last executing test programs: 2m0.10344608s ago: executing program 3 (id=5448): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000640)={0x60, 0x3, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c69000/0x2000)=nil, 0x7fffffff, 0x0, 0x0, 0x6, 0x4, 0x5a, 0x0, 0x40}) 1m59.819344449s ago: executing program 3 (id=5451): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 1m59.569738863s ago: executing program 3 (id=5454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r1, &(0x7f0000000600)=""/4099, 0x1003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c14000041000701fcfffffffddbdf25017c000004003680641401"], 0x147c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1m59.215841259s ago: executing program 3 (id=5456): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m58.26609121s ago: executing program 3 (id=5463): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x90000015}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000580)=0x2) 1m58.039274688s ago: executing program 3 (id=5465): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000480)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, r0, 0x0}]) 1m57.701600715s ago: executing program 32 (id=5465): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000480)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, r0, 0x0}]) 5.302711869s ago: executing program 0 (id=6660): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000380)={r0, 0x0, {0x0, 0x0, 0x0, 0x200002eae, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe580c00000030e04d528539f3d3289737f037154118e7002447a75df8a69ea917deb7ba193b3e77720829f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c08, 0xffffffffffffffff) close(0x4) 5.078106197s ago: executing program 0 (id=6663): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0xffffffff, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 4.925978679s ago: executing program 0 (id=6667): statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000b5000040"]) 4.899498946s ago: executing program 2 (id=6668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 4.598992633s ago: executing program 0 (id=6673): dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ac05624200000000000109022400010000000009040000010300000009210000000122050009"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 4.519807043s ago: executing program 2 (id=6675): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x1507, 0x400700) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) 4.354717391s ago: executing program 2 (id=6679): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 4.211171476s ago: executing program 2 (id=6681): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000102505a1a440000102030109025c0002010050060904000001020d0000052406000105240003000d240f0101000000ce0107000006241a00043009058103080003dd07090401"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4178c40ba0d0010"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000001000)=ANY=[], 0x0) 3.935294896s ago: executing program 5 (id=6687): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000080)=0x8000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000008}) 3.79208208s ago: executing program 5 (id=6689): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) recvmmsg$unix(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x180, 0x0) shutdown(r0, 0x1) 3.162322075s ago: executing program 4 (id=6696): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$unix(r1, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0xc, 0x117, 0x2}}], 0xc, 0x850}}], 0x2, 0x20000000) 3.073903408s ago: executing program 4 (id=6697): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.numa_stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x38) 3.016872243s ago: executing program 4 (id=6698): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x20, 0xe, 0x35, {0x35, 0x22, "0b43564cf6d1f81343e34223d9a4735461165786332bf6b2fa3b4ae99ede918e7f0caf7cad22bd52141199fcd6584a45b0a94a"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2.831926958s ago: executing program 5 (id=6699): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000775) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = dup(r0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) 2.805266898s ago: executing program 5 (id=6700): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000640)=@IORING_OP_READ_FIXED={0x4, 0x8, 0x4000, @fd_index=0x2002, 0x6bd9, 0xa9, 0x8, 0x1b, 0x0, {0x2, r3}}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 2.700703767s ago: executing program 5 (id=6701): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={r2, @in={{0x2, 0x4e23, @empty}}, 0xfffa, 0x5}, 0x90) 1.865622218s ago: executing program 2 (id=6702): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_XRUN(r1, 0x4148, 0x0) 1.769007879s ago: executing program 2 (id=6703): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.694432386s ago: executing program 5 (id=6704): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x0, 0xd, 0x5, {0x5, 0x22, "4a20ee"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00030d0000e4"], 0x0, 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 1.47698569s ago: executing program 0 (id=6707): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) 1.405530536s ago: executing program 0 (id=6708): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x9f4032d06ab2d0f3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/173, 0xad}], 0x1, 0x24, 0x6) 1.198799628s ago: executing program 4 (id=6711): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r2, 0x7}, 0x8) 761.094201ms ago: executing program 1 (id=6715): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) unshare(0x22020400) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000140)=r0) 680.836688ms ago: executing program 1 (id=6716): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0xd733043595a52279}, "a8e0930a1a884884", "74743275e5fc20c3ab14916504a8ca92", '\x00', "3e6a808941a488cc"}, 0x28) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @local, 0x3}, 0x1c) 597.913228ms ago: executing program 1 (id=6717): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x200000, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) 534.121243ms ago: executing program 1 (id=6718): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000240)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x7d, &(0x7f0000000040)={r1, 0x5, 0x0, 0x2, 0xf}, &(0x7f0000000080)=0x18) 454.560338ms ago: executing program 1 (id=6719): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x5, 0x0, 0x3}, 'syz0\x00', 0x3a}) ioctl$UI_DEV_CREATE(r0, 0x5501) 332.333396ms ago: executing program 1 (id=6720): syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x25, &(0x7f00000006c0)=@string={0x25, 0x3, "959eb153cb62b3fd309b09731d20bad2e8d9ac34a7d7ba23b96280e066f14b1b7cd10d"}}]}) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0xfffffaef, 0x0, 0x0, 0x0, "1eebb05412e0acba6e32e41a75222702bd994e"}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000380)='\n', 0x160a}], 0x1) 263.407294ms ago: executing program 4 (id=6721): socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x1000, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f4, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=6722): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000007000000000001"], 0x50) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x800) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): 594147][ T5882] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 535.603373][ T5882] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 535.645504][ T5882] plantronics 0003:047F:FFFF.0033: No inputs registered, leaving [ 535.673830][ T5882] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 535.841665][ T5883] usb 3-1: USB disconnect, device number 65 [ 538.167656][T18229] bridge_slave_0: left allmulticast mode [ 538.188811][T18229] bridge_slave_0: left promiscuous mode [ 538.211475][T18229] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.237647][T18229] bridge_slave_1: left allmulticast mode [ 538.278858][T18234] netlink: 'syz.3.5294': attribute type 10 has an invalid length. [ 538.325343][T18229] bridge_slave_1: left promiscuous mode [ 538.331192][T18229] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.422176][T18229] bond0: (slave bond_slave_0): Releasing backup interface [ 538.459845][T18229] bond0: (slave bond_slave_1): Releasing backup interface [ 538.487035][T18229] team0: Port device team_slave_0 removed [ 538.525478][T18229] team0: Port device team_slave_1 removed [ 538.531771][T18229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.600725][T18229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.638535][T18234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.703626][T18234] team0: Port device bond0 added [ 539.045409][ T5883] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 539.084592][ T48] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 539.216584][ T5883] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 539.227953][ T5883] usb 5-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 539.242402][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0 [ 539.255310][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 539.261172][ T5883] usb 5-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 539.276474][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.295021][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.308757][ T48] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 539.320750][ T5883] usb 5-1: config 0 descriptor?? [ 539.326253][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.338083][ T5883] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 539.352074][ T48] usb 2-1: config 0 descriptor?? [ 539.394956][ T5882] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 539.549836][ T5883] usb 5-1: USB disconnect, device number 40 [ 539.567936][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 539.583644][ T5882] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 539.602045][ T5882] usb 4-1: config 0 has no interface number 0 [ 539.611525][ T5882] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 539.628116][ T5882] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 539.640470][ T5882] usb 4-1: config 0 interface 41 has no altsetting 0 [ 539.654164][ T5882] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 539.663466][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.679390][ T5882] usb 4-1: Product: syz [ 539.683715][ T5882] usb 4-1: Manufacturer: syz [ 539.688835][ T5882] usb 4-1: SerialNumber: syz [ 539.706303][ T5882] usb 4-1: config 0 descriptor?? [ 539.716112][T18263] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 539.728401][T18263] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 539.782087][T18254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.801472][T18254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.821612][ T48] usbhid 2-1:0.0: can't add hid device: -71 [ 539.829781][ T48] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 539.872262][ T48] usb 2-1: USB disconnect, device number 53 [ 539.957154][T18263] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 539.979208][T18263] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 540.402979][ T5882] Error reading MAC address [ 540.415870][T18263] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 540.431098][T18263] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 540.673753][ T5882] sr9700 4-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 540.692429][ T5882] usb 4-1: USB disconnect, device number 56 [ 540.695538][ T1939] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 540.816054][T18293] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5322'. [ 540.867286][ T1939] usb 5-1: Using ep0 maxpacket: 8 [ 540.880581][ T1939] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 540.893222][ T1939] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 540.917822][ T1939] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 540.938583][ T1939] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 540.956980][ T1939] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 540.979064][ T1939] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 540.988318][ T1939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.103132][ T48] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 541.116828][ T48] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 541.208079][ T1939] usb 5-1: usb_control_msg returned -32 [ 541.213688][ T1939] usbtmc 5-1:16.0: can't read capabilities [ 541.593747][ T5882] usb 5-1: USB disconnect, device number 41 [ 541.770342][T18316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5331'. [ 542.851509][T18337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.753483][T18352] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 543.982747][T18361] input: syz1 as /devices/virtual/input/input89 [ 544.056357][T18364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5351'. [ 544.085144][T18364] netlink: 'syz.0.5351': attribute type 18 has an invalid length. [ 544.093036][T18364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5351'. [ 544.324331][ T30] audit: type=1326 audit(1746263773.096:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18368 comm="syz.1.5352" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7fc00000 [ 544.944649][ T1939] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 545.039477][ T30] audit: type=1326 audit(1746263773.816:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18368 comm="syz.1.5352" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70fe539 code=0x7fc00000 [ 545.115390][ T1939] usb 3-1: Using ep0 maxpacket: 16 [ 545.127979][ T1939] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 545.149649][ T1939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.158433][ T1939] usb 3-1: Product: syz [ 545.162671][ T1939] usb 3-1: Manufacturer: syz [ 545.170509][ T1939] usb 3-1: SerialNumber: syz [ 545.180162][ T1939] usb 3-1: config 0 descriptor?? [ 545.193952][ T1939] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 545.397026][ T1939] gp8psk: usb in 128 operation failed. [ 545.405310][ T1939] gp8psk: usb in 137 operation failed. [ 545.413156][ T1939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 545.423918][ T1939] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 545.443540][ T1939] usb 3-1: media controller created [ 545.476616][ T1939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 545.503062][ T1939] gp8psk_fe: Frontend revision 1 attached [ 545.510922][ T1939] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 545.521581][ T1939] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 545.769996][ T1939] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 545.781371][ T1939] gp8psk: found Genpix USB device pID = 201 (hex) [ 545.994986][ T5882] usb 3-1: USB disconnect, device number 66 [ 546.175150][ T5882] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 546.613548][ T30] audit: type=1326 audit(1746263775.386:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18436 comm="syz.3.5382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc7558 code=0x7ffc0000 [ 546.687744][ T30] audit: type=1326 audit(1746263775.386:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18436 comm="syz.3.5382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc7558 code=0x7ffc0000 [ 546.747365][ T30] audit: type=1326 audit(1746263775.386:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18436 comm="syz.3.5382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 546.776491][ T30] audit: type=1326 audit(1746263775.386:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18436 comm="syz.3.5382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 546.849367][ T30] audit: type=1326 audit(1746263775.386:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18436 comm="syz.3.5382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc7558 code=0x7ffc0000 [ 546.877498][ T30] audit: type=1326 audit(1746263775.386:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18436 comm="syz.3.5382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 546.977331][ T30] audit: type=1326 audit(1746263775.386:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18436 comm="syz.3.5382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000 [ 547.022807][ T30] audit: type=1326 audit(1746263775.416:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18436 comm="syz.3.5382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc7558 code=0x7ffc0000 [ 547.067203][T18454] loop8: detected