last executing test programs: 3m13.514588616s ago: executing program 2 (id=36): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f0000000300)='syz1\x00', 0x1ff) mkdirat$cgroup(r0, &(0x7f0000001e40)='syz0\x00', 0x1ff) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 3m13.186211805s ago: executing program 2 (id=40): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20006841}, 0x4004011) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/59, 0x3b}, {&(0x7f0000000380)=""/135, 0x87}], 0x2}, 0x2}], 0x1, 0x40000060, 0x0) 3m12.902105019s ago: executing program 2 (id=44): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e1d, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000180)=0x10) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000240)=ANY=[], 0x58) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1, 0x1}, &(0x7f00000000c0)=0x8) 3m11.971189319s ago: executing program 2 (id=53): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r1, 0x0, r0, &(0x7f0000000240)='./file0\x00', 0x46) 3m11.768900981s ago: executing program 2 (id=56): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) 3m11.280280208s ago: executing program 2 (id=58): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x4e24, @private=0xa010102}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r3, 0xbdc}, &(0x7f0000000240)=0x8) 3m10.682542581s ago: executing program 32 (id=58): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x4e24, @private=0xa010102}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r3, 0xbdc}, &(0x7f0000000240)=0x8) 4.032272414s ago: executing program 3 (id=1644): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) 3.870604562s ago: executing program 0 (id=1648): socket(0x1e, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fd\x00') r1 = memfd_create(&(0x7f0000000d80)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0', 0x0) write(r1, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000021c0)=""/102400, 0x19000) 3.760816858s ago: executing program 0 (id=1650): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x8, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x40482}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000104"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.579571528s ago: executing program 0 (id=1653): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2}) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 3.376412935s ago: executing program 0 (id=1655): r0 = syz_open_dev$media(&(0x7f0000000080), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x66666666666680e, 0x0, &(0x7f0000000fc0)=[{}, {}]}) 3.239794873s ago: executing program 0 (id=1657): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x11) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="ad") 3.221329231s ago: executing program 3 (id=1658): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)={0x400000000000030d}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x161783, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 2.973532007s ago: executing program 3 (id=1660): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083871090890e0878f0e1ac6e7049b334c959b679a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31360d3b5d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f24394564774549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae290d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe597877cc4a116580dac4b008e595f437491d87abed02cfbcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed62480d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 2.800205559s ago: executing program 3 (id=1663): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/242, 0xf2}, {&(0x7f0000000500)=""/102, 0x66}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x3}, 0xebea}], 0x1, 0x40000001, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) 2.651667393s ago: executing program 3 (id=1665): syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x35e4, 0x3180, 0x1, 0x40024e}, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) accept4(r0, 0x0, 0x0, 0x80800) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191c, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x8, 0x3, 0x0, 0x2ab, 0x4, 0x4, 0x4, 0x3c5b, 0x1, 0x1ff, 0x7, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0xffffffff, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x17, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0x6, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x40009, 0x2, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x400003, 0x9, 0x100, 0x42, 0x4400004], [0x6, 0x6, 0x81000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x1000008, 0x5, 0x8001, 0x7, 0x38, 0x800203, 0x1fe, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x800, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120002, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x10, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1001, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x80, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0xfffffffe, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x10, 0x0, 0x4, 0x5, 0xb19, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.448329241s ago: executing program 1 (id=1667): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x2009, 0xffffffff9080edc4, 0xfffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000002c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x1}}, 0x30) 2.448074237s ago: executing program 5 (id=1668): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x4000050) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x5d6aff9e) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0x0, 0x80000003, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c) 2.317929247s ago: executing program 1 (id=1669): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0xe095}], 0x1, 0x10022, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.184071171s ago: executing program 1 (id=1670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@deltfilter={0x24, 0x2d, 0x5, 0x70bd2a, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0xfff3, 0x9}, {0x2, 0xf}, {0x1, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.036369177s ago: executing program 1 (id=1671): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000280)=r2) close_range(r0, 0xffffffffffffffff, 0x0) 1.983227955s ago: executing program 1 (id=1672): r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "5243987beecca29a", "cd9a1b2d326410dfd48fd506fd21589d", "d2a0080e", "ec136384da724c3f"}, 0x28) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 1.803578498s ago: executing program 4 (id=1674): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}]}, 0x1c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x4000) 1.679979346s ago: executing program 3 (id=1675): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "2e15cd42"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000007c0)={0x18, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="000fd9000000050fd90001d4100b7041af7b732d2998d50b3d66c782846ce167686ab864058a438555b269b01c06a1677369154706653b1006cfd0c664267f4927ce78dd86117c222e1e6c8c2937a56cd9927f186c1a045897c9c3f478ba795c81b2e4906ab238b46a572c00311dd15dc5c00a67d89a5595e0a48d890ef2a0c56da31fe73d5b7a91c06c095733ebb41a79d42f6336a96edd71c2fb0928569d266226daa1bbd9d42b24fa6f8132df96641a4c207283637e51ced22a654a5bb35eb70a68d773c711c2ce0136c7b04308815d4c7b2e3196c003094e6a82e05f022485466c2d47"], 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1.558334962s ago: executing program 4 (id=1676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff8, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x4000000) 1.448455559s ago: executing program 5 (id=1677): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {&(0x7f00000009c0)=""/17, 0x11}], 0x2}, 0x1}], 0x2, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@can={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "a7a278571758745d"}, 0x10}}, 0x0) 1.257547205s ago: executing program 5 (id=1678): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="eafd148b55ff931bacd4004427e888cbd3ab0d93bef24d8abf9404b696674bba84bf7b627d1862dbf29d1d2bdcd9815703fb1961c105", 0x36}, {&(0x7f00000002c0)="ee565cb0dae41053b4b4767f75dac3479da43e3bc0640147", 0x18}, {&(0x7f0000002080)="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", 0x2b5}, {&(0x7f00000003c0)}], 0x4}}], 0x1, 0x240088d0) 1.180051145s ago: executing program 4 (id=1679): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x2, 0x9, 0xd, "0006000000df0066952e0d16c708db720800"}) r1 = syz_open_pts(r0, 0x42) r2 = dup3(r1, r0, 0x0) io_setup(0x1, &(0x7f0000002680)=0x0) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000002a00)={0x0, 0x0, 0x0, 0x1, 0x1, r1, 0x0, 0x0, 0x5, 0x0, 0x0, r2}]) 988.30999ms ago: executing program 5 (id=1680): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0xc) 946.410527ms ago: executing program 4 (id=1681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x401}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) 836.828065ms ago: executing program 5 (id=1682): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="40051400e0"], 0xdd12}], 0x1}, 0x20040051) 672.386905ms ago: executing program 4 (id=1683): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2185) close(r0) r1 = socket(0x10, 0x80003, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 631.005813ms ago: executing program 0 (id=1684): unshare(0x4000400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$kcm(0x2d, 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) 539.449072ms ago: executing program 5 (id=1685): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') fcntl$getflags(r1, 0x401) 41.540928ms ago: executing program 33 (id=1685): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') fcntl$getflags(r1, 0x401) 209.141µs ago: executing program 4 (id=1687): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001140)=@deltfilter={0x7c, 0x2d, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0x5}, {0x1d9ba4b37f621188, 0xfff3}, {0x1, 0xa}}, [@f_tcindex={{0xc}, {0x4c, 0x2, [@TCA_TCINDEX_SHIFT={0x8}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_ACT={0x38, 0x7, [@m_ctinfo={0x34, 0x11, 0x0, 0x0, {{0xb}, {0x4}, {0x5, 0x6, "f5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x80) recvmmsg$unix(r1, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/18, 0x12}, {&(0x7f00000000c0)=""/104, 0x68}], 0x2}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1}}], 0x2, 0x2, 0x0) 0s ago: executing program 1 (id=1688): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) kernel console output (not intermixed with test programs): 6'. [ 170.935822][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.576'. [ 171.377649][ T44] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 171.539537][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807de2b000: rx timeout, send abort [ 171.549264][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807de2b000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 171.577073][ T44] usb 6-1: config 0 has no interfaces? [ 171.601234][ T44] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 171.662211][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.691355][ T44] usb 6-1: Product: syz [ 171.695888][ T44] usb 6-1: Manufacturer: syz [ 171.704932][ T44] usb 6-1: SerialNumber: syz [ 171.720068][ T44] usb 6-1: config 0 descriptor?? [ 171.806891][ T5957] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 171.840343][ T7660] loop2: detected capacity change from 0 to 7 [ 171.865580][ T7660] Dev loop2: unable to read RDB block 7 [ 171.885256][ T7664] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 171.892917][ T7660] loop2: unable to read partition table [ 171.908094][ T7660] loop2: partition table beyond EOD, truncated [ 171.917218][ T7660] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 171.986970][ T5957] usb 5-1: Using ep0 maxpacket: 8 [ 172.000804][ T5957] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 172.013638][ T5957] usb 5-1: config 150 has no interface number 0 [ 172.033938][ T5957] usb 5-1: config 150 interface 204 has no altsetting 0 [ 172.046755][ T5957] usb 5-1: config 150 interface 1 has no altsetting 0 [ 172.058669][ T5957] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 172.074715][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.083928][ T5957] usb 5-1: Product: syz [ 172.088633][ T5957] usb 5-1: Manufacturer: syz [ 172.139234][ T5957] usb 5-1: SerialNumber: syz [ 172.151867][ T10] usb 6-1: USB disconnect, device number 8 [ 172.391918][ T5957] xr_serial 5-1:150.204: xr_serial converter detected [ 173.209510][ T5957] usb 5-1: xr_serial converter now attached to ttyUSB0 [ 173.484358][ T10] usb 5-1: USB disconnect, device number 10 [ 173.547495][ T10] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 173.595799][ T10] xr_serial 5-1:150.204: device disconnected [ 174.416889][ T7724] syzkaller1: entered promiscuous mode [ 174.427134][ T7724] syzkaller1: entered allmulticast mode [ 175.521054][ T7759] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 175.597280][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.618'. [ 175.799520][ T7769] vxlan0: entered promiscuous mode [ 175.848404][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.888334][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.928958][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.954026][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.066897][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 176.240310][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.256104][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.271522][ T10] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 176.282004][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.298575][ T10] usb 1-1: config 0 descriptor?? [ 176.428181][ T7324] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 176.589459][ T7324] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 176.620392][ T7324] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 176.640128][ T7324] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 176.650833][ T7324] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 176.662265][ T7324] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 176.678958][ T7324] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 176.689691][ T7324] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 176.706233][ T7324] usb 5-1: Product: syz [ 176.710859][ T7324] usb 5-1: Manufacturer: syz [ 176.734883][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 176.743838][ T10] usb 1-1: string descriptor 0 read error: -71 [ 176.752041][ T7811] loop3: detected capacity change from 0 to 1 [ 176.755086][ T7324] cdc_wdm 5-1:1.0: skipping garbage [ 176.772131][ T10] usb 1-1: USB disconnect, device number 8 [ 176.783183][ T7811] Dev loop3: unable to read RDB block 1 [ 176.784769][ T7324] cdc_wdm 5-1:1.0: skipping garbage [ 176.799726][ T7811] loop3: unable to read partition table [ 176.810070][ T7324] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 176.820587][ T7811] loop3: partition table beyond EOD, truncated [ 176.827909][ T7324] cdc_wdm 5-1:1.0: Unknown control protocol [ 176.836433][ T7811] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 176.985204][ T7814] syzkaller1: entered promiscuous mode [ 176.992513][ T7814] syzkaller1: entered allmulticast mode [ 177.060652][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 177.061098][ T10] usb 5-1: USB disconnect, device number 11 [ 177.067310][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 177.067332][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 178.192124][ T5957] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 178.284231][ T5957] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 179.186751][ T44] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 179.347432][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 179.363547][ T44] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 179.381035][ T44] usb 4-1: config 150 has no interface number 0 [ 179.411263][ T44] usb 4-1: config 150 interface 204 has no altsetting 0 [ 179.419960][ T44] usb 4-1: config 150 interface 1 has no altsetting 0 [ 179.436105][ T44] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 179.448678][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.458023][ T44] usb 4-1: Product: syz [ 179.462355][ T44] usb 4-1: Manufacturer: syz [ 179.472303][ T44] usb 4-1: SerialNumber: syz [ 179.587423][ T5957] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 179.724369][ T44] xr_serial 4-1:150.204: xr_serial converter detected [ 179.769160][ T5957] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 179.786768][ T5957] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 179.813017][ T5957] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 179.824960][ T5957] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 179.837662][ T5957] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 179.860010][ T5957] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 179.869378][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 179.878316][ T5957] usb 1-1: Product: syz [ 179.882733][ T5957] usb 1-1: Manufacturer: syz [ 179.914064][ T5957] cdc_wdm 1-1:1.0: skipping garbage [ 179.921821][ T5957] cdc_wdm 1-1:1.0: skipping garbage [ 179.949427][ T5957] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 179.955636][ T5957] cdc_wdm 1-1:1.0: Unknown control protocol [ 180.193881][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 180.195485][ T7324] usb 1-1: USB disconnect, device number 9 [ 180.200562][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 180.200585][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 180.549599][ T44] usb 4-1: xr_serial converter now attached to ttyUSB0 [ 180.766693][ T5957] usb 4-1: USB disconnect, device number 14 [ 180.789701][ T5957] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 180.823955][ T5957] xr_serial 4-1:150.204: device disconnected [ 181.120982][ T7912] syzkaller1: entered promiscuous mode [ 181.129975][ T7912] syzkaller1: entered allmulticast mode [ 181.674155][ T7924] loop6: detected capacity change from 0 to 524287999 [ 181.950940][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880558c1400: rx timeout, send abort [ 182.451053][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880558c0000: rx timeout, send abort [ 182.459492][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880558c1400: abort rx timeout. Force session deactivation [ 182.959477][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880558c0000: