309][T16253] vfs_write+0x27b/0xb30 [ 450.831329][T16253] ? __pfx_vfs_write+0x10/0x10 [ 450.831347][T16253] ? __fget_files+0x2a/0x420 [ 450.831360][T16253] ? __fget_files+0x2a/0x420 [ 450.831372][T16253] ? __fget_files+0x3a0/0x420 [ 450.831383][T16253] ? __fget_files+0x2a/0x420 [ 450.831397][T16253] ksys_write+0x145/0x250 [ 450.831416][T16253] ? __pfx_ksys_write+0x10/0x10 [ 450.831435][T16253] ? rcu_is_watching+0x15/0xb0 [ 450.831451][T16253] ? do_syscall_64+0xbe/0x3b0 [ 450.831469][T16253] do_syscall_64+0xfa/0x3b0 [ 450.831484][T16253] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.831502][T16253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.831516][T16253] ? clear_bhb_loop+0x60/0xb0 [ 450.831531][T16253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.831548][T16253] RIP: 0033:0x7fabcc78eec9 [ 450.831566][T16253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.831580][T16253] RSP: 002b:00007fabcd590038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 450.831596][T16253] RAX: ffffffffffffffda RBX: 00007fabcc9e5fa0 RCX: 00007fabcc78eec9 [ 450.831607][T16253] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 450.831616][T16253] RBP: 00007fabcc811f91 R08: 0000000000000000 R09: 0000000000000000 [ 450.831625][T16253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.831634][T16253] R13: 00007fabcc9e6038 R14: 00007fabcc9e5fa0 R15: 00007fabccb0fa28 [ 450.831649][T16253] [ 451.967436][ T5949] usb 3-1: USB disconnect, device number 59