last executing test programs: 2m52.137894983s ago: executing program 4 (id=14356): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x2, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020) 2m52.020044714s ago: executing program 4 (id=14357): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x1c, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000b, r2}}], 0x1c, 0x60c4}, 0x6) 2m51.113510979s ago: executing program 4 (id=14369): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cb100"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b531, 0x1, 0x9, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) 2m50.900016533s ago: executing program 4 (id=14372): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m50.031658152s ago: executing program 4 (id=14380): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xffffe000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 2m49.736093417s ago: executing program 4 (id=14383): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 2m49.282063151s ago: executing program 32 (id=14383): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 4.669209514s ago: executing program 5 (id=16093): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.28015112s ago: executing program 5 (id=16098): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000a00)={0x6, 0xffffffff, 0x0, 0x0, 0x5}) 3.939137677s ago: executing program 1 (id=16101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000280)=@x86={0x8, 0x5, 0x4, 0x0, 0x7, 0x0, 0x7, 0x9b, 0x2, 0x8, 0xc0, 0xc0, 0x0, 0x1, 0x2, 0x0, 0x9, 0x2f, 0x70, '\x00', 0x8, 0x7}) 3.598784874s ago: executing program 1 (id=16104): bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={0x0, r0, 0x4000, r0}, 0x18) 3.338424181s ago: executing program 1 (id=16106): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb100c117080081004803", 0x10000, 0xffffffffffffc117, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 3.235616265s ago: executing program 1 (id=16108): unshare(0x64000600) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x50, r0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2000, 0x2, 0x2, 0x0, {0x2, 0x8, 0x0, 0x3f7, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x400, 0x81, 0xd1}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x50}}, 0x4004014) 2.89911396s ago: executing program 3 (id=16112): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000280)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x8, 0x0, &(0x7f0000000040)) 2.848183561s ago: executing program 1 (id=16113): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 2.792593352s ago: executing program 1 (id=16114): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f00000003c0)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0}) 2.761716951s ago: executing program 3 (id=16115): socket(0x1d, 0x2, 0x6) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x6101}}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 2.535056618s ago: executing program 3 (id=16116): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@local, 0x800, 0x0, 0x2, 0x1}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) 2.411844647s ago: executing program 5 (id=16117): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="00000006", 0x4, 0x0, &(0x7f0000000040)={0x11, 0x8100, r1, 0x306, 0x7, 0x6, @multicast}, 0x14) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.380738863s ago: executing program 5 (id=16118): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000000)={0x1, 0x200, 0xfffffffe}) 1.644988746s ago: executing program 3 (id=16121): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 896.066739ms ago: executing program 0 (id=16129): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 884.723703ms ago: executing program 2 (id=16130): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, 0x0, &(0x7f0000000280)) 768.240004ms ago: executing program 0 (id=16132): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000440)={r2, 0x2, 0x6}, 0x8) 708.031179ms ago: executing program 2 (id=16133): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='a', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000380)="01dc", 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f00000001c0)={r2}) 657.267896ms ago: executing program 0 (id=16134): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000040)=r2, 0x4) 642.817427ms ago: executing program 5 (id=16135): fsopen(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000200)={r2}) 491.101257ms ago: executing program 0 (id=16137): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xa}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)) 392.127881ms ago: executing program 5 (id=16138): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 391.963347ms ago: executing program 2 (id=16139): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x9, 0x8, 0xfffff034}, {0x40, 0x0, 0x0, 0xfffffa4b}, {0x6, 0x0, 0x6c, 0xfffffffe}]}, 0x8) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00080045000028006400000002"], 0x0) 244.689786ms ago: executing program 2 (id=16140): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 236.364672ms ago: executing program 0 (id=16141): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000002e80)={0x1, 0xe}) 159.220175ms ago: executing program 2 (id=16142): r0 = eventfd2(0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/109, 0x6d}], 0x1) io_setup(0x6, &(0x7f0000000040)=0x0) io_getevents(r1, 0x3, 0x3, &(0x7f0000002a00)=[{}, {}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000002900)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x3511, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 112.171451ms ago: executing program 3 (id=16143): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000000)={0xe4, r2, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x0, r2, r1}) 25.031145ms ago: executing program 3 (id=16144): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000007000000000001"], 0x50) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x800) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 0s ago: executing program 0 (id=16145): syz_usb_connect(0x2, 0x41, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x6d, 0xf5, 0x71, 0x8, 0x4e2, 0x1424, 0xc7eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x96, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x7, 0x0, 0x2, 0x59, 0x61, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x890, 0x0, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x5, 0x11}}]}}]}}]}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003d40), 0x0, 0x10) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000013000500000000000000000020000000", @ANYRES32=0x0, @ANYBLOB="000c00000000000014000300776c616e3100000000000000000000000a0001"], 0x40}}, 0x0) kernel console output (not intermixed with test programs): fferent from the interface descriptor's value: 3 [ 1072.413353][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1072.425189][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.566502][T17839] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1072.663102][ T24] usb 4-1: usb_control_msg returned -32 [ 1072.672268][ T24] usbtmc 4-1:16.0: can't read capabilities [ 1072.747819][T17839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.776888][T17839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.787629][T17839] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1072.801155][T17839] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1072.810354][T17839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.821930][T17839] usb 3-1: config 0 descriptor?? [ 1073.292123][T17839] plantronics 0003:047F:FFFF.00E4: reserved main item tag 0xd [ 1073.303807][T17839] plantronics 0003:047F:FFFF.00E4: No inputs registered, leaving [ 1073.333037][T17839] plantronics 0003:047F:FFFF.00E4: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1073.518926][T17839] usb 3-1: USB disconnect, device number 22 [ 1074.274410][ T54] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.429847][ T54] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.566043][ T54] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.667505][ T9] IPVS: starting estimator thread 0... [ 1074.753919][ T54] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.806592][ T5102] IPVS: using max 29 ests per chain, 69600 per kthread [ 1074.931229][ T9] usb 4-1: USB disconnect, device number 29 [ 1075.019641][ T5110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14390'. [ 1075.502938][ T5124] : entered promiscuous mode [ 1075.517819][ T5124] bond_slave_0: entered promiscuous mode [ 1075.535253][ T5124] bond_slave_1: entered promiscuous mode [ 1075.572960][ T54] bridge_slave_1: left promiscuous mode [ 1075.603576][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.657805][ T1063] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1075.690862][ T1063] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1075.705566][ T1063] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1075.723976][ T1063] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1075.725062][ T54] bridge_slave_0: left allmulticast mode [ 1075.744488][ T1063] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1075.807454][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.431142][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1076.454253][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1076.470287][ T54] bond0 (unregistering): (slave bond1): Releasing backup interface [ 1076.482220][ T54] bond0 (unregistering): (slave bond2): Releasing backup interface [ 1076.491406][ T54] bond0 (unregistering): Released all slaves [ 1076.647419][ T54] bond1 (unregistering): Released all slaves [ 1076.788321][ T54] bond2 (unregistering): Released all slaves [ 1076.933292][ T54] tipc: Disabling bearer [ 1076.950008][ T54] tipc: Left network mode [ 1077.786722][ T5841] Bluetooth: hci4: command tx timeout [ 1077.833322][ T5133] chnl_net:caif_netlink_parms(): no params data found [ 1078.084300][ T54] mac80211_hwsim hwsim19 wlan0 (unregistering): left allmulticast mode [ 1078.254512][ T5214] input: syz0 as /devices/virtual/input/input128 [ 1078.471223][ T5217] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14421'. [ 1078.627124][ T54] batadv0: left promiscuous mode [ 1078.639561][ T54] team0: left promiscuous mode [ 1078.647744][ T54] team_slave_0: left promiscuous mode [ 1078.654778][ T54] team_slave_1: left promiscuous mode [ 1078.699761][ T54] hsr_slave_0: left promiscuous mode [ 1078.718235][ T54] hsr_slave_1: left promiscuous mode [ 1078.725128][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1078.733285][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.763044][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.771102][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.829185][ T54] veth1_macvtap: left promiscuous mode [ 1078.842370][ T54] veth0_macvtap: left promiscuous mode [ 1078.853866][ T54] veth1_vlan: left promiscuous mode [ 1078.864450][ T54] veth0_vlan: left promiscuous mode [ 1079.728823][ T54] team_slave_1 (unregistering): left allmulticast mode [ 1079.745640][ T54] team0 (unregistering): Port device team_slave_1 removed [ 1079.828770][ T54] team_slave_0 (unregistering): left allmulticast mode [ 1079.841474][ T54] team0 (unregistering): Port device team_slave_0 removed [ 1079.866757][ T5841] Bluetooth: hci4: command tx timeout [ 1080.147142][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1080.337542][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1080.358859][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1080.375107][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1080.441975][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1080.488080][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.518075][ T24] usb 4-1: Product: syz [ 1080.522309][ T24] usb 4-1: Manufacturer: syz [ 1080.537859][ T24] usb 4-1: SerialNumber: syz [ 1080.557495][ T24] usb 4-1: config 0 descriptor?? [ 1080.576358][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1080.587636][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1080.642756][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.664724][ T5133] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.683842][ T5133] bridge_slave_0: entered allmulticast mode [ 1080.717652][ T5133] bridge_slave_0: entered promiscuous mode [ 1080.752023][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.763438][ T5133] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.775509][ T5133] bridge_slave_1: entered allmulticast mode [ 1080.783529][ T5133] bridge_slave_1: entered promiscuous mode [ 1080.990751][ T5133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.041940][ T5133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1081.204320][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1081.218715][ T24] em28xx 4-1:0.0: Config register raw data: 0x41 [ 1081.329044][ T5133] team0: Port device team_slave_0 added [ 1081.380499][ T5133] team0: Port device team_slave_1 added [ 1081.501395][ T24] usb 4-1: USB disconnect, device number 30 [ 1081.530919][ T24] em28xx 4-1:0.0: Disconnecting em28xx [ 1081.543251][ T24] em28xx 4-1:0.0: Freeing device [ 1081.635304][ T5133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.666963][ T5133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.721713][ T5133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.754049][ T5281] input: syz0 as /devices/virtual/input/input129 [ 1081.778235][ T5133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.806638][ T5133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.832697][ C1] vkms_vblank_simulate: vblank timer overrun [ 1081.927796][ T5133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.947267][ T5841] Bluetooth: hci4: command tx timeout [ 1082.163500][ T5294] input: syz0 as /devices/virtual/input/input130 [ 1082.231380][ T5133] hsr_slave_0: entered promiscuous mode [ 1082.264231][ T5133] hsr_slave_1: entered promiscuous mode [ 1082.272021][ T5133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1082.284007][ T5133] Cannot create hsr debugfs directory [ 1082.507285][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 1082.514017][ T975] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1082.540833][ T975] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1083.248288][ T5133] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1083.304247][ T5133] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1083.355387][ T5133] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1083.405488][ T5133] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1083.827069][ T5133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1083.882619][ T5133] 8021q: adding VLAN 0 to HW filter on device team0 [ 1083.926120][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.933507][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.980437][ T3019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.987990][ T3019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1083.994157][ T5253] hid-generic 0000:0000:0000.00E5: unknown main item tag 0x0 [ 1084.027128][ T5841] Bluetooth: hci4: command tx timeout [ 1084.053417][ T5253] hid-generic 0000:0000:0000.00E5: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1084.201638][ T5133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1084.292160][ T5363] loop8: detected capacity change from 0 to 8 [ 1084.321380][ T5363] Dev loop8: unable to read RDB block 8 [ 1084.357493][ T5363] loop8: unable to read partition table [ 1084.393223][ T5363] loop8: partition table beyond EOD, truncated [ 1084.434898][ T5363] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1084.531780][ T5133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1084.586647][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 1084.599138][ T975] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1084.611884][ T975] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1084.826159][ T5133] veth0_vlan: entered promiscuous mode [ 1084.913779][ T5133] veth1_vlan: entered promiscuous mode [ 1085.045589][ T5133] veth0_macvtap: entered promiscuous mode [ 1085.061219][ T5388] sctp: [Deprecated]: syz.2.14474 (pid 5388) Use of int in max_burst socket option. [ 1085.061219][ T5388] Use struct sctp_assoc_value instead [ 1085.099370][ T5133] veth1_macvtap: entered promiscuous mode [ 1085.181332][ T5133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1085.242618][ T5133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.261055][ T5133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.288356][ T5133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1085.322940][ T5133] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.348764][ T5133] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.366992][ T5133] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.375779][ T5133] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.667000][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 1086.681471][ T975] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1086.688450][ T975] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1088.988228][ T975] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1088.994456][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 