abort rx timeout. Force session deactivation [ 183.317724][ T7978] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 183.323651][ T7978] syzkaller0: group set to 0 [ 183.336936][ T5957] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 183.524623][ T5957] usb 6-1: Using ep0 maxpacket: 8 [ 183.564699][ T5957] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 183.575320][ T5957] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.605192][ T5957] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 183.687588][ T5957] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 183.700102][ T5957] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.714530][ T5957] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 183.729909][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.738137][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880558c0c00: rx timeout, send abort [ 183.967122][ T5957] usb 6-1: GET_CAPABILITIES returned 0 [ 183.972701][ T5957] usbtmc 6-1:16.0: can't read capabilities [ 184.238218][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880558c0c00: abort rx timeout. Force session deactivation [ 184.330802][ T7969] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 184.340410][ T7324] usb 6-1: USB disconnect, device number 9 [ 185.471941][ T5957] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 185.668334][ T5957] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.716179][ T5957] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.734091][ T5957] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 185.751096][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.784938][ T5957] usb 6-1: config 0 descriptor?? [ 186.086093][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055022000: rx timeout, send abort [ 186.096248][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055022400: rx timeout, send abort [ 186.107058][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055022000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 186.123997][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055022400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 186.263473][ T5957] usb 6-1: string descriptor 0 read error: -71 [ 186.289494][ T5957] usb 6-1: USB disconnect, device number 10 [ 186.564600][ T8045] loop6: detected capacity change from 0 to 524287999 [ 186.577393][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 186.746811][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 186.759545][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 186.797085][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.819136][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.864471][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.898407][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.946988][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 186.956537][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.271687][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 187.290442][ T10] usbtmc 5-1:16.0: can't read capabilities [ 187.587838][ T9] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 187.602239][ T8044] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 187.647457][ T7324] usb 5-1: USB disconnect, device number 12 [ 187.858639][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 187.917481][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 187.933778][ T5957] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 187.973604][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 188.003087][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.032646][ T9] usb 4-1: config 0 descriptor?? [ 188.068570][ T8064] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 188.128001][ T5957] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 188.158516][ T5957] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 188.193734][ T5957] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 188.219752][ T5957] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 188.261449][ T5957] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 188.295931][ T5957] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 188.316799][ T5957] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 188.335446][ T5957] usb 6-1: Product: syz [ 188.340182][ T5957] usb 6-1: Manufacturer: syz [ 188.361968][ T5957] cdc_wdm 6-1:1.0: skipping garbage [ 188.378299][ T5957] cdc_wdm 6-1:1.0: skipping garbage [ 188.409194][ T5957] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 188.425893][ T5957] cdc_wdm 6-1:1.0: Unknown control protocol [ 188.548183][ T9] apple 0003:05AC:0264.0006: hidraw0: USB HID vff.fa Device [HID 05ac:0264] on usb-dummy_hcd.3-1/input0 [ 188.621024][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 188.627711][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 188.634109][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 188.640895][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 188.649045][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 188.655976][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 188.662308][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 188.668946][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 188.675281][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 188.681954][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 188.688635][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 188.696560][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 188.702962][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 188.710074][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 188.711336][ T9] usb 4-1: USB disconnect, device number 15 [ 188.717420][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 188.717457][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 188.718037][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 188.744410][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 188.756814][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 188.763743][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 188.798190][ T5957] usb 6-1: USB disconnect, device number 11 [ 188.804222][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 188.905837][ T8071] fido_id[8071]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 189.857186][ T8096] loop6: detected capacity change from 0 to 524287999 [ 191.075373][ T5957] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 191.212914][ T5957] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 191.850171][ T5957] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 192.008853][ T5957] usb 2-1: Using ep0 maxpacket: 8 [ 192.026201][ T5957] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 192.034962][ T5957] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.057152][ T5957] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 192.092891][ T5957] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 192.136419][ T5957] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.180274][ T5957] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 192.207331][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.463598][ T5957] usb 2-1: usb_control_msg returned -32 [ 192.473512][ T5957] usbtmc 2-1:16.0: can't read capabilities [ 193.186017][ T8170] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 193.399362][ T9] usb 2-1: USB disconnect, device number 11 [ 194.101051][ T8200] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 194.660740][ T30] audit: type=1326 audit(1755051958.681:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 194.683285][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.709934][ T30] audit: type=1326 audit(1755051958.681:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 194.778969][ T30] audit: type=1326 audit(1755051958.681:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 194.801453][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.887231][ T30] audit: type=1326 audit(1755051958.681:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 194.951322][ T30] audit: type=1326 audit(1755051958.681:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 194.983303][ T30] audit: type=1326 audit(1755051958.691:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 195.010446][ T8237] unknown channel width for channel at 909000KHz? [ 195.036919][ T8237] unknown channel width for channel at 909000KHz? [ 195.069808][ T30] audit: type=1326 audit(1755051958.691:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 195.092606][ T30] audit: type=1326 audit(1755051958.691:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 195.117473][ T30] audit: type=1326 audit(1755051958.691:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 195.140105][ T30] audit: type=1326 audit(1755051958.691:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8226 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 196.717031][ T1226] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 196.727025][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 196.928382][ T1226] usb 6-1: Using ep0 maxpacket: 32 [ 196.938167][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.959863][ T1226] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 196.974143][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 197.000494][ T1226] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 197.028049][ T1226] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 197.043359][ T9] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 197.055527][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.063929][ T1226] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 197.083094][ T9] usb 2-1: Product: syz [ 197.087882][ T9] usb 2-1: Manufacturer: syz [ 197.092660][ T9] usb 2-1: SerialNumber: syz [ 197.097475][ T1226] usb 6-1: config 0 interface 0 has no altsetting 0 [ 197.107462][ T1226] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 197.123331][ T1226] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 197.132141][ T9] usb 2-1: config 0 descriptor?? [ 197.138091][ T1226] usb 6-1: Product: syz [ 197.142505][ T1226] usb 6-1: Manufacturer: syz [ 197.150874][ T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 197.161337][ T1226] usb 6-1: SerialNumber: syz [ 197.181584][ T1226] usb 6-1: config 0 descriptor?? [ 197.219615][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 197.243754][ T1226] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 197.268294][ T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 197.288568][ T9] usb 2-1: media controller created [ 197.297526][ T1226] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 197.359852][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.451723][ T9] DVB: Unable to find symbol tda10046_attach() [ 197.458932][ T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 197.467886][ T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 197.528262][ T8277] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 197.534525][ T1216] usb 6-1: USB disconnect, device number 12 [ 197.534666][ C1] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 197.570862][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 197.572878][ T1216] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 197.605107][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 197.641018][ T8302] netlink: 104 bytes leftover after parsing attributes in process `syz.0.829'. [ 197.654663][ T8302] netlink: 104 bytes leftover after parsing attributes in process `syz.0.829'. [ 198.532184][ T9] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 198.648130][ T9] usb 2-1: USB disconnect, device number 12 [ 199.089088][ T1216] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 199.276815][ T1216] usb 6-1: Using ep0 maxpacket: 8 [ 199.307395][ T1216] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.325697][ T1216] usb 6-1: config 0 has no interfaces? [ 199.332146][ T1216] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 199.375431][ T1216] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.435854][ T1216] usb 6-1: config 0 descriptor?? [ 199.563063][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.573347][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.658407][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 199.699785][ T44] usb 6-1: USB disconnect, device number 13 [ 199.853400][ T8360] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 199.856991][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 199.901338][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 199.931525][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.954604][ T9] usb 4-1: Product: syz [ 199.984116][ T9] usb 4-1: Manufacturer: syz [ 199.992955][ T9] usb 4-1: SerialNumber: syz [ 200.014406][ T9] usb 4-1: config 0 descriptor?? [ 200.036542][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 200.967436][ T44] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 201.141315][ T44] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 201.150712][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.162808][ T44] usb 6-1: config 0 descriptor?? [ 201.191267][ T44] usb 6-1: selecting invalid altsetting 1 [ 201.255718][ T44] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 201.274813][ T9] gspca_sonixj: reg_w1 err -71 [ 201.326862][ T9] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 201.344343][ T9] usb 4-1: USB disconnect, device number 16 [ 201.396522][ T44] usb 6-1: USB disconnect, device number 14 [ 203.257282][ T7324] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 203.262053][ T44] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 203.310569][ T44] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 203.448922][ T7324] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 203.458846][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 203.487196][ T7324] usb 5-1: config 0 has no interface number 0 [ 203.498882][ T7324] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 203.512007][ T7324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.527953][ T7324] usb 5-1: Product: syz [ 203.536778][ T7324] usb 5-1: Manufacturer: syz [ 203.541455][ T7324] usb 5-1: SerialNumber: syz [ 203.572516][ T7324] usb 5-1: config 0 descriptor?? [ 203.626827][ T1226] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 203.638162][ T9] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 203.650034][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.660248][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.674258][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 203.685458][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.706932][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.729607][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 203.745626][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.757135][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.770998][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 203.780764][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.797144][ T1226] usb 6-1: Using ep0 maxpacket: 32 [ 203.810264][ T1226] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 203.823016][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.844219][ T1226] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 203.856837][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 203.865374][ T1226] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 203.883632][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.896832][ T1226] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 203.906580][ T1226] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 203.921679][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 203.946715][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 203.953949][ T1226] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 203.972795][ T1226] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 203.984586][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.994757][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.006408][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 204.013226][ T1226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.026201][ T7324] usb 5-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 204.036130][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.045832][ T1226] usb 6-1: config 0 descriptor?? [ 204.052813][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.067322][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 204.081969][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.096819][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.108769][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 204.123736][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 204.145253][ T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 204.154219][ T9] usb 4-1: Product: syz [ 204.158894][ T9] usb 4-1: Manufacturer: syz [ 204.163692][ T9] usb 4-1: SerialNumber: syz [ 204.178228][ T9] usb 4-1: config 0 descriptor?? [ 204.207024][ T9] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 204.230365][ T7324] usb 5-1: Read permanent extended address 12:f9:c1:d4:f3:7c:d3:db from device [ 204.314412][ T1226] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 204.457175][ T7324] usb 5-1: USB disconnect, device number 13 [ 204.601004][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 204.601862][ T44] usb 4-1: USB disconnect, device number 17 [ 204.635246][ T44] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 205.115532][ T8455] netlink: 104 bytes leftover after parsing attributes in process `syz.1.887'. [ 205.116940][ T5938] usb 6-1: USB disconnect, device number 15 [ 205.170207][ T5938] usblp1: removed [ 205.453172][ T8464] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 205.488604][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 205.488625][ T30] audit: type=1326 audit(1755051969.501:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8466 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 205.603601][ T30] audit: type=1326 audit(1755051969.501:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8466 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 205.730623][ T30] audit: type=1326 audit(1755051969.541:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8466 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 205.824042][ T8476] netlink: 'syz.5.896': attribute type 1 has an invalid length. [ 205.835190][ T30] audit: type=1326 audit(1755051969.541:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8466 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 205.869204][ T8476] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.896'. [ 