capacity change from 0 to 8 [ 547.078873][ T5847] Dev loop8: unable to read RDB block 8 [ 547.094797][ T5847] loop8: unable to read partition table [ 547.104736][ T5847] loop8: partition table beyond EOD, truncated [ 547.120884][T18454] Dev loop8: unable to read RDB block 8 [ 547.130466][T18454] loop8: unable to read partition table [ 547.140291][T18454] loop8: partition table beyond EOD, truncated [ 547.153361][T18454] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 547.197843][T18456] syzkaller1: entered promiscuous mode [ 547.203655][T18456] syzkaller1: entered allmulticast mode [ 548.522386][T18508] input: syz0 as /devices/virtual/input/input90 [ 548.577400][T18508] input: failed to attach handler leds to device input90, error: -6 [ 548.775635][ T48] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 548.950169][ T48] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 548.968830][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 548.980832][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 548.992481][ T48] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 549.006654][ T48] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 549.016043][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.029569][ T48] usb 2-1: config 0 descriptor?? [ 549.041915][T18510] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 549.498477][ T48] plantronics 0003:047F:FFFF.0035: reserved main item tag 0xd [ 549.529120][ T48] plantronics 0003:047F:FFFF.0035: No inputs registered, leaving [ 549.589350][ T48] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 549.830829][ T5882] usb 2-1: USB disconnect, device number 54 [ 550.425281][T18560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5434'. [ 550.429703][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.443236][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.537788][T18560] ipvlan2: entered promiscuous mode [ 550.885717][ T1939] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 551.059390][ T1939] usb 3-1: Using ep0 maxpacket: 32 [ 551.086323][ T1939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.123182][ T1939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.149845][ T1939] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 551.177578][ T1939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.198418][ T1939] usb 3-1: config 0 descriptor?? [ 551.245671][ T1939] hub 3-1:0.0: USB hub found [ 551.411131][ T1939] hub 3-1:0.0: 2 ports detected [ 551.677724][T18602] netlink: zone id is out of range [ 551.698118][T18602] netlink: zone id is out of range [ 551.703433][T18602] netlink: zone id is out of range [ 551.719301][T18602] netlink: zone id is out of range [ 551.728648][T18602] netlink: zone id is out of range [ 551.734170][T18602] netlink: zone id is out of range [ 551.741965][T18602] netlink: zone id is out of range [ 551.748866][T18602] netlink: zone id is out of range [ 551.756261][T18602] netlink: zone id is out of range [ 551.763007][T18602] netlink: zone id is out of range [ 552.438441][ T1939] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 552.445322][ T1939] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 552.459086][ T1939] usbhid 3-1:0.0: can't add hid device: -32 [ 552.465397][ T1939] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 552.824982][ T5883] usb 3-1: USB disconnect, device number 67 [ 553.576172][T18634] syzkaller1: entered promiscuous mode [ 553.602960][T18634] syzkaller1: entered allmulticast mode [ 553.756411][ T5882] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 553.945038][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 553.961761][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.994012][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.026189][ T5882] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 554.069263][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.089151][ T5882] usb 3-1: config 0 descriptor?? [ 554.142747][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 554.153103][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 554.162651][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 554.178835][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 554.203209][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 554.566472][ T5882] savu 0003:1E7D:2D5A.0036: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 554.844947][ T1939] usb 3-1: USB disconnect, device number 68 [ 554.960348][T18669] loop2: detected capacity change from 0 to 5 [ 554.978919][T18669] Dev loop2: unable to read RDB block 5 [ 554.985950][T18669] loop2: AHDI p2 p3 [ 554.989906][T18669] loop2: partition table partially beyond EOD, truncated [ 554.998938][T18669] loop2: p2 size 1701016946 extends beyond EOD, truncated [ 555.079064][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 555.173343][T13832] team0: Port device bond0 removed [ 555.180024][T13832] bond0 (unregistering): Released all slaves [ 556.031078][ T30] kauditd_printk_skb: 120 callbacks suppressed [ 556.031097][ T30] audit: type=1326 audit(1746263784.806:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18697 comm="syz.4.5485" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe6558 code=0x7ffc0000 [ 556.126248][ T30] audit: type=1326 audit(1746263784.906:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18697 comm="syz.4.5485" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe6558 code=0x7ffc0000 [ 556.190904][ T30] audit: type=1326 audit(1746263784.966:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18697 comm="syz.4.5485" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe6558 code=0x7ffc0000 [ 556.291703][ T56] Bluetooth: hci0: command tx timeout [ 556.300078][ T30] audit: type=1326 audit(1746263784.966:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18697 comm="syz.4.5485" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe6558 code=0x7ffc0000 [ 556.356344][ T30] audit: type=1326 audit(1746263784.966:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18697 comm="syz.4.5485" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 556.384531][ T30] audit: type=1326 audit(1746263784.966:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18697 comm="syz.4.5485" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 556.443621][T13832] hsr_slave_0: left promiscuous mode [ 556.466493][ T30] audit: type=1326 audit(1746263784.966:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18697 comm="syz.4.5485" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe6558 code=0x7ffc0000 [ 556.504331][T13832] hsr_slave_1: left promiscuous mode [ 556.521305][ T30] audit: type=1326 audit(1746263784.966:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18697 comm="syz.4.5485" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 556.551825][ T30] audit: type=1326 audit(1746263784.966:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18697 comm="syz.4.5485" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 556.575266][ T30] audit: type=1326 audit(1746263784.966:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18697 comm="syz.4.5485" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe6558 code=0x7ffc0000 [ 556.694823][ T5882] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 556.752824][T18720] loop2: detected capacity change from 0 to 7 [ 556.763445][T18720] Dev loop2: unable to read RDB block 7 [ 556.770688][T18720] loop2: AHDI p2 p3 [ 556.777854][T18720] loop2: partition table partially beyond EOD, truncated [ 556.787099][T18720] loop2: p3 start 335544320 is beyond EOD, truncated [ 556.845733][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 556.856082][ T5882] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 556.876440][ T5882] usb 2-1: config 0 has no interface number 0 [ 556.924584][ T5882] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 556.933697][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.965946][ T5882] usb 2-1: Product: syz [ 556.970161][ T5882] usb 2-1: Manufacturer: syz [ 556.986997][ T5882] usb 2-1: SerialNumber: syz [ 557.006231][ T5882] usb 2-1: config 0 descriptor?? [ 557.019300][ T5882] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 557.845580][ T5882] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -71) [ 557.885191][ T5882] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x00, error -71) [ 557.903340][ T5882] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -71) [ 557.918017][ T5882] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -71) [ 557.930455][ T5882] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 557.941159][ T5882] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 557.952497][ T5882] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 557.966463][ T5882] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 557.981078][ T5882] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 558.017309][ T5882] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 558.036039][ T5882] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 558.061871][ T5882] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 558.087528][ T5882] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 558.118599][ T5882] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 558.146687][ T5882] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 558.168438][ T5882] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 558.188545][ T5882] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input92 [ 558.227351][ T5882] usb 2-1: USB disconnect, device number 55 [ 558.356090][ T56] Bluetooth: hci0: command tx timeout [ 558.579358][T18649] chnl_net:caif_netlink_parms(): no params data found [ 558.632997][T13828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.641380][T13828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.079116][T18649] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.109454][T18649] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.135087][T18649] bridge_slave_0: entered allmulticast mode [ 559.167930][T18649] bridge_slave_0: entered promiscuous mode [ 559.202738][T13832] IPVS: stop unused estimator thread 0... [ 559.210991][T18649] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.231976][T18649] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.260925][T18649] bridge_slave_1: entered allmulticast mode [ 559.297247][T18649] bridge_slave_1: entered promiscuous mode [ 559.488722][T18649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.518033][T18649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.673613][T18649] team0: Port device team_slave_0 added [ 559.687843][T18649] team0: Port device team_slave_1 added [ 559.715581][ T5882] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 559.767874][T18649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.777584][T18649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.808353][T18649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.826330][T18649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.835703][T18649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.862891][T18649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.877355][ T5886] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 559.907510][ T5882] usb 2-1: Using ep0 maxpacket: 8 [ 559.916357][ T5882] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 559.933089][T18649] hsr_slave_0: entered promiscuous mode [ 559.934532][ T5882] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 559.940945][T18649] hsr_slave_1: entered promiscuous mode [ 559.956223][T18649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 559.965299][ T5882] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 559.965886][T18649] Cannot create hsr debugfs directory [ 559.980497][ T5882] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 559.990723][ T5882] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 560.009633][ T5882] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 560.019402][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.064704][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 560.074751][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.091387][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.125658][ T5886] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 560.142182][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.165741][ T5886] usb 5-1: config 0 descriptor?? [ 560.258175][ T5882] usb 2-1: usb_control_msg returned -32 [ 560.280518][ T5882] usbtmc 2-1:16.0: can't read capabilities [ 560.390800][T18649] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 560.416706][T18649] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 560.429057][T18649] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 560.442674][T18649] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 560.445222][ T56] Bluetooth: hci0: command tx timeout [ 560.639657][ T5886] savu 0003:1E7D:2D5A.0037: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 560.701709][T18808] usbtmc 2-1:16.0: stb usb_control_msg returned -32 [ 560.730178][ T5886] usb 2-1: USB disconnect, device number 56 [ 560.843103][T18649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.868004][ T1939] usb 5-1: USB disconnect, device number 42 [ 560.950572][T18649] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.974191][T13830] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.981432][T13830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.036543][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.043706][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.191891][T18649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.362899][T18649] veth0_vlan: entered promiscuous mode [ 561.386699][T18649] veth1_vlan: entered promiscuous mode [ 561.438546][T18649] veth0_macvtap: entered promiscuous mode [ 561.490855][T18649] veth1_macvtap: entered promiscuous mode [ 561.576415][T18649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.625437][T18649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.646937][T18649] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.678572][T18649] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.717742][T18649] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.730241][T18649] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.925399][ T5882] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 562.000795][T13832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.027023][T13832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.116891][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 562.123821][T13832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.153075][ T5882] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 562.162777][T13832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.190565][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.204487][ T5882] usb 2-1: Product: syz [ 562.208694][ T5882] usb 2-1: Manufacturer: syz [ 562.213725][ T5882] usb 2-1: SerialNumber: syz [ 562.250782][ T5882] usb 2-1: config 0 descriptor?? [ 562.278806][ T5882] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 562.487950][ T5882] gp8psk: usb in 128 operation failed. [ 562.512906][ T5882] gp8psk: usb in 137 operation failed. [ 562.519941][ T56] Bluetooth: hci0: command tx timeout [ 562.527449][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 562.538530][ T5882] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 562.548475][ T5882] usb 2-1: media controller created [ 562.598344][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 562.685656][ T5882] gp8psk_fe: Frontend revision 1 attached [ 562.706804][ T5882] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 562.739750][ T5882] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 562.776496][T18866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5531'. [ 562.942634][ T5882] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 562.969844][ T5882] gp8psk: found Genpix USB device pID = 201 (hex) [ 563.160958][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.174590][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.335108][ T1939] usb 2-1: USB disconnect, device number 57 [ 563.451268][T18891] input: syz0 as /devices/virtual/input/input93 [ 563.612762][T18894] loop6: detected capacity change from 0 to 524287999 [ 563.673587][ T1939] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 564.152480][T18904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5543'. [ 564.809679][ T5882] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 564.829997][T18928] input: syz0 as /devices/virtual/input/input94 [ 564.995030][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 565.022878][ T5882] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 565.050610][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.078888][ T5882] usb 5-1: Product: syz [ 565.087383][ T5882] usb 5-1: Manufacturer: syz [ 565.092029][ T5882] usb 5-1: SerialNumber: syz [ 565.131061][ T5882] usb 5-1: config 0 descriptor?? [ 565.149615][ T5882] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 565.245737][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5556'. [ 565.287868][T18944] vlan3: entered allmulticast mode [ 565.300345][T18944] gretap0: entered allmulticast mode [ 565.562798][T18955] netlink: 'syz.2.5559': attribute type 10 has an invalid length. [ 565.610442][T18955] syz_tun: entered promiscuous mode [ 565.639252][T18955] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 565.714731][ T48] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 565.721585][ T48] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 565.726123][ T56] Bluetooth: hci3: command 0x0406 tx timeout [ 566.163315][ T5882] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 566.200527][ T5882] usb 5-1: USB disconnect, device number 43 [ 567.955745][ T48] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 567.967507][ T56] Bluetooth: hci0: command 0x0c1a tx timeout [ 567.982642][ T48] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 568.825421][ T10] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 568.996038][ T10] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 569.004862][ T5882] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 569.023018][ T10] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 569.044958][ T10] usb 5-1: config 220 has an invalid descriptor of length 102, skipping remainder of the config [ 569.081848][ T10] usb 5-1: config 220 has no interface number 2 [ 569.108919][ T10] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 569.145213][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 569.166960][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 569.172139][ T10] usb 5-1: config 220 interface 76 has no altsetting 0 [ 569.193141][ T5882] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 569.223492][ T10] usb 5-1: config 220 interface 1 has no altsetting 0 [ 569.223817][T19076] input: syz1 as /devices/virtual/input/input95 [ 569.243318][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 569.280420][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 569.304951][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 569.326032][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.369725][ T5882] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 569.384572][ T10] usb 5-1: Product: syz [ 569.388851][ T10] usb 5-1: Manufacturer: syz [ 569.393475][ T10] usb 5-1: SerialNumber: syz [ 569.410020][ T5882] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 569.444462][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.679611][ T10] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 569.694566][ T5882] usb 3-1: GET_CAPABILITIES returned 0 [ 569.708769][ T5882] usbtmc 3-1:16.0: can't read capabilities [ 569.715754][ T10] usb 5-1: No valid video chain found. [ 569.721353][ T10] usb 5-1: selecting invalid altsetting 0 [ 569.762925][ T10] usb 5-1: selecting invalid altsetting 0 [ 569.764726][ T48] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 569.769202][ T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 569.806315][ T10] usb 5-1: USB disconnect, device number 44 [ 569.931191][ T5882] usb 3-1: USB disconnect, device number 69 [ 569.971601][ T48] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.988689][ T48] usb 2-1: config 0 interface 0 has no altsetting 0 [ 570.066744][ T48] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 570.081096][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.103208][ T48] usb 2-1: Product: syz [ 570.123230][ T48] usb 2-1: Manufacturer: syz [ 570.145331][ T48] usb 2-1: SerialNumber: syz [ 570.167617][ T48] usb 2-1: config 0 descriptor?? [ 570.209444][ T48] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 570.231537][ T48] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 570.276157][ T48] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 570.339835][ T48] usb 2-1: media controller created [ 570.371920][ T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 570.505940][ T48] DVB: Unable to find symbol tda10046_attach() [ 570.542206][ T48] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 570.574664][ T48] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 570.655590][T19102] input: syz0 as /devices/virtual/input/input96 [ 570.868209][T19111] syzkaller1: entered promiscuous mode [ 570.873873][T19111] syzkaller1: entered allmulticast mode [ 570.934816][ T5882] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 571.112513][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.126933][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.141628][ T5882] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 571.154990][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.174529][ T5882] usb 5-1: config 0 descriptor?? [ 571.417383][ T48] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 571.526144][ T48] usb 2-1: USB disconnect, device number 58 [ 571.816893][ T5882] usb 5-1: language id specifier not provided by device, defaulting to English [ 571.856929][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 572.018097][ T5882] uclogic 0003:256C:006D.0038: failed retrieving Huion firmware version: -71 [ 572.036606][ T5882] uclogic 0003:256C:006D.0038: failed probing parameters: -71 [ 572.046051][ T10] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 572.062639][ T5882] uclogic 0003:256C:006D.0038: probe with driver uclogic failed with error -71 [ 572.075792][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 572.096243][ T10] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 572.109200][ T5882] usb 5-1: USB disconnect, device number 45 [ 572.116303][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.124372][ T10] usb 6-1: Product: syz [ 572.133829][ T10] usb 6-1: Manufacturer: syz [ 572.158188][ T10] usb 6-1: SerialNumber: syz [ 572.182486][ T10] usb 6-1: config 0 descriptor?? [ 572.489757][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 572.489776][ T30] audit: type=1326 audit(1746263801.266:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19150 comm="syz.1.5631" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x0 [ 572.811840][ T10] mos7840 6-1:0.0: required endpoints missing [ 572.837017][ T10] usb 6-1: USB disconnect, device number 2 [ 573.740683][ T30] audit: type=1326 audit(1746263802.516:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19183 comm="syz.5.5640" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7fc00000 [ 574.409681][ T30] audit: type=1326 audit(1746263803.186:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19183 comm="syz.5.5640" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd8539 code=0x7fc00000 [ 575.266291][T19207] netlink: 'syz.1.5646': attribute type 10 has an invalid length. [ 575.294070][T19207] syz_tun: entered promiscuous mode [ 575.339171][T19207] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 577.630172][T19269] vivid-001: disconnect [ 577.636289][T19269] vivid-001: reconnect [ 578.405567][T19296] net_ratelimit: 73 callbacks suppressed [ 578.405590][T19296] openvswitch: netlink: IPv4 tun info is not correct [ 579.258965][T19322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5683'. [ 579.315067][T19322] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5683'. [ 579.757224][T19335] loop8: detected capacity change from 0 to 8 [ 579.805473][T19335] Dev loop8: unable to read RDB block 8 [ 579.832300][T19335] loop8: unable to read partition table [ 579.850320][T19335] loop8: partition table beyond EOD, truncated [ 579.883098][T19335] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 581.331755][ T48] IPVS: starting estimator thread 0... [ 581.466182][T19388] IPVS: using max 29 ests per chain, 69600 per kthread [ 581.661871][ T30] audit: type=1326 audit(1746263810.436:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19398 comm="syz.1.5705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 581.689674][ T30] audit: type=1326 audit(1746263810.436:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19398 comm="syz.1.5705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 581.711773][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.800641][ T30] audit: type=1326 audit(1746263810.436:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19398 comm="syz.1.5705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 581.971129][ T30] audit: type=1326 audit(1746263810.436:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19398 comm="syz.1.5705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 581.993506][ C1] vkms_vblank_simulate: vblank timer overrun [ 582.141038][ T30] audit: type=1326 audit(1746263810.436:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19398 comm="syz.1.5705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 582.249678][ T30] audit: type=1326 audit(1746263810.436:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19398 comm="syz.1.5705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 582.361203][ T30] audit: type=1326 audit(1746263810.436:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19398 comm="syz.1.5705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe558 code=0x7ffc0000 [ 582.482999][ T30] audit: type=1326 audit(1746263810.436:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19398 comm="syz.1.5705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe558 code=0x7ffc0000 [ 582.597849][ T30] audit: type=1326 audit(1746263810.436:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19398 comm="syz.1.5705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe558 code=0x7ffc0000 [ 582.709084][ T30] audit: type=1326 audit(1746263810.436:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19398 comm="syz.1.5705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe558 code=0x7ffc0000 [ 584.014561][ T10] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 584.196895][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 584.243749][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.279245][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 584.333345][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 584.384552][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 584.413454][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 584.458670][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 584.489373][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 584.519282][ T10] usb 3-1: Manufacturer: syz [ 584.541255][ T10] usb 3-1: config 0 descriptor?? [ 584.965416][ T10] rc_core: IR keymap rc-hauppauge not found [ 584.979626][ T10] Registered IR keymap rc-empty [ 584.998553][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.035423][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.096133][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 585.151639][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input97 [ 585.239550][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.251100][ C0] mceusb 3-1:0.0: long-range (0x14) receiver active [ 585.275063][ T5886] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 585.324830][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.350319][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.376437][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.406729][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.444979][ T48] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 585.448551][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.474619][ T5886] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 585.488490][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.496275][ T5886] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 585.515813][ T5886] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 585.527956][ T5886] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 585.539416][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.551730][ T5886] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 585.565299][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.576865][ T5886] usb 5-1: config 0 interface 0 has no altsetting 0 [ 585.585093][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 585.585461][ T5881] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 585.598925][ T5886] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 585.611198][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 585.624449][ T5886] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 585.627096][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.643423][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x14 active) [ 585.645281][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.667911][ T5886] usb 5-1: Product: syz [ 585.672121][ T5886] usb 5-1: Manufacturer: syz [ 585.681465][ T48] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 585.688347][ T10] usb 3-1: USB disconnect, device number 70 [ 585.697685][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.703224][ T5886] usb 5-1: SerialNumber: syz [ 585.729147][ T48] usb 2-1: config 0 descriptor?? [ 585.768224][ T5881] usb 6-1: Using ep0 maxpacket: 32 [ 585.771006][ T5886] usb 5-1: config 0 descriptor?? [ 585.800338][T19493] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 585.808537][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.824178][ T5886] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 585.850278][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.859137][ T5886] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 585.882747][ T5881] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 585.904557][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.929667][ T5881] usb 6-1: config 0 descriptor?? [ 585.967578][ T5881] hub 6-1:0.0: USB hub found [ 586.186715][ T5881] hub 6-1:0.0: 1 port detected [ 586.199560][ T48] hid-steam 0003:28DE:1142.0039: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 586.275613][ T48] hid-steam 0003:28DE:1142.0039: Steam wireless receiver connected [ 586.313873][ T5823] usb 5-1: USB disconnect, device number 46 [ 586.346307][ T5823] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 586.353039][ T48] hid-steam 0003:28DE:1142.003A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 586.426393][ T48] usb 2-1: USB disconnect, device number 59 [ 586.543119][ T48] hid-steam 0003:28DE:1142.0039: Steam wireless receiver disconnected [ 586.627512][ T5881] usb 6-1: USB disconnect, device number 3 [ 587.455019][T19559] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 587.830900][T19574] input input98: cannot allocate more than FF_MAX_EFFECTS effects [ 587.863200][ T30] kauditd_printk_skb: 194 callbacks suppressed [ 587.863219][ T30] audit: type=1326 audit(1746263816.636:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19572 comm="syz.0.5754" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 587.915516][ T30] audit: type=1326 audit(1746263816.676:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19572 comm="syz.0.5754" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 587.944066][ T30] audit: type=1326 audit(1746263816.676:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19572 comm="syz.0.5754" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 587.978118][ T30] audit: type=1326 audit(1746263816.676:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19572 comm="syz.0.5754" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 588.026520][ T5886] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 588.041160][ T30] audit: type=1326 audit(1746263816.676:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19572 comm="syz.0.5754" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 588.131457][ T30] audit: type=1326 audit(1746263816.676:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19572 comm="syz.0.5754" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 588.262272][ T30] audit: type=1326 audit(1746263816.676:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19572 comm="syz.0.5754" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 588.292808][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 588.324496][ T5886] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 588.349754][ T5886] usb 3-1: config 0 has no interface number 0 [ 588.364516][ T5886] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 588.389766][ T30] audit: type=1326 