1089.006630][ T975] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1091.068873][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 1091.068921][ T975] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1091.081544][ T975] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1091.235293][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.258690][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.415370][ T5003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.441708][ T5003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.044365][ T5631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14505'. [ 1092.190143][ T5638] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1092.794243][ T5667] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1092.800843][ T5667] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1092.857303][ T5674] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 1092.863903][ T5674] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1092.881654][ T5667] vhci_hcd vhci_hcd.0: Device attached [ 1092.926616][ T5674] vhci_hcd vhci_hcd.0: Device attached [ 1092.955678][ T5679] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8) [ 1092.962328][ T5679] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1093.000238][ T5679] vhci_hcd vhci_hcd.0: Device attached [ 1093.056745][T17839] vhci_hcd: vhci_device speed not set [ 1093.065117][ T5667] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(5) [ 1093.071772][ T5667] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1093.086017][ T24] hid-generic 0000:0000:0000.00E6: unknown main item tag 0x0 [ 1093.096361][ T5667] vhci_hcd vhci_hcd.0: Device attached [ 1093.113173][ T5674] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 1093.115364][ T24] hid-generic 0000:0000:0000.00E6: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1093.119817][ T5674] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1093.128881][ T5674] vhci_hcd vhci_hcd.0: Device attached [ 1093.130532][T17839] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 1093.183663][ T5687] vhci_hcd: connection closed [ 1093.187018][ T36] vhci_hcd: stop threads [ 1093.208413][ T5680] vhci_hcd: connection closed [ 1093.212004][ T5675] vhci_hcd: connection closed [ 1093.212474][ T5668] vhci_hcd: connection reset by peer [ 1093.234090][ T36] vhci_hcd: release socket [ 1093.235788][ T5692] vhci_hcd: connection closed [ 1093.242871][ T36] vhci_hcd: disconnect device [ 1093.260926][ T36] vhci_hcd: stop threads [ 1093.265671][ T36] vhci_hcd: release socket [ 1093.273997][ T36] vhci_hcd: disconnect device [ 1093.281246][ T36] vhci_hcd: stop threads [ 1093.285730][ T36] vhci_hcd: release socket [ 1093.291064][ T36] vhci_hcd: disconnect device [ 1093.301755][ T36] vhci_hcd: stop threads [ 1093.306088][ T36] vhci_hcd: release socket [ 1093.314500][ T36] vhci_hcd: disconnect device [ 1093.342355][ T36] vhci_hcd: stop threads [ 1093.347357][ T36] vhci_hcd: release socket [ 1093.352005][ T36] vhci_hcd: disconnect device [ 1094.150620][ T5723] syzkaller1: entered promiscuous mode [ 1094.156175][ T5723] syzkaller1: entered allmulticast mode [ 1094.694373][ T5748] loop8: detected capacity change from 0 to 8 [ 1094.740714][ T5748] Dev loop8: unable to read RDB block 8 [ 1094.757795][ T5748] loop8: unable to read partition table [ 1094.775077][ T5748] loop8: partition table beyond EOD, truncated [ 1094.794081][ T5748] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1096.331981][ T5796] loop2: detected capacity change from 0 to 7 [ 1096.355886][ T5796] Dev loop2: unable to read RDB block 7 [ 1096.378694][ T5796] loop2: AHDI p1 p2 p3 [ 1096.383336][ T5796] loop2: partition table partially beyond EOD, truncated [ 1096.399091][ T5796] loop2: p1 start 1634624559 is beyond EOD, truncated [ 1096.422831][ T5796] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1096.437480][ T5798] bond0: option arp_interval: invalid value (18446744073709551615) [ 1096.457470][ T5798] bond0: option arp_interval: allowed values 0 - 2147483647 [ 1097.429048][ T5848] loop2: detected capacity change from 0 to 7 [ 1097.448084][ T5848] Dev loop2: unable to read RDB block 7 [ 1097.453792][ T5848] loop2: AHDI p1 p2 [ 1097.467704][ T5848] loop2: partition table partially beyond EOD, truncated [ 1097.928456][ T5885] netlink: 'syz.2.14583': attribute type 9 has an invalid length. [ 1097.951074][ T5885] netlink: 'syz.2.14583': attribute type 7 has an invalid length. [ 1097.964428][ T5885] netlink: 'syz.2.14583': attribute type 8 has an invalid length. [ 1098.257659][T17839] vhci_hcd: vhci_device speed not set [ 1098.507983][ T5905] netlink: 104 bytes leftover after parsing attributes in process `syz.3.14589'. [ 1098.541103][ T5905] netlink: 104 bytes leftover after parsing attributes in process `syz.3.14589'. [ 1098.569685][ T5905] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1098.950238][ T1142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1098.978064][ T1142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.150231][ T1142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1099.183821][ T1142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.380694][ T1142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1099.456768][ T1142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.515769][ T5929] netlink: 80 bytes leftover after parsing attributes in process `syz.2.14598'. [ 1099.609450][ T1142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1099.636818][ T1142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.914644][ T1063] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1099.927655][ T1063] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1099.936068][ T1063] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1099.948536][ T1063] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1099.959148][ T1063] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1100.028544][ T1142] bridge_slave_1: left promiscuous mode [ 1100.053179][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.081455][ T1142] bridge_slave_0: left allmulticast mode [ 1100.090606][ T1142] bridge_slave_0: left promiscuous mode [ 1100.100457][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.472425][ T5948] netlink: 88 bytes leftover after parsing attributes in process `syz.2.14607'. [ 1100.494381][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14608'. [ 1100.529205][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14608'. [ 1100.776319][ T5957] loop6: detected capacity change from 0 to 7 [ 1100.789128][T22985] Dev loop6: unable to read RDB block 7 [ 1100.794909][T22985] loop6: unable to read partition table [ 1100.805387][T22985] loop6: partition table beyond EOD, truncated [ 1100.831519][ T5957] Dev loop6: unable to read RDB block 7 [ 1100.843349][ T5957] loop6: unable to read partition table [ 1100.851489][ T5957] loop6: partition table beyond EOD, truncated [ 1100.886516][ T5957] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1101.203038][ T1142]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1101.213929][ T1142] bond_slave_0: left promiscuous mode [ 1101.241140][ T1142]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1101.256993][ T1142] bond_slave_1: left promiscuous mode [ 1101.265740][ T1142]  (unregistering): Released all slaves [ 1101.302790][ T1142] bond0 (unregistering): (slave bond1): Releasing backup interface [ 1101.320033][ T1142] bond0 (unregistering): Released all slaves [ 1101.578563][ T1142] bond1 (unregistering): Released all slaves [ 1101.615059][ T5948] tipc: Enabling of bearer rejected, failed to enable media [ 1101.643159][ T5950] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1101.672760][ T5950] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1101.922161][ T1142] tipc: Disabling bearer [ 1101.950406][ T1142] tipc: Left network mode [ 1102.026888][ T1063] Bluetooth: hci0: command tx timeout [ 1103.028391][ T1142] hsr_slave_0: left promiscuous mode [ 1103.052090][ T1142] hsr_slave_1: left promiscuous mode [ 1103.076050][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1103.103935][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1103.129873][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1103.187868][ T1142] veth1_macvtap: left promiscuous mode [ 1103.197958][ T1142] veth0_macvtap: left promiscuous mode [ 1103.203611][ T1142] veth1_vlan: left promiscuous mode [ 1103.227172][ T1142] veth0_vlan: left promiscuous mode [ 1104.112523][ T1063] Bluetooth: hci0: command tx timeout [ 1104.233041][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 1104.305473][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 1105.462148][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 1105.897869][ T1142] IPVS: stop unused estimator thread 0... [ 1106.137760][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.173648][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.191460][ T1063] Bluetooth: hci0: command tx timeout [ 1106.204012][ T5938] bridge_slave_0: entered allmulticast mode [ 1106.261228][ T5938] bridge_slave_0: entered promiscuous mode [ 1106.309528][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.355343][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.376773][ T5938] bridge_slave_1: entered allmulticast mode [ 1106.405374][ T5938] bridge_slave_1: entered promiscuous mode [ 1106.526726][ T30] audit: type=1326 audit(1745917101.401:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.5.14635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1106.623856][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.638900][ T30] audit: type=1326 audit(1745917101.411:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.5.14635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1106.661027][ C1] vkms_vblank_simulate: vblank timer overrun [ 1106.676356][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.742827][ T30] audit: type=1326 audit(1745917101.451:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.5.14635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1106.844047][ T30] audit: type=1326 audit(1745917101.451:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.5.14635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1106.926465][ T30] audit: type=1326 audit(1745917101.451:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.5.14635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1106.973060][ T5938] team0: Port device team_slave_0 added [ 1107.027114][ T30] audit: type=1326 audit(1745917101.451:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.5.14635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1107.058076][ T5938] team0: Port device team_slave_1 added [ 1107.110520][ T30] audit: type=1326 audit(1745917101.451:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.5.14635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1107.171140][ T30] audit: type=1326 audit(1745917101.451:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.5.14635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1107.193262][ C1] vkms_vblank_simulate: vblank timer overrun [ 1107.325541][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.351107][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.377267][ C1] vkms_vblank_simulate: vblank timer overrun [ 1107.389829][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.412781][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.448886][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.537791][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.563176][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14639'. [ 1107.743743][ T5938] hsr_slave_0: entered promiscuous mode [ 1107.797790][ T5938] hsr_slave_1: entered promiscuous mode [ 1107.804236][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1107.856664][ T5938] Cannot create hsr debugfs directory [ 1108.266526][ T1063] Bluetooth: hci0: command tx timeout [ 1109.849280][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1109.922686][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1109.961071][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1110.051405][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1110.385056][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1110.482712][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 1110.532151][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.539488][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1110.644692][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.651948][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1110.908842][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1111.075108][ T5938] veth0_vlan: entered promiscuous mode [ 1111.110033][ T5938] veth1_vlan: entered promiscuous mode [ 1111.218165][ T5938] veth0_macvtap: entered promiscuous mode [ 1111.219661][ T5406] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1111.231781][ T5938] veth1_macvtap: entered promiscuous mode [ 1111.309914][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.339322][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.378203][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1111.399764][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1111.417303][ T5406] usb 4-1: Using ep0 maxpacket: 16 [ 1111.436512][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.436957][ T5406] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1111.478262][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1111.524107][ T5406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.543081][ T5406] usb 4-1: Product: syz [ 1111.552338][ T5938] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.576672][ T5406] usb 4-1: Manufacturer: syz [ 1111.581376][ T5406] usb 4-1: SerialNumber: syz [ 1111.586150][ T5938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.596044][ T5938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.605370][ T5938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.679507][ T5406] usb 4-1: config 0 descriptor?? [ 1111.729733][ T5406] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1111.761584][ T5406] usb 4-1: Detected FT232H [ 1111.797636][ T3573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.806238][ T3573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.939226][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.952613][ T5406] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1111.968134][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.388129][ T5406] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1112.684567][ T5253] usb 4-1: USB disconnect, device number 31 [ 1112.725273][ T6185] sctp: [Deprecated]: syz.1.14665 (pid 6185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1112.725273][ T6185] Use struct sctp_sack_info instead [ 1112.738944][ T5253] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1112.783232][ T5253] ftdi_sio 4-1:0.0: device disconnected [ 1114.126541][ T5406] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1114.256875][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1114.281466][ T5406] usb 4-1: Using ep0 maxpacket: 16 [ 1114.426541][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1114.441607][ T24] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1114.466573][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.486814][ T24] usb 6-1: Product: syz [ 1114.491036][ T24] usb 6-1: Manufacturer: syz [ 1114.495939][ T24] usb 6-1: SerialNumber: syz [ 1114.515964][ T24] usb 6-1: config 0 descriptor?? [ 1114.564685][ T24] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1114.748884][ T24] gp8psk: usb in 128 operation failed. [ 1114.777621][ T24] gp8psk: usb in 137 operation failed. [ 1114.783189][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1114.828654][ T24] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1114.849114][ T24] usb 6-1: media controller created [ 1114.938885][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1115.037662][ T24] gp8psk_fe: Frontend revision 1 attached [ 1115.078237][ T24] usb 6-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 1115.113241][ T24] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1115.304776][ T24] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1115.339076][ T24] gp8psk: found Genpix USB device pID = 201 (hex) [ 1115.567617][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d90e000: rx timeout, send abort [ 1115.627601][ T24] usb 6-1: USB disconnect, device number 2 [ 1115.859302][ T24] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1115.950634][ T30] audit: type=1326 audit(1745917110.831:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.0.14689" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x0 [ 1116.078162][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d90e000: abort rx timeout. Force session deactivation [ 1116.096204][ T5406] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1116.114645][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.124713][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.134867][ T5406] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1116.154972][ T5406] usb 4-1: can't read configurations, error -71 [ 1116.900959][ T6304] [U] [ 