205.921136][ T30] audit: type=1326 audit(1755051969.541:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8466 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 206.026313][ T30] audit: type=1326 audit(1755051969.551:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8466 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 206.060145][ T30] audit: type=1326 audit(1755051969.551:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8466 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 206.136386][ T30] audit: type=1326 audit(1755051969.551:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8466 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 206.191774][ T30] audit: type=1326 audit(1755051969.551:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8466 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 206.320139][ T30] audit: type=1326 audit(1755051969.551:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8466 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 206.381416][ T5938] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 206.465055][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.903'. [ 206.556946][ T5938] usb 2-1: Using ep0 maxpacket: 32 [ 206.569710][ T5938] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 206.586705][ T5938] usb 2-1: config 0 has no interface number 0 [ 206.614112][ T5938] usb 2-1: config 0 interface 184 has no altsetting 0 [ 206.653034][ T5938] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 206.674765][ T8502] sctp: [Deprecated]: syz.3.907 (pid 8502) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.674765][ T8502] Use struct sctp_sack_info instead [ 206.681091][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.707392][ T5938] usb 2-1: Product: syz [ 206.711739][ T5938] usb 2-1: Manufacturer: syz [ 206.713235][ T8499] syz_tun: entered allmulticast mode [ 206.716388][ T5938] usb 2-1: SerialNumber: syz [ 206.742701][ T5938] usb 2-1: config 0 descriptor?? [ 206.808732][ T8497] syz_tun: left allmulticast mode [ 206.813321][ T5938] smsc75xx v1.0.0 [ 207.138242][ T8512] block device autoloading is deprecated and will be removed. [ 207.171368][ T8512] syz.5.911: attempt to access beyond end of device [ 207.171368][ T8512] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 207.474510][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.916'. [ 208.027617][ T5938] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 208.072579][ T5938] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 208.114818][ T5938] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 208.166212][ T5938] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 208.207042][ T5938] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 208.336864][ T5938] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 208.377906][ T5938] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 208.433407][ T5938] usb 2-1: USB disconnect, device number 13 [ 208.886913][ T44] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 209.049963][ T8567] mmap: syz.1.929 (8567) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 209.087185][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 209.115634][ T44] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 209.133873][ T44] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.159876][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 209.191604][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 209.242797][ T44] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.284039][ T44] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 209.315450][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.575592][ T44] usb 4-1: usb_control_msg returned -32 [ 209.590790][ T44] usbtmc 4-1:16.0: can't read capabilities [ 209.597083][ T5957] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 209.786708][ T5957] usb 5-1: Using ep0 maxpacket: 8 [ 209.808686][ T5957] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.828906][ T5957] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 209.860000][ T5957] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 209.870525][ T5957] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.891554][ T5957] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 209.994612][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.218521][ T5957] usb 5-1: GET_CAPABILITIES returned 0 [ 210.224130][ T5957] usbtmc 5-1:16.0: can't read capabilities [ 210.330233][ T8594] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 210.353677][ T8595] syz.1.942: attempt to access beyond end of device [ 210.353677][ T8595] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 210.424474][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 210.433933][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 210.443077][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 210.466942][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 210.476188][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 210.485347][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 210.494609][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 210.503745][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.560207][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 210.569471][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 210.580749][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 210.590196][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 210.599876][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 210.609044][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.647042][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 210.656386][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 210.665552][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 210.708634][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 210.734976][ T5957] usb 4-1: USB disconnect, device number 18 [ 210.749702][ T1216] usb 5-1: USB disconnect, device number 14 [ 211.866946][ T1216] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 211.880206][ T5877] Bluetooth: hci1: command 0x0406 tx timeout [ 211.880270][ T5874] Bluetooth: hci2: command 0x0406 tx timeout [ 211.889837][ T5869] Bluetooth: hci4: command 0x0406 tx timeout [ 211.893243][ T5183] Bluetooth: hci0: command 0x0406 tx timeout [ 212.061456][ T1216] usb 1-1: Using ep0 maxpacket: 32 [ 212.072596][ T1216] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 212.100738][ T1216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.132759][ T1216] usb 1-1: config 0 descriptor?? [ 212.156460][ T1216] gspca_main: sunplus-2.14.0 probing 041e:400b [ 212.677149][ T7324] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 212.860711][ T7324] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 212.901438][ T7324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.957373][ T7324] usb 5-1: config 0 descriptor?? [ 212.994956][ T7324] usb 5-1: selecting invalid altsetting 1 [ 213.114466][ T7324] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 213.185121][ T7324] usb 5-1: USB disconnect, device number 15 [ 213.389040][ T1216] gspca_sunplus: reg_w_riv err -71 [ 213.418008][ T1216] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 213.432194][ T1216] usb 1-1: USB disconnect, device number 10 [ 213.680212][ T8660] syz.1.977 (8660): drop_caches: 4 [ 214.401437][ T44] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 214.577539][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 214.585126][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.600194][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.625796][ T44] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.638361][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.647086][ T44] usb 5-1: Product: syz [ 214.651298][ T44] usb 5-1: Manufacturer: syz [ 214.655949][ T44] usb 5-1: SerialNumber: syz [ 214.915327][ T44] usb 5-1: 0:2 : does not exist [ 214.944441][ T44] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 215.153514][ T44] usb 5-1: USB disconnect, device number 16 [ 215.241203][ T6018] udevd[6018]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.016835][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.991'. [ 216.086926][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.991'. [ 216.140273][ T8708] netlink: 104 bytes leftover after parsing attributes in process `syz.3.991'. [ 216.176784][ T8708] netlink: 104 bytes leftover after parsing attributes in process `syz.3.991'. [ 217.244232][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1007'. [ 217.757029][ T7324] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 217.954111][ T7324] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 217.993895][ T7324] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.015448][ T7324] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.053522][ T7324] usb 1-1: config 0 interface 0 has no altsetting 0 [ 218.094024][ T7324] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.128058][ T7324] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.148442][ T7324] usb 1-1: config 0 interface 0 has no altsetting 0 [ 218.156692][ T7324] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.184022][ T7324] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.209706][ T7324] usb 1-1: config 0 interface 0 has no altsetting 0 [ 218.260722][ T7324] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.287866][ T7324] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.303100][ T7324] usb 1-1: config 0 interface 0 has no altsetting 0 [ 218.318744][ T7324] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.328349][ T7324] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.370460][ T7324] usb 1-1: config 0 interface 0 has no altsetting 0 [ 218.410503][ T7324] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.429449][ T7324] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.441478][ T7324] usb 1-1: config 0 interface 0 has no altsetting 0 [ 218.450214][ T7324] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.462121][ T8782] netlink: 'syz.3.1023': attribute type 1 has an invalid length. [ 218.470071][ T7324] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.482885][ T7324] usb 1-1: config 0 interface 0 has no altsetting 0 [ 218.498257][ T7324] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.507693][ T7324] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.526983][ T7324] usb 1-1: config 0 interface 0 has no altsetting 0 [ 218.540195][ T7324] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 218.552269][ T8782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.559231][ T7324] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 218.559262][ T7324] usb 1-1: Product: syz [ 218.559279][ T7324] usb 1-1: Manufacturer: syz [ 218.559295][ T7324] usb 1-1: SerialNumber: syz [ 218.588232][ T7324] usb 1-1: config 0 descriptor?? [ 218.605464][ T7324] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 218.729656][ T8789] bond1: (slave ip6gretap1): making interface the new active one [ 218.755829][ T8794] input: syz1 as /devices/virtual/input/input9 [ 218.764750][ T8789] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 218.777331][ T5957] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 218.942548][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 218.954752][ T1226] usb 1-1: USB disconnect, device number 11 [ 218.968910][ T1226] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 218.973318][ T5957] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 219.005968][ T5957] usb 2-1: config 0 has no interface number 0 [ 219.025472][ T5957] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 219.039992][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.049621][ T5957] usb 2-1: Product: syz [ 219.053873][ T5957] usb 2-1: Manufacturer: syz [ 219.071837][ T5957] usb 2-1: SerialNumber: syz [ 219.100526][ T5957] usb 2-1: config 0 descriptor?? [ 219.283471][ T5930] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 219.475291][ T5930] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 219.496587][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 219.528003][ T5957] usb 2-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 219.543642][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 219.557661][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 219.571355][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.585424][ T5930] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.594823][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.604133][ T8816] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1037'. [ 219.624016][ T5930] usb 4-1: config 0 descriptor?? [ 219.631010][ T8799] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 219.766065][ T5957] usb 2-1: Read permanent extended address 12:f9:c1:d4:f3:7c:d3:db from device [ 219.798947][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1038'. [ 219.856514][ T8822] vxlan0: entered promiscuous mode [ 219.860071][ T8825] loop6: detected capacity change from 0 to 1 [ 219.871191][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.881397][ T6091] Dev loop6: unable to read RDB block 1 [ 219.886235][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.887721][ T6091] loop6: unable to read partition table [ 219.902079][ T6091] loop6: partition table beyond EOD, truncated [ 219.911191][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.927219][ T8825] Dev loop6: unable to read RDB block 1 [ 219.928412][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.933233][ T8825] loop6: unable to read partition table [ 219.951207][ T8825] loop6: partition table beyond EOD, truncated [ 219.958048][ T8825] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 220.001119][ T5957] usb 2-1: USB disconnect, device number 14 [ 220.043087][ T1226] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 220.071375][ T5930] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 220.105317][ T5930] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 220.207096][ T1226] usb 6-1: Using ep0 maxpacket: 16 [ 220.218604][ T1226] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.238100][ T1226] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.273847][ T1226] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 220.301435][ T1226] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 220.315881][ T1226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.331599][ T5930] usb 4-1: USB disconnect, device number 19 [ 220.358353][ T1226] usb 6-1: config 0 descriptor?? [ 220.824988][ T1226] HID 045e:07da: Invalid code 65791 type 1 [ 220.863760][ T1226] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000A/input/input11 [ 220.876886][ T5930] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 220.941945][ T1226] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 221.046827][ T5930] usb 1-1: Using ep0 maxpacket: 8 [ 221.065621][ T5930] usb 1-1: config 162 has an invalid interface number: 251 but max is 1 [ 221.095523][ T5930] usb 1-1: config 162 has an invalid interface number: 209 but max is 1 [ 221.123208][ T5930] usb 1-1: config 162 has no interface number 0 [ 221.142706][ T5930] usb 1-1: config 162 has no interface number 1 [ 221.176442][ T5930] usb 1-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 221.221012][ T1226] usb 6-1: USB disconnect, device number 16 [ 221.235547][ T5930] usb 1-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 221.283916][ T5930] usb 1-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 221.299486][ T5930] usb 1-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 221.352795][ T5930] usb 1-1: config 162 interface 209 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 221.388395][ T5930] usb 1-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 221.450618][ T5930] usb 1-1: config 162 interface 251 has no altsetting 0 [ 221.466445][ T5930] usb 1-1: config 162 interface 209 has no altsetting 0 [ 221.478936][ T5930] usb 1-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88 [ 221.496972][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.515614][ T5930] usb 1-1: Product: syz [ 221.525794][ T5930] usb 1-1: Manufacturer: syz [ 221.534691][ T5930] usb 1-1: SerialNumber: syz [ 221.800961][ T5930] io_edgeport 1-1:162.251: required endpoints missing [ 221.904133][ T8869] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.911852][ T8869] IPv6: NLM_F_CREATE should be set when creating new route [ 221.999999][ T5930] io_edgeport 1-1:162.209: Edgeport 2 port adapter converter detected [ 222.076787][ T7324] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 222.188490][ T1216] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 222.272253][ T7324] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 222.281929][ T7324] usb 6-1: config 0 has no interface number 0 [ 222.291720][ T7324] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 222.305348][ T7324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.314157][ T7324] usb 6-1: Product: syz [ 222.319397][ T7324] usb 6-1: Manufacturer: syz [ 222.324230][ T7324] usb 6-1: SerialNumber: syz [ 222.333569][ T7324] usb 6-1: config 0 descriptor?? [ 222.366761][ T1216] usb 4-1: Using ep0 maxpacket: 8 [ 222.376392][ T1216] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 222.384943][ T1216] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 222.397989][ T1216] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 222.413625][ T5930] usb 1-1: у detected [ 222.418056][ T1216] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 222.430705][ T1216] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 222.443088][ T1216] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 222.455224][ T1216] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 222.476835][ T5957] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 222.484690][ T1216] usb 4-1: config 168 interface 0 has no altsetting 0 [ 222.496799][ T1216] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 222.505368][ T1216] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 222.518435][ T1216] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 222.530296][ T1216] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 222.542688][ T1216] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 222.554493][ T1216] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 222.577572][ T1216] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 222.592485][ T1216] usb 4-1: config 168 interface 0 has no altsetting 0 [ 222.608366][ T1216] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 222.626170][ T5930] usb 1-1: Edgeport 2 port