audit(1746263816.676:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19572 comm="syz.0.5754" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 588.428509][ T5886] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 588.453805][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.471622][ T30] audit: type=1326 audit(1746263816.676:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19572 comm="syz.0.5754" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 588.533940][ T5886] usb 3-1: config 0 descriptor?? [ 588.573000][ T5886] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 588.594885][ T30] audit: type=1326 audit(1746263816.676:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19572 comm="syz.0.5754" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 589.798858][ T5886] usb 3-1: USB disconnect, device number 71 [ 589.986055][ T5881] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 590.146782][ T5881] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.167816][ T5881] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 590.186816][ T5881] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 590.199112][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.210769][ T5881] usb 5-1: Product: syz [ 590.216876][ T5881] usb 5-1: Manufacturer: syz [ 590.221760][ T5881] usb 5-1: SerialNumber: syz [ 590.455041][ T5886] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 590.462983][T19616] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 590.601179][T19638] macvlan5: entered promiscuous mode [ 590.611527][T19638] bridge0: entered promiscuous mode [ 590.643316][ T5886] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 590.658200][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.683449][ T5886] usb 6-1: Product: syz [ 590.694808][ T5886] usb 6-1: Manufacturer: syz [ 590.699452][ T5886] usb 6-1: SerialNumber: syz [ 590.723470][ T5886] usb 6-1: config 0 descriptor?? [ 590.946205][ T5886] usb 6-1: USB disconnect, device number 4 [ 591.093367][T19616] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 591.308598][ T5881] cdc_mbim 5-1:1.0: failed to get mac address [ 591.317842][ T5881] cdc_mbim 5-1:1.0: bind() failure [ 591.340242][ T5881] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 591.358396][ T5881] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 591.378758][ T5881] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 591.406771][ T5881] usb 5-1: USB disconnect, device number 47 [ 592.134096][T19655] loop8: detected capacity change from 0 to 8 [ 592.160028][T19655] Dev loop8: unable to read RDB block 8 [ 592.176824][T19655] loop8: unable to read partition table [ 592.182737][T19655] loop8: partition table beyond EOD, truncated [ 592.229064][T19655] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 592.514963][ T5882] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 592.678068][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 592.685705][ T5882] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 592.695916][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.708790][ T5882] usb 5-1: config 0 descriptor?? [ 592.793669][T19674] binder: 19673:19674 ioctl c0306201 0 returned -14 [ 592.825150][ T5886] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 592.924061][ T5882] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 592.995074][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 593.009375][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 593.020955][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 593.035569][ T5886] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 593.044859][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.074536][ T5886] usb 2-1: config 0 descriptor?? [ 593.513558][ T5886] kovaplus 0003:1E7D:2D50.003B: unknown main item tag 0x0 [ 593.521150][ T5886] kovaplus 0003:1E7D:2D50.003B: unknown main item tag 0x0 [ 593.529128][ T5886] kovaplus 0003:1E7D:2D50.003B: unknown main item tag 0x0 [ 593.541994][ T5886] kovaplus 0003:1E7D:2D50.003B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 593.718165][T19704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5810'. [ 593.733857][T19704] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5810'. [ 593.741263][ T5882] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 593.743819][T19704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5810'. [ 593.761502][ T5882] asix 5-1:0.0: probe with driver asix failed with error -71 [ 593.770218][T19704] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5810'. [ 593.790679][ T5882] usb 5-1: USB disconnect, device number 48 [ 594.078411][ T30] kauditd_printk_skb: 175 callbacks suppressed [ 594.078429][ T30] audit: type=1326 audit(1746263822.856:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.5.5814" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd8539 code=0x0 [ 594.114493][ T5886] kovaplus 0003:1E7D:2D50.003B: couldn't init struct kovaplus_device [ 594.123895][ T5886] kovaplus 0003:1E7D:2D50.003B: couldn't install mouse [ 594.137215][ T5886] kovaplus 0003:1E7D:2D50.003B: probe with driver kovaplus failed with error -71 [ 594.167175][ T5886] usb 2-1: USB disconnect, device number 60 [ 594.218370][T19720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5817'. [ 594.755267][ T5881] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 594.920298][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 594.936773][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.959266][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.985187][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 595.019103][ T5881] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 595.038211][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.060933][ T5881] usb 5-1: config 0 descriptor?? [ 595.483396][ T5881] HID 045e:07da: Invalid code 65791 type 1 [ 595.515513][ T5881] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.003C/input/input100 [ 595.593689][ T5881] microsoft 0003:045E:07DA.003C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 595.729087][ T5882] usb 5-1: USB disconnect, device number 49 [ 595.834777][ T30] audit: type=1326 audit(1746263824.606:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19765 comm="syz.0.5840" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42539 code=0x0 [ 596.638966][T19785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5847'. [ 596.656319][T19785] macvlan6: entered promiscuous mode [ 596.662235][T19785] bond0: entered promiscuous mode [ 596.671856][T19785] bond_slave_0: entered promiscuous mode [ 596.678082][ T5882] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 596.698120][T19785] bond_slave_1: entered promiscuous mode [ 596.704197][T19785] batadv0: entered promiscuous mode [ 596.713914][T19785] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 596.855112][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 596.862111][ T5882] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 596.870732][ T5886] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 596.894489][ T5882] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 596.904296][ T5882] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 596.934449][ T5882] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 596.948143][ T5882] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 596.978264][ T5882] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 597.004984][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.050096][ T5886] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 597.064460][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.072610][ T5886] usb 6-1: Product: syz [ 597.095323][ T5886] usb 6-1: Manufacturer: syz [ 597.101311][ T5886] usb 6-1: SerialNumber: syz [ 597.118347][ T5886] usb 6-1: config 0 descriptor?? [ 597.154661][ T5886] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 597.232961][ T5882] usb 5-1: usb_control_msg returned -32 [ 597.252404][ T5882] usbtmc 5-1:16.0: can't read capabilities [ 598.100770][T19824] syzkaller1: entered promiscuous mode [ 598.128728][T19824] syzkaller1: entered allmulticast mode [ 598.170678][ T5882] usb 6-1: USB disconnect, device number 5 [ 599.316236][T19852] input: syz0 as /devices/virtual/input/input101 [ 599.337401][T19854] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5876'. [ 599.512205][ T5886] usb 5-1: USB disconnect, device number 50 [ 599.648348][T19863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5880'. [ 599.679785][T19863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5880'. [ 600.209388][T19883] syzkaller1: entered promiscuous mode [ 600.215945][T19883] syzkaller1: entered allmulticast mode [ 600.760438][T19897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5895'. [ 600.783795][T19897] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5895'. [ 600.804531][T19897] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5895'. [ 600.897156][T19899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5896'. [ 600.909108][T19899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5896'. [ 601.212687][T19905] input: syz0 as /devices/virtual/input/input102 [ 601.350475][T19911] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5902'. [ 602.394746][ T5886] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 602.535239][ T30] audit: type=1326 audit(1746263831.306:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19949 comm="syz.5.5918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd8558 code=0x7ffc0000 [ 602.581951][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 602.597417][ T30] audit: type=1326 audit(1746263831.306:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19949 comm="syz.5.5918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 602.624808][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 602.658366][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 602.671928][ T30] audit: type=1326 audit(1746263831.306:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19949 comm="syz.5.5918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd8558 code=0x7ffc0000 [ 602.704970][ T5886] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 602.730905][ T30] audit: type=1326 audit(1746263831.306:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19949 comm="syz.5.5918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 602.773832][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.819179][ T30] audit: type=1326 audit(1746263831.306:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19949 comm="syz.5.5918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 602.848661][ T5886] usb 3-1: config 0 descriptor?? [ 602.873885][ T30] audit: type=1326 audit(1746263831.306:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19949 comm="syz.5.5918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 602.944751][ T30] audit: type=1326 audit(1746263831.306:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19949 comm="syz.5.5918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd8558 code=0x7ffc0000 [ 603.014633][ T30] audit: type=1326 audit(1746263831.306:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19949 comm="syz.5.5918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd8558 code=0x7ffc0000 [ 603.138349][ T30] audit: type=1326 audit(1746263831.306:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19949 comm="syz.5.5918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 603.181992][ T30] audit: type=1326 audit(1746263831.306:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19949 comm="syz.5.5918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd8558 code=0x7ffc0000 [ 603.334726][ T5886] kovaplus 0003:1E7D:2D50.003D: unknown main item tag 0x0 [ 603.366736][ T5886] kovaplus 0003:1E7D:2D50.003D: unknown main item tag 0x0 [ 603.397468][ T5886] kovaplus 0003:1E7D:2D50.003D: unknown main item tag 0x0 [ 603.434788][ T5886] kovaplus 0003:1E7D:2D50.003D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 603.444171][T19956] input: syz0 as /devices/virtual/input/input103 [ 603.961817][ T5886] kovaplus 0003:1E7D:2D50.003D: couldn't init struct kovaplus_device [ 603.983675][ T5886] kovaplus 0003:1E7D:2D50.003D: couldn't install mouse [ 604.007051][ T5886] kovaplus 0003:1E7D:2D50.003D: probe with driver kovaplus failed with error -71 [ 604.059356][ T5886] usb 3-1: USB disconnect, device number 72 [ 605.268432][T19994] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.276270][T19994] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.376367][T19998] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 605.686783][T19994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.718079][T19994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.775273][ T5823] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 605.865297][ T5907] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 605.936006][ T5823] usb 3-1: Using ep0 maxpacket: 16 [ 605.957950][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.981861][ T5823] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 606.005671][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.024862][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 606.038203][ T5823] usb 3-1: config 0 descriptor?? [ 606.047151][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 606.079573][ T5907] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 606.099605][ T5907] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 606.116349][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.135061][T19994] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.135079][ T1939] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 606.153828][ T5907] usb 5-1: config 0 descriptor?? [ 606.159630][T19994] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.180006][T19994] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.189339][T19994] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.284637][ T1939] usb 2-1: Using ep0 maxpacket: 8 [ 606.310503][ T1939] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 606.332417][ T1939] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 606.378718][ T1939] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 606.394928][ T1939] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 606.420112][ T1939] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 606.458814][ T1939] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 606.493377][ T5823] mcp2221 0003:04D8:00DD.003E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 606.504050][ T1939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.599800][ T5907] kovaplus 0003:1E7D:2D50.003F: unknown main item tag 0x0 [ 606.607207][ T5907] kovaplus 0003:1E7D:2D50.003F: unknown main item tag 0x0 [ 606.653949][ T5907] kovaplus 0003:1E7D:2D50.003F: unknown main item tag 0x0 [ 606.712468][ T5907] kovaplus 0003:1E7D:2D50.003F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 606.766071][ T1939] usb 2-1: usb_control_msg returned -32 [ 606.771768][ T1939] usbtmc 2-1:16.0: can't read capabilities [ 606.927388][ T5886] usb 3-1: USB disconnect, device number 73 [ 607.039413][T20030] loop7: detected capacity change from 0 to 7 [ 607.054135][ T5847] Dev loop7: unable to read RDB block 7 [ 607.061039][ T5847] loop7: unable to read partition table [ 607.071683][ T5847] loop7: partition table beyond EOD, truncated [ 607.083583][T20030] Dev loop7: unable to read RDB block 7 [ 607.090803][T20030] loop7: unable to read partition table [ 607.097172][T20030] loop7: partition table beyond EOD, truncated [ 607.103451][T20030] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 607.238086][ T5907] kovaplus 0003:1E7D:2D50.003F: couldn't init struct kovaplus_device [ 607.249110][ T5907] kovaplus 0003:1E7D:2D50.003F: couldn't install mouse [ 607.260866][ T5907] kovaplus 0003:1E7D:2D50.003F: probe with driver kovaplus failed with error -71 [ 607.279605][ T5907] usb 5-1: USB disconnect, device number 51 [ 607.386480][ T5881] usb 2-1: USB disconnect, device number 61 [ 608.170853][T20049] loop2: detected capacity change from 0 to 7 [ 608.190019][T20049] Dev loop2: unable to read RDB block 7 [ 608.212489][T20049] loop2: unable to read partition table [ 608.255064][T20049] loop2: partition table beyond EOD, truncated [ 608.284484][T20049] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 608.776020][T20072] loop2: detected capacity change from 0 to 7 [ 608.787406][ T5847] Dev loop2: unable to read RDB block 7 [ 608.793422][ T5847] loop2: unable to read partition table [ 608.828273][ T5847] loop2: partition table beyond EOD, truncated [ 608.846212][T20072] Dev loop2: unable to read RDB block 7 [ 608.860545][T20072] loop2: unable to read