1116.913792][ T6304] [U] [ 1116.939160][ T6304] [U] [ 1116.941928][ T6304] [U] [ 1116.944760][ T6304] [U] [ 1116.947483][ T6304] [U] [ 1116.950196][ T6304] [U] [ 1116.952901][ T6304] [U] [ 1116.966727][ T6304] [U] [ 1116.969516][ T6304] [U] [ 1116.972340][ T6304] [U] [ 1116.983020][ T6303] [U] [ 1117.006586][ T5406] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1117.178732][ T5406] usb 4-1: Using ep0 maxpacket: 8 [ 1117.186225][ T5406] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.222522][ T5406] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1117.245488][ T5406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.268795][ T5406] usb 4-1: config 0 descriptor?? [ 1117.290348][ T5406] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1118.301981][ T5406] gspca_vc032x: reg_r err -71 [ 1118.311829][ T5406] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 1118.342744][ T5406] usb 4-1: USB disconnect, device number 33 [ 1118.364188][ T6351] batman_adv: batadv0: Adding interface: macvlan4 [ 1118.376309][ T6351] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.442719][ T6351] batman_adv: batadv0: Interface activated: macvlan4 [ 1119.879135][ T6389] syzkaller1: entered promiscuous mode [ 1119.894601][ T6389] syzkaller1: entered allmulticast mode [ 1120.369724][ T6409] loop8: detected capacity change from 0 to 8 [ 1120.414999][ T6409] Dev loop8: unable to read RDB block 8 [ 1120.425075][ T6409] loop8: unable to read partition table [ 1120.445514][ T6409] loop8: partition table beyond EOD, truncated [ 1120.476283][ T6409] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1120.947071][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1121.118897][ T9] usb 6-1: config 0 has an invalid interface number: 156 but max is 0 [ 1121.136653][ T9] usb 6-1: config 0 has no interface number 0 [ 1121.161548][ T9] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1121.177026][ T9] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1121.218421][ T9] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1121.271530][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.322987][ T9] usb 6-1: config 0 descriptor?? [ 1121.355422][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1121.573481][ T9] spca561 6-1:0.156: probe with driver spca561 failed with error -22 [ 1121.609311][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1121.647283][ T9] usb 6-1: MIDIStreaming interface descriptor not found [ 1121.771198][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14742'. [ 1121.897987][ T9] snd-usb-audio 6-1:0.156: probe with driver snd-usb-audio failed with error -12 [ 1121.917197][ T5406] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1121.956926][ T9] usb 6-1: USB disconnect, device number 3 [ 1122.077523][ T5406] usb 4-1: Using ep0 maxpacket: 8 [ 1122.101622][ T5406] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1122.136345][ T5406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.177228][ T5406] usb 4-1: Product: syz [ 1122.181521][ T5406] usb 4-1: Manufacturer: syz [ 1122.186250][ T5406] usb 4-1: SerialNumber: syz [ 1122.221939][ T5406] usb 4-1: config 0 descriptor?? [ 1122.245518][ T5406] gspca_main: se401-2.14.0 probing 047d:5003 [ 1122.288952][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14747'. [ 1122.444954][ T6456] loop2: detected capacity change from 0 to 7 [ 1122.457382][ T6437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.477329][ T6456] Dev loop2: unable to read RDB block 7 [ 1122.487348][ T6437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.496077][ T6454] syzkaller1: entered promiscuous mode [ 1122.496524][ T6456] loop2: unable to read partition table [ 1122.507368][ T6454] syzkaller1: entered allmulticast mode [ 1122.520090][ T6456] loop2: partition table beyond EOD, truncated [ 1122.525392][ T6454] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 348 [ 1122.526794][ T6456] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1122.745205][ T5406] gspca_se401: ExtraFeatures: 1 [ 1122.757357][ T5406] gspca_se401: Too many frame sizes [ 1122.998867][ T6468] vcan0: tx drop: invalid da for name 0xfffffffffffffffd [ 1123.000356][ T24] usb 4-1: USB disconnect, device number 34 [ 1125.107440][ T24] hid-generic 0000:0000:0000.00E7: unknown main item tag 0x0 [ 1125.167016][ T24] hid-generic 0000:0000:0000.00E7: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1126.079641][ T5406] IPVS: starting estimator thread 0... [ 1126.177335][ T6543] IPVS: using max 26 ests per chain, 62400 per kthread [ 1126.650255][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14796'. [ 1126.741489][ T30] audit: type=1326 audit(1745917121.621:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.14797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1126.867800][ T30] audit: type=1326 audit(1745917121.621:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.14797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1126.961739][ T30] audit: type=1326 audit(1745917121.621:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.14797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1127.089488][ T30] audit: type=1326 audit(1745917121.621:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.14797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1127.222294][ T30] audit: type=1326 audit(1745917121.621:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.14797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1127.298524][ T30] audit: type=1326 audit(1745917121.651:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.14797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e558 code=0x7ffc0000 [ 1127.397415][ T30] audit: type=1326 audit(1745917121.651:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.14797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e558 code=0x7ffc0000 [ 1127.507080][ T5406] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1127.527253][ T30] audit: type=1326 audit(1745917121.651:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.14797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1127.643269][ T30] audit: type=1326 audit(1745917121.651:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.14797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1127.716660][ T5406] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.745857][ T5406] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.766090][ T30] audit: type=1326 audit(1745917121.651:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.1.14797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e558 code=0x7ffc0000 [ 1127.789865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1127.827676][ T5406] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1127.882699][ T5406] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1127.925581][ T5406] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.975413][ T5406] usb 6-1: config 0 descriptor?? [ 1128.421758][ T5406] plantronics 0003:047F:FFFF.00E8: No inputs registered, leaving [ 1128.455670][ T5406] plantronics 0003:047F:FFFF.00E8: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1128.716011][ T4221] usb 6-1: USB disconnect, device number 4 [ 1129.397851][ T6618] netlink: 'syz.5.14819': attribute type 1 has an invalid length. [ 1129.434162][ T6618] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1129.441540][ T6618] IPv6: NLM_F_CREATE should be set when creating new route [ 1130.971320][ T6660] netlink: 'syz.1.14834': attribute type 1 has an invalid length. [ 1130.992164][ T6660] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1130.999514][ T6660] IPv6: NLM_F_CREATE should be set when creating new route [ 1131.566909][ T5406] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1131.766522][ T5406] usb 3-1: Using ep0 maxpacket: 8 [ 1131.819041][ T5406] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1131.847231][ T5406] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1131.875934][ T5406] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1131.910065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1131.913971][ T6682] netlink: 'syz.3.14844': attribute type 9 has an invalid length. [ 1131.931908][ T5406] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1131.962763][ T5406] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1131.966698][ T6682] netlink: 'syz.3.14844': attribute type 7 has an invalid length. [ 1132.003085][ T5406] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1132.019297][ T6682] netlink: 'syz.3.14844': attribute type 8 has an invalid length. [ 1132.040570][ T5406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.294003][ T5406] usb 3-1: usb_control_msg returned -32 [ 1132.310814][ T5406] usbtmc 3-1:16.0: can't read capabilities [ 1132.443773][ T30] kauditd_printk_skb: 145 callbacks suppressed [ 1132.443796][ T30] audit: type=1326 audit(1745917127.321:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6693 comm="syz.3.14849" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1132.524237][ T30] audit: type=1326 audit(1745917127.361:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6693 comm="syz.3.14849" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1132.616529][ T30] audit: type=1326 audit(1745917127.361:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6693 comm="syz.3.14849" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1132.731344][ T30] audit: type=1326 audit(1745917127.361:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6693 comm="syz.3.14849" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1132.797122][ T30] audit: type=1326 audit(1745917127.361:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6693 comm="syz.3.14849" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1132.820548][ T30] audit: type=1326 audit(1745917127.361:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6693 comm="syz.3.14849" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1132.843746][ T30] audit: type=1326 audit(1745917127.361:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6693 comm="syz.3.14849" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf711e558 code=0x7ffc0000 [ 1132.866897][ T30] audit: type=1326 audit(1745917127.361:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6693 comm="syz.3.14849" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1132.899917][ T30] audit: type=1326 audit(1745917127.361:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6693 comm="syz.3.14849" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf711e558 code=0x7ffc0000 [ 1132.959969][ T30] audit: type=1326 audit(1745917127.371:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6693 comm="syz.3.14849" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1134.387360][ T24] usb 3-1: USB disconnect, device number 23 [ 1134.648510][ T6741] xfrm1: entered allmulticast mode [ 1134.827246][ T24] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1134.988449][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1135.011770][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1135.032268][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.059822][ T24] usb 3-1: Product: syz [ 1135.071222][ T24] usb 3-1: Manufacturer: syz [ 1135.096630][ T24] usb 3-1: SerialNumber: syz [ 1135.464815][ T24] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1135.492502][ T24] usb 3-1: USB disconnect, device number 24 [ 1135.509582][ T24] usblp0: removed [ 1135.599460][ T6761] netlink: 188 bytes leftover after parsing attributes in process `syz.3.14878'. [ 1136.336524][ T5406] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1136.514087][ T5406] usb 3-1: Using ep0 maxpacket: 8 [ 1136.533490][ T5406] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1136.557475][ T5406] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1136.590949][ T5406] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1136.605048][ T5406] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1136.618754][ T5406] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1136.634723][ T5406] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1136.648037][ T5406] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1136.660484][ T5406] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1136.675524][ T5406] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1136.702650][ T5406] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1136.722284][ T5406] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1136.731573][ T5406] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1136.751363][ T5406] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1136.771314][ T5406] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1136.786148][ T5406] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1136.806550][ T5406] usb 3-1: string descriptor 0 read error: -22 [ 1136.813321][ T5406] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1136.830894][ T5406] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.884465][ T5406] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1137.272561][ T24] usb 3-1: USB disconnect, device number 25 [ 1137.937090][ T5253] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1138.096351][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 1138.119990][ T5253] usb 6-1: Using ep0 maxpacket: 16 [ 1138.122479][ T30] audit: type=1326 audit(1745917132.971:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.14903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1138.139653][ T5253] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1138.196798][ T30] audit: type=1326 audit(1745917133.001:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.14903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1138.201192][ T5253] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.281517][ T5253] usb 6-1: Product: syz [ 1138.285769][ T5253] usb 6-1: Manufacturer: syz [ 1138.293259][ T6807] input: syz0 as /devices/virtual/input/input133 [ 1138.305312][ T30] audit: type=1326 audit(1745917133.031:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.14903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1138.315861][ T5253] usb 6-1: SerialNumber: syz [ 1138.327495][ C1] vkms_vblank_simulate: vblank timer overrun [ 1138.398053][ T30] audit: type=1326 audit(1745917133.031:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.14903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1138.414730][ T5253] usb 6-1: config 0 descriptor?? [ 1138.473233][ T5253] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1138.491050][ T30] audit: type=1326 audit(1745917133.031:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.14903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1138.576881][ T30] audit: type=1326 audit(1745917133.041:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.14903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1138.652100][ T30] audit: type=1326 audit(1745917133.041:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.14903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1138.674847][ C1] vkms_vblank_simulate: vblank timer overrun [ 1138.747953][ T30] audit: type=1326 audit(1745917133.041:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.14903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1138.823543][ T30] audit: type=1326 audit(1745917133.051:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.14903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1138.845746][ C1] vkms_vblank_simulate: vblank timer overrun [ 1138.876688][ T6837] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1138.883418][ T6837] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1138.904245][ T6837] vhci_hcd vhci_hcd.0: Device attached [ 1138.913980][ T30] audit: type=1326 audit(1745917133.051:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.14903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1138.970313][ T6840] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 1138.976923][ T6840] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1138.997046][ T6840] vhci_hcd vhci_hcd.0: Device attached [ 1139.027256][ T6837] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 1139.033940][ T6837] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1139.063475][ T6837] vhci_hcd vhci_hcd.0: Device attached [ 1139.080382][ T6837] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 1139.086979][ T6837] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1139.094578][T17839] vhci_hcd: vhci_device speed not set [ 1139.101340][ T6837] vhci_hcd vhci_hcd.0: Device attached [ 1139.114224][ T6837] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11) [ 1139.120894][ T6837] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1139.136676][ T6837] vhci_hcd vhci_hcd.0: Device attached [ 1139.164825][ T6845] vhci_hcd: connection closed [ 1139.164944][ T6842] vhci_hcd: connection closed [ 1139.165607][ T6847] vhci_hcd: connection closed [ 1139.169961][ T6838] vhci_hcd: connection closed [ 1139.182539][T17839] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 1139.197022][ T36] vhci_hcd: stop threads [ 1139.201359][ T36] vhci_hcd: release socket [ 1139.209215][ T36] vhci_hcd: disconnect device [ 1139.217501][ T36] vhci_hcd: stop threads [ 1139.221820][ T36] vhci_hcd: release