adapter converter now attached to ttyUSB0 [ 222.635720][ T1216] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 222.657487][ T5930] usb 1-1: Edgeport 2 port adapter converter now attached to ttyUSB1 [ 222.670040][ T1216] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 222.689998][ T5957] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 222.699659][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.722870][ T5957] usb 5-1: Product: syz [ 222.732983][ T1216] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 222.746430][ T5957] usb 5-1: Manufacturer: syz [ 222.751962][ T5957] usb 5-1: SerialNumber: syz [ 222.756779][ T1216] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 222.775051][ T5957] usb 5-1: config 0 descriptor?? [ 222.780283][ T7324] usb 6-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 222.785909][ T1216] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 222.803306][ T1216] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 222.860202][ T5957] ch341 5-1:0.0: ch341-uart converter detected [ 222.897024][ T1216] usb 4-1: config 168 interface 0 has no altsetting 0 [ 222.924547][ T1216] usb 4-1: string descriptor 0 read error: -22 [ 222.947322][ T1216] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 222.965730][ T1216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.982271][ T7324] usb 6-1: Read permanent extended address 12:f9:c1:d4:f3:7c:d3:db from device [ 222.985186][ T5930] usb 1-1: USB disconnect, device number 12 [ 222.985255][ C1] usb 1-1: edge_interrupt_callback - Error -19 submitting control urb [ 223.006994][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.060300][ T1216] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 223.145162][ T5930] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0 [ 223.183995][ T5930] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1 [ 223.199597][ T7324] usb 6-1: USB disconnect, device number 17 [ 223.210025][ T5930] io_edgeport 1-1:162.209: device disconnected [ 223.725268][ T8897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1071'. [ 223.740190][ T8897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1071'. [ 223.852398][ T5957] ch341-uart ttyUSB2: break control not supported, using simulated break [ 223.874431][ T5957] usb 5-1: ch341-uart converter now attached to ttyUSB2 [ 223.892962][ T5957] usb 5-1: USB disconnect, device number 17 [ 223.910996][ T5957] ch341-uart ttyUSB2: ch341-uart converter now disconnected from ttyUSB2 [ 223.922792][ T5957] ch341 5-1:0.0: device disconnected [ 224.981051][ T7324] usb 4-1: USB disconnect, device number 20 [ 225.101865][ T8916] netlink: 'syz.3.1078': attribute type 11 has an invalid length. [ 225.158612][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.239841][ T5957] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 225.408794][ T5957] usb 1-1: Using ep0 maxpacket: 8 [ 225.423901][ T5957] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 225.433458][ T5957] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.443949][ T5957] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.454247][ T5957] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.464472][ T5957] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.486242][ T5957] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 225.495635][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.721744][ T5957] usb 1-1: GET_CAPABILITIES returned 0 [ 225.728020][ T5957] usbtmc 1-1:16.0: can't read capabilities [ 226.056132][ T8913] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 226.057311][ T9] usb 1-1: USB disconnect, device number 13 [ 226.926761][ T5957] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 227.091150][ T5957] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.128539][ T5957] usb 5-1: config 0 has no interfaces? [ 227.147514][ T5957] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 227.160464][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.181451][ T5957] usb 5-1: config 0 descriptor?? [ 227.236815][ T5875] Bluetooth: hci3: command 0x0406 tx timeout [ 227.262944][ T5930] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 227.428179][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.634024][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.684643][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.738528][ T5930] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.782899][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.846525][ T9] usb 5-1: USB disconnect, device number 18 [ 227.847930][ T5930] usb 2-1: config 0 descriptor?? [ 228.310942][ T5930] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 228.336430][ T5930] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 229.305086][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1113'. [ 230.017388][ T44] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 230.167121][ T5938] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 230.188717][ T44] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 230.207304][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.225940][ T44] usb 1-1: config 0 descriptor?? [ 230.337656][ T5938] usb 4-1: Using ep0 maxpacket: 16 [ 230.348957][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.370714][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.396739][ T5938] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.409859][ T5938] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 230.422156][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.449212][ T7324] usb 2-1: USB disconnect, device number 15 [ 230.449990][ T5938] usb 4-1: config 0 descriptor?? [ 230.497113][ T44] kaweth 1-1:0.0: Firmware present in device. [ 230.668064][ T44] kaweth 1-1:0.0: Statistics collection: 0 [ 230.675857][ T44] kaweth 1-1:0.0: Multicast filter limit: 0 [ 230.709612][ T44] kaweth 1-1:0.0: MTU: 0 [ 230.713941][ T44] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 230.915357][ T5938] HID 045e:07da: Invalid code 65791 type 1 [ 230.932523][ T5938] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000C/input/input12 [ 230.964639][ T5938] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 231.222281][ T5867] usb 4-1: USB disconnect, device number 21 [ 231.238630][ T9031] binder: 9028:9031 ioctl c0306201 80001a80 returned -14 [ 231.306785][ T44] kaweth 1-1:0.0: kaweth interface created at eth5 [ 231.486294][ T44] usb 1-1: USB disconnect, device number 14 [ 232.270990][ T9070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1137'. [ 233.756957][ T1226] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 233.942563][ T1226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.967245][ T5867] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 233.986276][ T1226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.013950][ T1226] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 234.305221][ T1226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.327617][ T1226] usb 4-1: config 0 descriptor?? [ 234.381754][ T5867] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 234.396752][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.415499][ T5867] usb 6-1: Product: syz [ 234.432405][ T5867] usb 6-1: Manufacturer: syz [ 234.456746][ T5867] usb 6-1: SerialNumber: syz [ 234.470494][ T5867] usb 6-1: config 0 descriptor?? [ 234.502472][ T5867] ch341 6-1:0.0: ch341-uart converter detected [ 234.764783][ T1226] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 234.858111][ T1226] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000D/input/input14 [ 235.112500][ T1226] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 235.200310][ T1226] usb 4-1: USB disconnect, device number 22 [ 235.243775][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1160'. [ 235.281043][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1160'. [ 235.495154][ T9144] fido_id[9144]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 235.540585][ T5867] ch341-uart ttyUSB0: failed to read break control: -71 [ 235.551790][ T5867] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 235.576779][ T5867] usb 6-1: USB disconnect, device number 18 [ 235.588158][ T7324] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 235.623771][ T5867] ch341 6-1:0.0: device disconnected [ 235.777231][ T7324] usb 2-1: Using ep0 maxpacket: 8 [ 235.798919][ T7324] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 235.807456][ T7324] usb 2-1: config 0 has no interface number 0 [ 235.836904][ T7324] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 235.862711][ T7324] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 235.888792][ T7324] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 235.902980][ T7324] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 235.917067][ T7324] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 235.930049][ T7324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.941948][ T7324] usb 2-1: config 0 descriptor?? [ 235.985078][ T7324] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 236.126869][ T1226] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 236.297234][ T1226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.309062][ T1226] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 236.320202][ T1226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.357432][ T1226] usb 1-1: config 0 descriptor?? [ 236.598608][ T1226] usbhid 1-1:0.0: can't add hid device: -71 [ 236.620291][ T1226] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 236.687193][ T1226] usb 1-1: USB disconnect, device number 15 [ 237.076151][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 237.076171][ T30] audit: type=1326 audit(1755052001.091:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9183 comm="syz.5.1176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 237.286979][ T1226] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 237.363486][ T30] audit: type=1326 audit(1755052001.091:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9183 comm="syz.5.1176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 237.534988][ T1226] usb 1-1: Using ep0 maxpacket: 32 [ 237.554349][ T30] audit: type=1326 audit(1755052001.131:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9183 comm="syz.5.1176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 237.601422][ T1226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.710138][ T1226] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 237.777488][ T30] audit: type=1326 audit(1755052001.131:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9183 comm="syz.5.1176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 237.802361][ T1226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.872562][ T1226] usb 1-1: config 0 descriptor?? [ 237.933261][ T1226] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 237.979727][ T30] audit: type=1326 audit(1755052001.131:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9183 comm="syz.5.1176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 238.093681][ T1226] ldusb 1-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 238.216820][ T30] audit: type=1326 audit(1755052001.141:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9183 comm="syz.5.1176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 238.286552][ T1226] usb 2-1: USB disconnect, device number 16 [ 238.292800][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 238.374543][ T1226] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 238.413360][ T30] audit: type=1326 audit(1755052001.141:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9183 comm="syz.5.1176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 238.563637][ T30] audit: type=1326 audit(1755052001.141:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9183 comm="syz.5.1176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=401 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 238.635009][ T9159] ldusb: No device or device unplugged -19 [ 238.691911][ T30] audit: type=1326 audit(1755052001.141:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9183 comm="syz.5.1176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 239.774752][ T9] usb 1-1: USB disconnect, device number 16 [ 239.804213][ T9] ldusb 1-1:0.0: LD USB Device #1 now disconnected [ 240.176743][ T5867] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 240.224294][ T1226] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 240.230739][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888055aeb000: rx timeout, send abort [ 240.397001][ T5867] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 240.436913][ T1226] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 240.448267][ T5867] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 240.465066][ T1226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.484228][ T5867] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 240.521996][ T1226] usb 6-1: config 0 descriptor?? [ 240.543469][ T1226] gspca_main: spca508-2.14.0 probing 8086:0110 [ 240.566221][ T5867] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 240.607019][ T5867] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 240.684404][ T5867] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 240.716758][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 240.724946][ T5867] usb 2-1: Product: syz [ 240.740347][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888055aeb000: abort rx timeout. Force session deactivation [ 240.755533][ T1226] gspca_spca508: reg_read err -32 [ 240.772651][ T5867] usb 2-1: Manufacturer: syz [ 240.783159][ T1226] gspca_spca508: reg_read err -32 [ 240.811858][ T1226] gspca_spca508: reg_read err -32 [ 240.822804][ T5867] cdc_wdm 2-1:1.0: skipping garbage [ 240.831245][ T1226] gspca_spca508: reg_read err -32 [ 240.846794][ T5867] cdc_wdm 2-1:1.0: skipping garbage [ 240.876993][ T5867] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 240.883026][ T5867] cdc_wdm 2-1:1.0: Unknown control protocol [ 241.055747][ T1226] gspca_spca508: reg write: error -71 [ 241.084399][ T1226] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 241.145643][ T1226] usb 6-1: USB disconnect, device number 19 [ 241.183722][ T5867] usb 2-1: USB disconnect, device number 17 [ 241.709931][ T9263] process 'syz.3.1209' launched './file2' with NULL argv: empty string added [ 241.819279][ T1226] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 241.936764][ T7324] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 241.991798][ T1226] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 242.002728][ T1226] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 242.039282][ T1226] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 242.056205][ T1226] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 242.070928][ T1226] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 242.093693][ T1226] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 242.111659][ T1226] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 242.122527][ T7324] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 242.145119][ T1226] usb 2-1: Product: syz [ 242.149598][ T7324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.158443][ T1226] usb 2-1: Manufacturer: syz [ 242.174556][ T7324] usb 6-1: Product: syz [ 242.184741][ T1226] cdc_wdm 2-1:1.0: skipping garbage [ 242.192242][ T7324] usb 6-1: Manufacturer: syz [ 242.197057][ T1226] cdc_wdm 2-1:1.0: skipping garbage [ 242.203193][ T7324] usb 6-1: SerialNumber: syz [ 242.213684][ T1226] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 242.220216][ T1226] cdc_wdm 2-1:1.0: Unknown control protocol [ 242.230083][ T7324] usb 6-1: config 0 descriptor?? [ 242.409639][ T5938] usb 2-1: USB disconnect, device number 18 [ 242.458434][ T7324] usb 6-1: ignoring: probably an ADSL modem [ 242.870296][ T7324] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 242.890739][ T9291] loop6: detected capacity change from 0 to 63 [ 242.905864][ T9291] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.915915][ T9291] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.929513][ T9291] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.940064][ T9291] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.954399][ T9294] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 242.983076][ T9291] Buffer I/O error on dev loop6, logical block 2, async page read [ 243.021116][ T9294] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 243.037457][ T9291] Buffer I/O error on dev loop6, logical block 3, async page read [ 243.068021][ T9291] loop6: unable to read partition table [ 243.078064][ T9291] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 243.092007][ T7324] usb 6-1: USB disconnect, device number 20 [ 243.093890][ T6018] Buffer I/O error on dev loop6, logical block 2, async page read [ 243.147830][ T6018] Buffer I/O error on dev loop6, logical block 3, async page read [ 243.363218][ T9306] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1228'. [ 244.121065][ T9341] netlink: 'syz.5.1242': attribute type 2 has an invalid length. [ 244.136186][ T9341] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1242'. [ 244.152548][ T9341] netlink: 'syz.5.1242': attribute type 2 has an invalid length. [ 244.161477][ T9341] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1242'. [ 244.939494][ T9369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1254'. [ 248.021542][ T9458] input: syz1 as /devices/virtual/input/input16 [ 248.037050][ T7324] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 248.254162][ T7324] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.295017][ T7324] usb 2-1: config 0 has no interfaces? [ 248.306711][ T7324] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 248.353557][ T7324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.395177][ T7324] usb 2-1: config 0 descriptor?? [ 248.986814][ T7324] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 249.177439][ T7324] usb 5-1: unable to get BOS descriptor or descriptor too short [ 249.206974][ T7324] usb 5-1: not running at top speed; connect to a high speed hub [ 249.217264][ T7324] usb 5-1: config 13 has an invalid interface number: 90 but max is 0 [ 249.237524][ T7324] usb 5-1: config 13 has no interface number 0 [ 249.244036][ T7324] usb 5-1: config 13 interface 90 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 249.280331][ T1226] usb 2-1: USB disconnect, device number 19 [ 249.339260][ T7324] usb 5-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=81.b7 [ 249.369513][ T7324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.396010][ T7324] usb 5-1: Product: syz [ 249.400705][ T7324] usb 5-1: Manufacturer: syz [ 249.405526][ T7324] usb 5-1: SerialNumber: syz [ 249.665200][ T7324] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.741421][ T7324] snd-usb-audio 5-1:13.90: probe with driver snd-usb-audio failed with error -2 [ 249.780492][ T7324] usb 5-1: USB disconnect, device number 19 [ 249.840145][ T6018] udevd[6018]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.90/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.324001][ T9496] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1299'. [ 250.510306][ T9496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.524566][ T9496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.542554][ T9496] bond0 (unregistering): Released all slaves [ 251.181756][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 251.386837][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 251.395960][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.413494][ T9] usb 4-1: Product: syz [ 251.418097][ T9] usb 4-1: Manufacturer: syz [ 251.425473][ T9] usb 4-1: SerialNumber: syz [ 251.433826][ T9] usb 4-1: config 0 descriptor?? [ 251.460173][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 251.647085][ T7324] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 251.834739][ T9542] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 251.856122][ T7324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.869289][ T7324] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 251.880269][ T7324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.905515][ T7324] usb 5-1: config 0 descriptor?? [ 252.154968][ T7324] usbhid 5-1:0.0: can't add hid device: -71 [ 252.177467][ T7324] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 252.224445][ T7324] usb 5-1: USB disconnect, device number 20 [ 252.725686][ T9] gspca_sunplus: reg_r err -71 [ 252.730877][ T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 252.752276][ T9] usb 4-1: USB disconnect, device number 23 [ 252.812045][ T7324] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 253.006753][ T7324] usb 5-1: Using ep0 maxpacket: 32 [ 253.027318][ T7324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.059283][ T7324] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 253.091762][ T7324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.160345][ T7324] usb 5-1: config 0 descriptor?? [ 253.247038][ T7324] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 253.276338][ T7324] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 253.416775][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 253.524239][ C0] ldusb 5-1:0.0: Ring buffer overflow, 8 bytes dropped [ 253.862797][ C0] ldusb 5-1:0.0: Ring buffer overflow, 8 bytes dropped [ 254.337072][ T9580] capability: warning: `syz.0.1343' uses deprecated v2 capabilities in a way that may be insecure [ 254.730513][ T9] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 254.920744][ T9] usb 1-1: config 0 has an invalid interface number: 152 but max is 0 [ 254.929354][ T9] usb 1-1: config 0 has no interface number 0 [ 254.935521][ T9] usb 1-1: config 0 interface 152 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 254.952734][ T5957] usb 5-1: USB disconnect, device number 21 [ 254.994353][ T5957] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 254.996716][ T9] usb 1-1: config 0 interface 152 has no altsetting 0 [ 255.029526][ T9] usb 1-1: New USB device found, idVendor=0e7e, idProduct=1001, bcdDevice=a3.17 [ 255.041778][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.064287][ T9] usb 1-1: Product: syz [ 255.080301][ T9] usb 1-1: Manufacturer: syz [ 255.105471][ T9] usb 1-1: SerialNumber: syz [ 255.124552][ T9] usb 1-1: config 0 descriptor?? [ 255.147523][ T9580] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 255.423574][ T9580] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 255.516850][ T9] cdc_subset 1-1:0.152 usb0: register 'cdc_subset' at usb-dummy_hcd.0-1, Yopy, 16:df:1f:26:80:57 [ 255.808766][ T5957] usb 1-1: USB disconnect, device number 17 [ 255.827406][ T5957] cdc_subset 1-1:0.152 usb0: unregister 'cdc_subset' usb-dummy_hcd.0-1, Yopy [ 256.197246][ T30] audit: type=1326 audit(1755052020.211:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz.1.1354" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f18539 code=0x0 [ 257.254496][ T9668] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 258.592911][ T9705] netlink: 'syz.5.1372': attribute type 3 has an invalid length. [ 259.264984][ T5957] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 259.438468][ T5957] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.467970][ T5957] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.502886][ T5957] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 259.527415][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 259.553603][ T5957] usb 4-1: SerialNumber: syz [ 259.613876][ T5930] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 259.782536][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 259.792161][ T5957] usb 4-1: 0:2 : does not exist [ 259.812690][ T5930] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 259.834507][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.852939][ T5957] usb 4-1: USB disconnect, device number 24 [ 259.864418][ T5930] usb 2-1: Product: syz [ 259.875902][ T5930] usb 2-1: Manufacturer: syz [ 259.887501][ T5930] usb 2-1: SerialNumber: syz [ 259.905010][ T5930] usb 2-1: config 0 descriptor?? [ 259.942429][ T6091] udevd[6091]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.151911][ T5930] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 260.468106][ T1216] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 260.659336][ T1216] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.673662][ T1216] usb 6-1: config 0 has no interfaces? [ 260.681309][ T1216] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 260.691449][ T1216] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.714092][ T1216] usb 6-1: config 0 descriptor?? [ 260.789911][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1398'. [ 260.897587][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 261.001088][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.009520][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.076979][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 261.091741][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 261.101693][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.124501][ T5863] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 261.134873][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.136950][ T1216] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 261.166330][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.166945][ T5930] gspca_sunplus: reg_w_riv err -71 [ 261.178391][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.200147][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 261.209735][ T5930] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 261.217486][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.246968][ T5930] usb 2-1: USB disconnect, device number 20 [ 261.282508][ T5957] usb 6-1: USB disconnect, device number 21 [ 261.330419][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.341646][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.353618][ T5863] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 261.363020][ T1216] usb 4-1: Using ep0 maxpacket: 16 [ 261.363587][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.379100][ T1216] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.380934][ T5863] usb 5-1: config 0 descriptor?? [ 261.394079][ T1216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 261.412666][ T1216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 261.425139][ T1216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 261.435589][ T1216] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.456540][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 261.460254][ T1216] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 261.470337][ T9] usbtmc 1-1:16.0: can't read capabilities [ 261.472010][ T1216] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 261.497459][ T1216] usb 4-1: Manufacturer: syz [ 261.514907][ T1216] usb 4-1: config 0 descriptor?? [ 261.783008][ T9761] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 261.797076][ T5930] usb 1-1: USB disconnect, device number 18 [ 261.801259][ T9770] usbtmc 1-1:16.0: usbtmc488_ioctl_trigger returned -19 [ 261.824219][ T5863] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 261.836876][ T1216] rc_core: IR keymap rc-hauppauge not found [ 261.863143][ T5863] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 261.864301][ T1216] Registered IR keymap rc-empty [ 261.895535][ T5863] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.000E/input/input18 [ 261.926421][ T1216] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 261.959492][ T1216] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 261.968830][ T5863] cm6533_jd 0003:0D8C:0022.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 262.009374][ T1216] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 262.047657][ T5863] usb 5-1: USB disconnect, device number 22 [ 262.094726][ T1216] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 262.157215][ T1216] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.206791][ T1216] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.225566][ T9779] fido_id[9779]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 262.241538][ T1216] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.269683][ T1216] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.296894][ T1216] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.316895][ T1216] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.357173][ T1216] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.377025][ T1216] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.399051][ T1216] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.418462][ T1216] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.442712][ T1216] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 262.453251][ T1216] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 262.469198][ T1216] usb 4-1: USB disconnect, device number 25 [ 262.541484][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 262.730144][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.746222][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.770686][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 262.783142][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 262.792398][ T9] usb 2-1: SerialNumber: syz [ 262.926941][ T5957] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 262.927918][ T5867] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 263.020871][ T9] usb 2-1: 0:2 : does not exist [ 263.071033][ T9] usb 2-1: USB disconnect, device number 21 [ 263.097349][ T5957] usb 6-1: Using ep0 maxpacket: 32 [ 263.107170][ T5867] usb 5-1: config 0 has no interfaces? [ 263.115944][ T5957] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 263.137537][ T6018] udevd[6018]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.153209][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.155560][ T5867] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 263.200533][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.216985][ T5867] usb 5-1: Product: syz [ 263.222160][ T5867] usb 5-1: Manufacturer: syz [ 263.233612][ T5957] usb 6-1: config 0 descriptor?? [ 263.253670][ T5957] gspca_main: sq930x-2.14.0 probing 041e:403c [ 263.260642][ T5867] usb 5-1: SerialNumber: syz [ 263.279067][ T5867] r8152-cfgselector 5-1: Unknown version 0x0000 [ 263.295781][ T5867] r8152-cfgselector 5-1: config 0 descriptor?? [ 263.547835][ T5867] r8152-cfgselector 5-1: USB disconnect, device number 23 [ 263.761892][ T9816] pim6reg1: entered promiscuous mode [ 263.767459][ T9816] pim6reg1: entered allmulticast mode [ 264.097059][ T9828] input: syz1 as /devices/virtual/input/input19 [ 264.506948][ T5957] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 264.532063][ T5957] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 264.550093][ T5957] usb 6-1: USB disconnect, device number 22 [ 266.347871][ T9878] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1441'. [ 266.386174][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1440'. [ 267.100205][ T9878] bridge0: port 3(macvlan2) entered disabled state [ 267.149620][ T9890] loop6: detected capacity change from 0 to 1 [ 267.153787][ T9878] macvlan2 (unregistering): left promiscuous mode [ 267.171038][ T9890] Dev loop6: unable to read RDB block 1 [ 267.176265][ T9878] bridge0: port 3(macvlan2) entered disabled state [ 267.184312][ T9890] loop6: AHDI p1 p3 [ 267.194511][ T9890] loop6: partition table partially beyond EOD, truncated [ 267.211068][ T9890] loop6: p3 start 663044492 is beyond EOD, truncated [ 267.221039][ T9878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.236331][ T9878] bond_slave_0: left promiscuous mode [ 267.251962][ T9878] bond_slave_0: left allmulticast mode [ 267.287556][ T9878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.306083][ T9878] bond_slave_1: left promiscuous mode [ 267.320231][ T9878] bond_slave_1: left allmulticast mode [ 267.339719][ T9878] bond0 (unregistering): Released all slaves [ 267.624095][ T9904] binder: 9903:9904 ioctl c0306201 800003c0 returned -14 [ 267.721097][ T9908] tls_set_device_offload: netdev not found [ 268.354800][ T30] audit: type=1804 audit(1755052032.371:56): pid=9938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1465" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=30030 res=1 errno=0 [ 268.689241][ T9947] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1470'. [ 268.720145][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1470'. [ 268.749257][ T9947] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1470'. [ 268.766738][ T9947] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1470'. [ 268.953889][ T9957] loop2: detected capacity change from 0 to 7 [ 268.964547][ T6018] Dev loop2: unable to read RDB block 7 [ 268.979636][ T6018] loop2: unable to read partition table [ 268.985927][ T9952] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1472'. [ 269.003076][ T9956] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 269.010383][ T6018] loop2: partition table beyond EOD, truncated [ 269.024337][ T9956] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 269.036404][ T9957] Dev loop2: unable to read RDB block 7 [ 269.046793][ T9957] loop2: unable to read partition table [ 269.059276][ T9957] loop2: partition table beyond EOD, truncated [ 269.073741][ T9957] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 269.083689][ T9956] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 269.091508][ T9956] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 269.129436][ T9956] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 269.153794][ T9956] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 269.203965][ T9956] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 269.221417][ T9956] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 269.257497][ T9956] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 269.265080][ T9956] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 269.640141][ T5930] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 269.683098][ T5930] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 270.271529][ T9992] netlink: 'syz.0.1489': attribute type 11 has an invalid length. [ 271.077482][ T5864] Bluetooth: hci2: command 0x0406 tx timeout [ 271.077645][ T5875] Bluetooth: hci0: command 0x0406 tx timeout [ 271.157182][ T5875] Bluetooth: hci1: command 0x0406 tx timeout [ 271.236768][ T5875] Bluetooth: hci4: command 0x0406 tx timeout [ 271.316841][ T5875] Bluetooth: hci3: command 0x0406 tx timeout [ 271.983667][T10039] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 271.990858][T10039] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 272.725764][T10053] binder: 10052:10053 ioctl 40046205 0 returned -22 [ 273.157845][ T5875] Bluetooth: hci0: command 0x0406 tx timeout [ 273.160518][ T5864] Bluetooth: hci2: command 0x0406 tx timeout [ 273.236788][ T5864] Bluetooth: hci1: command 0x0406 tx timeout [ 273.327070][ T5864] Bluetooth: hci4: command 0x0406 tx timeout [ 273.398534][ T5864] Bluetooth: hci3: command 0x0406 tx timeout [ 273.702160][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 273.723950][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 273.732953][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 273.742333][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 273.751502][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.037418][ T44] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 274.197021][ T5930] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 274.217762][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 274.228632][ T44] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 274.243583][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.261700][ T44] usb 4-1: config 0 descriptor?? [ 274.271290][ T44] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 274.406955][ T5930] usb 5-1: Using ep0 maxpacket: 16 [ 274.415100][ T5930] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.433169][T10083] chnl_net:caif_netlink_parms(): no params data found [ 274.445114][ T5930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.457661][ T5930] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.467208][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.482864][ T5930] usb 5-1: Product: syz [ 274.487625][ T5930] usb 5-1: Manufacturer: syz [ 274.492583][ T5930] usb 5-1: SerialNumber: syz [ 274.713832][ T5930] usb 5-1: 0:2 : does not exist [ 274.730893][T10083] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.739437][ T5930] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 274.747424][T10083] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.755355][T10083] bridge_slave_0: entered allmulticast mode [ 274.765092][T10083] bridge_slave_0: entered promiscuous mode [ 274.774984][T10083] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.782809][T10083] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.814501][T10083] bridge_slave_1: entered allmulticast mode [ 274.827928][T10083] bridge_slave_1: entered promiscuous mode [ 274.857266][ T5930] usb 5-1: USB disconnect, device number 24 [ 274.943803][ T6018] udevd[6018]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.086282][T10083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.120909][T10083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.223385][T10083] team0: Port device team_slave_0 added [ 275.327917][T10083] team0: Port device team_slave_1 added [ 275.472117][T10083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.496772][T10083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.497876][ T44] gspca_nw80x: reg_w err -71 [ 275.579639][T10083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.595383][ T44] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 275.609687][T10083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.617802][T10083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.627218][ T44] usb 4-1: USB disconnect, device number 26 [ 275.690507][T10083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.808886][ T5875] Bluetooth: hci0: command tx timeout [ 275.902014][T10083] hsr_slave_0: entered promiscuous mode [ 275.918875][T10083] hsr_slave_1: entered promiscuous mode [ 275.925504][T10083] debugfs: 'hsr0' already exists in 'hsr' [ 275.931498][T10083] Cannot create hsr debugfs directory [ 276.305452][T10083] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.368850][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 276.434741][T10083] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.537989][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 276.543464][T10083] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.557167][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 276.574355][ T9] usb 1-1: config 0 has no interface number 0 [ 276.587581][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 276.599184][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.609246][ T9] usb 1-1: Product: syz [ 276.614037][ T9] usb 1-1: Manufacturer: syz [ 276.624039][ T9] usb 1-1: SerialNumber: syz [ 276.641305][ T9] usb 1-1: config 0 descriptor?? [ 276.661514][T10083] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.685305][ T9] smsc95xx v2.0.0 [ 277.029374][T10083] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 277.054179][T10083] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 277.078462][T10083] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 277.125145][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 277.142273][T10083] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 277.158058][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 277.431766][T10083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.481811][T10083] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.501486][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.508737][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.521426][ T5930] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 277.538776][ T4552] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.546051][ T4552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.677607][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 277.695210][ T5930] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 277.706739][T10083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.716887][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.739987][ T5930] usb 5-1: Product: syz [ 277.745429][ T5930] usb 5-1: Manufacturer: syz [ 277.754643][ T5930] usb 5-1: SerialNumber: syz [ 277.771743][ T5930] usb 5-1: config 0 descriptor?? [ 277.787966][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 277.806217][ T5930] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 277.829056][ T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 277.834954][T10083] veth0_vlan: entered promiscuous mode [ 277.862650][ T9] usb 1-1: USB disconnect, device number 19 [ 277.873304][T10083] veth1_vlan: entered promiscuous mode [ 277.879600][ T5875] Bluetooth: hci0: command tx timeout [ 277.985248][T10083] veth0_macvtap: entered promiscuous mode [ 277.998639][T10083] veth1_macvtap: entered promiscuous mode [ 278.034793][T10083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.063446][T10083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.093572][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.104206][T10188] loop8: detected capacity change from 0 to 7 [ 278.120562][T10188] Dev loop8: unable to read RDB block 7 [ 278.120782][ T2970] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.128973][T10188] loop8: AHDI p1 p2 p3 [ 278.149379][T10188] loop8: partition table partially beyond EOD, truncated [ 278.149438][ T2970] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.157043][T10188] loop8: p1 start 1601398130 is beyond EOD, truncated [ 278.183779][T10188] loop8: p2 start 1702059890 is beyond EOD, truncated [ 278.193392][ T2970] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.235648][ T6018] Dev loop8: unable to read RDB block 7 [ 278.250726][ T6018] loop8: AHDI p1 p2 p3 [ 278.255498][ T6018] loop8: partition table partially beyond EOD, truncated [ 278.264726][ T6018] loop8: p1 start 1601398130 is beyond EOD, truncated [ 278.272235][ T6018] loop8: p2 start 1702059890 is beyond EOD, truncated [ 278.299441][T10189] Dev loop8: unable to read RDB block 7 [ 278.309489][T10189] loop8: AHDI p1 p2 p3 [ 278.327115][T10189] loop8: partition table partially beyond EOD, truncated [ 278.344782][ T4552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.345281][T10189] loop8: p1 start 1601398130 is beyond EOD, [ 278.379546][ T4552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.390118][T10189] truncated [ 278.393340][T10189] loop8: p2 start 1702059890 is beyond EOD, truncated [ 278.420081][T10191] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1572'. [ 278.462275][T10191] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1572'. [ 278.492932][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.531558][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.018821][ T5930] gspca_sonixj: reg_w1 err -71 [ 279.029902][ T5930] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 279.056776][ T44] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 279.075042][ T5930] usb 5-1: USB disconnect, device number 25 [ 279.253413][ T44] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 279.295371][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.311798][ T44] usb 1-1: Product: syz [ 279.316415][ T44] usb 1-1: Manufacturer: syz [ 279.338857][ T44] usb 1-1: SerialNumber: syz [ 279.356507][ T44] usb 1-1: config 0 descriptor?? [ 279.627834][ T1216] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 279.827119][ T1216] usb 2-1: Using ep0 maxpacket: 32 [ 279.841599][ T1216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.892359][ T1216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.925386][ T1216] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 279.947376][ T1216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.957059][ T5875] Bluetooth: hci0: command tx timeout [ 279.987388][ T1216] usb 2-1: config 0 descriptor?? [ 280.008420][ T1216] hub 2-1:0.0: USB hub found [ 280.228434][ T1216] hub 2-1:0.0: 9 ports detected [ 280.246095][ T1216] hub 2-1:0.0: insufficient power available to use all downstream ports [ 280.319007][T10227] loop6: detected capacity change from 0 to 63 [ 280.351108][ T6091] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.364818][ T6091] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.374642][ T6091] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.385505][T10227] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.395743][ T6091] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.404985][ T6091] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.414934][T10227] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.429064][T10227] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.442613][T10227] Buffer I/O error on dev loop6, logical block 0, async page read [ 280.446995][ T1216] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 280.464734][ T1216] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 280.482018][ T1216] usbhid 2-1:0.0: can't add hid device: -71 [ 280.489067][ T1216] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 280.537071][ T1216] usb 2-1: USB disconnect, device number 22 [ 280.626099][ T44] usb 1-1: f81604_read: reg: 100e failed: -EPROTO [ 280.648610][T10231] syzkaller1: entered promiscuous mode [ 280.654640][T10231] syzkaller1: entered allmulticast mode [ 280.675518][ T44] usb 1-1: f81604_read: reg: 200f failed: -EPROTO [ 280.690007][ T44] usb 1-1: USB disconnect, device number 20 [ 280.798171][ T44] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 280.833983][ T5528] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 280.853544][ T5528] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 280.869668][ T44] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 281.727098][ T1216] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 281.866953][ T44] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 281.896757][ T1216] usb 6-1: Using ep0 maxpacket: 32 [ 281.908296][ T1216] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 281.923373][ T1216] usb 6-1: config 0 has no interface number 0 [ 281.946864][ T1216] usb 6-1: config 0 interface 184 has no altsetting 0 [ 281.975734][ T1216] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 281.995569][ T1216] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.020750][ T1216] usb 6-1: Product: syz [ 282.027344][ T1216] usb 6-1: Manufacturer: syz [ 282.032567][ T1216] usb 6-1: SerialNumber: syz [ 282.042297][ T5875] Bluetooth: hci0: command tx timeout [ 282.048904][ T1216] usb 6-1: config 0 descriptor?? [ 282.067406][ T1216] smsc75xx v1.0.0 [ 282.112221][ T44] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 282.131609][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.170499][ T44] usb 2-1: Product: syz [ 282.186043][ T44] usb 2-1: Manufacturer: syz [ 282.207640][ T44] usb 2-1: SerialNumber: syz [ 282.256898][ T44] usb 2-1: config 0 descriptor?? [ 282.296957][ T5957] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 282.456959][ T5957] usb 1-1: Using ep0 maxpacket: 32 [ 282.465656][ T5957] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 282.476095][ T5957] usb 1-1: config 0 has no interface number 0 [ 282.503592][ T5957] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 282.525930][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.551125][ T5957] usb 1-1: Product: syz [ 282.557985][ T5957] usb 1-1: Manufacturer: syz [ 282.562671][ T5957] usb 1-1: SerialNumber: syz [ 282.583751][ T5957] usb 1-1: config 0 descriptor?? [ 282.610771][ T5957] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 282.694185][ T44] airspy 2-1:0.0: Board ID: 00 [ 282.703409][ T44] airspy 2-1:0.0: Firmware version: [ 282.832568][ T5957] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 282.878326][ T5957] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 283.092936][ T1216] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 283.236963][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 283.245329][ T24] usb 1-1: USB disconnect, device number 21 [ 283.264185][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 283.319312][ T1216] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 283.336851][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 283.368760][ T1216] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 283.380548][ T24] quatech2 1-1:0.51: device disconnected [ 283.389330][ T1216] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 283.403861][ T1216] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 283.435103][ T1216] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 283.464260][ T1216] usb 6-1: USB disconnect, device number 23 [ 283.507668][ T44] airspy 2-1:0.0: usb_control_msg() failed -71 request 0f [ 283.564513][ T44] airspy 2-1:0.0: Registered as swradio24 [ 283.572778][ T44] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 283.594920][ T44] usb 2-1: USB disconnect, device number 23 [ 283.766950][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 283.949563][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.966766][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.982359][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 284.004442][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.015163][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.030737][ T24] usb 4-1: config 0 descriptor?? [ 284.481169][ T24] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 284.716727][ T5867] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 284.803112][ T7324] usb 4-1: USB disconnect, device number 27 [ 284.882992][ T5867] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 284.900045][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.915964][ T5867] usb 2-1: config 0 descriptor?? [ 285.006895][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 285.189626][ T24] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 285.201576][ T24] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 285.212643][ T24] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 285.249447][ T24] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 285.279899][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.301353][T10306] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 285.368298][ T5867] elan 0003:04F3:0755.0011: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 285.595622][ T5867] usb 2-1: USB disconnect, device number 24 [ 286.517392][ T1226] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 286.580421][ T30] audit: type=1326 audit(1755052050.601:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10349 comm="syz.5.1635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 286.620271][ T30] audit: type=1326 audit(1755052050.601:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10349 comm="syz.5.1635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=305 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 286.649933][ T30] audit: type=1326 audit(1755052050.601:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10349 comm="syz.5.1635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 286.672564][ T30] audit: type=1326 audit(1755052050.601:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10349 comm="syz.5.1635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 286.706720][ T1226] usb 2-1: Using ep0 maxpacket: 8 [ 286.724487][ T1226] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 286.732987][ T1226] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 286.747879][ T1226] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 286.763085][ T1226] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 286.780996][ T1226] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.815041][ T1226] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 286.820227][ T5957] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 286.833712][ T1226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.919818][ T24] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 286.957210][ T24] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input20 [ 287.006788][ T5957] usb 5-1: Using ep0 maxpacket: 8 [ 287.017069][ T5957] usb 5-1: unable to get BOS descriptor or descriptor too short [ 287.030327][ T5957] usb 5-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30 [ 287.044279][ T5957] usb 5-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 287.059757][ T5957] usb 5-1: config 4 interface 0 has no altsetting 0 [ 287.079366][ T24] usb 1-1: USB disconnect, device number 22 [ 287.085402][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 287.106345][ T1226] usb 2-1: GET_CAPABILITIES returned 0 [ 287.107047][ T5957] usb 5-1: string descriptor 0 read error: -22 [ 287.122534][ T5957] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 287.125191][ T1226] usbtmc 2-1:16.0: can't read capabilities [ 287.136724][ T1216] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 287.163418][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.212945][ T5957] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 287.255595][ T5957] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 287.269905][ T5957] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 287.290568][ T5957] usb 5-1: media controller created [ 287.325108][ T1216] usb 6-1: Using ep0 maxpacket: 16 [ 287.335390][ T1216] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.357955][ T1216] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 287.371851][ T5957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.372673][T10356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1638'. [ 287.391777][ T1216] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 287.393588][T10356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1638'. [ 287.426654][ T1216] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.454114][ T1216] usb 6-1: Product: syz [ 287.466290][ T1216] usb 6-1: Manufacturer: syz [ 287.471801][ T1216] usb 6-1: SerialNumber: syz [ 287.489232][ T5957] zl10353_read_register: readreg error (reg=127, ret==0) [ 287.498896][T10338] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 287.500172][ T5930] usb 2-1: USB disconnect, device number 25 [ 287.684886][ T5957] usb 5-1: USB disconnect, device number 26 [ 287.739390][ T1216] usb 6-1: 0:2 : does not exist [ 287.770233][ T1216] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 287.808086][ T1216] usb 6-1: USB disconnect, device number 24 [ 287.902841][ T6018] udevd[6018]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.437100][ T1216] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 288.619590][ T1216] usb 5-1: Using ep0 maxpacket: 8 [ 288.649224][ T1216] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 288.665506][ T1216] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 288.685917][ T1216] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 288.705983][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055bb7000: rx timeout, send abort [ 288.734221][ T1216] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 288.745126][ T1216] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.762072][ T1216] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 288.773355][ T1216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.932485][T10397] netlink: 'syz.5.1656': attribute type 12 has an invalid length. [ 288.955961][T10397] netlink: 'syz.5.1656': attribute type 29 has an invalid length. [ 288.971069][T10397] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1656'. [ 288.981580][T10397] netlink: 'syz.5.1656': attribute type 2 has an invalid length. [ 289.001018][T10397] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1656'. [ 