partition table [ 608.875237][T20072] loop2: partition table beyond EOD, truncated [ 608.891780][T20072] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 608.962009][ T5202] Dev loop2: unable to read RDB block 7 [ 608.979763][ T5202] loop2: unable to read partition table [ 609.001004][ T5202] loop2: partition table beyond EOD, truncated [ 610.380671][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 610.380692][ T30] audit: type=1326 audit(1746263839.156:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20112 comm="syz.1.5987" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x0 [ 610.831567][T20125] syzkaller1: entered promiscuous mode [ 610.890540][T20125] syzkaller1: entered allmulticast mode [ 611.332708][T20139] syzkaller1: entered promiscuous mode [ 611.357347][T20139] syzkaller1: entered allmulticast mode [ 612.004870][ T5907] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 612.163116][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 612.170974][ T5907] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 612.180313][ T5907] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 612.231423][ T5907] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 612.268615][ T5907] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 612.301174][ T5907] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 612.338249][ T5907] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 612.340788][T20159] input: syz1 as /devices/virtual/input/input104 [ 612.351678][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.593630][ T5907] usb 5-1: GET_CAPABILITIES returned 0 [ 612.622912][ T5907] usbtmc 5-1:16.0: can't read capabilities [ 612.820714][ T1939] usb 5-1: USB disconnect, device number 52 [ 613.205300][ T5881] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 613.239874][T20192] tipc: Can't bind to reserved service type 0 [ 613.379515][ T5881] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 613.400647][ T5881] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 613.419511][ T5881] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 613.432612][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.448035][ T5881] usb 2-1: Product: syz [ 613.448999][T20200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6023'. [ 613.452365][ T5881] usb 2-1: Manufacturer: syz [ 613.471276][ T5881] usb 2-1: SerialNumber: syz [ 613.696969][ T5881] usb 2-1: 0:2 : does not exist [ 613.721695][ T5881] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 613.745565][ T1939] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 613.768797][ T5881] usb 2-1: USB disconnect, device number 62 [ 613.837417][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 613.916770][ T1939] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 613.931220][ T1939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 613.942859][ T1939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 613.954159][ T1939] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 613.967771][ T1939] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 613.977955][ T1939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.992401][ T1939] usb 6-1: config 0 descriptor?? [ 613.999050][T20202] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 614.068908][T20215] vlan4: entered allmulticast mode [ 614.078339][T20215] dummy0: entered allmulticast mode [ 614.329756][T20220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6032'. [ 614.339059][T20220] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6032'. [ 614.356120][T20220] gtp1: entered promiscuous mode [ 614.361126][T20220] gtp1: entered allmulticast mode [ 614.430130][ T1939] plantronics 0003:047F:FFFF.0040: reserved main item tag 0xd [ 614.453267][ T1939] plantronics 0003:047F:FFFF.0040: No inputs registered, leaving [ 614.479672][ T1939] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 614.726891][ T1939] usb 6-1: USB disconnect, device number 6 [ 615.865142][ T1939] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 615.883113][ T30] audit: type=1326 audit(1746263844.646:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20274 comm="syz.5.6057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 615.936881][ T30] audit: type=1326 audit(1746263844.646:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20274 comm="syz.5.6057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 616.013998][ T30] audit: type=1326 audit(1746263844.686:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20274 comm="syz.5.6057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 616.054354][ T30] audit: type=1326 audit(1746263844.686:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20274 comm="syz.5.6057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 616.078169][ T1939] usb 5-1: Using ep0 maxpacket: 16 [ 616.083516][ T30] audit: type=1326 audit(1746263844.686:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20274 comm="syz.5.6057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 616.108192][ T1939] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.120340][ T30] audit: type=1326 audit(1746263844.686:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20274 comm="syz.5.6057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 616.143359][ T1939] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.153873][ T1939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 616.160649][ T1939] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 616.170516][ T30] audit: type=1326 audit(1746263844.686:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20274 comm="syz.5.6057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 616.193415][ T1939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.203922][ T30] audit: type=1326 audit(1746263844.686:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20274 comm="syz.5.6057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 616.227815][ T1939] usb 5-1: config 0 descriptor?? [ 616.233116][ T30] audit: type=1326 audit(1746263844.686:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20274 comm="syz.5.6057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 616.262145][ T30] audit: type=1326 audit(1746263844.696:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20274 comm="syz.5.6057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=401 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 616.641876][ T1939] hid (null): unknown global tag 0xd [ 616.673586][ T1939] hid (null): invalid report_size -1755079905 [ 616.693826][ T1939] hid (null): report_id 499631086 is invalid [ 616.712562][ T1939] hid (null): unknown global tag 0xe [ 616.727695][ T1939] hid (null): global environment stack overflow [ 616.792522][T20292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6062'. [ 616.848550][ T5907] usb 5-1: USB disconnect, device number 53 [ 616.854903][T20292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6062'. [ 618.433143][T20359] bridge0: left promiscuous mode [ 618.443318][T20359] macvlan5: left promiscuous mode [ 618.452980][T20359] bond0: left promiscuous mode [ 618.460690][T20359] bond_slave_0: left promiscuous mode [ 618.471381][T20359] bond_slave_1: left promiscuous mode [ 618.478907][T20359] batadv0: left promiscuous mode [ 618.487646][T20359] syz_tun: left promiscuous mode [ 618.493273][T20359] macvlan6: left promiscuous mode [ 618.505253][T20359] gtp1: left promiscuous mode [ 618.510178][T20359] gtp1: left allmulticast mode [ 620.430941][T20432] VFS: Mount too revealing [ 620.679815][T20439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.778798][T20437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6123'. [ 620.859487][T20437] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 620.892408][T20437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.607681][T20474] futex_wake_op: syz.0.6140 tries to shift op by -1; fix this program [ 621.846436][T20480] syzkaller1: entered promiscuous mode [ 621.863330][T20480] syzkaller1: entered allmulticast mode [ 622.564601][ T5907] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 622.734619][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 622.735227][ T5881] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 622.757689][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.789463][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.806603][ T5907] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 622.820335][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.840661][ T5907] usb 5-1: config 0 descriptor?? [ 622.912200][T20520] input: syz1 as /devices/virtual/input/input106 [ 622.926351][ T5881] usb 6-1: Using ep0 maxpacket: 32 [ 622.951174][ T5881] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 622.968108][ T5881] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 622.979730][ T5881] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.997105][ T5881] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 623.029041][ T5881] usb 6-1: config 1 has no interface number 0 [ 623.035765][ T5881] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 623.045500][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.088033][ T5881] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 623.283287][ T5907] savu 0003:1E7D:2D5A.0042: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 623.288980][ T5881] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 623.319701][ T5881] snd_usb_pod 6-1:1.1: invalid control EP [ 623.330409][ T5881] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 623.337270][ T5881] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 623.345139][ T5881] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 623.547390][ T5881] usb 5-1: USB disconnect, device number 54 [ 623.561264][ T5823] usb 6-1: USB disconnect, device number 7 [ 623.811535][T20541] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 624.248790][T20553] loop8: detected capacity change from 0 to 8 [ 624.261656][ T5847] Dev loop8: unable to read RDB block 8 [ 624.267961][ T5847] loop8: unable to read partition table [ 624.274121][ T5847] loop8: partition table beyond EOD, truncated [ 624.288171][T20553] Dev loop8: unable to read RDB block 8 [ 624.293782][T20553] loop8: unable to read partition table [ 624.299890][T20553] loop8: partition table beyond EOD, truncated [ 624.306364][T20553] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 624.415511][ T5881] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 624.426941][ T5823] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 624.599619][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.606283][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.616141][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 624.623287][ T5823] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.633862][ T5881] usb 2-1: config 0 has an invalid interface number: 199 but max is 0 [ 624.642299][ T5823] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.653849][ T5881] usb 2-1: config 0 has no interface number 0 [ 624.660022][ T5823] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.669877][ T5881] usb 2-1: config 0 interface 199 altsetting 2 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 624.681426][ T5823] usb 6-1: config 0 interface 0 has no altsetting 0 [ 624.688165][ T5881] usb 2-1: config 0 interface 199 has no altsetting 0 [ 624.694941][ T5907] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 624.702664][ T5823] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 624.712633][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.720736][ T5881] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=fc.71 [ 624.732715][ T5823] usb 6-1: config 0 descriptor?? [ 624.738338][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.752372][ T5881] usb 2-1: config 0 descriptor?? [ 624.775710][ T5881] port100 2-1:0.199: NFC: Could not find bulk-in or bulk-out endpoint [ 624.846017][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 624.853660][ T5907] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 624.867876][ T5907] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 624.880204][ T5907] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 624.895532][ T5907] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 624.909473][ T5907] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 624.934083][ T5907] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 624.949293][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.020317][ T5886] usb 2-1: USB disconnect, device number 63 [ 625.173905][ T5823] kye 0003:0458:5015.0043: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 625.181664][ T5907] usb 5-1: usb_control_msg returned -32 [ 625.193242][ T5907] usbtmc 5-1:16.0: can't read capabilities [ 625.200314][ T5823] kye 0003:0458:5015.0043: unknown main item tag 0x0 [ 625.235784][ T5823] kye 0003:0458:5015.0043: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.5-1/input0 [ 625.256285][ T5823] kye 0003:0458:5015.0043: tablet-enabling feature report not found [ 625.265500][ T5823] kye 0003:0458:5015.0043: tablet enabling failed [ 625.397974][ T5823] usb 6-1: USB disconnect, device number 8 [ 626.005455][ T5907] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 626.171114][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.198621][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.221785][ T5907] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 626.250496][ T5907] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 626.267622][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.286181][ T5907] usb 2-1: config 0 descriptor?? [ 626.294953][ T5886] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 626.454503][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 626.463825][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 626.475517][ T5886] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 626.485152][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.493660][ T5886] usb 6-1: Product: syz [ 626.504758][ T5886] usb 6-1: Manufacturer: syz [ 626.509965][ T5886] usb 6-1: SerialNumber: syz [ 626.518452][ T5886] usb 6-1: config 0 descriptor?? [ 626.722290][ T5907] plantronics 0003:047F:FFFF.0044: No inputs registered, leaving [ 626.761358][ T5907] plantronics 0003:047F:FFFF.0044: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 626.946073][ T5886] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 626.980504][ T5823] usb 2-1: USB disconnect, device number 64 [ 627.493316][ T5907] usb 5-1: USB disconnect, device number 55 [ 627.555000][ T5886] gs_usb 6-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 627.595798][ T5886] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 627.636403][ T5886] usb 6-1: USB disconnect, device number 9 [ 627.790569][T20659] pim6reg: entered allmulticast mode [ 627.821000][T20659] pim6reg: left allmulticast mode [ 628.863311][T20697] netlink: 136 bytes leftover after parsing attributes in process `syz.5.6236'. [ 628.888349][T20697] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 629.826454][T20739] sctp: [Deprecated]: syz.1.6254 (pid 20739) Use of struct sctp_assoc_value in delayed_ack socket option. [ 629.826454][T20739] Use struct sctp_sack_info instead [ 630.645092][ T5823] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 630.816955][ T5823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.830916][ T5823] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 630.849067][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 630.860782][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 630.876244][ T5823] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 630.897848][ T5823] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 630.913088][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 630.928642][ T5823] usb 2-1: Product: syz [ 630.933773][ T5823] usb 2-1: Manufacturer: syz [ 630.939096][ T5823] usb 2-1: SerialNumber: syz [ 630.950127][ T5823] usb 2-1: config 0 descriptor?? [ 631.167908][ T5823] radio-si470x 2-1:0.0: DeviceID=0x726e ChipID=0x6500 [ 631.377177][ T5823] radio-si470x 2-1:0.0: software version 114, hardware version 110 [ 631.578325][ T5823] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 631.593031][ T5823] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 631.617087][ T5823] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 631.640646][ T5823] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 631.659186][ T5823] usb 2-1: USB disconnect, device number 65 [ 632.000629][T20815] sctp: [Deprecated]: syz.2.6287 (pid 20815) Use of struct sctp_assoc_value in delayed_ack socket option. [ 632.000629][T20815] Use struct