socket [ 1139.229337][ T36] vhci_hcd: disconnect device [ 1139.230269][ T6839] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1139.234483][ T36] vhci_hcd: stop threads [ 1139.246758][ T36] vhci_hcd: release socket [ 1139.251330][ T36] vhci_hcd: disconnect device [ 1139.259768][ T6850] vhci_hcd: connection closed [ 1139.261994][ T36] vhci_hcd: stop threads [ 1139.272329][ T36] vhci_hcd: release socket [ 1139.277899][ T36] vhci_hcd: disconnect device [ 1139.284709][ T36] vhci_hcd: stop threads [ 1139.289982][ T36] vhci_hcd: release socket [ 1139.294581][ T36] vhci_hcd: disconnect device [ 1139.519522][ T5253] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71 [ 1139.540438][ T5253] usb 6-1: USB disconnect, device number 5 [ 1140.568283][ T6877] syzkaller1: entered promiscuous mode [ 1140.582423][ T6877] syzkaller1: entered allmulticast mode [ 1141.211538][ T6896] netlink: 92 bytes leftover after parsing attributes in process `syz.2.14930'. [ 1142.957445][ T5253] psmouse serio10: Failed to reset mouse on : -5 [ 1143.267496][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1143.267516][ T30] audit: type=1326 audit(1745917138.151:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.2.14950" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7fc00000 [ 1143.296248][ C1] vkms_vblank_simulate: vblank timer overrun [ 1143.412239][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14965'. [ 1143.479026][ T6982] syzkaller1: entered promiscuous mode [ 1143.484590][ T6982] syzkaller1: entered allmulticast mode [ 1144.336940][T17839] vhci_hcd: vhci_device speed not set [ 1144.419837][ T7005] tun1: tun_chr_ioctl cmd 1074025675 [ 1144.436637][ T7005] tun1: persist enabled [ 1144.447197][ T7005] tun1: tun_chr_ioctl cmd 1074025675 [ 1144.452555][ T7005] tun1: persist disabled [ 1145.168661][ T7027] vivid-002: disconnect [ 1145.174214][ T7027] vivid-002: reconnect [ 1145.184906][ T7029] netlink: 'syz.1.14987': attribute type 4 has an invalid length. [ 1145.546203][ T7037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14991'. [ 1145.711144][ T7043] lo: entered allmulticast mode [ 1145.723468][ T7043] lo: entered promiscuous mode [ 1145.730031][ T7041] lo: left promiscuous mode [ 1145.734783][ T7041] lo: left allmulticast mode [ 1146.557234][ T5253] misc userio: Buffer overflowed, userio client isn't keeping up [ 1146.868355][ T5406] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1147.052238][ T5406] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.073128][ T5406] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 1147.093025][ T5406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.117620][ T5406] usb 4-1: config 0 descriptor?? [ 1147.549385][ T5406] itetech 0003:258A:6A88.00E9: ignoring exceeding usage max [ 1147.560940][ T5406] itetech 0003:258A:6A88.00E9: ignoring exceeding usage max [ 1147.583965][ T5406] itetech 0003:258A:6A88.00E9: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.3-1/input0 [ 1147.749510][ T5406] usb 4-1: USB disconnect, device number 35 [ 1147.862311][ T5253] input: PS/2 Generic Mouse as /devices/serio10/input/input134 [ 1148.126977][ T5253] psmouse serio10: Failed to enable mouse on [ 1148.654464][ T30] audit: type=1326 audit(1745917143.531:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.3.15013" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x0 [ 1148.677064][ C1] vkms_vblank_simulate: vblank timer overrun [ 1149.794080][ T7117] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1150.211618][ T7136] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15037'. [ 1150.252761][ T7136] netlink: 'syz.5.15037': attribute type 7 has an invalid length. [ 1150.281763][ T7136] netlink: 'syz.5.15037': attribute type 8 has an invalid length. [ 1150.309256][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15037'. [ 1150.352143][ T7136] gretap0: entered promiscuous mode [ 1150.373584][ T7136] batadv_slave_1: entered promiscuous mode [ 1150.391861][ T7136] gretap0: left promiscuous mode [ 1150.426843][ T7136] batadv_slave_1: left promiscuous mode [ 1150.682411][T17839] hid-generic 0000:0000:0000.00EA: unknown main item tag 0x0 [ 1150.777930][T17839] hid-generic 0000:0000:0000.00EA: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1151.085373][ T5253] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1151.257145][ T5253] usb 3-1: Using ep0 maxpacket: 32 [ 1151.269189][ T5253] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1151.282564][ T5253] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1151.315497][ T5253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.338187][ T5253] usb 3-1: Product: syz [ 1151.342420][ T5253] usb 3-1: Manufacturer: syz [ 1151.351709][ T5253] usb 3-1: SerialNumber: syz [ 1151.361103][ T5253] usb 3-1: config 0 descriptor?? [ 1151.827162][ T5253] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1152.451929][ T5253] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1152.472503][ T5253] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1152.517031][ T5253] usb 3-1: USB disconnect, device number 26 [ 1154.139182][ T7252] netlink: 'syz.3.15098': attribute type 10 has an invalid length. [ 1154.151057][ T7252] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15098'. [ 1154.224529][ T7252] team0: Port device geneve0 added [ 1156.037987][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15117'. [ 1156.407498][ T7337] input: syz0 as /devices/virtual/input/input137 [ 1156.962609][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15132'. [ 1157.635501][ T7369] bridge0: entered promiscuous mode [ 1157.641532][ T7369] macvlan2: entered promiscuous mode [ 1157.671632][ T7369] macvlan3: entered promiscuous mode [ 1158.112360][ T7378] input: syz0 as /devices/virtual/input/input138 [ 1159.877014][ T4221] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1160.037190][ T4221] usb 6-1: Using ep0 maxpacket: 8 [ 1160.044361][ T4221] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1160.054460][ T4221] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.066903][ T4221] usb 6-1: config 0 descriptor?? [ 1160.295384][ T4221] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1160.506616][ T5253] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1160.511659][ T1063] Bluetooth: hci0: command 0x0c1a tx timeout [ 1160.512748][ T5253] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1161.107775][ T4221] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1161.123026][ T4221] asix 6-1:0.0: probe with driver asix failed with error -71 [ 1161.144271][ T4221] usb 6-1: USB disconnect, device number 6 [ 1161.497294][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15178'. [ 1161.507366][ T7459] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15178'. [ 1161.672434][ T7459] gtp1: entered promiscuous mode [ 1161.697333][ T7459] gtp1: entered allmulticast mode [ 1162.981804][ T30] audit: type=1326 audit(1745917157.861:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.0.15200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7fc00000 [ 1163.719454][ T30] audit: type=1326 audit(1745917158.591:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.0.15200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f42539 code=0x7fc00000 [ 1163.741458][ C1] vkms_vblank_simulate: vblank timer overrun [ 1163.757776][ T30] audit: type=1326 audit(1745917158.591:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.0.15200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7fc00000 [ 1163.792669][ T30] audit: type=1326 audit(1745917158.591:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.0.15200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7fc00000 [ 1163.816299][ T30] audit: type=1326 audit(1745917158.591:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.0.15200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7fc00000 [ 1163.840653][ T30] audit: type=1326 audit(1745917158.591:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.0.15200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7fc00000 [ 1163.863700][ T30] audit: type=1326 audit(1745917158.591:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.0.15200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7fc00000 [ 1163.955594][ T7542] sctp: [Deprecated]: syz.5.15213 (pid 7542) Use of int in max_burst socket option deprecated. [ 1163.955594][ T7542] Use struct sctp_assoc_value instead [ 1163.972924][ T30] audit: type=1326 audit(1745917158.591:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.0.15200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7fc00000 [ 1164.003650][ T7545] input: syz1 as /devices/virtual/input/input139 [ 1164.018432][ T7546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1164.047940][ T30] audit: type=1326 audit(1745917158.591:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.0.15200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7fc00000 [ 1164.147003][ T30] audit: type=1326 audit(1745917158.591:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.0.15200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7fc00000 [ 1165.063710][ T5253] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1165.160249][ T7589] openvswitch: netlink: IPv4 tun info is not correct [ 1165.220095][ T5253] usb 4-1: Using ep0 maxpacket: 8 [ 1165.234767][ T5253] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1165.257020][ T5253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.274783][ T5253] usb 4-1: Product: syz [ 1165.306997][ T5253] usb 4-1: Manufacturer: syz [ 1165.322492][ T5253] usb 4-1: SerialNumber: syz [ 1165.354283][ T5253] usb 4-1: config 0 descriptor?? [ 1165.376187][ T5253] gspca_main: se401-2.14.0 probing 047d:5003 [ 1165.569834][ T7604] input input140: cannot allocate more than FF_MAX_EFFECTS effects [ 1165.584361][ T7606] input: syz0 as /devices/virtual/input/input141 [ 1165.666543][T17839] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1165.805158][ T5253] gspca_se401: Frame size: 0x2 bayer [ 1165.824174][ T5253] gspca_se401: Frame size: 0x127 bayer [ 1165.839403][T17839] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1165.846546][ T5253] gspca_se401: Frame size: 256x0 bayer [ 1165.853235][ T5253] gspca_se401: Frame size: 0x0 1/16th janggu [ 1165.867158][T17839] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1165.898648][ T7616] loop8: detected capacity change from 0 to 8 [ 1165.906278][ T7616] Dev loop8: unable to read RDB block 8 [ 1165.912734][ T7616] loop8: unable to read partition table [ 1165.919841][ T7616] loop8: partition table beyond EOD, truncated [ 1165.921739][T17839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1165.926117][ T7616] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1166.011579][T17839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1166.031266][T17839] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1166.032892][ T5253] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input142 [ 1166.049994][T17839] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1166.069233][T17839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.117068][T17839] usb 6-1: config 0 descriptor?? [ 1166.120067][ T5253] usb 4-1: USB disconnect, device number 36 [ 1166.555684][T17839] plantronics 0003:047F:FFFF.00EB: reserved main item tag 0xd [ 1166.581158][T17839] plantronics 0003:047F:FFFF.00EB: No inputs registered, leaving [ 1166.622607][T17839] plantronics 0003:047F:FFFF.00EB: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1166.901023][ T9] usb 6-1: USB disconnect, device number 7 [ 1167.166831][ T7643] gretap0: Device is already in use. [ 1167.467765][T17839] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1167.660331][T17839] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.680564][T17839] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1167.701982][T17839] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1167.729165][T17839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1167.751456][T17839] usb 4-1: SerialNumber: syz [ 1167.980987][T17839] usb 4-1: 0:2 : does not exist [ 1168.021213][ T7673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15273'. [ 1168.050401][T17839] usb 4-1: USB disconnect, device number 37 [ 1168.815090][ T7700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1169.080576][ T7713] ipvlan0: entered promiscuous mode [ 1169.684318][ T7736] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1170.396563][ T975] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1170.557084][ T975] usb 3-1: Using ep0 maxpacket: 8 [ 1170.569977][ T975] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1170.578583][ T975] usb 3-1: config 179 has no interface number 0 [ 1170.584927][ T975] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1170.597669][ T975] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1170.609372][ T975] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1170.621325][ T975] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1170.634134][ T975] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1170.647848][ T975] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1170.657994][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.672162][ T7749] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1170.955334][ T975] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input144 [ 1171.154070][ T7749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.200377][ T7749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.373776][ T7770] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 1171.383245][ T7770] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 1171.420694][ T24] usb 3-1: USB disconnect, device number 27 [ 1171.420719][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1172.210739][ T7786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1173.049008][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1173.206945][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1173.219270][ T24] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1173.242076][ T24] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1173.255776][ T24] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1173.268880][ T24] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1173.278467][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1173.287873][ T24] usb 6-1: config 0 has no interface number 0 [ 1173.294294][ T24] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1173.318790][ T24] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1173.347144][ T24] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1173.360739][ T24] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1173.381579][ T24] usb 6-1: config 0 interface 125 has no altsetting 0 [ 1173.393035][ T24] usb 6-1: config 0 interface 125 has no altsetting 2 [ 1173.405194][ T24] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1173.414878][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.437687][ T24] usb 6-1: Product: syz [ 1173.441949][ T24] usb 6-1: Manufacturer: syz [ 1173.455867][ T24] usb 6-1: SerialNumber: syz [ 1173.475716][ T24] usb 6-1: config 0 descriptor?? [ 1173.496785][ T24] usb 6-1: selecting invalid altsetting 2 [ 1174.270090][ T4221] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1174.397226][ T975] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1174.441266][ T4221] usb 3-1: Using ep0 maxpacket: 32 [ 1174.452355][ T4221] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1174.467756][ T4221] usb 3-1: config 0 has no interface number 0 [ 1174.474136][ T4221] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1174.491291][ T4221] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1174.501594][ T4221] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1174.516711][ T4221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.536768][ T4221] usb 3-1: Product: syz [ 1174.543007][ T4221] usb 3-1: Manufacturer: syz [ 1174.550454][ T4221] usb 3-1: SerialNumber: syz [ 1174.567934][ T5406] usb 6-1: USB disconnect, device number 8 [ 1174.568839][ T4221] usb 3-1: config 0 descriptor?? [ 1174.590652][ T975] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1174.630678][ T975] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1174.644576][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.659482][ T975] usb 4-1: Product: syz [ 1174.663984][ T975] usb 4-1: Manufacturer: syz [ 1174.688464][ T975] usb 4-1: SerialNumber: syz [ 1174.929172][ T975] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1175.128382][T17839] usb 4-1: USB disconnect, device number 38 [ 1175.152593][T17839] usblp0: removed [ 1175.207646][ T4221] appletouch 3-1:0.85: Geyser mode initialized. [ 1175.232424][ T4221] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input145 [ 1175.449150][T17839] usb 3-1: USB disconnect, device number 28 [ 1175.477834][T17839] appletouch 3-1:0.85: input: appletouch disconnected [ 1175.607841][ T975] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1175.791312][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.804712][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1175.815134][ T975] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1175.833381][ T975] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1175.848573][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.868912][ T975] usb 6-1: config 0 descriptor?? [ 1176.077826][ T7894] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15368'. [ 1176.367251][ T975] plantronics 0003:047F:FFFF.00EC: reserved main item tag 0xd [ 1176.380143][ T975] plantronics 0003:047F:FFFF.00EC: No inputs registered, leaving [ 1176.410478][ T975] plantronics 0003:047F:FFFF.00EC: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1176.663532][ T975] usb 6-1: USB disconnect, device number 9 [ 1176.723248][ T7909] loop8: detected capacity change from 0 to 8 [ 1176.753559][ T7909] Dev loop8: unable to read RDB block 8 [ 1176.765235][ T7909] loop8: unable to read partition table [ 1176.772001][ T7909] loop8: partition table beyond EOD, truncated [ 1176.786267][ T7909] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1177.020983][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1177.021007][ T30] audit: type=1326 audit(1745917171.901:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7917 comm="syz.0.15378" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42539 code=0x0 [ 1177.553180][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.560171][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.575332][ T7958] fuse: Bad value for 'fd' [ 1178.656014][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15398'. [ 1180.149562][ T8006] syzkaller1: entered promiscuous mode [ 1180.171413][ T8006] syzkaller1: entered allmulticast mode [ 1180.327450][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1180.490013][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1180.524226][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1180.569470][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1180.590285][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.615327][ T9] usb 6-1: Product: syz [ 1180.620982][ T9] usb 6-1: Manufacturer: syz [ 1180.635937][ T9] usb 6-1: SerialNumber: syz [ 1180.651783][ T8004] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1180.887494][ T9] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1181.067041][ T4221] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1181.074241][ T9] usb 6-1: USB disconnect, device number 10 [ 1181.088698][ T9] usblp0: removed [ 1181.109014][ T8028] syzkaller1: entered promiscuous mode [ 1181.114582][ T8028] syzkaller1: entered allmulticast mode [ 1181.234585][ T4221] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1181.252998][ T4221] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1181.272248][ T4221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.282096][ T4221] usb 3-1: Product: syz [ 1181.286312][ T4221] usb 3-1: Manufacturer: syz [ 1181.291310][ T4221] usb 3-1: SerialNumber: syz [ 1181.515541][ T4221] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1181.537200][ T975] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1181.703753][ T975] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1181.727108][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.738636][ T975] usb 4-1: config 0 descriptor?? [ 1181.753745][ T975] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1181.774537][ T5253] usb 3-1: USB disconnect, device number 29 [ 1181.795836][ T5253] usblp0: removed [ 1182.454279][ T8052] input: syz1 as /devices/virtual/input/input147 [ 1182.780878][T17839] usb 4-1: USB disconnect, device number 39 [ 1183.597191][T17839] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1183.756555][T17839] usb 6-1: Using ep0 maxpacket: 32 [ 1183.778274][T17839] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1183.789200][T17839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.801272][T17839] usb 6-1: config 0 descriptor?? [ 1184.032306][T17839] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1184.053426][T17839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1184.084701][T17839] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1184.094778][T17839] usb 6-1: media controller created [ 1184.125509][T17839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1184.239762][T17839] az6027: usb out operation failed. (-71) [ 1184.250740][T17839] az6027: usb out operation failed. (-71) [ 1184.258692][T17839] stb0899_attach: Driver disabled by Kconfig [ 1184.265085][T17839] az6027: no front-end attached [ 1184.265085][T17839] [ 1184.285324][T17839] az6027: usb out operation failed. (-71) [ 1184.293898][T17839] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1184.317667][T17839] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input148 [ 1184.352308][T17839] dvb-usb: schedule remote query interval to 400 msecs. [ 1184.372288][T17839] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1184.396857][T17839] usb 6-1: USB disconnect, device number 11 [ 1184.489274][T17839] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1184.886836][ T5834] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1185.086541][ T5834] usb 3-1: Using ep0 maxpacket: 32 [ 1185.093679][ T5834] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1185.110066][ T5834] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1185.145102][ T5834] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1185.167490][ T5834] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1185.177445][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1185.186235][ T5834] usb 3-1: Product: syz [ 1185.191689][ T5834] usb 3-1: Manufacturer: syz [ 1185.201226][ T5834] usb 3-1: SerialNumber: syz [ 1185.225923][ T5834] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input149 [ 1185.296917][ T8120] loop2: detected capacity change from 0 to 7 [ 1185.335075][ T8120] Dev loop2: unable to read RDB block 7 [ 1185.351414][ T8120] loop2: unable to read partition table [ 1185.367344][ T8120] loop2: partition table beyond EOD, truncated [ 1185.368617][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15469'. [ 1185.399660][ T8120] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1185.503100][ T5834] usb 3-1: USB disconnect, device number 30 [ 1185.509336][ C1] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1185.589667][ T5834] appletouch 3-1:1.0: input: appletouch disconnected [ 1186.588253][ T8151] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15482'. [ 1186.649534][ T8151] vlan2: entered promiscuous mode [ 1186.660964][ T8155] netlink: 788 bytes leftover after parsing attributes in process `syz.2.15484'. [ 1186.696716][ T8151] hsr0: entered promiscuous mode [ 1186.852979][ T8164] veth0_to_hsr: entered promiscuous mode [ 1186.867895][ T8164] veth0_to_hsr: entered allmulticast mode [ 1186.883320][ T8163] veth0_to_hsr: left allmulticast mode [ 1186.890742][ T8163] veth0_to_hsr: left promiscuous mode [ 1187.475547][T17839] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1187.491372][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15498'. [ 1187.591082][ T8190] loop6: detected capacity change from 0 to 524287999 [ 1187.636527][T17839] usb 3-1: Using ep0 maxpacket: 16 [ 1187.701076][T17839] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1187.712791][T17839] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1187.733404][T17839] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1187.750045][T17839] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1187.767928][T17839] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1187.787557][T17839] usb 3-1: config 0 has no interface number 0 [ 1187.803032][T17839] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1187.827404][T17839] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1187.838367][T17839] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1187.852394][T17839] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1187.887746][T17839] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1187.905740][T17839] usb 3-1: config 0 interface 125 has no altsetting 2 [ 1187.949331][T17839] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1187.972281][T17839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.007035][T17839] usb 3-1: Product: syz [ 1188.022711][T17839] usb 3-1: Manufacturer: syz [ 1188.042491][T17839] usb 3-1: SerialNumber: syz [ 1188.089468][T17839] usb 3-1: config 0 descriptor?? [ 1188.144230][T17839] usb 3-1: selecting invalid altsetting 2 [ 1189.208908][ T5253] usb 3-1: USB disconnect, device number 31 [ 1189.495882][ T8223] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101 [ 1190.322819][ T8257] vlan2: entered promiscuous mode [ 1190.611472][ T8267] @: renamed from vlan0 (while UP) [ 1191.121292][ T8282] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15543'. [ 1191.349972][ T8289] sctp: [Deprecated]: syz.3.15544 (pid 8289) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1191.349972][ T8289] Use struct sctp_sack_info instead [ 1191.390516][ T8294] team0: entered promiscuous mode [ 1191.439671][ T8294] team_slave_0: entered promiscuous mode [ 1191.475665][ T8294] team_slave_1: entered promiscuous mode [ 1191.490585][ T8294] team0: Cannot enslave team device to itself [ 1191.553645][ T8296] loop8: detected capacity change from 0 to 1 [ 1191.582568][ T8296] Dev loop8: unable to read RDB block 1 [ 1191.589449][ T8296] loop8: unable to read partition table [ 1191.595538][ T8296] loop8: partition table beyond EOD, truncated [ 1191.609543][ T8296] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1191.886289][ T8307] loop1: detected capacity change from 0 to 7 [ 1191.914831][ T8307] Dev loop1: unable to read RDB block 7 [ 1191.935490][ T8307] loop1: AHDI p4 [ 1191.951973][ T8307] loop1: partition table partially beyond EOD, truncated [ 1192.180563][ T8315] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1192.306584][ T5253] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1192.476593][ T5253] usb 4-1: Using ep0 maxpacket: 8 [ 1192.493453][ T5253] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1192.519648][ T5253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.528909][ T5253] usb 4-1: Product: syz [ 1192.533136][ T5253] usb 4-1: Manufacturer: syz [ 1192.546488][ T5253] usb 4-1: SerialNumber: syz [ 1192.554435][ T5253] usb 4-1: config 0 descriptor?? [ 1192.573332][ T5253] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1193.580576][ T30] audit: type=1326 audit(1745917188.451:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.2.15567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc2558 code=0x7ffc0000 [ 1193.631731][ T30] audit: type=1326 audit(1745917188.451:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.2.15567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc2558 code=0x7ffc0000 [ 1193.631767][ T5253] gspca_sonixj: reg_w1 err -71 [ 1193.653925][ C1] vkms_vblank_simulate: vblank timer overrun [ 1193.659381][ T30] audit: type=1326 audit(1745917188.451:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.2.15567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1193.687879][ C1] vkms_vblank_simulate: vblank timer overrun [ 1193.786946][ T5253] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1193.815471][ T30] audit: type=1326 audit(1745917188.451:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.2.15567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc2558 code=0x7ffc0000 [ 1193.820561][ T5253] usb 4-1: USB disconnect, device number 40 [ 1193.837694][ C1] vkms_vblank_simulate: vblank timer overrun [ 1193.960870][ T30] audit: type=1326 audit(1745917188.451:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.2.15567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc2558 code=0x7ffc0000 [ 1193.991996][ T30] audit: type=1326 audit(1745917188.451:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.2.15567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc2558 code=0x7ffc0000 [ 1194.021223][ T30] audit: type=1326 audit(1745917188.451:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.2.15567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1194.142037][ T30] audit: type=1326 audit(1745917188.451:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.2.15567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc2558 code=0x7ffc0000 [ 1194.290987][ T30] audit: type=1326 audit(1745917188.451:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.2.15567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc2558 code=0x7ffc0000 [ 1194.435857][ T30] audit: type=1326 audit(1745917188.451:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.2.15567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc2558 code=0x7ffc0000 [ 1194.458293][ C1] vkms_vblank_simulate: vblank timer overrun [ 1194.867151][ T8353] syzkaller1: entered promiscuous mode [ 1194.888036][ T8353] syzkaller1: entered allmulticast mode [ 1195.697106][ T5253] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1195.877150][ T5253] usb 6-1: Using ep0 maxpacket: 8 [ 1195.890727][ T5253] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1195.900945][ T5253] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.910413][ T5253] usb 6-1: Product: syz [ 1195.914807][ T5253] usb 6-1: Manufacturer: syz [ 1195.919873][ T5253] usb 6-1: SerialNumber: syz [ 1195.931682][ T5253] usb 6-1: config 0 descriptor?? [ 1196.180618][ T5253] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1196.486861][ T4221] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1196.661732][ T4221] usb 4-1: Using ep0 maxpacket: 32 [ 1196.680447][ T4221] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1196.701941][ T4221] usb 4-1: config 0 has no interface number 0 [ 1196.723621][ T4221] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1196.746531][ T4221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.765370][ T4221] usb 4-1: Product: syz [ 1196.794412][ T4221] usb 4-1: Manufacturer: syz [ 1196.803405][ T4221] usb 4-1: SerialNumber: syz [ 1196.822959][ T4221] usb 4-1: config 0 descriptor?? [ 1196.850773][ T4221] smsc95xx v2.0.0 [ 1196.963416][ T8410] vlan0: entered allmulticast mode [ 1196.968853][ T8410] : entered allmulticast mode [ 1196.973876][ T8410] bond_slave_0: entered allmulticast mode [ 1196.989807][ T5253] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1196.999724][ T8410] bond_slave_1: entered allmulticast mode [ 1197.011846][ T5253] usb 6-1: USB disconnect, device number 12 [ 1197.667348][ T4221] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1197.873898][ T4221] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1197.909362][ T4221] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1197.929509][ T4221] usb 4-1: USB disconnect, device number 41 [ 1198.316457][T17839] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1198.478757][T17839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.496751][T17839] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1198.527054][T17839] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1198.548632][T17839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.577698][T17839] usb 3-1: config 0 descriptor?? [ 1198.600835][T17839] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1198.636718][T17839] dvb-usb: bulk message failed: -22 (3/0) [ 1198.672661][T17839] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1198.703266][T17839] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1198.727996][T17839] usb 3-1: media controller created [ 1198.735824][T17839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1198.807009][T17839] dvb-usb: bulk message failed: -22 (6/0) [ 1198.840908][T17839] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1198.886128][T17839] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input150 [ 1198.944248][T17839] dvb-usb: schedule remote query interval to 150 msecs. [ 1198.995300][T17839] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1199.228570][T17839] dvb-usb: bulk message failed: -22 (1/0) [ 1199.235076][T17839] dvb-usb: error while querying for an remote control event. [ 1199.446892][T17839] dvb-usb: bulk message failed: -22 (1/0) [ 1199.456522][T17839] dvb-usb: error while querying for an remote control event. [ 1199.616756][ T8475] vlan1: entered allmulticast mode [ 1199.623426][T17839] dvb-usb: bulk message failed: -22 (1/0) [ 1199.627671][ T8475] bond0: entered allmulticast mode [ 1199.634381][ T8475] bond_slave_0: entered allmulticast mode [ 1199.636474][T17839] dvb-usb: error while querying for an remote control event. [ 1199.656028][ T8475] bond_slave_1: entered allmulticast mode [ 1199.758598][ T9] usb 3-1: USB disconnect, device number 32 [ 1199.859494][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1201.049396][ T8529] overlayfs: missing 'lowerdir' [ 1201.075761][ T30] kauditd_printk_skb: 148 callbacks suppressed [ 1201.075779][ T30] audit: type=1326 audit(1745917195.951:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8528 comm="syz.0.15652" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x0 [ 1201.104247][ C1] vkms_vblank_simulate: vblank timer overrun [ 1201.426988][ T4221] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1201.601315][ T4221] usb 4-1: Using ep0 maxpacket: 32 [ 1201.611473][ T4221] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1201.631103][ T4221] usb 4-1: config 0 has no interface number 0 [ 1201.654014][ T4221] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1201.693964][ T4221] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1201.717714][ T4221] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1201.733930][ T4221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.764763][ T4221] usb 4-1: Product: syz [ 1201.783051][ T4221] usb 4-1: Manufacturer: syz [ 1201.813374][ T4221] usb 4-1: SerialNumber: syz [ 1201.844239][ T4221] usb 4-1: config 0 descriptor?? [ 1202.490204][ T4221] appletouch 4-1:0.85: Geyser mode initialized. [ 1202.515184][ T4221] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input151 [ 1202.697260][ T4221] usb 4-1: USB disconnect, device number 42 [ 1202.764978][ T4221] appletouch 4-1:0.85: input: appletouch disconnected [ 1202.850786][ T8582] vlan0: entered allmulticast mode [ 1202.871653][ T8582] bond0: entered allmulticast mode [ 1202.881778][ T8582] bond_slave_0: entered allmulticast mode [ 1202.891455][ T8582] bond_slave_1: entered allmulticast mode [ 1203.630241][ T8597] input: syz1 as /devices/virtual/input/input152 [ 1203.956598][ T975] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1204.130390][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1204.148686][ T975] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1204.172973][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.196285][ T975] usb 6-1: config 0 descriptor?? [ 1204.626016][ T975] keytouch 0003:0926:3333.00ED: fixing up Keytouch IEC report descriptor [ 1204.673239][ T975] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.00ED/input/input154 [ 1204.828386][ T975] keytouch 0003:0926:3333.00ED: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1205.010630][ T30] audit: type=1326 audit(1745917199.881:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.15694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 1205.052478][ T30] audit: type=1326 audit(1745917199.881:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.15694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 1205.074693][ C1] vkms_vblank_simulate: vblank timer overrun [ 1205.092521][ T30] audit: type=1326 audit(1745917199.891:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.15694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 1205.121830][ T30] audit: type=1326 audit(1745917199.891:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.15694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 1205.207071][ T30] audit: type=1326 audit(1745917199.891:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.15694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 1205.270603][ T30] audit: type=1326 audit(1745917199.891:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.15694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 1205.292710][ T975] usb 6-1: USB disconnect, device number 13 [ 1205.334036][ T8633] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1205.338270][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15697'. [ 1205.358956][ T30] audit: type=1326 audit(1745917199.891:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.15694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 1205.414467][ T30] audit: type=1326 audit(1745917199.891:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.15694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 1205.436722][ C1] vkms_vblank_simulate: vblank timer overrun [ 1205.477437][ T30] audit: type=1326 audit(1745917199.891:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.15694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 1206.079800][ T30] kauditd_printk_skb: 745 callbacks suppressed [ 1206.079822][ T30] audit: type=1326 audit(1745917200.961:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.15694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 1206.143832][ T30] audit: type=1326 audit(1745917200.961:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.15694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 1206.177684][ T30] audit: type=1326 audit(1745917200.961:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.15694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 1206.243936][ T30] audit: type=1326 audit(1745917200.961:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.15694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 1206.272785][ T30] audit: type=1326 audit(1745917200.961:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.15694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 1206.303962][ T30] audit: type=1326 audit(1745917200.961:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.15694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 1206.342020][ T30] audit: type=1326 audit(1745917200.961:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.15694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 1206.402470][ T30] audit: type=1326 audit(1745917200.961:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.15694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 1206.442899][ T30] audit: type=1326 audit(1745917200.961:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.15694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 1206.470388][ T30] audit: type=1326 audit(1745917200.961:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.0.15694" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 1206.797226][ T8669] loop6: detected capacity change from 0 to 63 [ 1206.841456][T22985] buffer_io_error: 27 callbacks suppressed [ 1206.841480][T22985] Buffer I/O error on dev loop6, logical block 0, async page read [ 1206.874847][ T8669] Buffer I/O error on dev loop6, logical block 1, async page read [ 1206.910352][T22985] Buffer I/O error on dev loop6, logical block 0, async page read [ 1206.927629][ T8669] Buffer I/O error on dev loop6, logical block 1, async page read [ 1206.939708][T22985] Buffer I/O error on dev loop6, logical block 0, async page read [ 1206.971233][T22985] Buffer I/O error on dev loop6, logical block 0, async page read [ 1207.007043][T22985] Buffer I/O error on dev loop6, logical block 0, async page read [ 1207.048359][T22985] Buffer I/O error on dev loop6, logical block 0, async page read [ 1207.079019][T22985] Buffer I/O error on dev loop6, logical block 3, async page read [ 1210.145199][ T8756] netlink: 'syz.0.15751': attribute type 11 has an invalid length. [ 1210.317891][ T8759] loop2: detected capacity change from 0 to 7 [ 1210.362797][T22985] Dev loop2: unable to read RDB block 7 [ 1210.386442][T22985] loop2: unable to read partition table [ 1210.402806][T22985] loop2: partition table beyond EOD, truncated [ 1210.423731][ T8759] Dev loop2: unable to read RDB block 7 [ 1210.433359][ T8759] loop2: unable to read partition table [ 1210.440010][ T8759] loop2: partition table beyond EOD, truncated [ 1210.446308][ T8759] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1210.598077][ T975] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1210.777083][ T975] usb 6-1: Using ep0 maxpacket: 16 [ 1210.805619][ T975] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1210.822095][ T975] usb 6-1: config 0 has no interface number 0 [ 1210.830130][ T975] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1210.849134][ T975] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1210.861718][ T975] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1210.876210][ T975] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1210.893263][ T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.906923][ T975] usb 6-1: Product: syz [ 1210.911148][ T975] usb 6-1: Manufacturer: syz [ 1210.918417][ T975] usb 6-1: SerialNumber: syz [ 1210.937670][ T975] usb 6-1: config 0 descriptor?? [ 1210.943597][ T8763] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1210.970887][ T8763] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1211.199419][ T8763] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1211.209524][ T8763] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1211.631839][ T975] Error reading MAC address [ 1211.660452][ T8763] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1211.678216][ T8763] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1211.753871][ T8796] syz.0.15768 (8796): drop_caches: 2 [ 1211.895801][ T975] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 1211.917332][ T975] usb 6-1: USB disconnect, device number 14 [ 1211.948550][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1212.123326][ T9] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1212.134069][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.165783][ T9] usb 3-1: Product: syz [ 1212.172131][ T9] usb 3-1: Manufacturer: syz [ 1212.177855][ T9] usb 3-1: SerialNumber: syz [ 1212.186095][ T9] usb 3-1: config 0 descriptor?? [ 1212.590646][ T8821] netlink: 'syz.3.15779': attribute type 11 has an invalid length. [ 1212.630554][ T9] usb 3-1: Firmware version (0.0) predates our first public release. [ 1212.644248][ T9] usb 3-1: Please update to version 0.2 or newer [ 1212.654536][ T9] usb 3-1: Firmware: build [ 1212.883263][ T9] usb 3-1: USB disconnect, device number 33 [ 1213.081304][ T30] kauditd_printk_skb: 1334 callbacks suppressed [ 1213.081327][ T30] audit: type=1326 audit(1745917207.961:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8835 comm="syz.3.15784" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x0 [ 1213.974116][ T8853] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1214.091578][ T8858] netlink: 'syz.2.15792': attribute type 11 has an invalid length. [ 1215.470699][ T8904] syzkaller1: entered promiscuous mode [ 1215.477138][ T8904] syzkaller1: entered allmulticast mode [ 1215.910144][ T4221] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1216.076611][ T4221] usb 3-1: Using ep0 maxpacket: 16 [ 1216.091490][ T4221] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1216.101425][ T4221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.109881][ T4221] usb 3-1: Product: syz [ 1216.114208][ T4221] usb 3-1: Manufacturer: syz [ 1216.124507][ T4221] usb 3-1: SerialNumber: syz [ 1216.140794][ T4221] usb 3-1: config 0 descriptor?? [ 1216.157285][ T4221] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1216.168788][ T4221] usb 3-1: Detected FT232H [ 1216.386026][ T4221] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1216.814674][ T4221] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1217.044656][ T4221] usb 3-1: USB disconnect, device number 34 [ 1217.084333][ T4221] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1217.117111][ T4221] ftdi_sio 3-1:0.0: device disconnected [ 1217.966664][ T5834] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1218.138445][ T5834] usb 6-1: config 0 has an invalid interface number: 5 but max is 0 [ 1218.152551][ T5834] usb 6-1: config 0 has no interface number 0 [ 1218.168025][ T5834] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1218.181020][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.208873][ T5834] usb 6-1: config 0 descriptor?? [ 1218.227156][ T5834] ums-realtek 6-1:0.5: USB Mass Storage device detected [ 1218.457426][ T975] usb 6-1: USB disconnect, device number 15 [ 1219.666509][ T30] audit: type=1326 audit(1745917214.541:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9005 comm="syz.5.15857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1219.725797][ T30] audit: type=1326 audit(1745917214.541:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9005 comm="syz.5.15857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1219.756508][ T975] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1219.779964][ T30] audit: type=1326 audit(1745917214.571:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9005 comm="syz.5.15857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1219.826503][ T30] audit: type=1326 audit(1745917214.571:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9005 comm="syz.5.15857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1219.874425][ T30] audit: type=1326 audit(1745917214.571:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9005 comm="syz.5.15857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1219.927285][ T30] audit: type=1326 audit(1745917214.571:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9005 comm="syz.5.15857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=438 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1219.959221][ T975] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1219.978857][ T975] usb 3-1: config 0 has no interface number 0 [ 1219.991958][ T975] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1220.006413][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.014812][ T30] audit: type=1326 audit(1745917214.571:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9005 comm="syz.5.15857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1220.047754][ T975] usb 3-1: Product: syz [ 1220.053313][ T975] usb 3-1: Manufacturer: syz [ 1220.058818][ T975] usb 3-1: SerialNumber: syz [ 1220.067777][ T30] audit: type=1326 audit(1745917214.571:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9005 comm="syz.5.15857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1220.090529][ T975] usb 3-1: config 0 descriptor?? [ 1220.108403][ T30] audit: type=1326 audit(1745917214.571:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9005 comm="syz.5.15857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1220.144322][ T30] audit: type=1326 audit(1745917214.571:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9005 comm="syz.5.15857" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1220.522182][ T975] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1220.543820][ T975] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1220.561823][ T975] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1220.578641][ T975] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1220.592274][ T975] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1220.774781][ T975] usb 3-1: USB disconnect, device number 35 [ 1220.791661][ T975] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1220.817211][ T975] keyspan 3-1:0.133: device disconnected [ 1223.027563][ T9058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15878'. [ 1223.046551][ T9058] netlink: 'syz.0.15878': attribute type 7 has an invalid length. [ 1223.057582][ T9058] netlink: 'syz.0.15878': attribute type 8 has an invalid length. [ 1223.091185][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15878'. [ 1223.875976][ T9076] sctp: [Deprecated]: syz.1.15887 (pid 9076) Use of int in maxseg socket option. [ 1223.875976][ T9076] Use struct sctp_assoc_value instead [ 1224.345971][ T9087] syzkaller1: entered promiscuous mode [ 1224.376399][ T9087] syzkaller1: entered allmulticast mode [ 1225.392601][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15915'. [ 1227.047776][ T5834] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1227.216642][ T5834] usb 6-1: Using ep0 maxpacket: 8 [ 1227.228734][ T5834] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 1227.256228][ T5834] usb 6-1: config 0 has no interface number 0 [ 1227.275484][ T5834] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1227.295843][ T5834] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1227.314102][ T5834] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1227.326242][ T5834] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1227.353049][ T5834] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1227.373180][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.382920][ T5834] usb 6-1: Product: syz [ 1227.391067][ T5834] usb 6-1: Manufacturer: syz [ 1227.395825][ T5834] usb 6-1: SerialNumber: syz [ 1227.413748][ T5834] usb 6-1: config 0 descriptor?? [ 1227.528502][ T9197] tipc: Resetting bearer [ 1227.639904][ T5834] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 1227.675545][ T9197] macvlan2: left allmulticast mode [ 1227.716182][ T9197] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.728294][ T9197] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.742843][ T9197] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.755001][ T9197] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.780107][ T9197] ipvlan2: left allmulticast mode [ 1227.862779][ T975] usb 6-1: USB disconnect, device number 16 [ 1227.943381][ T9197] vlan4: left allmulticast mode [ 1227.964462][ T9197] macsec1: left allmulticast mode [ 1228.040838][ T9197] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 1228.050828][ T9197] macsec0: left allmulticast mode [ 1228.322580][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15954'. [ 1228.883065][ T9242] input: syz1 as /devices/virtual/input/input155 [ 1229.171089][ T9252] loop2: detected capacity change from 0 to 7 [ 1229.181746][T22985] Dev loop2: unable to read RDB block 7 [ 1229.203152][T22985] loop2: AHDI p2 p3 [ 1229.213312][ T9249] kvm: kvm [9247]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x79a38c48ff000000 [ 1229.224067][T22985] loop2: partition table partially beyond EOD, truncated [ 1229.257018][T22985] loop2: p3 start 335544320 is beyond EOD, truncated [ 1229.279949][ T9252] Dev loop2: unable to read RDB block 7 [ 1229.295691][ T9252] loop2: AHDI p2 p3 [ 1229.324327][ T9252] loop2: partition table partially beyond EOD, truncated [ 1229.357263][ T9252] loop2: p3 start 335544320 is beyond EOD, truncated [ 1229.906493][ T975] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1229.935178][ T9271] netlink: 'syz.3.15974': attribute type 2 has an invalid length. [ 1230.079769][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.120586][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.135411][ T975] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1230.181019][ T975] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1230.220703][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.234686][ T975] usb 3-1: config 0 descriptor?? [ 1230.591101][ T4221] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1230.675559][ T975] plantronics 0003:047F:FFFF.00EE: unknown main item tag 0x6 [ 1230.737908][ T975] plantronics 0003:047F:FFFF.00EE: No inputs registered, leaving [ 1230.777145][ T4221] usb 6-1: Using ep0 maxpacket: 32 [ 1230.807291][ T975] plantronics 0003:047F:FFFF.00EE: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1230.823503][ T4221] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.876388][ T4221] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.886267][ T4221] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1231.009929][ T975] usb 3-1: USB disconnect, device number 36 [ 1231.066864][ T4221] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.117547][ T4221] usb 6-1: config 0 descriptor?? [ 1231.576501][ T4221] ft260 0003:0403:6030.00EF: unknown main item tag 0x0 [ 1231.762341][ T4221] ft260 0003:0403:6030.00EF: chip code: 6424 8183 [ 1232.097006][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1232.097029][ T30] audit: type=1400 audit(1745917226.961:3306): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457C51CCA93031D371D06D2E59E880583300E11E8 pid=9331 comm="syz.0.15997" [ 1232.229172][ T10] usb 6-1: USB disconnect, device number 17 [ 1233.028044][ T9373] bridge0: port 3(hsr0) entered blocking state [ 1233.034474][ T9373] bridge0: port 3(hsr0) entered disabled state [ 1233.074492][ T9373] hsr0: entered allmulticast mode [ 1233.085087][ T9373] hsr_slave_0: entered allmulticast mode [ 1233.094389][ T9373] hsr_slave_1: entered allmulticast mode [ 1233.119257][ T9373] bridge0: port 3(hsr0) entered blocking state [ 1233.127175][ T9373] bridge0: port 3(hsr0) entered forwarding state [ 1233.338747][ T9388] syz_tun: entered promiscuous mode [ 1233.363069][ T9388] syz_tun: left promiscuous mode [ 1234.138943][ T9] hid-generic 0000:0003:0000.00F0: unknown main item tag 0x0 [ 1234.170223][ T9] hid-generic 0000:0003:0000.00F0: unknown main item tag 0x0 [ 1234.202368][ T9] hid-generic 0000:0003:0000.00F0: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1234.626473][ T5834] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1234.789006][ T5834] usb 6-1: Using ep0 maxpacket: 32 [ 1234.797326][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.830004][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1234.840071][ T5834] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1234.846500][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1234.866624][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.905176][ T5834] usb 6-1: config 0 descriptor?? [ 1235.021405][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1235.034616][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.056189][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1235.068727][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1235.100923][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1235.113168][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1235.135750][ T9] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1235.150208][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1235.160460][ T9] usb 4-1: Product: syz [ 1235.165061][ T9] usb 4-1: Manufacturer: syz [ 1235.170504][ T9] usb 4-1: SerialNumber: syz [ 1235.178384][ T9] usb 4-1: config 0 descriptor?? [ 1235.386832][ T5834] savu 0003:1E7D:2D5A.00F1: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1235.400965][ T9] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1235.420664][ T9] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1235.607528][ T9] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 1235.625697][ T9] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1235.661731][ T9] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1235.681376][ T5834] usb 6-1: USB disconnect, device number 18 [ 1235.724201][ T9443] netlink: 'syz.0.16046': attribute type 2 has an invalid length. [ 1235.809279][ T9] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 1236.212280][ T9] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1236.231029][ T9] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 1236.255974][ T9] usb 4-1: USB disconnect, device number 43 [ 1236.720573][ T9466] bridge0: port 3(hsr0) entered blocking state [ 1236.729317][ T9466] bridge0: port 3(hsr0) entered disabled state [ 1236.735834][ T9466] hsr0: entered allmulticast mode [ 1236.742787][ T9466] hsr_slave_0: entered allmulticast mode [ 1236.749631][ T9466] hsr_slave_1: entered allmulticast mode [ 1236.760611][ T9466] hsr0: entered promiscuous mode [ 1236.796677][ T975] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1236.946488][ T975] usb 6-1: Using ep0 maxpacket: 16 [ 1236.983897][ T975] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1236.997487][ T975] usb 6-1: config 0 has no interface number 0 [ 1237.003660][ T975] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1237.024228][ T975] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1237.037975][ T975] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1237.050247][ T975] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1237.061970][ T975] usb 6-1: Product: syz [ 1237.067588][ T975] usb 6-1: SerialNumber: syz [ 1237.097153][ T975] usb 6-1: config 0 descriptor?? [ 1237.106093][ T975] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 1237.136605][ T975] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input157 [ 1237.363899][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1237.632159][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1237.633532][T17839] usb 6-1: USB disconnect, device number 19 [ 1237.639156][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1237.679660][T17839] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1237.769661][ T9493] loop6: detected capacity change from 0 to 63 [ 1237.846609][ T5834] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1238.021176][ T5834] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.063008][ T5834] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1238.095791][ T5834] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1238.119492][ T9502] tun0: tun_chr_ioctl cmd 1074025675 [ 1238.121524][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1238.145360][ T9502] tun0: persist enabled [ 1238.162829][ T5834] usb 4-1: SerialNumber: syz [ 1238.168642][ T9502] tun0: tun_chr_ioctl cmd 1074025675 [ 1238.173989][ T9502] tun0: persist enabled [ 1238.404828][ T5834] usb 4-1: 0:2 : does not exist [ 1238.432232][ T5834] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1238.532853][ T5834] usb 4-1: USB disconnect, device number 44 [ 1238.604878][T22985] udevd[22985]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1238.809678][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16083'. [ 1239.004541][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.012705][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.243949][ T9542] netlink: 'syz.0.16092': attribute type 12 has an invalid length. [ 1239.793152][ T9] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1239.836828][ T975] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1239.951232][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.963430][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1239.988151][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1240.001113][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.010508][ T9] usb 3-1: Product: syz [ 1240.015814][ T975] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1240.024614][ T975] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1240.038247][ T9] usb 3-1: Manufacturer: syz [ 1240.042916][ T9] usb 3-1: SerialNumber: syz [ 1240.049969][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1240.077321][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1240.091083][ T975] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1240.125631][ T975] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1240.136878][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.158208][ T975] usb 6-1: config 0 descriptor?? [ 1240.271555][ T9] usb 3-1: 0:2 : does not exist [ 1240.299439][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1240.341607][ T9] usb 3-1: USB disconnect, device number 37 [ 1240.421072][T22985] udevd[22985]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1240.581294][ T975] plantronics 0003:047F:FFFF.00F2: unknown main item tag 0x0 [ 1240.589909][ T975] plantronics 0003:047F:FFFF.00F2: unknown main item tag 0x0 [ 1240.598178][ T975] plantronics 0003:047F:FFFF.00F2: unknown main item tag 0x0 [ 1240.611387][ T975] plantronics 0003:047F:FFFF.00F2: unknown main item tag 0x0 [ 1240.621813][ T975] plantronics 0003:047F:FFFF.00F2: unknown main item tag 0x0 [ 1240.634832][ T975] plantronics 0003:047F:FFFF.00F2: unknown main item tag 0x0 [ 1240.657446][ T975] plantronics 0003:047F:FFFF.00F2: No inputs registered, leaving [ 1240.681380][ T975] plantronics 0003:047F:FFFF.00F2: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1240.872558][ T975] usb 6-1: USB disconnect, device number 20 [ 1241.758488][ T975] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1241.917074][ T975] usb 6-1: Using ep0 maxpacket: 32 [ 1241.934137][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.945635][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.957241][ T975] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1241.966525][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.978098][ T975] usb 6-1: config 0 descriptor?? [ 1242.429543][ T975] savu 0003:1E7D:2D5A.00F3: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1242.520398][ T9616] loop8: detected capacity change from 0 to 8 [ 1242.539445][ T9616] Dev loop8: unable to read RDB block 8 [ 1242.547174][ T9616] loop8: unable to read partition table [ 1242.554048][ T9616] loop8: partition table beyond EOD, truncated [ 1242.612056][ T9616] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1242.669734][ T975] usb 6-1: USB disconnect, device number 21 [ 1243.562001][ T9644] ALSA: seq fatal error: cannot create timer (-19) [ 1243.776907][ T975] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1243.883025][ T9661] [ 1243.885416][ T9661] ===================================================== [ 1243.892368][ T9661] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1243.899842][ T9661] 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 Not tainted [ 1243.906958][ T9661] ----------------------------------------------------- [ 1243.913894][ T9661] syz.3.16144/9661 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1243.921619][ T9661] ffff88807f0c7d38 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1243.930472][ T9661] [ 1243.930472][ T9661] and this task is already holding: [ 1243.938113][ T9661] ffff88803c461028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1243.947915][ T9661] which would create a new lock dependency: [ 1243.953894][ T9661] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1243.962035][ T9661] [ 1243.962035][ T9661] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1243.971536][ T9661] (&client->buffer_lock){..-.}-{3:3} [ 1243.971570][ T9661] [ 1243.971570][ T9661] ... which became SOFTIRQ-irq-safe at: [ 1243.984657][ T9661] lock_acquire+0x120/0x360 [ 1243.989282][ T9661] _raw_spin_lock+0x2e/0x40 [ 1243.993918][ T9661] evdev_pass_values+0xb9/0xbd0 [ 1243.998959][ T9661] evdev_events+0x1e6/0x340 [ 1244.003611][ T9661] input_pass_values+0x285/0x890 [ 1244.008650][ T9661] input_event_dispose+0x330/0x6b0 [ 1244.013858][ T9661] input_event+0x8c/0xc0 [ 1244.018319][ T9661] hidinput_report_event+0xa1/0x100 [ 1244.023748][ T9661] hid_report_raw_event+0x148b/0x16d0 [ 1244.029238][ T9661] hid_input_report+0x43e/0x520 [ 1244.034283][ T9661] hid_irq_in+0x47e/0x6d0 [ 1244.038735][ T9661] __usb_hcd_giveback_urb+0x417/0x690 [ 1244.044251][ T9661] dummy_timer+0x862/0x4550 [ 1244.048893][ T9661] __hrtimer_run_queues+0x529/0xc60 [ 1244.054220][ T9661] hrtimer_run_softirq+0x187/0x2b0 [ 1244.059442][ T9661] handle_softirqs+0x283/0x870 [ 1244.064307][ T9661] __irq_exit_rcu+0xca/0x1f0 [ 1244.069087][ T9661] irq_exit_rcu+0x9/0x30 [ 1244.073439][ T9661] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1244.079220][ T9661] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1244.085387][ T9661] rwsem_spin_on_owner+0x26f/0x2b0 [ 1244.090945][ T9661] rwsem_down_write_slowpath+0x457/0x1030 [ 1244.096778][ T9661] down_write+0x1ab/0x1f0 [ 1244.101476][ T9661] kernfs_remove_by_name_ns+0x3d/0x130 [ 1244.107131][ T9661] device_links_driver_bound+0x210/0xee0 [ 1244.112892][ T9661] driver_bound+0xd8/0x2c0 [ 1244.117414][ T9661] really_probe+0x718/0x9a0 [ 1244.122028][ T9661] __driver_probe_device+0x18c/0x2f0 [ 1244.127497][ T9661] driver_probe_device+0x4f/0x430 [ 1244.132625][ T9661] __device_attach_driver+0x2ce/0x530 [ 1244.138119][ T9661] bus_for_each_drv+0x24e/0x2e0 [ 1244.143246][ T9661] __device_attach+0x2b8/0x400 [ 1244.148133][ T9661] bus_probe_device+0x185/0x260 [ 1244.153189][ T9661] device_add+0x7b6/0xb50 [ 1244.157897][ T9661] hid_add_device+0x398/0x540 [ 1244.162920][ T9661] usbhid_probe+0xe13/0x12a0 [ 1244.167742][ T9661] usb_probe_interface+0x641/0xbc0 [ 1244.172964][ T9661] really_probe+0x26a/0x9a0 [ 1244.177753][ T9661] __driver_probe_device+0x18c/0x2f0 [ 1244.183310][ T9661] driver_probe_device+0x4f/0x430 [ 1244.188437][ T9661] __device_attach_driver+0x2ce/0x530 [ 1244.193922][ T9661] bus_for_each_drv+0x24e/0x2e0 [ 1244.198885][ T9661] __device_attach+0x2b8/0x400 [ 1244.203866][ T9661] bus_probe_device+0x185/0x260 [ 1244.208824][ T9661] device_add+0x7b6/0xb50 [ 1244.213347][ T9661] usb_set_configuration+0x1a87/0x20e0 [ 1244.218907][ T9661] usb_generic_driver_probe+0x8d/0x150 [ 1244.224465][ T9661] usb_probe_device+0x1c1/0x390 [ 1244.229854][ T9661] really_probe+0x26a/0x9a0 [ 1244.234459][ T9661] __driver_probe_device+0x18c/0x2f0 [ 1244.239837][ T9661] driver_probe_device+0x4f/0x430 [ 1244.245046][ T9661] __device_attach_driver+0x2ce/0x530 [ 1244.250512][ T9661] bus_for_each_drv+0x24e/0x2e0 [ 1244.255470][ T9661] __device_attach+0x2b8/0x400 [ 1244.260345][ T9661] bus_probe_device+0x185/0x260 [ 1244.265320][ T9661] device_add+0x7b6/0xb50 [ 1244.269748][ T9661] usb_new_device+0xa39/0x16c0 [ 1244.274652][ T9661] hub_event+0x2941/0x4a00 [ 1244.279375][ T9661] process_scheduled_works+0xadb/0x17a0 [ 1244.285043][ T9661] worker_thread+0x8a0/0xda0 [ 1244.289741][ T9661] kthread+0x70e/0x8a0 [ 1244.293919][ T9661] ret_from_fork+0x4b/0x80 [ 1244.298447][ T9661] ret_from_fork_asm+0x1a/0x30 [ 1244.303317][ T9661] [ 1244.303317][ T9661] to a SOFTIRQ-irq-unsafe lock: [ 1244.310348][ T9661] (tasklist_lock){.+.+}-{3:3} [ 1244.310381][ T9661] [ 1244.310381][ T9661] ... which became SOFTIRQ-irq-unsafe at: [ 1244.323142][ T9661] ... [ 1244.323156][ T9661] lock_acquire+0x120/0x360 [ 1244.330345][ T9661] _raw_read_lock+0x36/0x50 [ 1244.335047][ T9661] __do_wait+0xde/0x740 [ 1244.339300][ T9661] do_wait+0x1f8/0x520 [ 1244.343554][ T9661] kernel_wait+0xab/0x170 [ 1244.347983][ T9661] call_usermodehelper_exec_work+0xbe/0x230 [ 1244.353985][ T9661] process_scheduled_works+0xadb/0x17a0 [ 1244.359629][ T9661] worker_thread+0x8a0/0xda0 [ 1244.364366][ T9661] kthread+0x70e/0x8a0 [ 1244.368557][ T9661] ret_from_fork+0x4b/0x80 [ 1244.373084][ T9661] ret_from_fork_asm+0x1a/0x30 [ 1244.377973][ T9661] [ 1244.377973][ T9661] other info that might help us debug this: [ 1244.377973][ T9661] [ 1244.388502][ T9661] Chain exists of: [ 1244.388502][ T9661] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 1244.388502][ T9661] [ 1244.401835][ T9661] Possible interrupt unsafe locking scenario: [ 1244.401835][ T9661] [ 1244.410248][ T9661] CPU0 CPU1 [ 1244.415616][ T9661] ---- ---- [ 1244.420982][ T9661] lock(tasklist_lock); [ 1244.425236][ T9661] local_irq_disable(); [ 1244.432009][ T9661] lock(&client->buffer_lock); [ 1244.439426][ T9661] lock(&new->fa_lock); [ 1244.446232][ T9661] [ 1244.449745][ T9661] lock(&client->buffer_lock); [ 1244.454818][ T9661] [ 1244.454818][ T9661] *** DEADLOCK *** [ 1244.454818][ T9661] [ 1244.463009][ T9661] 7 locks held by syz.3.16144/9661: [ 1244.468212][ T9661] #0: ffff888147bc1118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1244.477385][ T9661] #1: ffff8881452ce230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 1244.487515][ T9661] #2: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 1244.497191][ T9661] #3: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1244.506781][ T9661] #4: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1244.515960][ T9661] #5: ffff88803c461028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1244.526177][ T9661] #6: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1244.535351][ T9661] [ 1244.535351][ T9661] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1244.545851][ T9661] -> (&client->buffer_lock){..