289.011689][ T1216] usb 5-1: usb_control_msg returned -32 [ 289.017399][ T1216] usbtmc 5-1:16.0: can't read capabilities [ 289.169953][ T5930] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 289.206108][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055bb4000: rx timeout, send abort [ 289.214317][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055bb7000: abort rx timeout. Force session deactivation [ 289.318857][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.342153][ T5930] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 289.355660][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.395050][ T5930] usb 1-1: config 0 descriptor?? [ 289.555884][T10422] IPv4: Oversized IP packet from 127.202.26.0 [ 289.629050][ T5930] usbhid 1-1:0.0: can't add hid device: -71 [ 289.646819][ T5930] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 289.671331][ T5930] usb 1-1: USB disconnect, device number 23 [ 289.674457][ T5867] usb 5-1: USB disconnect, device number 27 [ 289.706181][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055bb4000: abort rx timeout. Force session deactivation [ 290.167011][ T5930] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 290.290747][T10444] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 290.300568][T10444] macsec2: entered allmulticast mode [ 290.306394][T10444] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 290.319508][T10444] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 290.328636][T10444] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 290.358073][ T5930] usb 1-1: Using ep0 maxpacket: 32 [ 290.365461][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.382562][ T5930] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 290.405948][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.452826][ T5930] usb 1-1: config 0 descriptor?? [ 290.489949][ T5930] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 290.525551][ T5930] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 290.838890][ T5930] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 290.944068][ T44] usb 1-1: USB disconnect, device number 24 [ 290.966490][ T44] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 291.001137][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.031463][ T5930] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 291.051189][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.078469][ T5930] usb 4-1: config 0 descriptor?? [ 291.531131][ T5930] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 291.596107][ T5930] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0012/input/input21 [ 291.734340][ T37] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.775270][ T5930] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 291.938965][ T37] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.073446][ T37] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.099598][ C1] [ 292.102007][ C1] ======================================================== [ 292.109229][ C1] WARNING: possible irq lock inversion dependency detected [ 292.116470][ C1] 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 Not tainted [ 292.123595][ C1] -------------------------------------------------------- [ 292.130883][ C1] syz-executor/10468 just changed the state of lock: [ 292.137590][ C1] ffff888022367230 (&dev->event_lock#2){..-.}-{3:3}, at: input_event+0x76/0xe0 [ 292.146598][ C1] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 292.154588][ C1] (tasklist_lock){.+.+}-{3:3} [ 292.154620][ C1] [ 292.154620][ C1] [ 292.154620][ C1] and interrupts could create inverse lock ordering between them. [ 292.154620][ C1] [ 292.173916][ C1] [ 292.173916][ C1] other info that might help us debug this: [ 292.182036][ C1] Chain exists of: [ 292.182036][ C1] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 292.182036][ C1] [ 292.195656][ C1] Possible interrupt unsafe locking scenario: [ 292.195656][ C1] [ 292.203988][ C1] CPU0 CPU1 [ 292.209366][ C1] ---- ---- [ 292.214749][ C1] lock(tasklist_lock); [ 292.219007][ C1] local_irq_disable(); [ 292.225856][ C1] lock(&dev->event_lock#2); [ 292.233077][ C1] lock(&client->buffer_lock); [ 292.240464][ C1] [ 292.243933][ C1] lock(&dev->event_lock#2); [ 292.248816][ C1] [ 292.248816][ C1] *** DEADLOCK *** [ 292.248816][ C1] [ 292.256975][ C1] 2 locks held by syz-executor/10468: [ 292.262356][ C1] #0: ffff888077bac808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x19f/0x3d0 [ 292.271626][ C1] #1: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 292.281480][ C1] [ 292.281480][ C1] the shortest dependencies between 2nd lock and 1st lock: [ 292.290890][ C1] -> (tasklist_lock){.+.+}-{3:3} { [ 292.296391][ C1] HARDIRQ-ON-R at: [ 292.300736][ C1] lock_acquire+0x120/0x360 [ 292.307698][ C1] _raw_read_lock+0x36/0x50 [ 292.314657][ C1] __do_wait+0xde/0x740 [ 292.321215][ C1] do_wait+0x1f8/0x520 [ 292.327743][ C1] kernel_wait+0xab/0x170 [ 292.334440][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 292.342739][ C1] process_scheduled_works+0xade/0x17b0 [ 292.350667][ C1] worker_thread+0x8a0/0xda0 [ 292.357915][ C1] kthread+0x70e/0x8a0 [ 292.364452][ C1] ret_from_fork+0x3f9/0x770 [ 292.371601][ C1] ret_from_fork_asm+0x1a/0x30 [ 292.378841][ C1] SOFTIRQ-ON-R at: [ 292.383276][ C1] lock_acquire+0x120/0x360 [ 292.390174][ C1] _raw_read_lock+0x36/0x50 [ 292.397050][ C1] __do_wait+0xde/0x740 [ 292.403574][ C1] do_wait+0x1f8/0x520 [ 292.410010][ C1] kernel_wait+0xab/0x170 [ 292.416722][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 292.425023][ C1] process_scheduled_works+0xade/0x17b0 [ 292.432940][ C1] worker_thread+0x8a0/0xda0 [ 292.439933][ C1] kthread+0x70e/0x8a0 [ 292.446384][ C1] ret_from_fork+0x3f9/0x770 [ 292.453343][ C1] ret_from_fork_asm+0x1a/0x30 [ 292.460487][ C1] INITIAL USE at: [ 292.464764][ C1] lock_acquire+0x120/0x360 [ 292.471548][ C1] _raw_write_lock_irq+0xa2/0xf0 [ 292.478762][ C1] copy_process+0x224f/0x3c00 [ 292.485718][ C1] kernel_clone+0x21e/0x840 [ 292.492507][ C1] user_mode_thread+0xdd/0x140 [ 292.499550][ C1] rest_init+0x23/0x300 [ 292.505980][ C1] start_kernel+0x3a9/0x410 [ 292.512767][ C1] x86_64_start_reservations+0x24/0x30 [ 292.520517][ C1] x86_64_start_kernel+0x143/0x1c0 [ 292.527928][ C1] common_startup_64+0x13e/0x147 [ 292.535183][ C1] INITIAL READ USE at: [ 292.539877][ C1] lock_acquire+0x120/0x360 [ 292.547102][ C1] _raw_read_lock+0x36/0x50 [ 292.554522][ C1] __do_wait+0xde/0x740 [ 292.561437][ C1] do_wait+0x1f8/0x520 [ 292.568229][ C1] kernel_wait+0xab/0x170 [ 292.575368][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 292.583997][ C1] process_scheduled_works+0xade/0x17b0 [ 292.592269][ C1] worker_thread+0x8a0/0xda0 [ 292.599576][ C1] kthread+0x70e/0x8a0 [ 292.606371][ C1] ret_from_fork+0x3f9/0x770 [ 292.613688][ C1] ret_from_fork_asm+0x1a/0x30 [ 292.621183][ C1] } [ 292.624055][ C1] ... key at: [] tasklist_lock+0x18/0x40 [ 292.632164][ C1] ... acquired at: [ 292.636682][ C1] lock_acquire+0x120/0x360 [ 292.641411][ C1] _raw_read_lock+0x36/0x50 [ 292.646131][ C1] send_sigurg+0x12b/0x420 [ 292.650751][ C1] sk_send_sigurg+0x6c/0x2e0 [ 292.655540][ C1] queue_oob+0x420/0x4f0 [ 292.659985][ C1] unix_stream_sendmsg+0xc3f/0xdf0 [ 292.665392][ C1] __sock_sendmsg+0x21c/0x270 [ 292.670275][ C1] ____sys_sendmsg+0x52d/0x830 [ 292.675228][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 292.680094][ C1] __sys_sendmmsg+0x28e/0x430 [ 292.684975][ C1] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 292.690812][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 292.696225][ C1] do_fast_syscall_32+0x34/0x80 [ 292.701273][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.707793][ C1] [ 292.710210][ C1] -> (&f_owner->lock){....}-{3:3} { [ 292.715703][ C1] INITIAL USE at: [ 292.719875][ C1] lock_acquire+0x120/0x360 [ 292.726498][ C1] _raw_write_lock_irq+0xa2/0xf0 [ 292.733544][ C1] __f_setown+0x67/0x370 [ 292.739888][ C1] do_fcntl+0x15ff/0x1910 [ 292.746315][ C1] do_compat_fcntl64+0x477/0x720 [ 292.753359][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 292.760617][ C1] do_fast_syscall_32+0x34/0x80 [ 292.767610][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.776051][ C1] INITIAL READ USE at: [ 292.780724][ C1] lock_acquire+0x120/0x360 [ 292.787905][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 292.795748][ C1] send_sigurg+0x55/0x420 [ 292.802623][ C1] sk_send_sigurg+0x6c/0x2e0 [ 292.809861][ C1] queue_oob+0x420/0x4f0 [ 292.816651][ C1] unix_stream_sendmsg+0xc3f/0xdf0 [ 292.824300][ C1] __sock_sendmsg+0x21c/0x270 [ 292.831512][ C1] ____sys_sendmsg+0x52d/0x830 [ 292.838814][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 292.846095][ C1] __sys_sendmmsg+0x28e/0x430 [ 292.853340][ C1] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 292.861444][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 292.869141][ C1] do_fast_syscall_32+0x34/0x80 [ 292.876558][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.885512][ C1] } [ 292.888298][ C1] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 292.897445][ C1] ... acquired at: [ 292.901959][ C1] lock_acquire+0x120/0x360 [ 292.906662][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 292.912137][ C1] send_sigio+0x38/0x370 [ 292.916570][ C1] kill_fasync+0x24d/0x4d0 [ 292.921184][ C1] sock_wake_async+0x137/0x160 [ 292.926141][ C1] sk_send_sigurg+0x1f1/0x2e0 [ 292.931021][ C1] queue_oob+0x420/0x4f0 [ 292.935452][ C1] unix_stream_sendmsg+0xc3f/0xdf0 [ 292.940841][ C1] __sock_sendmsg+0x21c/0x270 [ 292.945714][ C1] ____sys_sendmsg+0x52d/0x830 [ 292.950990][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 292.955906][ C1] __sys_sendmmsg+0x28e/0x430 [ 292.960879][ C1] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 292.966635][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 292.972061][ C1] do_fast_syscall_32+0x34/0x80 [ 292.977128][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.983658][ C1] [ 292.986029][ C1] -> (&new->fa_lock){....}-{3:3} { [ 292.991442][ C1] INITIAL USE at: [ 292.995615][ C1] lock_acquire+0x120/0x360 [ 293.002066][ C1] _raw_write_lock_irq+0xa2/0xf0 [ 293.008938][ C1] fasync_remove_entry+0xf1/0x1c0 [ 293.015910][ C1] sock_fasync+0x85/0xf0 [ 293.022098][ C1] __fput+0x8a2/0xa70 [ 293.028013][ C1] task_work_run+0x1d4/0x260 [ 293.034539][ C1] exit_to_user_mode_loop+0xec/0x110 [ 293.041765][ C1] __do_fast_syscall_32+0x1f4/0x2b0 [ 293.048930][ C1] do_fast_syscall_32+0x34/0x80 [ 293.055714][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.063991][ C1] INITIAL READ USE at: [ 293.068523][ C1] lock_acquire+0x120/0x360 [ 293.075411][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 293.083156][ C1] kill_fasync+0x199/0x4d0 [ 293.089940][ C1] sock_wake_async+0x137/0x160 [ 293.097104][ C1] sk_send_sigurg+0x1f1/0x2e0 [ 293.104144][ C1] queue_oob+0x420/0x4f0 [ 293.110860][ C1] unix_stream_sendmsg+0xc3f/0xdf0 [ 293.118333][ C1] __sock_sendmsg+0x21c/0x270 [ 293.125369][ C1] ____sys_sendmsg+0x52d/0x830 [ 293.132488][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 293.139521][ C1] __sys_sendmmsg+0x28e/0x430 [ 293.146648][ C1] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 293.154587][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 293.162085][ C1] do_fast_syscall_32+0x34/0x80 [ 293.169308][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.178006][ C1] } [ 293.180700][ C1] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 293.189595][ C1] ... acquired at: [ 293.193581][ C1] lock_acquire+0x120/0x360 [ 293.198307][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 293.203783][ C1] kill_fasync+0x199/0x4d0 [ 293.208385][ C1] evdev_pass_values+0x627/0xbd0 [ 293.213522][ C1] evdev_events+0x1e6/0x340 [ 293.218215][ C1] input_pass_values+0x285/0x890 [ 293.223372][ C1] input_event_dispose+0x330/0x6b0 [ 293.228676][ C1] input_inject_event+0x1dd/0x340 [ 293.233895][ C1] evdev_write+0x2fc/0x480 [ 293.238507][ C1] vfs_write+0x27b/0xb30 [ 293.242964][ C1] ksys_write+0x145/0x250 [ 293.247486][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 293.252868][ C1] do_fast_syscall_32+0x34/0x80 [ 293.257916][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.264788][ C1] [ 293.267132][ C1] -> (&client->buffer_lock){....}-{3:3} { [ 293.273083][ C1] INITIAL USE at: [ 293.277096][ C1] lock_acquire+0x120/0x360 [ 293.283377][ C1] _raw_spin_lock+0x2e/0x40 [ 293.289697][ C1] evdev_pass_values+0xb9/0xbd0 [ 293.296324][ C1] evdev_events+0x1e6/0x340 [ 293.302588][ C1] input_pass_values+0x285/0x890 [ 293.309287][ C1] input_event_dispose+0x330/0x6b0 [ 293.316156][ C1] input_inject_event+0x1dd/0x340 [ 293.322936][ C1] evdev_write+0x2fc/0x480 [ 293.329113][ C1] vfs_write+0x27b/0xb30 [ 293.335136][ C1] ksys_write+0x145/0x250 [ 293.341313][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 293.348194][ C1] do_fast_syscall_32+0x34/0x80 [ 293.354817][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.362925][ C1] } [ 293.365528][ C1] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 293.373805][ C1] ... acquired at: [ 293.377719][ C1] lock_acquire+0x120/0x360 [ 293.382421][ C1] _raw_spin_lock+0x2e/0x40 [ 293.387115][ C1] evdev_pass_values+0xb9/0xbd0 [ 293.392158][ C1] evdev_events+0x1e6/0x340 [ 293.396858][ C1] input_pass_values+0x285/0x890 [ 293.401999][ C1] input_event_dispose+0x330/0x6b0 [ 293.407297][ C1] input_inject_event+0x1dd/0x340 [ 293.412520][ C1] evdev_write+0x2fc/0x480 [ 293.417147][ C1] vfs_write+0x27b/0xb30 [ 293.421686][ C1] ksys_write+0x145/0x250 [ 293.426218][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 293.431532][ C1] do_fast_syscall_32+0x34/0x80 [ 293.436609][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.443148][ C1] [ 293.445484][ C1] -> (&dev->event_lock#2){..-.}-{3:3} { [ 293.451072][ C1] IN-SOFTIRQ-W at: [ 293.455061][ C1] lock_acquire+0x120/0x360 [ 293.461246][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 293.468143][ C1] input_event+0x76/0xe0 [ 293.474068][ C1] hidinput_hid_event+0x12d7/0x1c90 [ 293.480948][ C1] hid_process_event+0x4be/0x620 [ 293.487772][ C1] hid_report_raw_event+0xe91/0x16d0 [ 293.494766][ C1] hid_input_report+0x43e/0x520 [ 293.501305][ C1] hid_irq_in+0x47e/0x6d0 [ 293.507314][ C1] __usb_hcd_giveback_urb+0x41a/0x690 [ 293.514374][ C1] dummy_timer+0x862/0x4550 [ 293.520557][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 293.527439][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 293.534405][ C1] handle_softirqs+0x283/0x870 [ 293.540872][ C1] __irq_exit_rcu+0xca/0x1f0 [ 293.547701][ C1] irq_exit_rcu+0x9/0x30 [ 293.553636][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 293.561042][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 293.568695][ C1] rcu_is_watching+0x5a/0xb0 [ 293.574960][ C1] lock_release+0x4b/0x3e0 [ 293.581079][ C1] unwind_next_frame+0x19a9/0x2390 [ 293.588172][ C1] __unwind_start+0x5b9/0x760 [ 293.594620][ C1] arch_stack_walk+0xe4/0x150 [ 293.600974][ C1] stack_trace_save+0x9c/0xe0 [ 293.607407][ C1] save_stack+0xf5/0x1f0 [ 293.613317][ C1] __set_page_owner+0x8d/0x4a0 [ 293.619748][ C1] post_alloc_hook+0x240/0x2a0 [ 293.626290][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 293.633534][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 293.641036][ C1] alloc_pages_mpol+0x232/0x4a0 [ 293.647597][ C1] vma_alloc_folio_noprof+0xe4/0x200 [ 293.654675][ C1] folio_prealloc+0x30/0x180 [ 293.660952][ C1] __handle_mm_fault+0x16fd/0x5440 [ 293.668114][ C1] handle_mm_fault+0x40a/0x8e0 [ 293.674573][ C1] do_user_addr_fault+0xa81/0x1390 [ 293.681486][ C1] exc_page_fault+0x76/0xf0 [ 293.687806][ C1] asm_exc_page_fault+0x26/0x30 [ 293.694938][ C1] INITIAL USE at: [ 293.698883][ C1] lock_acquire+0x120/0x360 [ 293.704979][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 293.711791][ C1] input_inject_event+0xa5/0x340 [ 293.718314][ C1] kbd_led_trigger_activate+0xbc/0x100 [ 293.725372][ C1] led_trigger_set+0x52a/0x950 [ 293.731828][ C1] led_trigger_set_default+0x260/0x2a0 [ 293.738894][ C1] led_classdev_register_ext+0x73d/0x930 [ 293.746116][ C1] input_leds_connect+0x517/0x790 [ 293.752746][ C1] input_register_device+0xd00/0x1140 [ 293.759707][ C1] atkbd_connect+0x72e/0xa00 [ 293.765880][ C1] serio_driver_probe+0x7f/0xd0 [ 293.772318][ C1] really_probe+0x26d/0x9e0 [ 293.778409][ C1] __driver_probe_device+0x18c/0x2f0 [ 293.785371][ C1] driver_probe_device+0x4f/0x430 [ 293.792081][ C1] __driver_attach+0x452/0x700 [ 293.798525][ C1] bus_for_each_dev+0x233/0x2b0 [ 293.805023][ C1] serio_handle_event+0x1f9/0x8d0 [ 293.811746][ C1] process_scheduled_works+0xade/0x17b0 [ 293.818890][ C1] worker_thread+0x8a0/0xda0 [ 293.825057][ C1] kthread+0x70e/0x8a0 [ 293.830723][ C1] ret_from_fork+0x3f9/0x770 [ 293.836894][ C1] ret_from_fork_asm+0x1a/0x30 [ 293.843247][ C1] } [ 293.845752][ C1] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 293.854793][ C1] ... acquired at: [ 293.858630][ C1] mark_lock+0x11b/0x190 [ 293.863059][ C1] __lock_acquire+0x680/0xd20 [ 293.867933][ C1] lock_acquire+0x120/0x360 [ 293.872630][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 293.878016][ C1] input_event+0x76/0xe0 [ 293.882448][ C1] hidinput_hid_event+0x12d7/0x1c90 [ 293.887927][ C1] hid_process_event+0x4be/0x620 [ 293.893073][ C1] hid_report_raw_event+0xe91/0x16d0 [ 293.898657][ C1] hid_input_report+0x43e/0x520 [ 293.903805][ C1] hid_irq_in+0x47e/0x6d0 [ 293.908497][ C1] __usb_hcd_giveback_urb+0x41a/0x690 [ 293.914080][ C1] dummy_timer+0x862/0x4550 [ 293.918779][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 293.924168][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 293.929558][ C1] handle_softirqs+0x283/0x870 [ 293.934655][ C1] __irq_exit_rcu+0xca/0x1f0 [ 293.939456][ C1] irq_exit_rcu+0x9/0x30 [ 293.943903][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 293.949772][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 293.956066][ C1] rcu_is_watching+0x5a/0xb0 [ 293.960943][ C1] lock_release+0x4b/0x3e0 [ 293.965607][ C1] unwind_next_frame+0x19a9/0x2390 [ 293.970938][ C1] __unwind_start+0x5b9/0x760 [ 293.975952][ C1] arch_stack_walk+0xe4/0x150 [ 293.980914][ C1] stack_trace_save+0x9c/0xe0 [ 293.985783][ C1] save_stack+0xf5/0x1f0 [ 293.990228][ C1] __set_page_owner+0x8d/0x4a0 [ 293.995310][ C1] post_alloc_hook+0x240/0x2a0 [ 294.000295][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 294.006051][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 294.012054][ C1] alloc_pages_mpol+0x232/0x4a0 [ 294.017109][ C1] vma_alloc_folio_noprof+0xe4/0x200 [ 294.022585][ C1] folio_prealloc+0x30/0x180 [ 294.027370][ C1] __handle_mm_fault+0x16fd/0x5440 [ 294.032798][ C1] handle_mm_fault+0x40a/0x8e0 [ 294.037783][ C1] do_user_addr_fault+0xa81/0x1390 [ 294.043108][ C1] exc_page_fault+0x76/0xf0 [ 294.047812][ C1] asm_exc_page_fault+0x26/0x30 [ 294.052862][ C1] [ 294.055234][ C1] [ 294.055234][ C1] stack backtrace: [ 294.061163][ C1] CPU: 1 UID: 0 PID: 10468 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 294.061199][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.061219][ C1] Call Trace: [ 294.061230][ C1] [ 294.061238][ C1] dump_stack_lvl+0x189/0x250 [ 294.061266][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.061288][ C1] ? __pfx__printk+0x10/0x10 [ 294.061318][ C1] print_irq_inversion_bug+0x1d2/0x1e0 [ 294.061339][ C1] mark_lock_irq+0x35f/0x390 [ 294.061360][ C1] mark_lock+0x11b/0x190 [ 294.061376][ C1] __lock_acquire+0x680/0xd20 [ 294.061406][ C1] ? input_event+0x76/0xe0 [ 294.061425][ C1] lock_acquire+0x120/0x360 [ 294.061452][ C1] ? input_event+0x76/0xe0 [ 294.061475][ C1] ? lockdep_unlock+0x89/0x120 [ 294.061501][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 294.061524][ C1] ? input_event+0x76/0xe0 [ 294.061543][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 294.061567][ C1] ? do_raw_spin_lock+0x121/0x290 [ 294.061591][ C1] input_event+0x76/0xe0 [ 294.061611][ C1] hidinput_hid_event+0x12d7/0x1c90 [ 294.061630][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 294.061657][ C1] ? __pfx_hidinput_hid_event+0x10/0x10 [ 294.061678][ C1] ? __wake_up_common_lock+0x190/0x1f0 [ 294.061706][ C1] hid_process_event+0x4be/0x620 [ 294.061729][ C1] hid_report_raw_event+0xe91/0x16d0 [ 294.061767][ C1] hid_input_report+0x43e/0x520 [ 294.061797][ C1] hid_irq_in+0x47e/0x6d0 [ 294.061819][ C1] __usb_hcd_giveback_urb+0x41a/0x690 [ 294.061845][ C1] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 294.061872][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 294.061910][ C1] ? usb_hcd_giveback_urb+0x10e/0x420 [ 294.061936][ C1] dummy_timer+0x862/0x4550 [ 294.061984][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 294.062010][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 294.062034][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 294.062058][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 294.062084][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 294.062100][ C1] ? read_tsc+0x9/0x20 [ 294.062127][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 294.062147][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 294.062168][ C1] handle_softirqs+0x283/0x870 [ 294.062186][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 294.062205][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 294.062224][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 294.062248][ C1] __irq_exit_rcu+0xca/0x1f0 [ 294.062264][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 294.062285][ C1] irq_exit_rcu+0x9/0x30 [ 294.062307][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 294.062332][ C1] [ 294.062338][ C1] [ 294.062345][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 294.062365][ C1] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 294.062385][ C1] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 1c bb 7c 00 48 c7 c3 98 6f a1 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 34 8b 03 65 ff 0d 49 e2 f9 10 74 11 83 e0 04 c1 e8 02 5b [ 294.062402][ C1] RSP: 0000:ffffc9000b0571f0 EFLAGS: 00000a06 [ 294.062420][ C1] RAX: 0000000000000000 RBX: ffff8880b8732f98 RCX: 7bb0c2193b8c6b00 [ 294.062433][ C1] RDX: ffffc9000b057301 RSI: ffffffff8be333e0 RDI: ffffffff8be333a0 [ 294.062447][ C1] RBP: dffffc0000000000 R08: ffffc9000b057398 R09: 0000000000000000 [ 294.062460][ C1] R10: ffffc9000b0573f8 R11: fffff5200160ae81 R12: ffffc9000b0573a8 [ 294.062474][ C1] R13: ffffffff8172c195 R14: ffffffff8dbded18 R15: dffffc0000000000 [ 294.062488][ C1] ? unwind_next_frame+0xa5/0x2390 [ 294.062515][ C1] ? unwind_next_frame+0xa5/0x2390 [ 294.062534][ C1] lock_release+0x4b/0x3e0 [ 294.062565][ C1] ? deref_stack_reg+0x19f/0x230 [ 294.062586][ C1] ? unwind_next_frame+0xa5/0x2390 [ 294.062605][ C1] unwind_next_frame+0x19a9/0x2390 [ 294.062628][ C1] ? unwind_next_frame+0xa5/0x2390 [ 294.062648][ C1] ? __unwind_start+0xf8/0x760 [ 294.062671][ C1] __unwind_start+0x5b9/0x760 [ 294.062692][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 294.062715][ C1] arch_stack_walk+0xe4/0x150 [ 294.062739][ C1] ? arch_stack_walk+0xe4/0x150 [ 294.062761][ C1] stack_trace_save+0x9c/0xe0 [ 294.062782][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 294.062807][ C1] save_stack+0xf5/0x1f0 [ 294.062832][ C1] ? __pfx_save_stack+0x10/0x10 [ 294.062859][ C1] ? seqcount_lockdep_reader_access+0x102/0x180 [ 294.062888][ C1] __set_page_owner+0x8d/0x4a0 [ 294.062918][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 294.062945][ C1] post_alloc_hook+0x240/0x2a0 [ 294.062972][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 294.063008][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 294.063027][ C1] ? prepare_alloc_pages+0x213/0x610 [ 294.063046][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 294.063066][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 294.063088][ C1] ? policy_nodemask+0x27c/0x720 [ 294.063112][ C1] ? __lock_acquire+0xab9/0xd20 [ 294.063141][ C1] alloc_pages_mpol+0x232/0x4a0 [ 294.063168][ C1] vma_alloc_folio_noprof+0xe4/0x200 [ 294.063195][ C1] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 294.063226][ C1] folio_prealloc+0x30/0x180 [ 294.063253][ C1] __handle_mm_fault+0x16fd/0x5440 [ 294.063277][ C1] ? __lock_acquire+0xab9/0xd20 [ 294.063308][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 294.063337][ C1] ? lock_vma_under_rcu+0xdf/0x3d0 [ 294.063364][ C1] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 294.063393][ C1] handle_mm_fault+0x40a/0x8e0 [ 294.063421][ C1] do_user_addr_fault+0xa81/0x1390 [ 294.063452][ C1] ? rcu_is_watching+0x15/0xb0 [ 294.063469][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 294.063498][ C1] exc_page_fault+0x76/0xf0 [ 294.063522][ C1] asm_exc_page_fault+0x26/0x30 [ 294.063538][ C1] RIP: 0023:0xf7229651 [ 294.063559][ C1] Code: 24 08 85 c9 74 33 80 7c 24 24 00 74 2c 39 f8 73 28 8d b4 26 00 00 00 00 90 8b 10 01 ca 80 78 04 08 0f 85 7a 0c 00 00 83 c0 08 <01> 0a 39 f8 72 e9 8d b4 26 00 00 00 00 66 90 8b 44 24 0c 8b 90 f4 [ 294.063575][ C1] RSP: 002b:00000000ff9f9860 EFLAGS: 00010296 [ 294.063589][ C1] RAX: 00000000f70b0d24 RBX: 00000000f7414a74 RCX: 00000000f70b0000 [ 294.063601][ C1] RDX: 00000000f735200c RSI: 0000000000000000 RDI: 00000000f70c8864 [ 294.063613][ C1] RBP: 00000000ff9f9890 R08: 0000000000000000 R09: 0000000000000000 [ 294.063624][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 294.063634][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 294.063651][ C1] [ 294.885525][ T5867] usb 4-1: USB disconnect, device number 28 [ 295.278257][ T37] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.318639][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 295.331415][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 295.343792][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 295.355455][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 295.363755][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 295.418812][ T5882] syz_tun (unregistering): left promiscuous mode [ 295.478948][ T37] bridge_slave_1: left allmulticast mode [ 295.484669][ T37] bridge_slave_1: left promiscuous mode [ 295.506908][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.519742][ T37] bridge_slave_0: left allmulticast mode [ 295.525450][ T37] bridge_slave_0: left promiscuous mode [ 295.531637][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.632980][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.643532][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.653870][ T37] bond0 (unregistering): Released all slaves [ 295.848671][T10474] chnl_net:caif_netlink_parms(): no params data found [ 295.956235][T10474] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.963668][T10474] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.973227][T10474] bridge_slave_0: entered allmulticast mode [ 295.980447][T10474] bridge_slave_0: entered promiscuous mode [ 295.990618][T10474] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.998109][T10474] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.005352][T10474] bridge_slave_1: entered allmulticast mode [ 296.012503][T10474] bridge_slave_1: entered promiscuous mode [ 296.065267][T10474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.081785][T10474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.155809][T10474] team0: Port device team_slave_0 added [ 296.165375][T10474] team0: Port device team_slave_1 added [ 296.193465][T10474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.201103][T10474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.227362][T10474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.243154][T10474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.250898][T10474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.277193][T10474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.294595][ T37] hsr_slave_0: left promiscuous mode [ 296.300861][ T37] hsr_slave_1: left promiscuous mode [ 296.307263][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.314921][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.323554][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.332499][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.344419][ T37] veth1_vlan: left promiscuous mode [ 296.349905][ T37] veth0_vlan: left promiscuous mode [ 296.491826][ T37] team0 (unregistering): Port device team_slave_1 removed [ 296.516309][ T37] team0 (unregistering): Port device team_slave_0 removed [ 296.633862][T10474] hsr_slave_0: entered promiscuous mode [ 296.650008][T10474] hsr_slave_1: entered promiscuous mode [ 296.656199][T10474] debugfs: 'hsr0' already exists in 'hsr' [ 296.662046][T10474] Cannot create hsr debugfs directory [ 296.849369][T10474] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 296.864317][T10474] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 296.875227][T10474] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 296.885411][T10474] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 296.938632][T10474] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.945908][T10474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.953403][T10474] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.960600][T10474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.999369][ T2970] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.017355][ T2970] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.044046][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.083898][T10474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.096070][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.124012][T10474] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.139591][ T4552] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.146792][ T4552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.165049][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.188764][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.195906][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.227896][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.280207][T10474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.343524][T10474] veth0_vlan: entered promiscuous mode [ 297.394417][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.406198][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.418662][ T5864] Bluetooth: hci3: command tx timeout [ 297.432686][T10474] veth1_vlan: entered promiscuous mode [ 297.469910][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.483075][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.511169][T10474] veth0_macvtap: entered promiscuous mode [ 297.522849][T10474] veth1_macvtap: entered promiscuous mode [ 297.540189][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.551489][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.584263][T10474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.599238][T10474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.629220][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.640542][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.659761][ T4529] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.685548][ T4529] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.718212][ T4529] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.733995][T10474] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 297.753392][ T4529] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.796157][ T4552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.800075][T10474] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 297.810818][ T4552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.859573][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.869941][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.893958][ T4552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.905329][ T4552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.918141][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.929066][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.990584][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.001802][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.053471][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.066155][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.192501][ T37] bridge_slave_1: left allmulticast mode [ 298.205131][ T37] bridge_slave_1: left promiscuous mode [ 298.213630][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.222688][ T37] bridge_slave_0: left allmulticast mode [ 298.231012][ T37] bridge_slave_0: left promiscuous mode [ 298.237147][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.251400][ T37] bridge_slave_1: left allmulticast mode [ 298.258131][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.271416][ T37] bridge_slave_0: left allmulticast mode [ 298.279586][ T37] bridge_slave_0: left promiscuous mode [ 298.288971][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.301518][ T37] bridge_slave_1: left allmulticast mode [ 298.307515][ T37] bridge_slave_1: left promiscuous mode [ 298.313252][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.324618][ T37] bridge_slave_0: left allmulticast mode [ 298.331084][ T37] bridge_slave_0: left promiscuous mode [ 298.338968][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.512110][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.522806][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.532630][ T37] bond0 (unregistering): Released all slaves [ 298.546509][ T37] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 298.623602][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.633774][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.644913][ T37] bond0 (unregistering): Released all slaves [ 298.657602][ T37] bond1 (unregistering): Released all slaves [ 299.405378][ T37] hsr_slave_0: left promiscuous mode [ 299.413487][ T37] hsr_slave_1: left promiscuous mode [ 299.421157][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.432592][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.442828][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.451009][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.459366][ T37] batadv_slave_0: left promiscuous mode [ 299.469233][ T37] hsr_slave_0: left promiscuous mode [ 299.475191][ T37] hsr_slave_1: left promiscuous mode [ 299.480782][ T5864] Bluetooth: hci3: command tx timeout [ 299.491061][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.499283][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.509651][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.526992][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.558545][ T37] hsr_slave_0: left promiscuous mode [ 299.564810][ T37] hsr_slave_1: left promiscuous mode [ 299.574796][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.584194][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.594404][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.605773][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.628371][ T37] veth1_macvtap: left promiscuous mode [ 299.633957][ T37] veth0_macvtap: left promiscuous mode [ 299.642173][ T37] veth1_vlan: left promiscuous mode [ 299.648845][ T37] veth0_vlan: left promiscuous mode [ 299.659649][ T37] veth1_macvtap: left promiscuous mode [ 299.665281][ T37] veth1_vlan: left promiscuous mode [ 299.678495][ T37] veth0_vlan: left promiscuous mode [ 299.684870][ T37] veth1_macvtap: left promiscuous mode [ 299.691204][ T37] veth0_macvtap: left promiscuous mode [ 299.699023][ T37] veth1_vlan: left promiscuous mode [ 299.704360][ T37] veth0_vlan: left promiscuous mode [ 299.973150][ T37] team0 (unregistering): Port device team_slave_1 removed [ 300.000416][ T37] team0 (unregistering): Port device team_slave_0 removed [ 300.180691][ T37] team0 (unregistering): Port device team_slave_1 removed [ 300.204514][ T37] team0 (unregistering): Port device team_slave_0 removed [ 300.400383][ T37] team0 (unregistering): Port device team_slave_1 removed [ 300.424131][ T37] team0 (unregistering): Port device team_slave_0 removed [ 301.239007][ T37] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.291541][ T37] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.340009][ T37] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.382280][ T37] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.492599][ T37] bridge_slave_1: left allmulticast mode [ 301.499649][ T37] bridge_slave_1: left promiscuous mode [ 301.505503][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.514490][ T37] bridge_slave_0: left allmulticast mode [ 301.520447][ T37] bridge_slave_0: left promiscuous mode [ 301.526205][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.663246][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.682262][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.692447][ T37] bond0 (unregistering): Released all slaves [ 301.911559][ T37] hsr_slave_0: left promiscuous mode [ 301.919341][ T37] hsr_slave_1: left promiscuous mode [ 301.925332][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.933108][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.942353][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.950304][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.965169][ T37] veth1_macvtap: left promiscuous mode [ 301.971543][ T37] veth0_macvtap: left promiscuous mode [ 301.977333][ T37] veth1_vlan: left promiscuous mode [ 301.982656][ T37] veth0_vlan: left promiscuous mode