sctp_sack_info instead [ 632.124551][ T5823] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 632.284779][ T5823] usb 6-1: Using ep0 maxpacket: 16 [ 632.293283][ T5823] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 632.303509][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.312435][ T5823] usb 6-1: Product: syz [ 632.316856][ T5823] usb 6-1: Manufacturer: syz [ 632.321472][ T5823] usb 6-1: SerialNumber: syz [ 632.329003][ T5823] usb 6-1: config 0 descriptor?? [ 632.337017][ T5823] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 632.345765][ T5823] usb 6-1: Detected FT232H [ 632.542017][ T5823] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 632.567903][T20828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6293'. [ 632.893782][T20837] netlink: 788 bytes leftover after parsing attributes in process `syz.2.6296'. [ 632.975529][ T5823] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 633.208352][ T5907] usb 6-1: USB disconnect, device number 10 [ 633.241242][ T5907] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 633.277004][ T5907] ftdi_sio 6-1:0.0: device disconnected [ 633.339915][T20848] netlink: 14528 bytes leftover after parsing attributes in process `syz.1.6300'. [ 633.588427][ T5886] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 633.744704][ T5907] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 633.752565][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 633.769914][ T5886] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 633.792288][ T5886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 633.822845][ T5886] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 633.838589][ T5886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 633.857141][ T5886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 633.872787][ T5886] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 633.880758][ T5886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 633.893503][ T5886] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 633.906465][ T5886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 633.918259][ T5886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 633.931161][ T5886] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 633.939510][ T5886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 633.940886][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.964210][ T5886] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 633.977116][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.987398][ T5886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 633.999007][ T5907] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 634.008460][ T5886] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 634.020197][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.031941][ T5886] usb 3-1: string descriptor 0 read error: -22 [ 634.039520][ T5907] usb 5-1: config 0 descriptor?? [ 634.052787][ T5886] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 634.062371][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.092121][ T5886] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 634.445932][ T5886] usb 3-1: USB disconnect, device number 74 [ 634.452638][T20874] usb 3-1: Couldn't submit interrupt_out_urb -19 [ 634.485801][ T5907] hid-led 0003:0FC5:B080.0045: unknown main item tag 0x0 [ 635.093509][ T5823] usb 5-1: USB disconnect, device number 56 [ 636.457370][T20938] sctp: [Deprecated]: syz.0.6336 (pid 20938) Use of int in max_burst socket option. [ 636.457370][T20938] Use struct sctp_assoc_value instead [ 636.690734][T20946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6339'. [ 636.719876][T20947] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 637.398303][T20967] syzkaller1: entered promiscuous mode [ 637.434966][T20967] syzkaller1: entered allmulticast mode [ 637.748108][ T5886] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 637.916302][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 637.930402][ T5886] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 637.968848][ T5886] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 638.004842][ T5886] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 638.021655][ T5886] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 638.031911][ T5886] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 638.048995][ T5886] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 638.082024][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.221239][T20991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6359'. [ 638.332692][ T5886] usb 2-1: usb_control_msg returned -32 [ 638.343428][ T5886] usbtmc 2-1:16.0: can't read capabilities [ 638.786271][T21011] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 638.792326][T21013] input: syz1 as /devices/virtual/input/input107 [ 639.464525][ T5886] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 639.628004][ T5886] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.638390][ T5886] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 639.657229][ T5886] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 639.670958][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 639.679344][ T5886] usb 6-1: SerialNumber: syz [ 639.685280][ T5823] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 639.849929][ T5823] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 639.875269][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.901607][ T5823] usb 5-1: config 0 descriptor?? [ 639.907326][ T5886] usb 6-1: 0:2 : does not exist [ 639.953228][ T5886] usb 6-1: USB disconnect, device number 11 [ 639.982487][ T5823] cp210x 5-1:0.0: cp210x converter detected [ 640.051689][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 640.080083][T21041] veth0_to_hsr: entered allmulticast mode [ 640.107403][T21040] veth0_to_hsr: left allmulticast mode [ 640.378516][ T5823] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 640.561938][ T5907] usb 2-1: USB disconnect, device number 66 [ 640.602234][ T5823] usb 5-1: cp210x converter now attached to ttyUSB0 [ 640.624975][ T5886] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 640.809602][ T5886] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 640.819251][ T5823] usb 5-1: USB disconnect, device number 57 [ 640.825982][T21055] bridge0: port 3(hsr0) entered blocking state [ 640.833660][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.849287][T21055] bridge0: port 3(hsr0) entered disabled state [ 640.849762][ T5823] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 640.855858][ T5886] usb 3-1: Product: syz [ 640.868983][T21055] hsr0: entered allmulticast mode [ 640.874064][T21055] hsr_slave_0: entered allmulticast mode [ 640.881842][ T5886] usb 3-1: Manufacturer: syz [ 640.890221][ T5823] cp210x 5-1:0.0: device disconnected [ 640.892029][T21055] hsr_slave_1: entered allmulticast mode [ 640.903054][ T5886] usb 3-1: SerialNumber: syz [ 640.922560][ T5886] usb 3-1: config 0 descriptor?? [ 640.925512][T21055] hsr0: entered promiscuous mode [ 641.353175][ T5886] airspy 3-1:0.0: Board ID: 05 [ 641.359060][ T5886] airspy 3-1:0.0: Firmware version:  [ 641.426992][ T5823] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 641.554903][ T5882] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 641.584584][ T5823] usb 6-1: Using ep0 maxpacket: 8 [ 641.593614][ T5823] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 641.606129][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.620890][ T5823] usb 6-1: config 0 descriptor?? [ 641.718740][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 641.733477][ T5882] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.761881][ T5882] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.779181][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0 [ 641.786611][ T5882] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 641.802308][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.815832][ T5882] usb 2-1: config 0 descriptor?? [ 641.974032][ T5886] airspy 3-1:0.0: usb_control_msg() failed -71 request 12 [ 641.989829][ T5886] airspy 3-1:0.0: Registered as swradio24 [ 641.995801][ T5886] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 642.023162][ T5886] usb 3-1: USB disconnect, device number 75 [ 642.497131][ T5882] usb 2-1: USB disconnect, device number 67 [ 642.608619][T21083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6399'. [ 642.657212][ T5823] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 642.670520][ T5823] asix 6-1:0.0: probe with driver asix failed with error -71 [ 642.694901][ T5823] usb 6-1: USB disconnect, device number 12 [ 643.585850][T21099] netlink: 'syz.1.6407': attribute type 4 has an invalid length. [ 643.975141][ T5882] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 644.134501][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 644.142081][ T5882] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 644.152817][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 644.163265][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 644.174789][ T5886] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 644.183501][ T5882] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 644.197893][ T5882] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 644.207876][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.294976][ T5907] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 644.347200][ T5886] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 644.360592][ T5886] usb 6-1: config 179 has no interface number 0 [ 644.368608][ T5886] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 644.380512][ T5886] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 644.391369][ T5886] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 644.403303][ T5886] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 644.416779][ T5886] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 644.437559][ T5882] usb 3-1: usb_control_msg returned -32 [ 644.443262][ T5886] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 644.453342][ T5882] usbtmc 3-1:16.0: can't read capabilities [ 644.459719][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 644.466062][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.486639][ T5907] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 644.507027][T21114] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 644.524635][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.546080][ T5886] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 644.557843][ T5907] usb 2-1: Product: syz [ 644.562134][ T5907] usb 2-1: Manufacturer: syz [ 644.568375][ T5907] usb 2-1: SerialNumber: syz [ 644.575243][ T5886] xpad 6-1:179.65: probe with driver xpad failed with error -5 [ 644.584922][ T5907] usb 2-1: config 0 descriptor?? [ 644.598340][ T5907] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 644.758959][ T5886] usb 6-1: USB disconnect, device number 13 [ 644.774798][ T5823] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 644.798057][T21127] usbtmc 3-1:16.0: INDICATOR_PULSE returned 0 [ 644.949593][ T5823] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 644.960083][ T5823] usb 5-1: config 0 interface 0 has no altsetting 0 [ 644.972894][ T5823] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 644.982070][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 644.990484][ T5823] usb 5-1: Product: syz [ 644.999445][ T5823] usb 5-1: Manufacturer: syz [ 645.004917][ T5823] usb 5-1: SerialNumber: syz [ 645.006734][ T5886] usb 3-1: USB disconnect, device number 76 [ 645.013318][ T5823] usb 5-1: config 0 descriptor?? [ 645.043392][ T5823] usb 5-1: selecting invalid altsetting 0 [ 645.261695][ T5886] usb 5-1: USB disconnect, device number 58 [ 645.379936][T21129] syzkaller1: entered promiscuous mode [ 645.385675][T21129] syzkaller1: entered allmulticast mode [ 645.634682][ T5907] gspca_ov534_9: reg_w failed -71 [ 645.934599][ T5907] gspca_ov534_9: Unknown sensor 0000 [ 645.934704][ T5907] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 645.951900][ T5907] usb 2-1: USB disconnect, device number 68 [ 646.324624][ T5886] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 646.498230][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 646.529128][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.560205][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.583641][T21164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6435'. [ 646.598927][ T5823] psmouse serio8: Failed to reset mouse on : -5 [ 646.599959][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 646.605831][ T5881] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 646.631424][T21164] vlan3: entered promiscuous mode [ 646.640892][ T5886] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 646.650794][T21164] hsr0: entered promiscuous mode [ 646.659998][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.692208][ T5886] usb 3-1: config 0 descriptor?? [ 646.849124][ T5881] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 646.871858][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.898983][ T5881] usb 2-1: config 0 descriptor?? [ 647.122130][T21178] fuse: Bad value for 'fd' [ 647.163468][ T5881] kaweth 2-1:0.0: Firmware present in device. [ 647.224849][ T5886] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0047/input/input109 [ 647.279466][ T5886] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0047/input/input110 [ 647.332491][ T5881] kaweth 2-1:0.0: Statistics collection: 0 [ 647.359120][ T5881] kaweth 2-1:0.0: Multicast filter limit: 0 [ 647.389195][ T5886] kye 0003:0458:5011.0047: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 647.399684][ T5881] kaweth 2-1:0.0: MTU: 0 [ 647.429681][ T5881] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 647.577466][T21187] input: syz1 as /devices/virtual/input/input111 [ 647.604152][ T1939] usb 3-1: USB disconnect, device number 77 [ 647.941780][ T5881] kaweth 2-1:0.0: Error setting receive filter [ 647.951341][ T5881] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 647.979368][ T5881] usb 2-1: USB disconnect, device number 69 [ 648.285096][ T5886] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 648.446890][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.460626][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.470784][ T5886] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 648.479989][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.490987][ T5886] usb 6-1: config 0 descriptor?? [ 648.634589][ T5907] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 648.794764][ T5907] usb 3-1: Using ep0 maxpacket: 8 [ 648.816472][ T5907] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 648.855089][ T5907] usb 3-1: config 0 has no interface number 0 [ 648.861314][ T5907] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 648.884310][ T5907] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 648.893972][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.910408][ T5907] usb 3-1: config 0 descriptor?? [ 648.971155][ T5907] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 649.228888][ T5881] usb 3-1: USB disconnect, device number 78 [ 649.338500][ T5886] hid-led 0003:27B8:01ED.0048: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.5-1/input0 [ 649.496159][ T5886] hid-led 0003:27B8:01ED.0048: ThingM blink(1) initialized [ 649.574317][ T5886] usb 6-1: USB disconnect, device number 14 [ 650.244846][ T5823] misc userio: Buffer overflowed, userio client isn't keeping up [ 650.277163][ T30] kauditd_printk_skb: 113 callbacks suppressed [ 650.277183][ T30] audit: type=1326 audit(1746263879.056:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21235 comm="syz.2.6467" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x0 [ 650.556054][T21245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6471'. [ 651.445160][ T1939] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 651.541544][ T5823] input: PS/2 Generic Mouse as /devices/serio8/input/input108 [ 651.625131][ T1939] usb 3-1: Using ep0 maxpacket: 32 [ 651.632987][ T1939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.675623][ T1939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.726745][ T1939] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 651.778682][ T1939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.798310][ T5823] psmouse serio8: Failed to enable mouse on [ 651.830372][ T1939] usb 3-1: config 0 descriptor?? [ 652.006628][ T5886] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 652.164793][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 652.170116][ T5907] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 