-.}-{3:3} { [ 1244.551691][ T9661] IN-SOFTIRQ-W at: [ 1244.555686][ T9661] lock_acquire+0x120/0x360 [ 1244.561865][ T9661] _raw_spin_lock+0x2e/0x40 [ 1244.569026][ T9661] evdev_pass_values+0xb9/0xbd0 [ 1244.575562][ T9661] evdev_events+0x1e6/0x340 [ 1244.581739][ T9661] input_pass_values+0x285/0x890 [ 1244.588426][ T9661] input_event_dispose+0x330/0x6b0 [ 1244.595240][ T9661] input_event+0x8c/0xc0 [ 1244.601627][ T9661] hidinput_report_event+0xa1/0x100 [ 1244.608585][ T9661] hid_report_raw_event+0x148b/0x16d0 [ 1244.615668][ T9661] hid_input_report+0x43e/0x520 [ 1244.622204][ T9661] hid_irq_in+0x47e/0x6d0 [ 1244.628201][ T9661] __usb_hcd_giveback_urb+0x417/0x690 [ 1244.635239][ T9661] dummy_timer+0x862/0x4550 [ 1244.641461][ T9661] __hrtimer_run_queues+0x529/0xc60 [ 1244.648422][ T9661] hrtimer_run_softirq+0x187/0x2b0 [ 1244.655501][ T9661] handle_softirqs+0x283/0x870 [ 1244.662109][ T9661] __irq_exit_rcu+0xca/0x1f0 [ 1244.668352][ T9661] irq_exit_rcu+0x9/0x30 [ 1244.674348][ T9661] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1244.681739][ T9661] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1244.689392][ T9661] rwsem_spin_on_owner+0x26f/0x2b0 [ 1244.696163][ T9661] rwsem_down_write_slowpath+0x457/0x1030 [ 1244.703548][ T9661] down_write+0x1ab/0x1f0 [ 1244.709562][ T9661] kernfs_remove_by_name_ns+0x3d/0x130 [ 1244.716770][ T9661] device_links_driver_bound+0x210/0xee0 [ 1244.724069][ T9661] driver_bound+0xd8/0x2c0 [ 1244.730233][ T9661] really_probe+0x718/0x9a0 [ 1244.736503][ T9661] __driver_probe_device+0x18c/0x2f0 [ 1244.743461][ T9661] driver_probe_device+0x4f/0x430 [ 1244.750159][ T9661] __device_attach_driver+0x2ce/0x530 [ 1244.757294][ T9661] bus_for_each_drv+0x24e/0x2e0 [ 1244.763807][ T9661] __device_attach+0x2b8/0x400 [ 1244.770241][ T9661] bus_probe_device+0x185/0x260 [ 1244.777019][ T9661] device_add+0x7b6/0xb50 [ 1244.783001][ T9661] hid_add_device+0x398/0x540 [ 1244.789330][ T9661] usbhid_probe+0xe13/0x12a0 [ 1244.795585][ T9661] usb_probe_interface+0x641/0xbc0 [ 1244.802393][ T9661] really_probe+0x26a/0x9a0 [ 1244.808561][ T9661] __driver_probe_device+0x18c/0x2f0 [ 1244.815560][ T9661] driver_probe_device+0x4f/0x430 [ 1244.822264][ T9661] __device_attach_driver+0x2ce/0x530 [ 1244.829347][ T9661] bus_for_each_drv+0x24e/0x2e0 [ 1244.835873][ T9661] __device_attach+0x2b8/0x400 [ 1244.842298][ T9661] bus_probe_device+0x185/0x260 [ 1244.848820][ T9661] device_add+0x7b6/0xb50 [ 1244.854831][ T9661] usb_set_configuration+0x1a87/0x20e0 [ 1244.861972][ T9661] usb_generic_driver_probe+0x8d/0x150 [ 1244.869104][ T9661] usb_probe_device+0x1c1/0x390 [ 1244.875619][ T9661] really_probe+0x26a/0x9a0 [ 1244.881786][ T9661] __driver_probe_device+0x18c/0x2f0 [ 1244.888817][ T9661] driver_probe_device+0x4f/0x430 [ 1244.895601][ T9661] __device_attach_driver+0x2ce/0x530 [ 1244.902750][ T9661] bus_for_each_drv+0x24e/0x2e0 [ 1244.909354][ T9661] __device_attach+0x2b8/0x400 [ 1244.915867][ T9661] bus_probe_device+0x185/0x260 [ 1244.922385][ T9661] device_add+0x7b6/0xb50 [ 1244.928372][ T9661] usb_new_device+0xa39/0x16c0 [ 1244.934792][ T9661] hub_event+0x2941/0x4a00 [ 1244.940868][ T9661] process_scheduled_works+0xadb/0x17a0 [ 1244.948077][ T9661] worker_thread+0x8a0/0xda0 [ 1244.954325][ T9661] kthread+0x70e/0x8a0 [ 1244.960693][ T9661] ret_from_fork+0x4b/0x80 [ 1244.966789][ T9661] ret_from_fork_asm+0x1a/0x30 [ 1244.973221][ T9661] INITIAL USE at: [ 1244.977124][ T9661] lock_acquire+0x120/0x360 [ 1244.983203][ T9661] _raw_spin_lock+0x2e/0x40 [ 1244.989284][ T9661] evdev_pass_values+0xb9/0xbd0 [ 1244.995900][ T9661] evdev_events+0x1e6/0x340 [ 1245.001981][ T9661] input_pass_values+0x285/0x890 [ 1245.008491][ T9661] input_event_dispose+0x330/0x6b0 [ 1245.015173][ T9661] input_inject_event+0x1fe/0x320 [ 1245.022061][ T9661] evdev_write+0x2fc/0x480 [ 1245.028141][ T9661] vfs_write+0x27b/0xa90 [ 1245.033954][ T9661] ksys_write+0x145/0x250 [ 1245.039851][ T9661] __do_fast_syscall_32+0xb4/0x110 [ 1245.046546][ T9661] do_fast_syscall_32+0x34/0x80 [ 1245.053056][ T9661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1245.061047][ T9661] } [ 1245.063548][ T9661] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1245.071803][ T9661] [ 1245.071803][ T9661] the dependencies between the lock to be acquired [ 1245.071815][ T9661] and SOFTIRQ-irq-unsafe lock: [ 1245.085441][ T9661] -> (tasklist_lock){.+.+}-{3:3} { [ 1245.090776][ T9661] HARDIRQ-ON-R at: [ 1245.094934][ T9661] lock_acquire+0x120/0x360 [ 1245.101556][ T9661] _raw_read_lock+0x36/0x50 [ 1245.108075][ T9661] __do_wait+0xde/0x740 [ 1245.114248][ T9661] do_wait+0x1f8/0x520 [ 1245.120344][ T9661] kernel_wait+0xab/0x170 [ 1245.126696][ T9661] call_usermodehelper_exec_work+0xbe/0x230 [ 1245.134751][ T9661] process_scheduled_works+0xadb/0x17a0 [ 1245.142416][ T9661] worker_thread+0x8a0/0xda0 [ 1245.150096][ T9661] kthread+0x70e/0x8a0 [ 1245.156654][ T9661] ret_from_fork+0x4b/0x80 [ 1245.163383][ T9661] ret_from_fork_asm+0x1a/0x30 [ 1245.170164][ T9661] SOFTIRQ-ON-R at: [ 1245.174414][ T9661] lock_acquire+0x120/0x360 [ 1245.180961][ T9661] _raw_read_lock+0x36/0x50 [ 1245.187487][ T9661] __do_wait+0xde/0x740 [ 1245.193717][ T9661] do_wait+0x1f8/0x520 [ 1245.199806][ T9661] kernel_wait+0xab/0x170 [ 1245.206148][ T9661] call_usermodehelper_exec_work+0xbe/0x230 [ 1245.214085][ T9661] process_scheduled_works+0xadb/0x17a0 [ 1245.221664][ T9661] worker_thread+0x8a0/0xda0 [ 1245.228385][ T9661] kthread+0x70e/0x8a0 [ 1245.234474][ T9661] ret_from_fork+0x4b/0x80 [ 1245.240902][ T9661] ret_from_fork_asm+0x1a/0x30 [ 1245.247679][ T9661] INITIAL USE at: [ 1245.251794][ T9661] lock_acquire+0x120/0x360 [ 1245.258228][ T9661] _raw_write_lock_irq+0xa2/0xf0 [ 1245.265082][ T9661] copy_process+0x21d5/0x3b80 [ 1245.271684][ T9661] kernel_clone+0x21e/0x870 [ 1245.278110][ T9661] user_mode_thread+0xdd/0x140 [ 1245.284797][ T9661] rest_init+0x23/0x300 [ 1245.290879][ T9661] start_kernel+0x470/0x4f0 [ 1245.297357][ T9661] x86_64_start_reservations+0x2a/0x30 [ 1245.304747][ T9661] x86_64_start_kernel+0x66/0x70 [ 1245.311604][ T9661] common_startup_64+0x13e/0x147 [ 1245.318499][ T9661] INITIAL READ USE at: [ 1245.323114][ T9661] lock_acquire+0x120/0x360 [ 1245.329972][ T9661] _raw_read_lock+0x36/0x50 [ 1245.336844][ T9661] __do_wait+0xde/0x740 [ 1245.343367][ T9661] do_wait+0x1f8/0x520 [ 1245.349806][ T9661] kernel_wait+0xab/0x170 [ 1245.356507][ T9661] call_usermodehelper_exec_work+0xbe/0x230 [ 1245.364771][ T9661] process_scheduled_works+0xadb/0x17a0 [ 1245.372689][ T9661] worker_thread+0x8a0/0xda0 [ 1245.379632][ T9661] kthread+0x70e/0x8a0 [ 1245.386142][ T9661] ret_from_fork+0x4b/0x80 [ 1245.392912][ T9661] ret_from_fork_asm+0x1a/0x30 [ 1245.400118][ T9661] } [ 1245.402795][ T9661] ... key at: [] tasklist_lock+0x18/0x40 [ 1245.410882][ T9661] ... acquired at: [ 1245.414861][ T9661] lock_acquire+0x120/0x360 [ 1245.419637][ T9661] _raw_read_lock+0x36/0x50 [ 1245.424333][ T9661] send_sigurg+0x12b/0x420 [ 1245.429056][ T9661] sk_send_sigurg+0x6c/0x2e0 [ 1245.433833][ T9661] queue_oob+0x3d9/0x4e0 [ 1245.438253][ T9661] unix_stream_sendmsg+0xa41/0xb60 [ 1245.443553][ T9661] __sock_sendmsg+0x219/0x270 [ 1245.448419][ T9661] ____sys_sendmsg+0x52d/0x830 [ 1245.453383][ T9661] ___sys_sendmsg+0x21f/0x2a0 [ 1245.458245][ T9661] __sys_sendmmsg+0x28e/0x430 [ 1245.463105][ T9661] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1245.468833][ T9661] __do_fast_syscall_32+0xb4/0x110 [ 1245.474228][ T9661] do_fast_syscall_32+0x34/0x80 [ 1245.479290][ T9661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1245.485811][ T9661] [ 1245.488139][ T9661] -> (&f_owner->lock){...-}-{3:3} { [ 1245.493456][ T9661] IN-SOFTIRQ-R at: [ 1245.497548][ T9661] lock_acquire+0x120/0x360 [ 1245.503913][ T9661] _raw_read_lock_irqsave+0xaf/0x100 [ 1245.511058][ T9661] send_sigurg+0x55/0x420 [ 1245.517494][ T9661] sk_send_sigurg+0x6c/0x2e0 [ 1245.523926][ T9661] tcp_check_urg+0x200/0x760 [ 1245.530364][ T9661] tcp_urg+0x164/0x3f0 [ 1245.536392][ T9661] tcp_rcv_established+0xdfd/0x1d10 [ 1245.543423][ T9661] tcp_v4_do_rcv+0xa23/0xce0 [ 1245.550027][ T9661] tcp_v4_rcv+0x266e/0x2ef0 [ 1245.556445][ T9661] ip_protocol_deliver_rcu+0x221/0x440 [ 1245.563744][ T9661] ip_local_deliver_finish+0x2fb/0x580 [ 1245.571041][ T9661] NF_HOOK+0x309/0x3a0 [ 1245.576950][ T9661] NF_HOOK+0x309/0x3a0 [ 1245.582855][ T9661] __netif_receive_skb+0x143/0x380 [ 1245.589805][ T9661] process_backlog+0x60e/0x14f0 [ 1245.596510][ T9661] __napi_poll+0xc4/0x480 [ 1245.602682][ T9661] net_rx_action+0x6ea/0xdf0 [ 1245.609111][ T9661] handle_softirqs+0x283/0x870 [ 1245.615710][ T9661] do_softirq+0xec/0x180 [ 1245.621791][ T9661] __local_bh_enable_ip+0x17d/0x1c0 [ 1245.628913][ T9661] sk_stream_wait_memory+0x724/0xf70 [ 1245.636037][ T9661] tcp_sendmsg_locked+0x1464/0x5030 [ 1245.643086][ T9661] tcp_sendmsg+0x2f/0x50 [ 1245.649163][ T9661] __sock_sendmsg+0x19c/0x270 [ 1245.655675][ T9661] __sys_sendto+0x3bd/0x520 [ 1245.662008][ T9661] __ia32_sys_sendto+0xdd/0x100 [ 1245.668713][ T9661] __do_fast_syscall_32+0xb4/0x110 [ 1245.675658][ T9661] do_fast_syscall_32+0x34/0x80 [ 1245.682870][ T9661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1245.691048][ T9661] INITIAL USE at: [ 1245.695219][ T9661] lock_acquire+0x120/0x360 [ 1245.701497][ T9661] _raw_write_lock_irq+0xa2/0xf0 [ 1245.708215][ T9661] __f_setown+0x67/0x370 [ 1245.714217][ T9661] generic_setlease+0xd5d/0x1240 [ 1245.721343][ T9661] fcntl_setlease+0x3a2/0x4c0 [ 1245.727853][ T9661] do_fcntl+0x6a0/0x1910 [ 1245.733922][ T9661] do_compat_fcntl64+0x484/0x720 [ 1245.740600][ T9661] __do_fast_syscall_32+0xb4/0x110 [ 1245.747457][ T9661] do_fast_syscall_32+0x34/0x80 [ 1245.754086][ T9661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1245.762158][ T9661] INITIAL READ USE at: [ 1245.766673][ T9661] lock_acquire+0x120/0x360 [ 1245.773361][ T9661] _raw_read_lock_irqsave+0xaf/0x100 [ 1245.780834][ T9661] send_sigio+0x38/0x370 [ 1245.787346][ T9661] dnotify_handle_event+0x169/0x440 [ 1245.794728][ T9661] fsnotify+0x1814/0x1a80 [ 1245.801258][ T9661] vfs_readv+0x6f9/0x840 [ 1245.807719][ T9661] __ia32_compat_sys_preadv2+0x22c/0x340 [ 1245.815630][ T9661] __do_fast_syscall_32+0xb4/0x110 [ 1245.822929][ T9661] do_fast_syscall_32+0x34/0x80 [ 1245.829964][ T9661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1245.838525][ T9661] } [ 1245.841109][ T9661] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1245.850063][ T9661] ... acquired at: [ 1245.853959][ T9661] lock_acquire+0x120/0x360 [ 1245.858766][ T9661] _raw_read_lock_irqsave+0xaf/0x100 [ 1245.864245][ T9661] send_sigio+0x38/0x370 [ 1245.869205][ T9661] kill_fasync+0x24d/0x4d0 [ 1245.873894][ T9661] lease_break_callback+0x26/0x30 [ 1245.879186][ T9661] __break_lease+0x6a2/0x1620 [ 1245.884050][ T9661] do_dentry_open+0xd62/0x1970 [ 1245.889003][ T9661] vfs_open+0x3b/0x340 [ 1245.893273][ T9661] path_openat+0x2ee5/0x3830 [ 1245.898039][ T9661] do_filp_open+0x1fa/0x410 [ 1245.902717][ T9661] do_sys_openat2+0x121/0x1c0 [ 1245.907582][ T9661] __ia32_compat_sys_openat+0x131/0x160 [ 1245.913340][ T9661] __do_fast_syscall_32+0xb4/0x110 [ 1245.918632][ T9661] do_fast_syscall_32+0x34/0x80 [ 1245.923677][ T9661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1245.930204][ T9661] [ 1245.932534][ T9661] -> (&new->fa_lock){....}-{3:3} { [ 1245.937697][ T9661] INITIAL USE at: [ 1245.941611][ T9661] lock_acquire+0x120/0x360 [ 1245.947704][ T9661] _raw_write_lock_irq+0xa2/0xf0 [ 1245.954218][ T9661] fasync_remove_entry+0xf1/0x1c0 [ 1245.960832][ T9661] pipe_fasync+0xff/0x1e0 [ 1245.966742][ T9661] __fput+0x89f/0xa70 [ 1245.972311][ T9661] task_work_run+0x1d1/0x260 [ 1245.978479][ T9661] resume_user_mode_work+0x5e/0x80 [ 1245.985282][ T9661] syscall_exit_to_user_mode+0x9a/0x120 [ 1245.992431][ T9661] __do_fast_syscall_32+0xc1/0x110 [ 1245.999130][ T9661] do_fast_syscall_32+0x34/0x80 [ 1246.005561][ T9661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1246.013641][ T9661] INITIAL READ USE at: [ 1246.017978][ T9661] lock_acquire+0x120/0x360 [ 1246.024509][ T9661] _raw_read_lock_irqsave+0xaf/0x100 [ 1246.031814][ T9661] kill_fasync+0x199/0x4d0 [ 1246.038526][ T9661] vcs_notifier+0x14b/0x1f0 [ 1246.045053][ T9661] notifier_call_chain+0x1b3/0x3e0 [ 1246.052173][ T9661] atomic_notifier_call_chain+0xda/0x180 [ 1246.059811][ T9661] vcs_scr_updated+0x8c/0xd0 [ 1246.066484][ T9661] vcs_write+0x105f/0x1260 [ 1246.072965][ T9661] vfs_write+0x27b/0xa90 [ 1246.079244][ T9661] ksys_write+0x145/0x250 [ 1246.085693][ T9661] __do_fast_syscall_32+0xb4/0x110 [ 1246.092949][ T9661] do_fast_syscall_32+0x34/0x80 [ 1246.099827][ T9661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1246.108184][ T9661] } [ 1246.110716][ T9661] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1246.119419][ T9661] ... acquired at: [ 1246.123312][ T9661] lock_acquire+0x120/0x360 [ 1246.128010][ T9661] _raw_read_lock_irqsave+0xaf/0x100 [ 1246.133493][ T9661] kill_fasync+0x199/0x4d0 [ 1246.138106][ T9661] evdev_pass_values+0x627/0xbd0 [ 1246.143244][ T9661] evdev_events+0x1e6/0x340 [ 1246.148042][ T9661] input_pass_values+0x285/0x890 [ 1246.153179][ T9661] input_event_dispose+0x330/0x6b0 [ 1246.158515][ T9661] input_inject_event+0x1fe/0x320 [ 1246.163739][ T9661] evdev_write+0x2fc/0x480 [ 1246.168347][ T9661] vfs_write+0x27b/0xa90 [ 1246.172855][ T9661] ksys_write+0x145/0x250 [ 1246.177503][ T9661] __do_fast_syscall_32+0xb4/0x110 [ 1246.182974][ T9661] do_fast_syscall_32+0x34/0x80 [ 1246.188094][ T9661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1246.194623][ T9661] [ 1246.196959][ T9661] [ 1246.196959][ T9661] stack backtrace: [ 1246.202869][ T9661] CPU: 1 UID: 0 PID: 9661 Comm: syz.3.16144 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 1246.202894][ T9661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1246.202906][ T9661] Call Trace: [ 1246.202917][ T9661] [ 1246.202926][ T9661] dump_stack_lvl+0x189/0x250 [ 1246.202958][ T9661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1246.202982][ T9661] ? __pfx__printk+0x10/0x10 [ 1246.203003][ T9661] validate_chain+0x1f05/0x2140 [ 1246.203028][ T9661] __lock_acquire+0xaac/0xd20 [ 1246.203053][ T9661] ? kill_fasync+0x199/0x4d0 [ 1246.203077][ T9661] lock_acquire+0x120/0x360 [ 1246.203099][ T9661] ? kill_fasync+0x199/0x4d0 [ 1246.203125][ T9661] ? __lock_acquire+0xaac/0xd20 [ 1246.203150][ T9661] _raw_read_lock_irqsave+0xaf/0x100 [ 1246.203181][ T9661] ? kill_fasync+0x199/0x4d0 [ 1246.203206][ T9661] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1246.203230][ T9661] ? do_raw_spin_lock+0x121/0x290 [ 1246.203253][ T9661] kill_fasync+0x199/0x4d0 [ 1246.203277][ T9661] ? kill_fasync+0x53/0x4d0 [ 1246.203303][ T9661] evdev_pass_values+0x627/0xbd0 [ 1246.203334][ T9661] ? evdev_pass_values+0x5c1/0xbd0 [ 1246.203360][ T9661] evdev_events+0x1e6/0x340 [ 1246.203381][ T9661] ? evdev_events+0x79/0x340 [ 1246.203404][ T9661] ? input_pass_values+0x8d/0x890 [ 1246.203425][ T9661] input_pass_values+0x285/0x890 [ 1246.203450][ T9661] ? input_handle_event+0x70c/0xf30 [ 1246.203469][ T9661] input_event_dispose+0x330/0x6b0 [ 1246.203493][ T9661] input_inject_event+0x1fe/0x320 [ 1246.203511][ T9661] ? input_inject_event+0xbc/0x320 [ 1246.203530][ T9661] evdev_write+0x2fc/0x480 [ 1246.203554][ T9661] ? __pfx_evdev_write+0x10/0x10 [ 1246.203578][ T9661] ? bpf_lsm_file_permission+0x9/0x20 [ 1246.203599][ T9661] ? security_file_permission+0x75/0x290 [ 1246.203626][ T9661] ? rw_verify_area+0x258/0x650 [ 1246.203642][ T9661] ? __pfx_evdev_write+0x10/0x10 [ 1246.203665][ T9661] vfs_write+0x27b/0xa90 [ 1246.203686][ T9661] ? __pfx_vfs_write+0x10/0x10 [ 1246.203703][ T9661] ? __fget_files+0x2a/0x420 [ 1246.203725][ T9661] ? __fget_files+0x2a/0x420 [ 1246.203746][ T9661] ? __fget_files+0x3a0/0x420 [ 1246.203766][ T9661] ? __fget_files+0x2a/0x420 [ 1246.203789][ T9661] ksys_write+0x145/0x250 [ 1246.203806][ T9661] ? rcu_is_watching+0x15/0xb0 [ 1246.203832][ T9661] ? __pfx_ksys_write+0x10/0x10 [ 1246.203850][ T9661] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1246.203869][ T9661] ? lockdep_hardirqs_on+0x9c/0x150 [ 1246.203885][ T9661] __do_fast_syscall_32+0xb4/0x110 [ 1246.203906][ T9661] do_fast_syscall_32+0x34/0x80 [ 1246.203923][ T9661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1246.203944][ T9661] RIP: 0023:0xf711e539 [ 1246.203959][ T9661] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1246.203974][ T9661] RSP: 002b:00000000f510e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1246.203992][ T9661] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1246.204003][ T9661] RDX: 0000000000002250 RSI: 0000000000000000 RDI: 0000000000000000 [ 1246.204014][ T9661] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1246.204023][ T9661] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1246.204033][ T9661] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1246.204054][ T9661] [ 1246.560786][ T975] usb 6-1: Using ep0 maxpacket: 32 [ 1246.568831][ T975] usb 6-1: device descriptor read/all, error -71