652.180590][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.190986][ T5886] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 652.200705][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.212454][ T5886] usb 2-1: config 0 descriptor?? [ 652.273926][ T1939] savu 0003:1E7D:2D5A.0049: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 652.338590][ T5907] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 652.358460][ T5907] usb 6-1: config 179 has no interface number 0 [ 652.365265][ T5907] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 652.382178][ T5907] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 652.394283][ T5907] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 652.411113][ T5907] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 652.423329][ T5907] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 652.441810][ T5907] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 652.452037][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.475450][T21274] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 652.493734][T21274] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 652.558160][ T1939] usb 3-1: USB disconnect, device number 79 [ 652.675083][ T5886] uclogic 0003:5543:0064.004A: No inputs registered, leaving [ 652.706724][ T5886] uclogic 0003:5543:0064.004A: hidraw0: USB HID v10.00 Device [HID 5543:0064] on usb-dummy_hcd.1-1/input0 [ 652.873669][ T1939] usb 2-1: USB disconnect, device number 70 [ 652.900035][ T5823] usb 6-1: USB disconnect, device number 15 [ 652.900036][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 652.900079][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 653.381203][T21302] vivid-000: disconnect [ 653.395572][T21301] vivid-000: reconnect [ 653.616007][T21308] loop2: detected capacity change from 0 to 7 [ 653.642469][T21308] Dev loop2: unable to read RDB block 7 [ 653.658034][T21308] loop2: unable to read partition table [ 653.669670][T21308] loop2: partition table beyond EOD, truncated [ 653.694875][T21308] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 654.354837][ T5886] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 654.519960][ T30] audit: type=1326 audit(1746263883.296:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21345 comm="syz.4.6518" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x0 [ 654.552212][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 654.570058][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.603251][ T5886] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 654.640723][ T5886] usb 6-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 654.660899][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.687097][ T5886] usb 6-1: config 0 descriptor?? [ 655.136584][ T5886] cherry 0003:046A:0023.004B: unbalanced collection at end of report description [ 655.164333][ T5886] cherry 0003:046A:0023.004B: probe with driver cherry failed with error -22 [ 655.342962][ T5886] usb 6-1: USB disconnect, device number 16 [ 655.532230][T21370] sctp: [Deprecated]: syz.4.6529 (pid 21370) Use of int in maxseg socket option. [ 655.532230][T21370] Use struct sctp_assoc_value instead [ 656.624862][T21402] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6541'. [ 657.507898][T21435] batadv_slave_1: entered promiscuous mode [ 657.560419][T21435] batadv_slave_1: left promiscuous mode [ 658.874956][ T5886] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 659.045983][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 659.085257][ T5886] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 659.100304][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.124867][ T5886] usb 5-1: Product: syz [ 659.134534][ T5886] usb 5-1: Manufacturer: syz [ 659.139185][ T5886] usb 5-1: SerialNumber: syz [ 659.177828][ T5886] usb 5-1: config 0 descriptor?? [ 659.194091][ T5886] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 659.621256][T21481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6580'. [ 659.807642][ T5823] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 659.838563][T21488] binder: 21487:21488 ioctl 4018620d 0 returned -22 [ 659.989673][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.014061][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.029457][ T5823] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 660.039579][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.058006][ T5823] usb 2-1: config 0 descriptor?? [ 660.201553][ T5886] gspca_sonixj: reg_w1 err -71 [ 660.284665][ T5886] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 660.299914][ T5886] usb 5-1: USB disconnect, device number 59 [ 660.888116][ T5823] hid-led 0003:27B8:01ED.004C: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 660.932370][ T5823] hid-led 0003:27B8:01ED.004C: ThingM blink(1) initialized [ 661.111067][ T5823] usb 2-1: USB disconnect, device number 71 [ 661.949138][T21548] loop8: detected capacity change from 0 to 7 [ 661.996148][T21548] Dev loop8: unable to read RDB block 7 [ 662.001802][T21548] loop8: unable to read partition table [ 662.028988][T21548] loop8: partition table beyond EOD, truncated [ 662.061371][T21548] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 662.261354][T21565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6619'. [ 662.394767][ T5886] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 662.444886][ T5907] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 662.555423][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 662.567733][ T5886] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 662.584015][ T5886] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 662.598338][ T5886] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 662.609866][ T5886] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 662.631744][ T5886] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 662.643397][ T5907] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 662.653747][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.661942][ T5907] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 662.677971][ T5907] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 662.696110][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 662.716657][ T5907] usb 6-1: SerialNumber: syz [ 662.881357][ T5886] usb 2-1: GET_CAPABILITIES returned 0 [ 662.889083][ T5886] usbtmc 2-1:16.0: can't read capabilities [ 662.980252][ T5907] usb 6-1: 0:2 : does not exist [ 663.013094][ T5907] usb 6-1: USB disconnect, device number 17 [ 663.055062][ T5823] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 663.130549][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 663.145190][ T1939] usb 2-1: USB disconnect, device number 72 [ 663.226935][ T5823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.253441][ T5823] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 663.276734][ T5823] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 663.286642][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 663.302169][ T5823] usb 3-1: SerialNumber: syz [ 663.539215][ T5823] usb 3-1: 0:2 : does not exist [ 663.574144][ T5823] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 663.665278][ T5823] usb 3-1: USB disconnect, device number 80 [ 663.738704][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 664.370990][T21606] @: renamed from vlan0 [ 665.911195][T21654] loop6: detected capacity change from 0 to 63 [ 665.986326][T21657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6661'. [ 666.047415][T21657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6661'. [ 667.234536][ T5823] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 667.406935][ T5823] usb 3-1: config 0 has no interfaces? [ 667.412739][ T5823] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 667.441792][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.452848][ T5823] usb 3-1: config 0 descriptor?? [ 667.685676][T21700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.700378][T21700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.726390][T21700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.736747][T21700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.748953][ T5823] usb 3-1: USB disconnect, device number 81 [ 667.788701][T21725] netlink: 'syz.4.6693': attribute type 11 has an invalid length. [ 667.824811][ T5907] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 667.976525][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.988188][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.999751][ T5907] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 668.016350][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.029686][ T5907] usb 2-1: config 0 descriptor?? [ 668.204515][ T5823] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 668.372555][ T5823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.388596][ T1939] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 668.401097][ T5823] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 668.413749][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.433012][ T5823] usb 3-1: Product: syz [ 668.442955][ T5823] usb 3-1: Manufacturer: syz [ 668.453321][ T5823] usb 3-1: SerialNumber: syz [ 668.464045][ T5907] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 668.484013][ T5823] usb 3-1: selecting invalid altsetting 1 [ 668.495785][ T5907] cp2112 0003:10C4:EA90.004D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 668.585227][ T1939] usb 5-1: Using ep0 maxpacket: 16 [ 668.593148][ T1939] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.610466][ T1939] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.621454][ T1939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 668.632821][ T1939] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 668.642043][ T1939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.645883][ T5907] cp2112 0003:10C4:EA90.004D: Part Number: 0x82 Device Version: 0xFE [ 668.661606][ T1939] usb 5-1: config 0 descriptor?? [ 668.689727][ T5823] cdc_ncm 3-1:1.0: bind() failure [ 668.713718][ T5823] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 668.772060][ T5823] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 668.785023][ T5823] usb 3-1: USB disconnect, device number 82 [ 668.823689][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 669.049291][ T5907] cp2112 0003:10C4:EA90.004D: error setting SMBus config [ 669.063395][ T5907] cp2112 0003:10C4:EA90.004D: probe with driver cp2112 failed with error -71 [ 669.078148][ T5907] usb 2-1: USB disconnect, device number 73 [ 669.079631][ T1939] hid (null): report_id 11059 is invalid [ 669.096418][ T1939] hid (null): unknown global tag 0xfa [ 669.120007][ T1939] cougar 0003:060B:500A.004E: usage count exceeds max: fixing up report descriptor [ 669.131485][ T1939] cougar 0003:060B:500A.004E: unexpected long global item [ 669.139515][ T1939] cougar 0003:060B:500A.004E: parse failed [ 669.146002][ T1939] cougar 0003:060B:500A.004E: probe with driver cougar failed with error -22 [ 669.327115][ T5907] usb 5-1: USB disconnect, device number 60 [ 669.674596][ T1939] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 669.684657][ T5886] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 669.834504][ T1939] usb 6-1: Using ep0 maxpacket: 16 [ 669.835065][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 669.841977][ T1939] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 669.854140][ T1939] usb 6-1: config 0 has no interface number 0 [ 669.860491][ T1939] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.881206][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 669.893220][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 669.900283][ T1939] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.912350][ T5886] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 669.927696][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.937129][ T5886] usb 3-1: Product: syz [ 669.941749][ T5886] usb 3-1: Manufacturer: syz [ 669.942267][ T1939] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 669.947800][ T5886] usb 3-1: SerialNumber: syz [ 669.972277][ T5886] usb 3-1: config 0 descriptor?? [ 669.990305][ T5886] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 669.993889][ T1939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.017010][ T5886] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 670.072209][ T1939] usb 6-1: config 0 descriptor?? [ 670.610088][ T5886] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 670.626558][ T5886] em28xx 3-1:0.0: Config register raw data: 0x56 [ 670.705973][ T1939] uclogic 0003:28BD:0071.004F: pen parameters not found [ 670.713433][ T1939] uclogic 0003:28BD:0071.004F: interface is invalid, ignoring [ 670.731286][T21781] input: syz0 as /devices/virtual/input/input113 [ 670.748969][T21781] input: failed to attach handler leds to device input113, error: -6 [ 670.828390][ T5886] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 670.847020][ T5886] em28xx 3-1:0.0: No AC97 audio processor [ 670.875278][ T5886] usb 3-1: USB disconnect, device number 83 [ 670.887964][T21783] [U] [ 670.889562][ T5886] em28xx 3-1:0.0: Disconnecting em28xx [ 670.891515][T21783] [U] [ 670.916399][ T5886] em28xx 3-1:0.0: Freeing device [ 670.922950][T21783] [U] [ 670.925793][T21783] [U] [ 670.949103][T21783] [U] [ 670.951863][T21783] [U] [ 670.954613][T21783] [U] [ 670.957342][T21783] [U] [ 670.966460][T21783] [U] [ 670.969235][T21783] [U] [ 670.971961][T21783] [U] [ 670.991771][T21782] [U] [ 670.992166][ T5907] usb 6-1: USB disconnect, device number 18 [ 671.129505][T21787] [ 671.131879][T21787] ===================================================== [ 671.139022][T21787] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 671.146509][T21787] 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 Not tainted [ 671.153627][T21787] ----------------------------------------------------- [ 671.160570][T21787] syz.4.6722/21787 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 671.168312][T21787] ffff8880287c56a8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 671.177072][T21787] [ 671.177072][T21787] and this task is already holding: [ 671.184466][T21787] ffff88805e39a028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 671.194262][T21787] which would create a new lock dependency: [ 671.200153][T21787] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 671.208269][T21787] [ 671.208269][T21787] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 671.217720][T21787] (&dev->event_lock#2){..-.}-{3:3} [ 671.217756][T21787] [ 671.217756][T21787] ... which became SOFTIRQ-irq-safe at: [ 671.230646][T21787] lock_acquire+0x120/0x360 [ 671.235267][T21787] _raw_spin_lock_irqsave+0xa7/0xf0 [ 671.240569][T21787] input_event+0x7a/0xc0 [ 671.244903][T21787] xpad360_process_packet+0x1fe/0xb30 [ 671.250375][T21787] xpad_irq_in+0x1523/0x2500 [ 671.255054][T21787] __usb_hcd_giveback_urb+0x417/0x690 [ 671.260511][T21787] dummy_timer+0x862/0x4550 [ 671.265109][T21787] __hrtimer_run_queues+0x529/0xc60 [ 671.270413][T21787] hrtimer_run_softirq+0x187/0x2b0 [ 671.275621][T21787] handle_softirqs+0x283/0x870 [ 671.280488][T21787] __irq_exit_rcu+0xca/0x1f0 [ 671.285165][T21787] irq_exit_rcu+0x9/0x30 [ 671.289512][T21787] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 671.295232][T21787] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 671.301306][T21787] lock_acquire+0x175/0x360 [ 671.305913][T21787] unwind_next_frame+0xc2/0x2390 [ 671.310939][T21787] arch_stack_walk+0x11c/0x150 [ 671.315793][T21787] stack_trace_save+0x9c/0xe0 [ 671.320561][T21787] kasan_save_track+0x3e/0x80 [ 671.325331][T21787] kasan_save_free_info+0x46/0x50 [ 671.330455][T21787] __kasan_slab_free+0x62/0x70 [ 671.335309][T21787] kfree+0x193/0x440 [ 671.339297][T21787] evdev_release+0x6fc/0x800 [ 671.343983][T21787] __fput+0x449/0xa70 [ 671.348070][T21787] fput_close_sync+0x119/0x200 [ 671.352930][T21787] __x64_sys_close+0x7f/0x110 [ 671.357692][T21787] do_syscall_64+0xf6/0x210 [ 671.362290][T21787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.368274][T21787] [ 671.368274][T21787] to a SOFTIRQ-irq-unsafe lock: [ 671.375293][T21787] (tasklist_lock){.+.+}-{3:3} [ 671.375321][T21787] [ 671.375321][T21787] ... which became SOFTIRQ-irq-unsafe at: [ 671.387952][T21787] ... [ 671.387961][T21787] lock_acquire+0x120/0x360 [ 671.395143][T21787] _raw_read_lock+0x36/0x50 [ 671.399742][T21787] __do_wait+0xde/0x740 [ 671.403987][T21787] do_wait+0x1f8/0x520 [ 671.408146][T21787] kernel_wait+0xab/0x170 [ 671.412568][T21787] call_usermodehelper_exec_work+0xbe/0x230 [ 671.418558][T21787] process_scheduled_works+0xadb/0x17a0 [ 671.424202][T21787] worker_thread+0x8a0/0xda0 [ 671.428879][T21787] kthread+0x70e/0x8a0 [ 671.433044][T21787] ret_from_fork+0x4b/0x80 [ 671.437560][T21787] ret_from_fork_asm+0x1a/0x30 [ 671.442411][T21787] [ 671.442411][T21787] other info that might help us debug this: [ 671.442411][T21787] [ 671.452635][T21787] Chain exists of: [ 671.452635][T21787] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 671.452635][T21787] [ 671.466214][T21787] Possible interrupt unsafe locking scenario: [ 671.466214][T21787] [ 671.474529][T21787] CPU0 CPU1 [ 671.479894][T21787] ---- ---- [ 671.485258][T21787] lock(tasklist_lock); [ 671.489534][T21787] local_irq_disable(); [ 671.496285][T21787] lock(&dev->event_lock#2); [ 671.503492][T21787] lock(&client->buffer_lock); [ 671.510866][T21787] [ 671.514320][T21787] lock(&dev->event_lock#2); [ 671.519272][T21787] [ 671.519272][T21787] *** DEADLOCK *** [ 671.519272][T21787] [ 671.527415][T21787] 7 locks held by syz.4.6722/21787: [ 671.532696][T21787] #0: ffff888029251118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 671.541857][T21787] #1: ffff88801c387230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 671.552071][T21787] #2: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 671.561741][T21787] #3: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 671.571328][T21787] #4: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 671.580481][T21787] #5: ffff88805e39a028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 671.590679][T21787] #6: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 671.599751][T21787] [ 671.599751][T21787] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 671.610151][T21787] -> (&dev->event_lock#2){..-.}-{3:3} { [ 671.615816][T21787] IN-SOFTIRQ-W at: [ 671.619902][T21787] lock_acquire+0x120/0x360 [ 671.626245][T21787] _raw_spin_lock_irqsave+0xa7/0xf0 [ 671.633354][T21787] input_event+0x7a/0xc0 [ 671.639424][T21787] xpad360_process_packet+0x1fe/0xb30 [ 671.646639][T21787] xpad_irq_in+0x1523/0x2500 [ 671.653054][T21787] __usb_hcd_giveback_urb+0x417/0x690 [ 671.660274][T21787] dummy_timer+0x862/0x4550 [ 671.666608][T21787] __hrtimer_run_queues+0x529/0xc60 [ 671.673645][T21787] hrtimer_run_softirq+0x187/0x2b0 [ 671.680594][T21787] handle_softirqs+0x283/0x870 [ 671.687193][T21787] __irq_exit_rcu+0xca/0x1f0 [ 671.693608][T21787] irq_exit_rcu+0x9/0x30 [ 671.699672][T21787] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 671.707223][T21787] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 671.715030][T21787] lock_acquire+0x175/0x360 [ 671.721367][T21787] unwind_next_frame+0xc2/0x2390 [ 671.728133][T21787] arch_stack_walk+0x11c/0x150 [ 671.734733][T21787] stack_trace_save+0x9c/0xe0 [ 671.741240][T21787] kasan_save_track+0x3e/0x80 [ 671.748264][T21787] kasan_save_free_info+0x46/0x50 [ 671.755124][T21787] __kasan_slab_free+0x62/0x70 [ 671.761714][T21787] kfree+0x193/0x440 [ 671.767436][T21787] evdev_release+0x6fc/0x800 [ 671.773947][T21787] __fput+0x449/0xa70 [ 671.779767][T21787] fput_close_sync+0x119/0x200 [ 671.786368][T21787] __x64_sys_close+0x7f/0x110 [ 671.792873][T21787] do_syscall_64+0xf6/0x210 [ 671.799293][T21787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.807012][T21787] INITIAL USE at: [ 671.810991][T21787] lock_acquire+0x120/0x360 [ 671.817263][T21787] _raw_spin_lock_irqsave+0xa7/0xf0 [ 671.824216][T21787] input_inject_event+0xab/0x320 [ 671.831341][T21787] kbd_led_trigger_activate+0xbc/0x100 [ 671.838563][T21787] led_trigger_set+0x52a/0x950 [ 671.845087][T21787] led_trigger_set_default+0x215/0x250 [ 671.852299][T21787] led_classdev_register_ext+0x73d/0x930 [ 671.859674][T21787] input_leds_connect+0x517/0x790 [ 671.866445][T21787] input_register_device+0xceb/0x10b0 [ 671.873562][T21787] atkbd_connect+0x70e/0x9c0 [ 671.879899][T21787] serio_driver_probe+0x7f/0xa0 [ 671.886497][T21787] really_probe+0x26a/0x9a0 [ 671.892745][T21787] __driver_probe_device+0x18c/0x2f0 [ 671.899769][T21787] driver_probe_device+0x4f/0x430 [ 671.906620][T21787] __driver_attach+0x452/0x700 [ 671.913126][T21787] bus_for_each_dev+0x230/0x2b0 [ 671.919733][T21787] serio_handle_event+0x1a2/0x860 [ 671.926506][T21787] process_scheduled_works+0xadb/0x17a0 [ 671.933800][T21787] worker_thread+0x8a0/0xda0 [ 671.940128][T21787] kthread+0x70e/0x8a0 [ 671.945937][T21787] ret_from_fork+0x4b/0x80 [ 671.952093][T21787] ret_from_fork_asm+0x1a/0x30 [ 671.958599][T21787] } [ 671.961182][T21787] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 671.970298][T21787] -> (&client->buffer_lock){....}-{3:3} { [ 671.976046][T21787] INITIAL USE at: [ 671.979942][T21787] lock_acquire+0x120/0x360 [ 671.986023][T21787] _raw_spin_lock_irqsave+0xa7/0xf0 [ 671.992876][T21787] evdev_ioctl_handler+0x1969/0x1f10 [ 671.999736][T21787] __ia32_compat_sys_ioctl+0x551/0x840 [ 672.006762][T21787] __do_fast_syscall_32+0xb4/0x110 [ 672.013547][T21787] do_fast_syscall_32+0x34/0x80 [ 672.019984][T21787] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.027900][T21787] } [ 672.030408][T21787] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 672.038577][T21787] ... acquired at: [ 672.042410][T21787] lock_acquire+0x120/0x360 [ 672.047105][T21787] _raw_spin_lock+0x2e/0x40 [ 672.051788][T21787] evdev_pass_values+0xb9/0xbd0 [ 672.056825][T21787] evdev_events+0x1e6/0x340 [ 672.061510][T21787] input_pass_values+0x285/0x890 [ 672.066629][T21787] input_event_dispose+0x330/0x6b0 [ 672.071956][T21787] input_inject_event+0x1fe/0x320 [ 672.077158][T21787] evdev_write+0x2fc/0x480 [ 672.081761][T21787] vfs_write+0x27b/0xa90 [ 672.086190][T21787] ksys_write+0x145/0x250 [ 672.090694][T21787] __do_fast_syscall_32+0xb4/0x110 [ 672.096009][T21787] do_fast_syscall_32+0x34/0x80 [ 672.101079][T21787] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.107687][T21787] [ 672.110027][T21787] [ 672.110027][T21787] the dependencies between the lock to be acquired [ 672.110038][T21787] and SOFTIRQ-irq-unsafe lock: [ 672.123566][T21787] -> (tasklist_lock){.+.+}-{3:3} { [ 672.128883][T21787] HARDIRQ-ON-R at: [ 672.133054][T21787] lock_acquire+0x120/0x360 [ 672.139581][T21787] _raw_read_lock+0x36/0x50 [ 672.146088][T21787] __do_wait+0xde/0x740 [ 672.152244][T21787] do_wait+0x1f8/0x520 [ 672.158321][T21787] kernel_wait+0xab/0x170 [ 672.164651][T21787] call_usermodehelper_exec_work+0xbe/0x230 [ 672.172548][T21787] process_scheduled_works+0xadb/0x17a0 [ 672.180102][T21787] worker_thread+0x8a0/0xda0 [ 672.186727][T21787] kthread+0x70e/0x8a0 [ 672.192805][T21787] ret_from_fork+0x4b/0x80 [ 672.199246][T21787] ret_from_fork_asm+0x1a/0x30 [ 672.206110][T21787] SOFTIRQ-ON-R at: [ 672.210267][T21787] lock_acquire+0x120/0x360 [ 672.216776][T21787] _raw_read_lock+0x36/0x50 [ 672.223278][T21787] __do_wait+0xde/0x740 [ 672.229435][T21787] do_wait+0x1f8/0x520 [ 672.235521][T21787] kernel_wait+0xab/0x170 [ 672.241878][T21787] call_usermodehelper_exec_work+0xbe/0x230 [ 672.249788][T21787] process_scheduled_works+0xadb/0x17a0 [ 672.257354][T21787] worker_thread+0x8a0/0xda0 [ 672.263952][T21787] kthread+0x70e/0x8a0 [ 672.270038][T21787] ret_from_fork+0x4b/0x80 [ 672.276494][T21787] ret_from_fork_asm+0x1a/0x30 [ 672.283261][T21787] INITIAL USE at: [ 672.287332][T21787] lock_acquire+0x120/0x360 [ 672.293764][T21787] _raw_write_lock_irq+0xa2/0xf0 [ 672.300629][T21787] copy_process+0x21d5/0x3b80 [ 672.307227][T21787] kernel_clone+0x21e/0x870 [ 672.313650][T21787] user_mode_thread+0xdd/0x140 [ 672.320332][T21787] rest_init+0x23/0x300 [ 672.326447][T21787] start_kernel+0x470/0x4f0 [ 672.332969][T21787] x86_64_start_reservations+0x2a/0x30 [ 672.340362][T21787] x86_64_start_kernel+0x66/0x70 [ 672.347235][T21787] common_startup_64+0x13e/0x147 [ 672.354139][T21787] INITIAL READ USE at: [ 672.358659][T21787] lock_acquire+0x120/0x360 [ 672.365631][T21787] _raw_read_lock+0x36/0x50 [ 672.372572][T21787] __do_wait+0xde/0x740 [ 672.379159][T21787] do_wait+0x1f8/0x520 [ 672.385778][T21787] kernel_wait+0xab/0x170 [ 672.392474][T21787] call_usermodehelper_exec_work+0xbe/0x230 [ 672.400821][T21787] process_scheduled_works+0xadb/0x17a0 [ 672.408728][T21787] worker_thread+0x8a0/0xda0 [ 672.415667][T21787] kthread+0x70e/0x8a0 [ 672.422104][T21787] ret_from_fork+0x4b/0x80 [ 672.428877][T21787] ret_from_fork_asm+0x1a/0x30 [ 672.436199][T21787] } [ 672.438889][T21787] ... key at: [] tasklist_lock+0x18/0x40 [ 672.446968][T21787] ... acquired at: [ 672.450938][T21787] lock_acquire+0x120/0x360 [ 672.455717][T21787] _raw_read_lock+0x36/0x50 [ 672.460392][T21787] send_sigurg+0x12b/0x420 [ 672.464993][T21787] sk_send_sigurg+0x6c/0x2e0 [ 672.469761][T21787] queue_oob+0x3d9/0x4e0 [ 672.474181][T21787] unix_stream_sendmsg+0xa41/0xb60 [ 672.479471][T21787] __sock_sendmsg+0x219/0x270 [ 672.484373][T21787] ____sys_sendmsg+0x52d/0x830 [ 672.489328][T21787] ___sys_sendmsg+0x21f/0x2a0 [ 672.494188][T21787] __sys_sendmmsg+0x28e/0x430 [ 672.499041][T21787] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 672.504767][T21787] __do_fast_syscall_32+0xb4/0x110 [ 672.510068][T21787] do_fast_syscall_32+0x34/0x80 [ 672.515094][T21787] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.521684][T21787] [ 672.524009][T21787] -> (&f_owner->lock){....}-{3:3} { [ 672.529321][T21787] INITIAL USE at: [ 672.533306][T21787] lock_acquire+0x120/0x360 [ 672.539565][T21787] _raw_write_lock_irq+0xa2/0xf0 [ 672.546244][T21787] __f_setown+0x67/0x370 [ 672.552230][T21787] fcntl_dirnotify+0x3d6/0x690 [ 672.558734][T21787] do_fcntl+0x6c7/0x1910 [ 672.564831][T21787] do_compat_fcntl64+0x484/0x720 [ 672.571517][T21787] __do_fast_syscall_32+0xb4/0x110 [ 672.578371][T21787] do_fast_syscall_32+0x34/0x80 [ 672.584966][T21787] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.593039][T21787] INITIAL READ USE at: [ 672.597461][T21787] lock_acquire+0x120/0x360 [ 672.604137][T21787] _raw_read_lock_irqsave+0xaf/0x100 [ 672.611590][T21787] send_sigio+0x38/0x370 [ 672.618100][T21787] dnotify_handle_event+0x169/0x440 [ 672.625480][T21787] fsnotify+0x1814/0x1a80 [ 672.631981][T21787] path_openat+0x171e/0x3830 [ 672.638837][T21787] do_filp_open+0x1fa/0x410 [ 672.645512][T21787] do_sys_openat2+0x121/0x1c0 [ 672.652368][T21787] __ia32_compat_sys_openat+0x131/0x160 [ 672.660208][T21787] __do_fast_syscall_32+0xb4/0x110 [ 672.667498][T21787] do_fast_syscall_32+0x34/0x80 [ 672.674523][T21787] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.683053][T21787] } [ 672.685636][T21787] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 672.694574][T21787] ... acquired at: [ 672.698462][T21787] lock_acquire+0x120/0x360 [ 672.703146][T21787] _raw_read_lock_irqsave+0xaf/0x100 [ 672.708709][T21787] send_sigio+0x38/0x370 [ 672.713135][T21787] kill_fasync+0x24d/0x4d0 [ 672.717733][T21787] lease_break_callback+0x26/0x30 [ 672.722935][T21787] __break_lease+0x6a2/0x1620 [ 672.727794][T21787] do_dentry_open+0xd62/0x1970 [ 672.732742][T21787] vfs_open+0x3b/0x340 [ 672.737016][T21787] dentry_open+0x61/0xa0 [ 672.741462][T21787] do_mq_open+0x583/0x750 [ 672.745978][T21787] __ia32_compat_sys_mq_open+0x1f9/0x250 [ 672.751790][T21787] __do_fast_syscall_32+0xb4/0x110 [ 672.757085][T21787] do_fast_syscall_32+0x34/0x80 [ 672.762113][T21787] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.768615][T21787] [ 672.770940][T21787] -> (&new->fa_lock){....}-{3:3} { [ 672.776076][T21787] INITIAL USE at: [ 672.779973][T21787] lock_acquire+0x120/0x360 [ 672.786067][T21787] _raw_write_lock_irq+0xa2/0xf0 [ 672.792571][T21787] fasync_remove_entry+0xf1/0x1c0 [ 672.799170][T21787] __fput+0x89f/0xa70 [ 672.804723][T21787] task_work_run+0x1d1/0x260 [ 672.810883][T21787] resume_user_mode_work+0x5e/0x80 [ 672.817565][T21787] syscall_exit_to_user_mode+0x9a/0x120 [ 672.824677][T21787] __do_fast_syscall_32+0xc1/0x110 [ 672.831353][T21787] do_fast_syscall_32+0x34/0x80 [ 672.837772][T21787] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.845873][T21787] INITIAL READ USE at: [ 672.850216][T21787] lock_acquire+0x120/0x360 [ 672.856745][T21787] _raw_read_lock_irqsave+0xaf/0x100 [ 672.864064][T21787] kill_fasync+0x199/0x4d0 [ 672.870497][T21787] fuse_abort_conn+0xcf1/0x1010 [ 672.877355][T21787] cuse_process_init_reply+0x8ba/0xeb0 [ 672.884919][T21787] fuse_request_end+0x7b0/0xa60 [ 672.891771][T21787] fuse_dev_do_write+0x1c21/0x4fa0 [ 672.898888][T21787] fuse_dev_write+0x143/0x1d0 [ 672.905568][T21787] vfs_write+0x548/0xa90 [ 672.911814][T21787] ksys_write+0x145/0x250 [ 672.918145][T21787] __do_fast_syscall_32+0xb4/0x110 [ 672.925284][T21787] do_fast_syscall_32+0x34/0x80 [ 672.932139][T21787] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.940470][T21787] } [ 672.942985][T21787] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 672.951674][T21787] ... acquired at: [ 672.955473][T21787] lock_acquire+0x120/0x360 [ 672.960157][T21787] _raw_read_lock_irqsave+0xaf/0x100 [ 672.965617][T21787] kill_fasync+0x199/0x4d0 [ 672.970218][T21787] evdev_pass_values+0x627/0xbd0 [ 672.975343][T21787] evdev_events+0x1e6/0x340 [ 672.980037][T21787] input_pass_values+0x285/0x890 [ 672.985157][T21787] input_event_dispose+0x330/0x6b0 [ 672.990445][T21787] input_inject_event+0x1fe/0x320 [ 672.995646][T21787] evdev_write+0x2fc/0x480 [ 673.000244][T21787] vfs_write+0x27b/0xa90 [ 673.004662][T21787] ksys_write+0x145/0x250 [ 673.009164][T21787] __do_fast_syscall_32+0xb4/0x110 [ 673.014456][T21787] do_fast_syscall_32+0x34/0x80 [ 673.019493][T21787] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 673.026027][T21787] [ 673.028346][T21787] [ 673.028346][T21787] stack backtrace: [ 673.034264][T21787] CPU: 1 UID: 0 PID: 21787 Comm: syz.4.6722 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 673.034286][T21787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 673.034301][T21787] Call Trace: [ 673.034314][T21787] [ 673.034322][T21787] dump_stack_lvl+0x189/0x250 [ 673.034350][T21787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 673.034377][T21787] ? __pfx__printk+0x10/0x10 [ 673.034401][T21787] validate_chain+0x1f05/0x2140 [ 673.034431][T21787] __lock_acquire+0xaac/0xd20 [ 673.034461][T21787] ? kill_fasync+0x199/0x4d0 [ 673.034490][T21787] lock_acquire+0x120/0x360 [ 673.034517][T21787] ? kill_fasync+0x199/0x4d0 [ 673.034548][T21787] ? __lock_acquire+0xaac/0xd20 [ 673.034579][T21787] _raw_read_lock_irqsave+0xaf/0x100 [ 673.034601][T21787] ? kill_fasync+0x199/0x4d0 [ 673.034631][T21787] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 673.034651][T21787] ? do_raw_spin_lock+0x121/0x290 [ 673.034677][T21787] kill_fasync+0x199/0x4d0 [ 673.034708][T21787] ? kill_fasync+0x53/0x4d0 [ 673.034734][T21787] evdev_pass_values+0x627/0xbd0 [ 673.034796][T21787] ? evdev_pass_values+0x5e1/0xbd0 [ 673.034838][T21787] evdev_events+0x1e6/0x340 [ 673.034861][T21787] ? evdev_events+0x79/0x340 [ 673.034883][T21787] ? input_pass_values+0x8d/0x890 [ 673.034911][T21787] input_pass_values+0x285/0x890 [ 673.034937][T21787] ? input_handle_event+0x70c/0xf30 [ 673.034957][T21787] input_event_dispose+0x330/0x6b0 [ 673.034977][T21787] input_inject_event+0x1fe/0x320 [ 673.035100][T21787] ? input_inject_event+0xbc/0x320 [ 673.035126][T21787] evdev_write+0x2fc/0x480 [ 673.035153][T21787] ? __pfx_evdev_write+0x10/0x10 [ 673.035178][T21787] ? bpf_lsm_file_permission+0x9/0x20 [ 673.035199][T21787] ? security_file_permission+0x75/0x290 [ 673.035224][T21787] ? rw_verify_area+0x258/0x650 [ 673.035242][T21787] ? __pfx_evdev_write+0x10/0x10 [ 673.035266][T21787] vfs_write+0x27b/0xa90 [ 673.035290][T21787] ? __pfx_vfs_write+0x10/0x10 [ 673.035308][T21787] ? __fget_files+0x2a/0x420 [ 673.035331][T21787] ? __fget_files+0x2a/0x420 [ 673.035351][T21787] ? __fget_files+0x3a0/0x420 [ 673.035371][T21787] ? __fget_files+0x2a/0x420 [ 673.035395][T21787] ksys_write+0x145/0x250 [ 673.035412][T21787] ? rcu_is_watching+0x15/0xb0 [ 673.035438][T21787] ? __pfx_ksys_write+0x10/0x10 [ 673.035456][T21787] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 673.035477][T21787] ? lockdep_hardirqs_on+0x9c/0x150 [ 673.035496][T21787] __do_fast_syscall_32+0xb4/0x110 [ 673.035520][T21787] do_fast_syscall_32+0x34/0x80 [ 673.035540][T21787] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 673.035561][T21787] RIP: 0023:0xf7fe6539 [ 673.035578][T21787] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 673.035593][T21787] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 673.035611][T21787] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 673.035623][T21787] RDX: 0000000000002250 RSI: 0000000000000000 RDI: 0000000000000000 [ 673.035633][T21787] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 673.035643][T21787] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 673.035653][T21787] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 673.035668][T21787]